Unofficial Pacman repository: 250+ security and utility tools for Termux
TermuxVoid is an unofficial Pacman repository for Termux, packaging 250+ security, Android, AI, and utility tools. Packages are defined in this repository; some compile on device, while others download upstream releases. Read the package script before installing.
Requires Termux (F-Droid or GitHub), Android 7+, and free storage for large tools.
curl -sL https://github.com/termuxvoid/pacman-repo/raw/main/install-repo.sh | bashWarning
Piping a remote script to bash runs it immediately. Download and read install-repo.sh first if you want to inspect it.
Then install packages:
# Refresh package lists and upgrade installed packages
pacman -Syu
# Install any tool
pacman -S <tool-name>
# Example
pacman -S metasploit-frameworkThe installer also sets up tvpkg (tvp), the TermuxVoid package manager.
To remove the repository later:
curl -sL https://github.com/termuxvoid/pacman-repo/raw/main/uninstall-repo.sh | bashThis removes the repository source and key, not packages you already installed.
Using APT/dpkg? The same 250+ packages are available from repo:
curl -sL https://github.com/termuxvoid/repo/raw/main/install.sh | bash
| Tool | Category | Description |
|---|---|---|
| Metasploit | Security & Exploitation |
Penetration testing framework. |
| Burp Suite | Web Security |
Web application security testing platform. |
| Ghidra | Security & Exploitation |
Software reverse-engineering suite. |
| Hydra | Networking |
Parallelized login cracker. |
| SQLMap | Web Security |
SQL injection detection and exploitation. |
| John the Ripper | Password Tools |
Password cracker. |
AI tools may require accounts or API keys and may send data to third-party providers. AI output can be wrong; review generated code before running it.
| Tool | Description |
|---|---|
| 9router | Gateway between your tools and AI providers |
| antigravity-cli | AI coding assistant (glibc wrapper for Termux) |
| claude-code | Claude Code - AI coding assistant by Anthropic |
| codex-cli | Codex CLI - AI coding agent (npm version) |
| copilot-cli | GitHub Copilot CLI |
| deepseek-harness | DeepSeek Harness - AI coding agent with local web UI |
| freebuff | AI coding agent for the terminal |
| hermes-agent | AI coding assistant and workflow automation tool |
| jcode | Terminal coding agent harness |
| kimi-code | AI coding assistant for the terminal |
| laudacode | Lightweight AI coding agent for your terminal |
| mimocode | AI coding agent (glibc wrapper for Termux) |
| mmx-cli | CLI for MiniMax AI |
| openclaude | Open-source coding-agent CLI for cloud and local LLMs |
| opencode | AI-powered coding assistant |
| opencode-v2 | OpenCode 2 - AI coding agent (glibc version) |
| termux-ai | Interactive AI assistant for Termux |
| utim-cli | AI-powered unified terminal intelligence manager |
This is an unofficial, independently maintained project. Package scripts run with your permissions: read the script before installing. Some packages compile on device; others download prebuilt upstream binaries. Stable fixed-version downloads use pinned SHA-256 hashes, but git clones, mutable URLs, pip/gem installs, and upstream installers are not hash-pinned. A checksum reduces download-tampering risk, not the risk of a malicious package.
The repository database and packages are GPG-signed (mkrepo.sh SIGN=1); install-repo.sh requires package signatures via SigLevel = Required DatabaseOptional.
Some packages are dual-use security tools. Use them only on devices, accounts, and networks you own or are explicitly authorized to test. See SECURITY.md.
- Is it safe? No package is guaranteed safe. Read the script and upstream source; test unfamiliar tools in isolation.
- Is it legal? Only for authorized security research and testing. Unauthorized access or interception is illegal.
- How do I update or search? Run
pacman -Syu, thenpacman -Ss <tool-name>. - Package missing? Run
pacman -Syuand check the full catalog for the exact name. - How do I uninstall the repository? Run
curl -sL https://github.com/termuxvoid/pacman-repo/raw/main/uninstall-repo.sh | bash. This removes the repository source and key, not installed packages. - How often updated? As upstream releases and issues are handled; no fixed schedule.
Read CONTRIBUTING.md before opening a PR. Report bugs via Issues.