NetoolHunter

Visual Android manager for the pentest tools shipped with the Kali NetHunter chroot. Install, uninstall and track 92 tools across recon, OSINT, web, wireless, exploitation, AD, passwords, Android/reversing, forensics and wordlists from a native UI — instead of typing commands by hand inside the chroot.

Fully offline. No telemetry, no tracking, no analytics, no network calls. The tool catalog is hard-coded; modifying it requires recompiling.

Requirements

- Android 8.0+ (API 26). - Rooted device with one of the supported root managers: - KernelSU Next (recommended — ships a ready-to-use nethunter.root template). - Classic KernelSU, Magisk, APatch. - NetHunter chroot installed and working (Magisk/KSU module + Kali chroot at /data/local/nhsystem/kali-arm64). - ~5 GB free in /data for the base packages it installs (git, golang, python3-pip, pipx, docker.io).

Root manager setup

NetoolHunter runs commands inside the chroot via nh -r, bootkali_bash, or a raw chroot fallback. For the app's su context to see the NetHunter module's binaries, your root manager must apply a global mount namespace + CAP_SYS_CHROOT to NetoolHunter.

- KernelSU Next: KernelSU Next manager → SuperUser apps → NetoolHunter → App Profile → "Template" tab → select nethunter.root → force-stop the app and reopen. - Classic KernelSU: Mount Namespace Mode → Global Mount; capabilities CAP_SYS_CHROOT, CAP_SYS_ADMIN. - Magisk: confirm NetoolHunter is granted in SuperUser and that NetHunter is installed as a Magisk module. - APatch: App Profile → namespace Global + capabilities including CAP_SYS_CHROOT.

The app auto-detects your manager and displays the exact steps on the prerequisites screen if the chroot can't be reached.

ℹ️ Note

The in-app UI is currently Spanish-only. Contributions to translate the strings to other languages are welcome.

Disclaimer

This tool is meant for authorized penetration testing, CTFs, defensive security research and educational environments. Using it against systems you don't have explicit permission to test is illegal in most jurisdictions. The author is not responsible for misuse.

License

GNU General Public License v3.0