<!-- Copyright (c) 2026 defconxt. All rights reserved. -->
<!-- Licensed under AGPL-3.0 — see LICENSE file for details. -->
<!-- NERF is a trademark of defconxt. -->
# API Reference — Performing Black Box Penetration Testing

## nmap — Network scanning and service detection

```bash
# Service detection scan
nmap -sV -sC -T4 --top-ports 1000 TARGET

# Full port scan
nmap -sV -p- --min-rate 5000 TARGET

# Vulnerability script scan
nmap --script vuln TARGET

```

## nuclei — Template-based vulnerability scanner

```bash
# CVE scanning
nuclei -u URL -t cves/ -severity critical,high

# Exposure detection
nuclei -u URL -t exposures/ -o results.txt

# Bulk URL scanning
nuclei -l urls.txt -t http/ -c 50

```

## ffuf — Web fuzzer for directory and parameter discovery

```bash
# Directory brute-force
ffuf -u URL/FUZZ -w wordlist.txt -mc 200,301,302,403

# Parameter discovery
ffuf -u URL?FUZZ=test -w params.txt -fs 0

```

## sqlmap — SQL injection detection and exploitation

```bash
# SQL injection test
sqlmap -u 'URL?id=1' --batch --level 3 --risk 2

# Database enumeration from saved request
sqlmap -r request.txt --dbs

```
