CLI Tools

Self-hosted tool distribution by johlem.net

Install & Uninstall

Manage the Rust suite with jcli

curl -fsSL https://cli.johlem.net/tools/jcli/install.sh | bash
jcli list                          # see the catalogue
jcli install urlrecon phishprobe   # install one or more
jcli run urlrecon -- --help        # exec through jcli

jcli is the suite manager — install / list / run / update / rollback every Rust tool with a single CLI. Reads /catalogue.json, verifies SHA-256 + Ed25519 signature before every install.

Install one tool directly

curl -fsSL https://cli.johlem.net/install.sh | bash -s -- urlrecon

New flags on the global installer: --list, --check <tool>, --update <tool>, --rollback <tool>, --pin-version <V>, --force.

Uninstall

curl -fsSL https://cli.johlem.net/uninstall.sh | bash -s -- urlrecon

Replace urlrecon with any tool name listed below.

Security notice: Always review scripts before piping to bash.
Read the source: install.sh · uninstall.sh

# All tools install to the same layout
~/.local/lib/<tool>/    # Source files
~/.local/bin/<tool>     # Executable

NixOS / Nix

Run without installing

nix run "tarball+https://cli.johlem.net/releases/cli-johlem-net-latest.tar.gz#urlrecon" -- --help

Install to profile

nix profile install "tarball+https://cli.johlem.net/releases/cli-johlem-net-latest.tar.gz#urlrecon"

NixOS system configuration

# flake.nix
inputs.cli-johlem.url = "tarball+https://cli.johlem.net/releases/cli-johlem-net-latest.tar.gz";

# configuration.nix module
nixpkgs.overlays = [ inputs.cli-johlem.overlays.default ];
environment.systemPackages = with pkgs.cli-johlem; [
  urlrecon cidrcalc b64chain # pick any tools
];

Update

nix flake update cli-johlem && sudo nixos-rebuild switch

Full NixOS Cheatsheet

Available Tools

Tools tagged foundation are feature-complete Rust ports whose first signed binary release hasn't been published yet. They install via local-file fallback (jcli install <tool> --from <PATH>) until the public release lands.

urlrecon

Async multi-module URL / domain reconnaissance

v1.7.0
Linux Rust

lexharvest

Ranked wordlist generator with CeWL-style mutations + pentest boost

v1.0.1
Linux Rust

shard

Storage Health, Audit & Recovery Device

v1.10.0
Linux Rust

socq

SOC query translator — daily hunting intents to KQL + AQL, with a built-in Windows event-ID catalogue

v1.3.1
Linux Rust

WebHarvest

Web asset extractor and link harvester for OSINT and reconnaissance

v1.0.1
Linux Rust

PayloadForge

Obfuscated payload generator for authorized penetration testing

v1.2.1
Linux Rust

vlanrecon

Layer 2 VLAN security assessment — Cisco IOS / Arista EOS / Juniper Junos

v1.1.1
Linux Rust

wifiaudit

Wi-Fi audit toolkit — passive scan, authorized pentest, defense

v1.1.1
Linux Rust

casper

Privacy stack + engagement security CLI with 4 levels, real-time monitor, and hard kill-switch

v1.0.1
Linux Rust

ubdem

Offline browser fingerprinting analyzer with Ed25519 + HMAC signed evidence

v1.0.1
Linux Rust

SPECTER

Forensic CLI: parallel hashing + ssdeep, native metadata, signed evidence, cluster + triage

v1.0.1
Linux Rust

pentree

Walk pentest methodology trees, step by step

v1.1.1
Linux Rust

cidrcalc

Subnet calculator, IP range expander, and CIDR notation tool

v1.0.1
Linux Rust

b64chain

Multi-stage encoder/decoder for chained encoding operations

v1.0.2
Linux Rust

RegexLab

CLI regex toolkit: tester, builder, transformer + benchmark/fuzz/diff/audit

v2.0.1
Linux Rust

HashCrackRef

Hash identification and cracking command reference (does NOT crack)

v1.0.1
Linux Rust

LogTimeline

CLI timestamp normaliser, converter, and incident-response timeline builder

v1.0.1
Linux Rust

speedtest-cli

Multi-stream internet speed test with bufferbloat + watch mode

v1.1.1
Linux Rust

SkyRecon

OSINT CLI for aircraft + vessels — race-not-fallback sources, proximity, geofence, PDF

v1.0.1
Linux Rust

ohm

Electronics & hardware reference CLI: calc, power, id, pcb, thermal, rf, ref, safe

v1.0.1
Linux Rust

jcli

cli.johlem.net suite manager — install / remove / list / run / update

v1.5.0
Linux Rust

mailforge

Red-team mail operations toolkit — pixel beacons, landing pages, delivery testing, SPF/DKIM/DMARC offensive analysis, OSINT email harvesting, template variation

v1.0.2
Linux Rust

esptools

ESP32 hardware security assessment toolkit — device management, blue-team monitors, red-team audits, forensics, reporting

v2.0.2
Linux Rust

phishprobe

Phishing detection — URLs, domains, emails, headers

v1.3.2
Linux Rust

openclaw

Phishing takedown pipeline (detect → abuse mail → approve → send)

v1.0.1
Linux Rust

credsweep

Credential / secret scanner for files, dirs, stdin, and git history

v1.2.2
Linux Rust

hostwatch

Continuous host monitoring — availability, TLS expiry, DNS changes

v1.0.2
Linux Rust

darkrecon

Dark-web / OSINT reconnaissance for threat intelligence

v1.2.1
Linux Rust

avwatch

File integrity monitoring + YARA-lite scan + event-driven file routing

v1.2.2
Linux Rust

stegcrypt

Professional steganography with AEAD encryption and K-of-N threshold split

v1.0.1
Linux Rust

kage

Realtime computer monitoring with live connection watch and one-key block

v1.0.0
Linux Rust

jfind

Canonical findings + evidence schema — Ed25519-signed, Merkle-rooted, deterministic JSON

v1.0.0
Linux Rust

yttranscript

Fetch any YouTube video transcript to a .txt file — no API key, no auth, no async runtime

v1.0.0
Linux Rust

mediagrab

Generic web media downloader — find video/audio on any standards-compliant page, save as open-source container

v1.0.0
Linux Rust

glasswatch

Passive BLE scanner for smart-glasses manufacturer IDs (Meta, EssilorLuxottica, Snap)

v1.0.0
Linux Rust