Unofficial Pacman Repository: 220+ Ethical Hacking & Pentesting Packages
- Project Overview
- Prerequisites
- Quick Installation
- APT Users
- Featured Tools
- Legal & Disclaimer
- Frequently Asked Questions
- Support & Community
- Contribution & Support
Before using TermuxVoid, ensure your environment meets these requirements:
- Termux installed from F-Droid (recommended) or GitHub
- Android 7+ with ~2GB free storage for larger tools
- Working internet connection for package downloads
- No root required for most tools (some may need root for certain features)
TermuxVoid is an unofficial custom pacman repository that bridges the gap between mobile convenience and professional security auditing. We host 220+ advanced security tools that are not available in the official Termux repositories. Package installation happens on your device: depending on the tool, the package may build from source, install an upstream dependency, or download an upstream release.
Whether you are a professional penetration tester or an ethical hacking enthusiast, TermuxVoid turns your Android device into a portable powerhouse.
Note
This repository contains tools that are often excluded from official sources due to complexity, licensing, or security sensitivity. Read a package's PKGBUILD and its hook script before installing it.
TermuxVoid is an unofficial, community-maintained repository. Package definitions and lifecycle hooks are published here so you can inspect what runs on installation and removal. The database (termuxvoid.db) and every package are GPG signed so you can verify what is installed.
Each package lives in packages/<name>/ and normally ships a standard pacman layout:
PKGBUILD— metadata (name, version, dependencies, description) plus packaging rules<name>.install— lifecycle hooks (pre_install,post_install,pre_remove,post_remove) that perform installation on your device
- No package modifies
$PATH,$HOME,$PREFIX, or any other Termux environment variable. - Most tool packages do not alter existing Termux configuration and expose commands through symlinks or package-manager-installed commands instead of environment mutation.
- Packages whose stated purpose is shell styling, themes, desktop environments, or similar customization may create or change relevant configuration files. Read their hooks carefully before installation and removal.
- Removal hooks are intended to remove files created by the package. Preserve your own configuration backups, especially before installing customization packages.
Security tools are powerful and many have dual-use capabilities. Use them only on systems and data you own or are explicitly authorized to test. Do not install a package solely because it is listed here.
- Read
packages/<name>/PKGBUILDandpackages/<name>/<name>.install(where present). - Check every download URL, Git repository, package-manager command, and configuration change in those scripts.
- Review the upstream tool and its license, then install it in a test environment first if it is unfamiliar.
- Keep backups of personal configuration before installing shell, theme, or desktop packages.
Don't trust — verify. See CONTRIBUTING.md for the package layout and SECURITY.md for the security policy.
When a package obtains software from upstream, its scripts should make the source auditable. Contributors should provide the upstream project URL, use a pinned release, tag, or commit where practical, and verify an upstream checksum or signature when one is available. Review every network download, upstream package-manager command, file/configuration change, exposed command, and uninstall action before installing.
Getting started is seamless. Run the following one-liner in your Termux terminal to add the repository automatically:
# Add repository
curl -sL https://github.com/termuxvoid/pacman-repo/raw/main/install-repo.sh | bashWarning
Piping a remote script directly to bash executes it immediately. For maximum transparency, download and inspect install-repo.sh first, then run it locally.
Once the repository is added, you can install any tool using pacman -S:
# Refresh databases
pacman -Sy
# Install any tool
pacman -S <tool-name>
# Example
pacman -S metasploit-frameworkTip
The installer also automatically sets up tvpkg, the TermuxVoid package manager. Launch it anytime with tvpkg (alias tvp) for an interactive TUI — browse, filter, install and remove TermuxVoid tools without leaving your terminal.
Tip
After installation, run pacman -Sy to refresh your local package database. You can search for tools using pacman -Ss <tool-name>.
Note
Removing the TermuxVoid repository later does not remove packages you already installed. Use the package manager to remove individual packages; see the uninstall instructions to remove only the repository source and key.
Running a standard apt/dpkg Termux (the default bootstrap)? The very same tools are also shipped as APT packages through our dedicated APT repository — classic dpkg workflow, pkg install <tool>.
APT repository: github.com/termuxvoid/repo
curl -sL https://github.com/termuxvoid/repo/raw/main/install.sh | bashIf you are on a pacman-based Termux, stay right here — this repository is for you.
We provide a curated selection of industry-standard tools. Here are some highlights:
| Tool | Category | Description |
|---|---|---|
| Metasploit Framework | Exploitation |
The world's most used penetration testing framework. |
| Burp Suite | Web Security |
Leading toolkit for web application security testing. |
| Ghidra | Reverse Eng. |
NSA's high-end software reverse engineering suite. |
| THC Hydra | Password Cracking |
Fast network logon cracker supporting many protocols. |
| SQLMap | Web Security |
Automatic SQL injection and database takeover tool. |
📊 View Mermaid Architecture
graph TD
A[TermuxVoid Repo] -->|Provides| B[Exploitation]
A -->|Provides| C[Reverse Engineering]
A -->|Provides| D[Network Scanning]
A -->|Provides| E[Password Attacks]
B --> B1[Metasploit]
B --> B2[SQLMap]
C --> C1[Ghidra]
C --> C2[Radare2]
D --> D1[Nmap]
D --> D2[Netcat]
E --> E1[Hydra]
E --> E2[John the Ripper]
| Tool | Description |
|---|---|
| opencode | AI-powered coding assistant |
| claude-code | AI-powered coding assistant by Anthropic |
| antigravity-cli | AI coding assistant (glibc wrapper) |
| copilot-cli | GitHub Copilot CLI — AI-powered assistance in your terminal |
| codex-cli | Codex CLI by OpenAI — lightweight AI-powered coding agent in your terminal |
| mimocode | Autonomous AI engineer — creates, modifies, tests, deploys code |
| openclaude | Open-source coding-agent CLI for cloud & local LLMs |
| hermes-agent | AI-powered coding assistant and workflow automation tool |
| kimi-code | AI-powered coding assistant for the terminal by Moonshot AI |
| mmx-cli | CLI tool for MiniMax AI – chat, completion, and image generation from the terminal |
| freebuff | Free, subscription-less AI coding agent for the terminal |
These tools are provided for educational and authorized security research only. You are responsible for ensuring your use complies with all applicable laws and regulations. Unauthorized access to systems you do not own or lack explicit permission to test is illegal. The maintainers assume no responsibility for any misuse.
Are these tools safe to use on a personal device?
Yes, all packages are built from source directly on your device during installation. This means no pre-compiled binaries are shipped — each tool is compiled and installed for your specific Termux environment. However, these are powerful security tools; ensure you understand what a tool does before executing it to avoid unintended system modifications.
Are these tools legal to use?
All tools are for legal security research and ethical hacking purposes only. Always obtain proper authorization before testing systems you do not own.
Why aren't these in the official repo?
Many of these tools (like Metasploit or Ghidra) have heavy dependencies, large sizes, or licensing complexities that make them difficult to maintain in the official core repositories. We handle the heavy lifting so you don't have to.
How often are tools updated?
- Security patches within 24 hours - Version updates every Sunday - Emergency fixes as needed
How do I request a new package?
We are constantly expanding. You can request new tools via:
- Opening a GitHub Issue
- Contacting us on Telegram: Telegram @nullxvoid
- Sending an email to: termuxvoid@gmail.com
How do I report a broken package?
Open an issue on **[GitHub](https://github.com/TermuxVoid/pacman-repo/issues)** with the tool name and error output. We aim to fix reported issues within 24 hours.
How do I uninstall the TermuxVoid repository?
To remove the repository from your Termux environment:
curl -sL https://github.com/termuxvoid/pacman-repo/raw/main/uninstall-repo.sh | bashThis removes the repository source and its GPG key from your pacman keyring, refreshes the databases, and does not remove packages you have already installed.
I get a "package not found" error — what should I do?
Ensure you have run `pacman -Sy` after adding the repository. If the issue persists, try:
pacman -Sy
pacman -Ss <tool-name>If the tool still doesn't appear, it may have a different package name — check the full package list for the exact name.
Join our growing community of security researchers and mobile hackers.
Support the project to help us keep the packages updated and add more tools:
- ⭐ Star this repository to show your support.
- 🐛 Report Bugs responsibly via Issues.
- 📢 Share with the security community.