aa-notify
Display and monitor AppArmor denial notifications
aa-notify --since-last
Categories
Browse grouped command cards or search directly below.
All categories
One-liners
AI tools
System information
System control
System Recovery
Users & Groups
Files & Folders
Input
Printing
JSON
Development
Network
Search & Find
Git
SSH
Video & Audio
Package manager
Text Processing
Compression & Archiving
Backup & Imaging
Hacking tools
Terminal games
Cryptocurrencies
Shell Scripting
Tmux
Regular Expressions
VIM Text Editor
Emacs Text Editor
Nano Text Editor
Pico Text Editor
Micro Text Editor
Directory listing
185 commands
airdecap-ng
Decrypt WEP and WPA/WPA2 encrypted capture files
airdecap-ng -w [hex_key] [capture.cap]
airodump-ng-oui-update
Update the IEEE OUI manufacturer database
sudo airodump-ng-oui-update
airserv-ng
Wireless card server for remote access over TCP/IP
sudo airserv-ng -d [wlan0mon] -c [6] -p [666]
amap
Identify application protocols on network ports
amap -b [192.168.1.1] [80]
apkeep
Download APKs from app stores
apkeep -a [com.example.app] .
apkleaks
Scan APKs for hardcoded secrets and keys
apkleaks -f [app.apk]
attr
Manipulate extended attributes on filesystem objects
attr -s [attribute_name] -V [value] [path/to/file]
auggie
AI-powered agentic coding CLI from Augment Code
auggie
authelia
Authentication and authorization server with multi-factor support
authelia validate-config --config [config.yml]
autorecon
Automated multi-threaded network reconnaissance
sudo autorecon 192.168.1.1
aws-accessanalyzer
Analyze and validate IAM policies for security risks
aws accessanalyzer list-analyzers
aws-acm-pca
Manage private certificate authorities and certificates
aws acm-pca create-certificate-authority --certificate-authority-configuration [file://config.json] --certificate-authority-type ROOT
aws-cloudtrail
Track and audit API activity across cloud services.
aws cloudtrail lookup-events --lookup-attributes AttributeKey=Username,AttributeValue=[user@example.com]
aws-google-auth
Acquire AWS credentials via Google Workspace SSO
aws-google-auth
aws-sts
Request temporary security credentials and verify identity.
aws sts get-caller-identity
aws-vault
Securely store and access AWS credentials in the system keychain.
aws-vault add [profile-name]
b2sum
Compute and verify BLAKE2 cryptographic checksums.
b2sum [file]
beef
Browser exploitation framework for penetration testing
beef-xss
bettercap
Network attack and monitoring framework
bettercap -iface [eth0]
boltctl
Manage Thunderbolt device authorization
boltctl
boltd
Thunderbolt device management daemon
boltd
bun-pm-trust
Manage trusted dependencies in Bun projects
bun pm trust [package1] [package2]
burpsuite
Web application security testing platform
burpsuite
caddy
Web server with automatic HTTPS
caddy run
capabilities
Linux process privilege capabilities system
getcap [/path/to/binary]
cargo-version
Display version information for Cargo
cargo version
cariddi
crawl URLs for endpoints, secrets, and sensitive data
cat [domains.txt] | cariddi
chage
change user password expiry information
chage -l username
chattr
change file attributes on Linux filesystems
sudo chattr +i path/to/file
chcon
change SELinux security context of files
ls -lZ path/to/file
checkov
static analysis for infrastructure as code
checkov -d [path/to/directory]
chmod
change file access permissions
chmod +x [script.sh]
cifs.idmap
Translate Windows SIDs to Linux UIDs/GIDs for CIFS mounts
cifs.idmap --help
cifscreds
Manage CIFS mount credentials in the kernel keyring
cifscreds add [server_hostname]
cntlm
NTLM/NTLMv2 authenticating HTTP proxy
cntlm -c [/etc/cntlm.conf]
File inspection
114 commands
aa-cleanprof
Clean AppArmor profiles by removing redundant rules
sudo aa-cleanprof [profile_name]
aa-disable
Disable AppArmor security profiles
sudo aa-disable [path/to/profile]
aa-enforce
Set AppArmor profiles to enforce mode
sudo aa-enforce [path/to/profile]
aa-genprof
Generate AppArmor profiles by monitoring program behavior
sudo aa-genprof [/path/to/program]
aa-mergeprof
Merge AppArmor security profiles
sudo aa-mergeprof [file1] [file2]
aircrack-ng
Crack WEP and WPA/WPA2 wireless encryption keys
aircrack-ng -w [wordlist.txt] [capture.cap]
airmon-ng
Enable and manage wireless monitor mode
sudo airmon-ng
airodump-ng
Capture wireless packets and discover nearby networks
sudo airodump-ng [wlan0mon]
apparmor
Mandatory Access Control framework for confining applications.
sudo aa-status
apparmor_parser
Load, replace, and manage AppArmor security profiles.
sudo apparmor_parser -a [profile_file]
auditd
Linux audit daemon for tracking security-relevant events.
sudo auditd
aws-eks
Manage Amazon Elastic Kubernetes Service clusters
aws eks create-cluster --name [my-cluster] --role-arn [arn:aws:iam::account:role/eks-role] --resources-vpc-config subnetIds=[subnet-1],[subnet-2],securityGroupIds=[sg-123]
az-storage-blob
Manage Azure Blob Storage objects
az storage blob upload -f [/path/to/file] -c [container-name] -n [blob-name] --account-name [account]
besside-ng
Automated WiFi security auditing tool
besside-ng [wlan0mon]
binwalk
Analyze and extract firmware images
binwalk [firmware.bin]
btshowmetainfo
Display metadata from BitTorrent .torrent files
btshowmetainfo [file.torrent]
bun-pm-hash
Generate and print the lockfile hash
bun pm hash
caligula
Write disk images to USB drives safely
caligula burn [path/to/image.iso]
chcat
change SELinux security categories
sudo chcat -L
chntpw
offline Windows password and registry editor
chntpw -l [path/to/sam_file]
cowpatty
WPA/WPA2 PSK offline auditing tool
cowpatty -f [wordlist.txt] -r [capture.cap] -s [SSID]
darkhttpd
simple, fast, and secure static web server
darkhttpd .
dbus-daemon
message bus daemon for inter-process communication
dbus-daemon --config-file [path/to/file]
deno
secure runtime for JavaScript and TypeScript
deno run [script.ts]
dex2jar
Android DEX to JAR file converter
d2j-dex2jar [classes.dex]
dexter
Android DEX file analyzer with call graph generation
dexter -i [classes.dex]
dirac
Efficient AI coding agent CLI
dirac "[describe the task]"
direnv
per-directory environment variable manager
eval "$(direnv hook bash)"
dirsearch
web path brute-force scanner for content discovery
dirsearch -u [https://example.com]
doas
minimal privilege escalation tool
doas [command]
dpkg-deb
Debian archive manipulation tool
dpkg-deb -I [path/to/file.deb]
dumpcap
network packet capture engine
dumpcap -i [eth0] -w [capture.pcapng]
dvc-add
track data files with DVC
dvc add [data.csv]
dvc-commit
record changes to DVC-tracked files
dvc commit
dvc-diff
show changes in tracked data files
dvc diff
editcap
packet capture file editor and converter
editcap -r [input.pcap] [output.pcap] [1-100]
Text processing
54 commands
aa-teardown
Unload all AppArmor profiles and disable enforcement
sudo aa-teardown
apgbfm
Manage bloom filters for password checking
apgbfm -f [filter.bf] -d [dictionary.txt]
apt-secure
Archive authentication and trust model documentation.
man apt-secure
aspell-autobuildhash
Rebuild aspell dictionary hash files
sudo aspell-autobuildhash
aws-dynamodb
Manage tables and items in Amazon DynamoDB.
aws dynamodb create-table --table-name [my-table] --attribute-definitions AttributeName=id,AttributeType=S --key-schema AttributeName=id,KeyType=HASH --billing-mode PAY_PER_REQUEST
beef-xss
Browser exploitation framework for penetration testing
beef-xss
bpftool
Inspect and manage eBPF programs and maps.
bpftool prog list
brave
Privacy-focused web browser
brave
bubblewrap
Unprivileged sandboxing using Linux namespaces
bwrap --ro-bind /usr /usr --symlink usr/lib64 /lib64 --proc /proc --dev /dev --unshare-pid [command]
bundletool-dump
Inspect Android App Bundle contents
bundletool dump manifest --bundle=[app.aab]
certutil
NSS certificate database management
certutil -L -d [~/.pki/nssdb]
clef
standalone Ethereum account manager and transaction signer
clef init
cloudsploit
Open-source cloud security posture management scanner
cloudsploit scan
dcfldd
forensic disk imaging tool with hashing
dcfldd if=[/dev/sda] of=[disk.img]
docker-buildx-version
Show Docker Buildx version information
docker buildx version
elasticsearch-users
Manage file-based Elasticsearch users
elasticsearch-users list
ettercap
comprehensive suite for network MITM attacks
ettercap -G
faillock
authentication failure tracking and lockout manager
faillock
fido2-token
FIDO2/WebAuthn security key manager
fido2-token -L
flask-unsign
Flask session cookie manipulation and cracking
flask-unsign --decode --cookie "[cookie_value]"
flatpak-update
update installed Flatpak applications and runtimes
flatpak update
gcloud-kms-decrypt
decrypt data using Cloud KMS keys
gcloud kms decrypt --ciphertext-file=[encrypted.enc] --plaintext-file=[decrypted.txt] --key=[key] --keyring=[keyring] --location=[global]
git-cherry-pick
Apply changes from existing commits
git cherry-pick [commit]
gixy
Nginx configuration security analyzer
gixy [/etc/nginx/nginx.conf]
gksu
Graphical frontend for su with GTK password dialog
gksu -u [userid] [command]
gmssl
Chinese national cryptographic algorithms toolkit
gmssl sm2keygen -pass [password] -out [key.pem]
gpg2
GnuPG 2 encryption and digital signatures
gpg2 --full-generate-key
grub2-mkpasswd-pbkdf2
generate PBKDF2 password hash for GRUB protection
sudo grub2-mkpasswd-pbkdf2
impacket-getuserspns
finds and requests Kerberos service tickets for user accounts with SPNs
impacket-GetUserSPNs [domain]/[user]:[password] -dc-ip [dc-ip]
keycloak
CLI for Keycloak, an open-source identity and access management
kc.sh start-dev
knock
client component of port knocking
knock [hostname] [port1] [port2] [port3]
librewolf
privacy-focused Firefox fork with enhanced security defaults
librewolf
lua
programming language interpreter
lua
lynis
security auditing tool for Unix-based systems
sudo lynis update info
makeivs-ng
generates IVs files for testing WEP cracking
makeivs-ng -b [00:11:22:33:44:55] -w [key] -o [output.ivs]
msfconsole
metasploit Framework console
msfconsole
Search and filters
42 commands
amass-track
Track changes in external attack surface over time
amass track -d [example.com]
angryoxide
802.11 WiFi attack and penetration testing tool
sudo angryoxide -i [wlan0]
assetfinder
Discover subdomains and related domains
assetfinder [example.com]
az-apim
Manage Azure API Management services
az apim create --name [MyApim] --resource-group [MyResourceGroup] --publisher-email [email@domain.com] --publisher-name [MyCompany] --location [eastus]
bloodhound-python
Collect Active Directory data for BloodHound analysis
bloodhound-python -d [domain.local] -u [username] -p [password] -ns [dc_ip] -c all
bloodhound
Visualize Active Directory attack paths
bloodhound
borg
Deduplicating backup with compression and encryption
borg init --encryption=[repokey] [/path/to/repo]
check-support-status
Identify installed packages with limited security support
check-support-status
checkrestart
find processes using outdated shared libraries
sudo checkrestart
checksec
audit security features in ELF binaries
checksec --file=[path/to/binary]
coderabbit
AI-powered code review tool for the terminal
coderabbit
codesign
macOS code signing and verification utility
codesign -s "[Developer ID]" [MyApp.app]
dnf-changelog
display package changelogs
dnf changelog [package]
dnsenum
DNS enumeration and reconnaissance tool
dnsenum [domain.com]
easside-ng
automated WEP key recovery tool
sudo easside-ng -f [wlan0] -s [buddy_ip]
fcrackzip
crack password-protected ZIP archives
fcrackzip [-b|--brute-force] [-l|--length] 4-8 [-c|--charset] aA1 [archive]
git-verify-tag
Verify GPG signatures of tags
git verify-tag [tag]
hashid
python tool that identifies hash types by analyzing their length and character
hashid '[hash]'
impacket-getadusers
Enumerate Active Directory user accounts via LDAP
impacket-getadusers -all '[domain]/[user]:[password]'
impacket-sniff
basic packet capture tool using Impacket's raw socket capabilities
sudo impacket-sniff [eth0]
john
the Ripper, a password security auditing tool
john [hashes.txt]
kure
CLI password manager with sessions
kure add
mpiexec
launches MPI parallel programs
mpiexec -n [4] [program]
newrole
starts a new shell with a different SELinux security context
newrole -r [role_name]
ntpctl
queries the OpenNTPD daemon for synchronization status
ntpctl -s status
ophcrack
windows password cracker that uses rainbow tables to recover passwords from LM
ophcrack -g -d [path/to/tables] -f [hashes.txt]
pam_time
PAM module for time-based access control
account required pam_time.so
phar
manages PHP Archive files, which bundle PHP applications into single
phar add -f [path/to/archive.phar] [files...]
pptp
Establish PPTP VPN tunnel connections
pptp [server] --nolaunchpppd
rar2john
Extract password hashes from RAR archives
rar2john [archive.rar] > [hash.txt]
rbac-lookup
Look up Kubernetes RBAC roles for users
rbac-lookup [user@example.com]
scan-build
Clang static analyzer build integration tool
scan-build make
semgrep
Lightweight static analysis for code security and quality
semgrep scan --config auto
setoolkit
Social engineering penetration testing framework
sudo setoolkit
snap.pkg
Manage sandboxed snap packages
snap find [query]
snmpset
Modify SNMP object values on agents
snmpset -v 2c -c [community] [host] [OID] i [value]
File operations
36 commands
aa-unconfined
Find network-listening processes without AppArmor profiles
sudo aa-unconfined
airbase-ng
Create software-based wireless access points for penetration testing
sudo airbase-ng -e "[FakeSSID]" -c [6] [wlan0mon]
aireplay-ng
Inject packets into wireless networks for security testing
sudo aireplay-ng -0 [5] -a [AP_BSSID] -c [CLIENT_MAC] [wlan0mon]
apptainer-config
Manage Apptainer container platform configuration
sudo apptainer config fakeroot --add [username]
arjun
Discover hidden HTTP parameters in web applications
arjun -u [https://example.com/page]
aws-autoscaling
Automatically scale EC2 instance groups based on demand
aws autoscaling create-auto-scaling-group --auto-scaling-group-name [my-asg] --launch-template LaunchTemplateId=[lt-12345] --min-size [1] --max-size [5] --vpc-zone-identifier "[subnet-abc,subnet-def]"
aws-iot
Manage IoT devices, certificates, and message routing.
aws iot list-things
burp
Web application security testing platform
burpsuite
chainctl
manage Chainguard container images and resources
chainctl auth login
codex
OpenAI terminal-based coding agent
codex
cosign
Container image signing and verification tool
cosign sign [registry/image@sha256:digest]
dillo
lightweight minimalist web browser
dillo
distccd
distcc server daemon for distributed compilation
distccd --daemon
dmitry
information gathering reconnaissance tool
dmitry -w [domain.com]
dnsrecon
comprehensive DNS reconnaissance tool
dnsrecon -d [example.com]
dolt-blame
show the commit, author, and timestamp that last modified each row of a Dolt table
dolt blame [table_name]
evil-winrm
penetration testing shell for WinRM
evil-winrm -i [target_ip] -u [username] -p [password]
findomain
fast cross-platform subdomain enumerator
findomain -t [example.com]
gophish
Open-source phishing simulation framework
./gophish
hashcat
high-performance password recovery tool that uses CPU, GPU, and other hardware
hashcat -m 0 -a 0 [hashes.txt] [wordlist.txt]
jf
JFrog CLI for interacting with JFrog platform services
jf config add
jfrog
Official CLI for the JFrog Platform
jfrog config add [server-id]
metasploit
penetration testing platform for developing, testing, and executing exploits
msfconsole
mktorrent
creates BitTorrent metainfo files
mktorrent -a [http://tracker.example.com/announce] [file]
nc
Read and write arbitrary data across TCP and UDP connections — the network Swiss-army knife
nc -l [8080]
nc_openbsd
OpenBSD rewrite of netcat for TCP/UDP connections and port scanning
nc.openbsd -l [8080]
netcat
versatile networking utility for reading and writing data across TCP and UDP
nc [host] [port]
nmap
Network exploration and security auditing tool
nmap [192.168.1.1]
pkeyutl.1s
Perform low-level public key operations
openssl pkeyutl -sign -rawin -digest sha256 -in [data] -inkey [key.pem] -out [signature]
rcrack
Crack password hashes using rainbow tables
rcrack [path/to/tables] -h [5d41402abc4b2a76b9719d911017c592]
relic
End-to-end encrypted secret manager for developers
relic login
scp
Secure copy files over SSH
scp [path/to/file] [user]@[host]:[path/to/destination]
srm
Secure file deletion with overwriting
srm [file.txt]
sublist3r
Subdomain enumeration using search engines
sublist3r -d [example.com]
update-manager
Ubuntu graphical software update manager
update-manager
zmap
Fast internet-wide network scanner
sudo zmap -p [80] [192.168.1.0/24]
Network diagnostics
28 commands
aa-audit
Set AppArmor profiles to audit mode
sudo aa-audit [profile_name]
aa-complain
Set AppArmor profiles to complain mode
sudo aa-complain [path/to/profile]
arpspoof
Forge ARP replies for man-in-the-middle interception.
sudo arpspoof -i wlan0 host_ip
aws-ec2
Manage virtual servers and networking on Amazon EC2.
aws ec2 run-instances --image-id [ami-0c55b159cbfafe1f0] --instance-type [t2.micro] --key-name [my-key]
aws-iam
Manage identity, access, and permissions for AWS resources.
aws iam create-user --user-name [my-user]
aws-vpc
Manage Virtual Private Cloud networks, subnets, and gateways.
aws ec2 describe-vpcs
az-devops
Manage Azure DevOps organizations and projects
az devops configure --defaults organization=[https://dev.azure.com/contoso] project=[ContosoWebApp]
flarectl
Cloudflare management from the command line
flarectl dns list --zone [example.com]
fossa
dependency license and security scanner
fossa analyze
frida
Dynamic instrumentation toolkit for developers and security researchers
frida [process_name]
gnucash-cli
command-line interface for GnuCash reports and quotes
gnucash-cli --quotes get [file.gnucash]
grpconv
convert to shadow group format
sudo grpconv
impacket-ping6
ICMPv6 ping implementation using raw sockets via the Impacket library
impacket-ping6 [2001:db8::1]
ip-neighbour
manages the ARP and NDP neighbour tables
ip neighbour
ipset
Create and manage IP address sets for firewall rules
ipset create [set_name] hash:ip
kube-linter
analyzes Kubernetes YAML files and Helm charts for security and best practices
kube-linter lint [path/to/manifests]
lastb
same as last, but shows failed login attempts as recorded in /var/log/btmp
sudo lastb
masscan
fastest asynchronous Internet port scanner
sudo masscan [192.168.1.0/24] -p [80]
nxc-vnc
netExec VNC module
nxc vnc [target]
pam_permit
always returns success
auth sufficient pam_permit.so
pip-hash
Compute hash digests of package archives
pip hash [package.whl]
prowler-kubernetes
Kubernetes cluster security assessment
prowler kubernetes
pw-container
Run apps in isolated PipeWire security contexts
pw-container
pwn
Exploit development and CTF utilities
pwn asm "xor edi, edi"
rehash
Rebuild the command hash table
rehash
semanage-login
Map Linux users to SELinux users
sudo semanage login -l
snapd
Background service for snap package management
sudo systemctl start snapd
trezorctl
Trezor hardware wallet command-line interface
trezorctl list
Processes and services
16 commands
abrt-action-analyze-backtrace
analyze crash backtrace for duplication and quality
abrt-action-analyze-backtrace
ansible-lint
Check playbooks for best practices
ansible-lint [playbook.yml]
az-acr
Manage Azure Container Registries
az acr create -n [registry-name] -g [resource-group] --sku [Standard]
az-advisor
View and manage Azure best-practice recommendations
az advisor recommendation list
doctl-databases-maintenance-window
configure database cluster maintenance schedules
doctl databases maintenance-window get [cluster_id]
git-create-branch
Create and optionally switch to new branch
git create-branch [branch_name]
homectl
manages user accounts and home directories via systemd-homed, a systemd
homectl list
massdns
high-performance DNS stub resolver for bulk lookups
massdns -r [resolvers.txt] -t A [domains.txt]
mysql_secure_installation
improves MySQL security after installation
mysql_secure_installation
pmount
Mount removable devices as regular user
pmount [/dev/sdb1]
startplasma-wayland
Start KDE Plasma on Wayland
startplasma-wayland
symfony
Symfony PHP framework development CLI
symfony new [project_name]
systemd-analyze
Analyze system boot-up performance
systemd-analyze
ubuntu-security-status
Show package security support status
ubuntu-security-status
xsp
Mono ASP.NET development web server
xsp
zm
Manage ZoneMinder surveillance daemons
sudo zmpkg.pl start
Users and permissions
13 commands
aa-logprof
Update AppArmor profiles from log events interactively
sudo aa-logprof
argon2
Hash passwords using the Argon2 algorithm
echo -n "password" | argon2 [salt] -e
ausearch
Search and query audit log events
sudo ausearch -m avc
firejail
application sandboxing with Linux namespaces
sudo firecfg
genid
random identifier and UUID generator
genid
git-verify-commit
Verify GPG signatures of commits
git verify-commit [commit]
gksudo
Graphical frontend for sudo with GTK password dialog
gksudo -u [userid] [command]
grpck
verify integrity of group files
sudo grpck
ike-scan
discovers and fingerprints IPsec VPN servers
sudo ike-scan [192.168.1.0/24]
jj-config-set
sets configuration values in Jujutsu config files
jj config set --user [user.name] "[John Doe]"
makepasswd
generates random passwords suitable for user accounts
makepasswd
postfix
Control the Postfix mail system
sudo postfix check
yast2
SUSE system configuration tool
sudo yast2
Shell workflow
6 commands
disable
Disable shell builtins or other named elements
disable [builtin_name]
fswebcam
command-line webcam image capture
fswebcam [image.jpg]
grype
vulnerability scanner for container images and filesystems
grype [image:tag]
safety
Check Python dependencies for known vulnerabilities
safety scan
terrascan
Static security scanner for IaC
terrascan init
uv-export
Export dependencies to requirements format
uv export > requirements.txt
Package management
5 commands
androguard
Reverse engineer and analyze Android applications
androguard analyze [app.apk]
apksigner
Sign and verify Android APK files
apksigner sign --ks [keystore.jks] [app.apk]
bun-audit
Scan dependencies for known security vulnerabilities
bun audit
composer-audit
scan PHP dependencies for security vulnerabilities
composer audit
pnpm-audit
Check pnpm dependencies for vulnerabilities
pnpm audit
SSH and remote access
5 commands
cockpit-desktop
secure desktop access to Cockpit pages
cockpit-desktop [url] [SSH_host]
crackmapexec
post-exploitation tool for Windows/AD networks
crackmapexec smb [192.168.1.0/24] -u [user] -p [password] --shares
exo-compute-instance
Exoscale virtual machine lifecycle management
exo compute instance list
exo-compute
Exoscale compute instance and infrastructure management
exo compute instance list
pam_motd
displays message of the day
session optional pam_motd.so
HTTP and downloads
4 commands
driftnet
capture images from network traffic
driftnet -i [eth0]
goldeneye.py
HTTP stress testing tool
goldeneye.py [url]
kanha
Web application pentesting suite
kanha fuzz -u [https://example.com/FUZZ] -w [path/to/wordlist.txt]
mitmdump
command-line companion to mitmproxy, a powerful HTTPS proxy
mitmdump
Security tools
4 commands
prowler commands
4 commands
prowler-aws
AWS cloud security assessment
prowler aws
prowler-azure
Azure cloud security assessment
prowler azure
prowler-github
GitHub organization security assessment
prowler github
prowler-m365
Microsoft 365 tenant security assessment
prowler m365
Archive and compression
1 commands
git-get-tar-commit-id
Extract commit ID from tar archive
git get-tar-commit-id < [archive.tar]
airolib-ng commands
1 commands
airolib-ng
Pre-compute WPA/WPA2 PMK databases for faster cracking
airolib-ng [database.db] --init
apptainer commands
1 commands
apptainer-sign
Cryptographically sign SIF container images
apptainer sign [path/to/image.sif]
az commands
1 commands
az-network
Manage Azure networking resources
az network dns zone create -g [resource-group] --name [example.com]
crane commands
1 commands
crane-catalog
list repositories in container registries
crane catalog [registry]
dch commands
1 commands
debsecan commands
1 commands
eksctl commands
1 commands
genpmk commands
1 commands
gixy-next commands
1 commands
golangci-lint commands
1 commands
golangci-lint
Fast Go linter aggregator
golangci-lint run
hash commands
1 commands
holehe commands
1 commands
impacket-smbclient commands
1 commands
impacket-smbclient
generic SMB client for listing shares and files, uploading
impacket-smbclient [domain]/[user]:[password]@[target]
keyctl commands
1 commands
kubeaudit commands
1 commands
msfvenom commands
1 commands
pkcs11-tool commands
1 commands
pkcs11-tool
Manage PKCS#11 cryptographic tokens and smart cards
pkcs11-tool --list-token-slots
pkg commands
1 commands
rtgen commands
1 commands
runcon commands
1 commands
secon commands
1 commands
session commands
1 commands
pam_selinux
PAM module to set the default SELinux security context
session required pam_selinux.so
sestatus commands
1 commands
ss-server commands
1 commands
systemd-cryptenroll commands
1 commands
systemd-cryptenroll
Enroll LUKS2 disk unlock methods
systemd-cryptenroll --password [/dev/luks_device]
tshark commands
1 commands
vlock commands
1 commands
sudo aa-audit [profile_name]
May affect permissions or system state. Check the target first.
sudo aa-cleanprof [profile_name]
May affect permissions or system state. Check the target first.
sudo aa-complain [path/to/profile]
May affect permissions or system state. Check the target first.
sudo aa-disable [path/to/profile]
May affect permissions or system state. Check the target first.
sudo aa-enforce [path/to/profile]
May affect permissions or system state. Check the target first.
sudo aa-genprof [/path/to/program]
May affect permissions or system state. Check the target first.
sudo aa-logprof
May affect permissions or system state. Check the target first.
sudo aa-mergeprof [file1] [file2]
May affect permissions or system state. Check the target first.
aa-notify --since-last
Copy it and replace filenames, paths, or keywords as needed.
sudo aa-teardown
May affect permissions or system state. Check the target first.
sudo aa-unconfined
May affect permissions or system state. Check the target first.
abrt-action-analyze-backtrace
Copy it and replace filenames, paths, or keywords as needed.
sudo airbase-ng -e "[FakeSSID]" -c [6] [wlan0mon]
May affect permissions or system state. Check the target first.
aircrack-ng -w [wordlist.txt] [capture.cap]
Copy it and replace filenames, paths, or keywords as needed.
airdecap-ng -w [hex_key] [capture.cap]
Copy it and replace filenames, paths, or keywords as needed.
sudo aireplay-ng -0 [5] -a [AP_BSSID] -c [CLIENT_MAC] [wlan0mon]
May affect permissions or system state. Check the target first.
sudo airmon-ng
May affect permissions or system state. Check the target first.
sudo airodump-ng-oui-update
May affect permissions or system state. Check the target first.
sudo airodump-ng [wlan0mon]
May affect permissions or system state. Check the target first.
airolib-ng [database.db] --init
Copy it and replace filenames, paths, or keywords as needed.
sudo airserv-ng -d [wlan0mon] -c [6] -p [666]
May affect permissions or system state. Check the target first.
amap -b [192.168.1.1] [80]
Copy it and replace filenames, paths, or keywords as needed.
amass track -d [example.com]
Copy it and replace filenames, paths, or keywords as needed.
androguard analyze [app.apk]
Copy it and replace filenames, paths, or keywords as needed.
sudo angryoxide -i [wlan0]
May affect permissions or system state. Check the target first.
ansible-lint [playbook.yml]
Copy it and replace filenames, paths, or keywords as needed.
apgbfm -f [filter.bf] -d [dictionary.txt]
Copy it and replace filenames, paths, or keywords as needed.
apkeep -a [com.example.app] .
Copy it and replace filenames, paths, or keywords as needed.
apkleaks -f [app.apk]
Copy it and replace filenames, paths, or keywords as needed.
apksigner sign --ks [keystore.jks] [app.apk]
Copy it and replace filenames, paths, or keywords as needed.
sudo aa-status
May affect permissions or system state. Check the target first.
sudo apparmor_parser -a [profile_file]
May affect permissions or system state. Check the target first.
sudo apptainer config fakeroot --add [username]
May affect permissions or system state. Check the target first.
apptainer sign [path/to/image.sif]
Copy it and replace filenames, paths, or keywords as needed.
man apt-secure
Copy it and replace filenames, paths, or keywords as needed.
echo -n "password" | argon2 [salt] -e
Uses pipes, overwrite, or deletion. Check paths and options first.
arjun -u [https://example.com/page]
Copy it and replace filenames, paths, or keywords as needed.
sudo arpspoof -i wlan0 host_ip
May affect permissions or system state. Check the target first.
sudo aspell-autobuildhash
May affect permissions or system state. Check the target first.
assetfinder [example.com]
Copy it and replace filenames, paths, or keywords as needed.
attr -s [attribute_name] -V [value] [path/to/file]
Copy it and replace filenames, paths, or keywords as needed.
sudo auditd
May affect permissions or system state. Check the target first.
auggie
Copy it and replace filenames, paths, or keywords as needed.
sudo ausearch -m avc
May affect permissions or system state. Check the target first.
authelia validate-config --config [config.yml]
Copy it and replace filenames, paths, or keywords as needed.
sudo autorecon 192.168.1.1
May affect permissions or system state. Check the target first.
aws accessanalyzer list-analyzers
Copy it and replace filenames, paths, or keywords as needed.
aws acm-pca create-certificate-authority --certificate-authority-configuration [file://config.json] --certificate-authority-type ROOT
Copy it and replace filenames, paths, or keywords as needed.
aws autoscaling create-auto-scaling-group --auto-scaling-group-name [my-asg] --launch-template LaunchTemplateId=[lt-12345] --min-size [1] --max-size [5] --vpc-zone-identifier "[subnet-abc,subnet-def]"
Copy it and replace filenames, paths, or keywords as needed.
aws cloudtrail lookup-events --lookup-attributes AttributeKey=Username,AttributeValue=[user@example.com]
Copy it and replace filenames, paths, or keywords as needed.
aws dynamodb create-table --table-name [my-table] --attribute-definitions AttributeName=id,AttributeType=S --key-schema AttributeName=id,KeyType=HASH --billing-mode PAY_PER_REQUEST
Copy it and replace filenames, paths, or keywords as needed.
aws ec2 run-instances --image-id [ami-0c55b159cbfafe1f0] --instance-type [t2.micro] --key-name [my-key]
Copy it and replace filenames, paths, or keywords as needed.
aws eks create-cluster --name [my-cluster] --role-arn [arn:aws:iam::account:role/eks-role] --resources-vpc-config subnetIds=[subnet-1],[subnet-2],securityGroupIds=[sg-123]
Copy it and replace filenames, paths, or keywords as needed.
aws-google-auth
Copy it and replace filenames, paths, or keywords as needed.
aws iam create-user --user-name [my-user]
Copy it and replace filenames, paths, or keywords as needed.
aws iot list-things
Copy it and replace filenames, paths, or keywords as needed.
aws sts get-caller-identity
Copy it and replace filenames, paths, or keywords as needed.
aws-vault add [profile-name]
May affect permissions or system state. Check the target first.
aws ec2 describe-vpcs
Copy it and replace filenames, paths, or keywords as needed.
az acr create -n [registry-name] -g [resource-group] --sku [Standard]
Copy it and replace filenames, paths, or keywords as needed.
az advisor recommendation list
Copy it and replace filenames, paths, or keywords as needed.
az apim create --name [MyApim] --resource-group [MyResourceGroup] --publisher-email [email@domain.com] --publisher-name [MyCompany] --location [eastus]
Copy it and replace filenames, paths, or keywords as needed.
az devops configure --defaults organization=[https://dev.azure.com/contoso] project=[ContosoWebApp]
Copy it and replace filenames, paths, or keywords as needed.
az network dns zone create -g [resource-group] --name [example.com]
Copy it and replace filenames, paths, or keywords as needed.
az storage blob upload -f [/path/to/file] -c [container-name] -n [blob-name] --account-name [account]
Copy it and replace filenames, paths, or keywords as needed.
b2sum [file]
Copy it and replace filenames, paths, or keywords as needed.
b3sum [file]
Copy it and replace filenames, paths, or keywords as needed.
beef-xss
Copy it and replace filenames, paths, or keywords as needed.
beef-xss
Copy it and replace filenames, paths, or keywords as needed.
besside-ng [wlan0mon]
Copy it and replace filenames, paths, or keywords as needed.
bettercap -iface [eth0]
Copy it and replace filenames, paths, or keywords as needed.
binwalk [firmware.bin]
Copy it and replace filenames, paths, or keywords as needed.
bloodhound-python -d [domain.local] -u [username] -p [password] -ns [dc_ip] -c all
Copy it and replace filenames, paths, or keywords as needed.
bloodhound
Copy it and replace filenames, paths, or keywords as needed.
boltctl
Copy it and replace filenames, paths, or keywords as needed.
boltd
Copy it and replace filenames, paths, or keywords as needed.
borg init --encryption=[repokey] [/path/to/repo]
Copy it and replace filenames, paths, or keywords as needed.
bpftool prog list
Copy it and replace filenames, paths, or keywords as needed.
brave
Copy it and replace filenames, paths, or keywords as needed.
btshowmetainfo [file.torrent]
Copy it and replace filenames, paths, or keywords as needed.
bwrap --ro-bind /usr /usr --symlink usr/lib64 /lib64 --proc /proc --dev /dev --unshare-pid [command]
Copy it and replace filenames, paths, or keywords as needed.
bun audit
Copy it and replace filenames, paths, or keywords as needed.
bun pm hash
Copy it and replace filenames, paths, or keywords as needed.
bun pm trust [package1] [package2]
Copy it and replace filenames, paths, or keywords as needed.
bundletool dump manifest --bundle=[app.aab]
Copy it and replace filenames, paths, or keywords as needed.
burpsuite
Copy it and replace filenames, paths, or keywords as needed.
burpsuite
Copy it and replace filenames, paths, or keywords as needed.
caddy run
Copy it and replace filenames, paths, or keywords as needed.
caligula burn [path/to/image.iso]
Copy it and replace filenames, paths, or keywords as needed.
getcap [/path/to/binary]
Copy it and replace filenames, paths, or keywords as needed.
cargo version
Copy it and replace filenames, paths, or keywords as needed.
cat [domains.txt] | cariddi
Uses pipes, overwrite, or deletion. Check paths and options first.
certutil -L -d [~/.pki/nssdb]
Copy it and replace filenames, paths, or keywords as needed.
chage -l username
Copy it and replace filenames, paths, or keywords as needed.
chainctl auth login
Copy it and replace filenames, paths, or keywords as needed.
sudo chattr +i path/to/file
May affect permissions or system state. Check the target first.
sudo chcat -L
May affect permissions or system state. Check the target first.
ls -lZ path/to/file
Copy it and replace filenames, paths, or keywords as needed.
check-support-status
Copy it and replace filenames, paths, or keywords as needed.
checkov -d [path/to/directory]
Copy it and replace filenames, paths, or keywords as needed.
sudo checkrestart
May affect permissions or system state. Check the target first.
checksec --file=[path/to/binary]
Copy it and replace filenames, paths, or keywords as needed.
chmod +x [script.sh]
May affect permissions or system state. Check the target first.
chntpw -l [path/to/sam_file]
Copy it and replace filenames, paths, or keywords as needed.
cifs.idmap --help
Copy it and replace filenames, paths, or keywords as needed.
cifscreds add [server_hostname]
May affect permissions or system state. Check the target first.
clef init
Copy it and replace filenames, paths, or keywords as needed.
cloudsploit scan
Copy it and replace filenames, paths, or keywords as needed.
cntlm -c [/etc/cntlm.conf]
Copy it and replace filenames, paths, or keywords as needed.
cockpit-desktop [url] [SSH_host]
Copy it and replace filenames, paths, or keywords as needed.
cockpit-tls --port [port]
Copy it and replace filenames, paths, or keywords as needed.
coderabbit
Copy it and replace filenames, paths, or keywords as needed.
codesign -s "[Developer ID]" [MyApp.app]
Copy it and replace filenames, paths, or keywords as needed.
codex
Copy it and replace filenames, paths, or keywords as needed.
composer audit
Copy it and replace filenames, paths, or keywords as needed.
conda notices
Copy it and replace filenames, paths, or keywords as needed.
container-diff analyze [image:tag]
Copy it and replace filenames, paths, or keywords as needed.
cosign sign [registry/image@sha256:digest]
Copy it and replace filenames, paths, or keywords as needed.
cowpatty -f [wordlist.txt] -r [capture.cap] -s [SSID]
Copy it and replace filenames, paths, or keywords as needed.
crackmapexec smb [192.168.1.0/24] -u [user] -p [password] --shares
Copy it and replace filenames, paths, or keywords as needed.
crane catalog [registry]
Copy it and replace filenames, paths, or keywords as needed.
crc32 [path/to/file]
Copy it and replace filenames, paths, or keywords as needed.
openssl crl -in [crl.pem] -text -noout
Copy it and replace filenames, paths, or keywords as needed.
crunch [4] [6]
Copy it and replace filenames, paths, or keywords as needed.
dalfox url [https://example.com?q=test]
Copy it and replace filenames, paths, or keywords as needed.
darkhttpd .
Copy it and replace filenames, paths, or keywords as needed.
db_load -T -t hash [database.db] < [data.txt]
Copy it and replace filenames, paths, or keywords as needed.
dbus-daemon --config-file [path/to/file]
Copy it and replace filenames, paths, or keywords as needed.
dcfldd if=[/dev/sda] of=[disk.img]
May affect permissions or system state. Check the target first.
dch "[changelog message]"
Copy it and replace filenames, paths, or keywords as needed.
debsecan
Copy it and replace filenames, paths, or keywords as needed.
pip install deflect-one
Copy it and replace filenames, paths, or keywords as needed.
deno run [script.ts]
Copy it and replace filenames, paths, or keywords as needed.
d2j-dex2jar [classes.dex]
Copy it and replace filenames, paths, or keywords as needed.
dexdump [classes.dex]
Copy it and replace filenames, paths, or keywords as needed.
dexter -i [classes.dex]
Copy it and replace filenames, paths, or keywords as needed.
dillo
Copy it and replace filenames, paths, or keywords as needed.
dirac "[describe the task]"
Copy it and replace filenames, paths, or keywords as needed.
eval "$(direnv hook bash)"
Copy it and replace filenames, paths, or keywords as needed.
dirsearch -u [https://example.com]
Copy it and replace filenames, paths, or keywords as needed.
disable [builtin_name]
Copy it and replace filenames, paths, or keywords as needed.
distccd --daemon
Copy it and replace filenames, paths, or keywords as needed.
dmitry -w [domain.com]
Copy it and replace filenames, paths, or keywords as needed.
dnf changelog [package]
Copy it and replace filenames, paths, or keywords as needed.
dnsenum [domain.com]
Copy it and replace filenames, paths, or keywords as needed.
dnsrecon -d [example.com]
Copy it and replace filenames, paths, or keywords as needed.
cat [domains.txt] | dnsx -a
Uses pipes, overwrite, or deletion. Check paths and options first.
doas [command]
Copy it and replace filenames, paths, or keywords as needed.
dockdiver -u [username]
Copy it and replace filenames, paths, or keywords as needed.
docker buildx version
Copy it and replace filenames, paths, or keywords as needed.
docker network ls
Copy it and replace filenames, paths, or keywords as needed.
doctl databases firewalls list [cluster_id]
Copy it and replace filenames, paths, or keywords as needed.
doctl databases maintenance-window get [cluster_id]
Copy it and replace filenames, paths, or keywords as needed.
doctl databases user list [cluster_id]
Copy it and replace filenames, paths, or keywords as needed.
dolt blame [table_name]
Copy it and replace filenames, paths, or keywords as needed.
dpkg-deb -I [path/to/file.deb]
Copy it and replace filenames, paths, or keywords as needed.
driftnet -i [eth0]
Copy it and replace filenames, paths, or keywords as needed.
sudo dsniff -i [eth0]
May affect permissions or system state. Check the target first.
dumpcap -i [eth0] -w [capture.pcapng]
Copy it and replace filenames, paths, or keywords as needed.
dvc add [data.csv]
May affect permissions or system state. Check the target first.
dvc commit
Copy it and replace filenames, paths, or keywords as needed.
dvc diff
Copy it and replace filenames, paths, or keywords as needed.
sudo easside-ng -f [wlan0] -s [buddy_ip]
May affect permissions or system state. Check the target first.
openssl ec -in [key.pem] -text -noout
Copy it and replace filenames, paths, or keywords as needed.
editcap -r [input.pcap] [output.pcap] [1-100]
Copy it and replace filenames, paths, or keywords as needed.
eksctl create cluster --name [cluster_name]
Copy it and replace filenames, paths, or keywords as needed.
elasticsearch-certutil ca
Copy it and replace filenames, paths, or keywords as needed.
elasticsearch-users list
Copy it and replace filenames, paths, or keywords as needed.
ettercap -G
Copy it and replace filenames, paths, or keywords as needed.
evil-winrm -i [target_ip] -u [username] -p [password]
Copy it and replace filenames, paths, or keywords as needed.
exo compute instance list
Copy it and replace filenames, paths, or keywords as needed.
exo compute instance list
Copy it and replace filenames, paths, or keywords as needed.
expect [path/to/file]
Copy it and replace filenames, paths, or keywords as needed.
sudo extrace
May affect permissions or system state. Check the target first.
extrepo search keyword
Copy it and replace filenames, paths, or keywords as needed.
faillock
Copy it and replace filenames, paths, or keywords as needed.
fastd --config [/etc/fastd/fastd.conf]
Copy it and replace filenames, paths, or keywords as needed.
sudo fatrace
May affect permissions or system state. Check the target first.
fclones group [directory]
Copy it and replace filenames, paths, or keywords as needed.
fcrackzip [-b|--brute-force] [-l|--length] 4-8 [-c|--charset] aA1 [archive]
Uses pipes, overwrite, or deletion. Check paths and options first.
feroxbuster --url [https://example.com]
Copy it and replace filenames, paths, or keywords as needed.
ffuf -u [https://target.com/FUZZ] -w [wordlist.txt]
Copy it and replace filenames, paths, or keywords as needed.
fido2-token -L
Copy it and replace filenames, paths, or keywords as needed.
findomain -t [example.com]
Copy it and replace filenames, paths, or keywords as needed.
sudo firecfg
May affect permissions or system state. Check the target first.
fixfiles restore
Copy it and replace filenames, paths, or keywords as needed.
fixmynpm doctor
Copy it and replace filenames, paths, or keywords as needed.
flarectl dns list --zone [example.com]
Copy it and replace filenames, paths, or keywords as needed.
flask-unsign --decode --cookie "[cookie_value]"
Copy it and replace filenames, paths, or keywords as needed.
flatpak remote-info [remote_name] [com.example.app]
Copy it and replace filenames, paths, or keywords as needed.
flatpak update
Copy it and replace filenames, paths, or keywords as needed.
fluxion
Copy it and replace filenames, paths, or keywords as needed.
forge
Copy it and replace filenames, paths, or keywords as needed.
fossa analyze
Copy it and replace filenames, paths, or keywords as needed.
frida [process_name]
Copy it and replace filenames, paths, or keywords as needed.
fswebcam [image.jpg]
Copy it and replace filenames, paths, or keywords as needed.
gau [example.com]
Copy it and replace filenames, paths, or keywords as needed.
gcloud kms decrypt --ciphertext-file=[encrypted.enc] --plaintext-file=[decrypted.txt] --key=[key] --keyring=[keyring] --location=[global]
Copy it and replace filenames, paths, or keywords as needed.
genid
Copy it and replace filenames, paths, or keywords as needed.
openssl genpkey -algorithm RSA -out [key.pem]
Copy it and replace filenames, paths, or keywords as needed.
genpmk -f [wordlist.txt] -d [hashfile] -s [SSID]
Copy it and replace filenames, paths, or keywords as needed.
getenforce
Copy it and replace filenames, paths, or keywords as needed.
getfattr -d [path/to/file]
Copy it and replace filenames, paths, or keywords as needed.
GetNPUsers.py [DOMAIN]/[username]:[password] -request -format hashcat -outputfile [hashes.txt]
Copy it and replace filenames, paths, or keywords as needed.
giskismet -x [kismet-output.netxml]
Copy it and replace filenames, paths, or keywords as needed.
git agecrypt init
Copy it and replace filenames, paths, or keywords as needed.
git annotate [file]
Copy it and replace filenames, paths, or keywords as needed.
git brv
Copy it and replace filenames, paths, or keywords as needed.
git cherry-pick [commit]
Copy it and replace filenames, paths, or keywords as needed.
echo "[message]" | git commit-tree [tree_hash]
Uses pipes, overwrite, or deletion. Check paths and options first.
git commit -m "[message]"
Copy it and replace filenames, paths, or keywords as needed.
git create-branch [branch_name]
Copy it and replace filenames, paths, or keywords as needed.
git config credential.helper cache
Copy it and replace filenames, paths, or keywords as needed.
git config credential.helper store
Copy it and replace filenames, paths, or keywords as needed.
git daemon --base-path=[/path/to/repos]
Copy it and replace filenames, paths, or keywords as needed.
git get-tar-commit-id < [archive.tar]
Copy it and replace filenames, paths, or keywords as needed.
git hash-object [file]
Copy it and replace filenames, paths, or keywords as needed.
git log
Copy it and replace filenames, paths, or keywords as needed.
git ls-tree HEAD | git mktree
Uses pipes, overwrite, or deletion. Check paths and options first.
git show-index < [.idx file]
Copy it and replace filenames, paths, or keywords as needed.
git unpack-file [blob_hash]
Copy it and replace filenames, paths, or keywords as needed.
git verify-commit [commit]
Copy it and replace filenames, paths, or keywords as needed.
git verify-pack .git/objects/pack/pack-hash.idx
Copy it and replace filenames, paths, or keywords as needed.
git verify-tag [tag]
Copy it and replace filenames, paths, or keywords as needed.
gixy-next [/etc/nginx/nginx.conf]
Copy it and replace filenames, paths, or keywords as needed.
gixy [/etc/nginx/nginx.conf]
Copy it and replace filenames, paths, or keywords as needed.
gksu -u [userid] [command]
Copy it and replace filenames, paths, or keywords as needed.
gksudo -u [userid] [command]
May affect permissions or system state. Check the target first.
gmssl sm2keygen -pass [password] -out [key.pem]
Copy it and replace filenames, paths, or keywords as needed.
gnucash-cli --quotes get [file.gnucash]
Copy it and replace filenames, paths, or keywords as needed.
gobuster dir -u [https://example.com] -w [wordlist.txt]
Copy it and replace filenames, paths, or keywords as needed.
golangci-lint run
Copy it and replace filenames, paths, or keywords as needed.
goldeneye.py [url]
Copy it and replace filenames, paths, or keywords as needed.
./gophish
Copy it and replace filenames, paths, or keywords as needed.
gpg2 --full-generate-key
May affect permissions or system state. Check the target first.
cat /etc/security/group.conf
Copy it and replace filenames, paths, or keywords as needed.
cat /etc/group
Copy it and replace filenames, paths, or keywords as needed.
sudo grpck
May affect permissions or system state. Check the target first.
sudo grpconv
May affect permissions or system state. Check the target first.
sudo grub2-mkpasswd-pbkdf2
May affect permissions or system state. Check the target first.