Packages and Binaries:
legion
Semi-automated network penetration testing tool
This package contains an open source, easy-to-use, super-extensible and
semi-automated network penetration testing tool that aids in discovery,
reconnaissance and exploitation of information systems.
Legion is a fork of SECFORCE’s Sparta.
Installed size: 7.51 MB
How to install: sudo apt install legion
Dependencies:
- dirbuster
- dnsmap
- enum4linux
- eyewitness | python3-selenium
- feroxbuster
- finger
- hping3
- httpx-toolkit
- hydra
- imagemagick
- impacket-scripts
- ldap-utils
- mariadb-client-core
- medusa
- metasploit-framework
- nbtscan
- netcat-traditional
- nfs-common
- nikto
- nmap
- nuclei
- perl
- polenum
- postgresql-client
- python3
- python3-colorama
- python3-pandas
- python3-pyexploitdb
- python3-pyfiglet
- python3-pyqt6
- python3-pyshodan
- python3-qasync
- python3-requests
- python3-rich
- python3-serial-asyncio
- python3-service-identity
- python3-six
- python3-sqlalchemy
- python3-termcolor
- python3-urllib3
- rdesktop
- rpcbind
- rsh-redone-client | rsh-client
- ruby
- smbclient
- smtp-user-enum
- snmp
- sparta-scripts
- sqlmap
- sslscan
- sslyze
- telnet
- theharvester
- unicornscan
- urlscan
- vncviewer
- wafw00f
- wapiti
- whatweb
- wordlists
- wpscan
- x11-apps
- xserver-xephyr
- xsltproc
- xvfb
legion
root@kali:~# legion -h
usage: legion.py [-h] [--mcp-server] [--headless] [--web] [--tool-audit |
--tool-install-plan {kali,ubuntu} |
--tool-install {kali,ubuntu}] [--web-port WEB_PORT]
[--web-bind-all] [--web-transparent-ui]
[--input-file INPUT_FILE] [--discovery] [--staged-scan]
[--output-file OUTPUT_FILE] [--run-actions]
Start Legion
options:
-h, --help show this help message and exit
--mcp-server Start MCP server for AI integration
--headless Run Legion in headless (CLI) mode
--web Run Legion with the local Flask web interface
--tool-audit Print a tool availability audit and exit
--tool-install-plan {kali,ubuntu}
Print the generated install script for missing tools
on the selected platform and exit
--tool-install {kali,ubuntu}
Run the generated install plan for missing tools on
the selected platform and exit
--web-port WEB_PORT Local web interface port
--web-bind-all When used with --web, bind the web interface to
0.0.0.0 instead of 127.0.0.1
--web-transparent-ui When used with --web, enable transparent UI effects
--input-file INPUT_FILE
Text file with targets (hostnames, subnets, IPs, etc.)
--discovery Enable host discovery (default: enabled)
--staged-scan Enable staged scan
--output-file OUTPUT_FILE
Output file (.legion or .json)
--run-actions Run scripted actions/automated attacks after
scan/import
Updated on: 2026-May-25