aa-notify
Display and monitor AppArmor denial notifications
aa-notify --since-last
Categories
Browse grouped command cards or search directly below.
All categories
One-liners
AI tools
System information
System control
System Recovery
Users & Groups
Files & Folders
Input
Printing
JSON
Development
Network
Search & Find
Git
SSH
Video & Audio
Package manager
Text Processing
Compression & Archiving
Backup & Imaging
Hacking tools
Terminal games
Cryptocurrencies
Shell Scripting
Tmux
Regular Expressions
VIM Text Editor
Emacs Text Editor
Nano Text Editor
Pico Text Editor
Micro Text Editor
Directory listing
185 commands
airdecap-ng
Decrypt WEP and WPA/WPA2 encrypted capture files
airdecap-ng -w [hex_key] [capture.cap]
airodump-ng-oui-update
Update the IEEE OUI manufacturer database
sudo airodump-ng-oui-update
airserv-ng
Wireless card server for remote access over TCP/IP
sudo airserv-ng -d [wlan0mon] -c [6] -p [666]
amap
Identify application protocols on network ports
amap -b [192.168.1.1] [80]
apkeep
Download APKs from app stores
apkeep -a [com.example.app] .
apkleaks
Scan APKs for hardcoded secrets and keys
apkleaks -f [app.apk]
attr
Manipulate extended attributes on filesystem objects
attr -s [attribute_name] -V [value] [path/to/file]
auggie
AI-powered agentic coding CLI from Augment Code
auggie
authelia
Authentication and authorization server with multi-factor support
authelia validate-config --config [config.yml]
autorecon
Automated multi-threaded network reconnaissance
sudo autorecon 192.168.1.1
aws-accessanalyzer
Analyze and validate IAM policies for security risks
aws accessanalyzer list-analyzers
aws-acm-pca
Manage private certificate authorities and certificates
aws acm-pca create-certificate-authority --certificate-authority-configuration [file://config.json] --certificate-authority-type ROOT
aws-cloudtrail
Track and audit API activity across cloud services.
aws cloudtrail lookup-events --lookup-attributes AttributeKey=Username,AttributeValue=[user@example.com]
aws-google-auth
Acquire AWS credentials via Google Workspace SSO
aws-google-auth
aws-sts
Request temporary security credentials and verify identity.
aws sts get-caller-identity
aws-vault
Securely store and access AWS credentials in the system keychain.
aws-vault add [profile-name]
b2sum
Compute and verify BLAKE2 cryptographic checksums.
b2sum [file]
beef
Browser exploitation framework for penetration testing
beef-xss
bettercap
Network attack and monitoring framework
bettercap -iface [eth0]
boltctl
Manage Thunderbolt device authorization
boltctl
boltd
Thunderbolt device management daemon
boltd
bun-pm-trust
Manage trusted dependencies in Bun projects
bun pm trust [package1] [package2]
burpsuite
Web application security testing platform
burpsuite
caddy
Web server with automatic HTTPS
caddy run
capabilities
Linux process privilege capabilities system
getcap [/path/to/binary]
cargo-version
Display version information for Cargo
cargo version
cariddi
crawl URLs for endpoints, secrets, and sensitive data
cat [domains.txt] | cariddi
chage
change user password expiry information
chage -l username
chattr
change file attributes on Linux filesystems
sudo chattr +i path/to/file
chcon
change SELinux security context of files
ls -lZ path/to/file
checkov
static analysis for infrastructure as code
checkov -d [path/to/directory]
chmod
change file access permissions
chmod +x [script.sh]
cifs.idmap
Translate Windows SIDs to Linux UIDs/GIDs for CIFS mounts
cifs.idmap --help
cifscreds
Manage CIFS mount credentials in the kernel keyring
cifscreds add [server_hostname]
cntlm
NTLM/NTLMv2 authenticating HTTP proxy
cntlm -c [/etc/cntlm.conf]
File inspection
114 commands
aa-cleanprof
Clean AppArmor profiles by removing redundant rules
sudo aa-cleanprof [profile_name]
aa-disable
Disable AppArmor security profiles
sudo aa-disable [path/to/profile]
aa-enforce
Set AppArmor profiles to enforce mode
sudo aa-enforce [path/to/profile]
aa-genprof
Generate AppArmor profiles by monitoring program behavior
sudo aa-genprof [/path/to/program]
aa-mergeprof
Merge AppArmor security profiles
sudo aa-mergeprof [file1] [file2]
aircrack-ng
Crack WEP and WPA/WPA2 wireless encryption keys
aircrack-ng -w [wordlist.txt] [capture.cap]
airmon-ng
Enable and manage wireless monitor mode
sudo airmon-ng
airodump-ng
Capture wireless packets and discover nearby networks
sudo airodump-ng [wlan0mon]
apparmor
Mandatory Access Control framework for confining applications.
sudo aa-status
apparmor_parser
Load, replace, and manage AppArmor security profiles.
sudo apparmor_parser -a [profile_file]
auditd
Linux audit daemon for tracking security-relevant events.
sudo auditd
aws-eks
Manage Amazon Elastic Kubernetes Service clusters
aws eks create-cluster --name [my-cluster] --role-arn [arn:aws:iam::account:role/eks-role] --resources-vpc-config subnetIds=[subnet-1],[subnet-2],securityGroupIds=[sg-123]
az-storage-blob
Manage Azure Blob Storage objects
az storage blob upload -f [/path/to/file] -c [container-name] -n [blob-name] --account-name [account]
besside-ng
Automated WiFi security auditing tool
besside-ng [wlan0mon]
binwalk
Analyze and extract firmware images
binwalk [firmware.bin]
btshowmetainfo
Display metadata from BitTorrent .torrent files
btshowmetainfo [file.torrent]
bun-pm-hash
Generate and print the lockfile hash
bun pm hash
caligula
Write disk images to USB drives safely
caligula burn [path/to/image.iso]
chcat
change SELinux security categories
sudo chcat -L
chntpw
offline Windows password and registry editor
chntpw -l [path/to/sam_file]
cowpatty
WPA/WPA2 PSK offline auditing tool
cowpatty -f [wordlist.txt] -r [capture.cap] -s [SSID]
darkhttpd
simple, fast, and secure static web server
darkhttpd .
dbus-daemon
message bus daemon for inter-process communication
dbus-daemon --config-file [path/to/file]
deno
secure runtime for JavaScript and TypeScript
deno run [script.ts]
dex2jar
Android DEX to JAR file converter
d2j-dex2jar [classes.dex]
dexter
Android DEX file analyzer with call graph generation
dexter -i [classes.dex]
dirac
Efficient AI coding agent CLI
dirac "[describe the task]"
direnv
per-directory environment variable manager
eval "$(direnv hook bash)"
dirsearch
web path brute-force scanner for content discovery
dirsearch -u [https://example.com]
doas
minimal privilege escalation tool
doas [command]
dpkg-deb
Debian archive manipulation tool
dpkg-deb -I [path/to/file.deb]
dumpcap
network packet capture engine
dumpcap -i [eth0] -w [capture.pcapng]
dvc-add
track data files with DVC
dvc add [data.csv]
dvc-commit
record changes to DVC-tracked files
dvc commit
dvc-diff
show changes in tracked data files
dvc diff
editcap
packet capture file editor and converter
editcap -r [input.pcap] [output.pcap] [1-100]
Text processing
54 commands
aa-teardown
Unload all AppArmor profiles and disable enforcement
sudo aa-teardown
apgbfm
Manage bloom filters for password checking
apgbfm -f [filter.bf] -d [dictionary.txt]
apt-secure
Archive authentication and trust model documentation.
man apt-secure
aspell-autobuildhash
Rebuild aspell dictionary hash files
sudo aspell-autobuildhash
aws-dynamodb
Manage tables and items in Amazon DynamoDB.
aws dynamodb create-table --table-name [my-table] --attribute-definitions AttributeName=id,AttributeType=S --key-schema AttributeName=id,KeyType=HASH --billing-mode PAY_PER_REQUEST
beef-xss
Browser exploitation framework for penetration testing
beef-xss
bpftool
Inspect and manage eBPF programs and maps.
bpftool prog list
brave
Privacy-focused web browser
brave
bubblewrap
Unprivileged sandboxing using Linux namespaces
bwrap --ro-bind /usr /usr --symlink usr/lib64 /lib64 --proc /proc --dev /dev --unshare-pid [command]
bundletool-dump
Inspect Android App Bundle contents
bundletool dump manifest --bundle=[app.aab]
certutil
NSS certificate database management
certutil -L -d [~/.pki/nssdb]
clef
standalone Ethereum account manager and transaction signer
clef init
cloudsploit
Open-source cloud security posture management scanner
cloudsploit scan
dcfldd
forensic disk imaging tool with hashing
dcfldd if=[/dev/sda] of=[disk.img]
docker-buildx-version
Show Docker Buildx version information
docker buildx version
elasticsearch-users
Manage file-based Elasticsearch users
elasticsearch-users list
ettercap
comprehensive suite for network MITM attacks
ettercap -G
faillock
authentication failure tracking and lockout manager
faillock
fido2-token
FIDO2/WebAuthn security key manager
fido2-token -L
flask-unsign
Flask session cookie manipulation and cracking
flask-unsign --decode --cookie "[cookie_value]"
flatpak-update
update installed Flatpak applications and runtimes
flatpak update
gcloud-kms-decrypt
decrypt data using Cloud KMS keys
gcloud kms decrypt --ciphertext-file=[encrypted.enc] --plaintext-file=[decrypted.txt] --key=[key] --keyring=[keyring] --location=[global]
git-cherry-pick
Apply changes from existing commits
git cherry-pick [commit]
gixy
Nginx configuration security analyzer
gixy [/etc/nginx/nginx.conf]
gksu
Graphical frontend for su with GTK password dialog
gksu -u [userid] [command]
gmssl
Chinese national cryptographic algorithms toolkit
gmssl sm2keygen -pass [password] -out [key.pem]
gpg2
GnuPG 2 encryption and digital signatures
gpg2 --full-generate-key
grub2-mkpasswd-pbkdf2
generate PBKDF2 password hash for GRUB protection
sudo grub2-mkpasswd-pbkdf2
impacket-getuserspns
finds and requests Kerberos service tickets for user accounts with SPNs
impacket-GetUserSPNs [domain]/[user]:[password] -dc-ip [dc-ip]
keycloak
CLI for Keycloak, an open-source identity and access management
kc.sh start-dev
knock
client component of port knocking
knock [hostname] [port1] [port2] [port3]
librewolf
privacy-focused Firefox fork with enhanced security defaults
librewolf
lua
programming language interpreter
lua
lynis
security auditing tool for Unix-based systems
sudo lynis update info
makeivs-ng
generates IVs files for testing WEP cracking
makeivs-ng -b [00:11:22:33:44:55] -w [key] -o [output.ivs]
msfconsole
metasploit Framework console
msfconsole
Search and filters
42 commands
amass-track
Track changes in external attack surface over time
amass track -d [example.com]
angryoxide
802.11 WiFi attack and penetration testing tool
sudo angryoxide -i [wlan0]
assetfinder
Discover subdomains and related domains
assetfinder [example.com]
az-apim
Manage Azure API Management services
az apim create --name [MyApim] --resource-group [MyResourceGroup] --publisher-email [email@domain.com] --publisher-name [MyCompany] --location [eastus]
bloodhound-python
Collect Active Directory data for BloodHound analysis
bloodhound-python -d [domain.local] -u [username] -p [password] -ns [dc_ip] -c all
bloodhound
Visualize Active Directory attack paths
bloodhound
borg
Deduplicating backup with compression and encryption
borg init --encryption=[repokey] [/path/to/repo]
check-support-status
Identify installed packages with limited security support
check-support-status
checkrestart
find processes using outdated shared libraries
sudo checkrestart
checksec
audit security features in ELF binaries
checksec --file=[path/to/binary]
coderabbit
AI-powered code review tool for the terminal
coderabbit
codesign
macOS code signing and verification utility
codesign -s "[Developer ID]" [MyApp.app]
dnf-changelog
display package changelogs
dnf changelog [package]
dnsenum
DNS enumeration and reconnaissance tool
dnsenum [domain.com]
easside-ng
automated WEP key recovery tool
sudo easside-ng -f [wlan0] -s [buddy_ip]
fcrackzip
crack password-protected ZIP archives
fcrackzip [-b|--brute-force] [-l|--length] 4-8 [-c|--charset] aA1 [archive]
git-verify-tag
Verify GPG signatures of tags
git verify-tag [tag]
hashid
python tool that identifies hash types by analyzing their length and character
hashid '[hash]'
impacket-getadusers
Enumerate Active Directory user accounts via LDAP
impacket-getadusers -all '[domain]/[user]:[password]'
impacket-sniff
basic packet capture tool using Impacket's raw socket capabilities
sudo impacket-sniff [eth0]
john
the Ripper, a password security auditing tool
john [hashes.txt]
kure
CLI password manager with sessions
kure add
mpiexec
launches MPI parallel programs
mpiexec -n [4] [program]
newrole
starts a new shell with a different SELinux security context
newrole -r [role_name]
ntpctl
queries the OpenNTPD daemon for synchronization status
ntpctl -s status
ophcrack
windows password cracker that uses rainbow tables to recover passwords from LM
ophcrack -g -d [path/to/tables] -f [hashes.txt]
pam_time
PAM module for time-based access control
account required pam_time.so
phar
manages PHP Archive files, which bundle PHP applications into single
phar add -f [path/to/archive.phar] [files...]
pptp
Establish PPTP VPN tunnel connections
pptp [server] --nolaunchpppd
rar2john
Extract password hashes from RAR archives
rar2john [archive.rar] > [hash.txt]
rbac-lookup
Look up Kubernetes RBAC roles for users
rbac-lookup [user@example.com]
scan-build
Clang static analyzer build integration tool
scan-build make
semgrep
Lightweight static analysis for code security and quality
semgrep scan --config auto
setoolkit
Social engineering penetration testing framework
sudo setoolkit
snap.pkg
Manage sandboxed snap packages
snap find [query]
snmpset
Modify SNMP object values on agents
snmpset -v 2c -c [community] [host] [OID] i [value]
File operations
36 commands
aa-unconfined
Find network-listening processes without AppArmor profiles
sudo aa-unconfined
airbase-ng
Create software-based wireless access points for penetration testing
sudo airbase-ng -e "[FakeSSID]" -c [6] [wlan0mon]
aireplay-ng
Inject packets into wireless networks for security testing
sudo aireplay-ng -0 [5] -a [AP_BSSID] -c [CLIENT_MAC] [wlan0mon]
apptainer-config
Manage Apptainer container platform configuration
sudo apptainer config fakeroot --add [username]
arjun
Discover hidden HTTP parameters in web applications
arjun -u [https://example.com/page]
aws-autoscaling
Automatically scale EC2 instance groups based on demand
aws autoscaling create-auto-scaling-group --auto-scaling-group-name [my-asg] --launch-template LaunchTemplateId=[lt-12345] --min-size [1] --max-size [5] --vpc-zone-identifier "[subnet-abc,subnet-def]"
aws-iot
Manage IoT devices, certificates, and message routing.
aws iot list-things
burp
Web application security testing platform
burpsuite
chainctl
manage Chainguard container images and resources
chainctl auth login
codex
OpenAI terminal-based coding agent
codex
cosign
Container image signing and verification tool
cosign sign [registry/image@sha256:digest]
dillo
lightweight minimalist web browser
dillo
distccd
distcc server daemon for distributed compilation
distccd --daemon
dmitry
information gathering reconnaissance tool
dmitry -w [domain.com]
dnsrecon
comprehensive DNS reconnaissance tool
dnsrecon -d [example.com]
dolt-blame
show the commit, author, and timestamp that last modified each row of a Dolt table
dolt blame [table_name]
evil-winrm
penetration testing shell for WinRM
evil-winrm -i [target_ip] -u [username] -p [password]
findomain
fast cross-platform subdomain enumerator
findomain -t [example.com]
gophish
Open-source phishing simulation framework
./gophish
hashcat
high-performance password recovery tool that uses CPU, GPU, and other hardware
hashcat -m 0 -a 0 [hashes.txt] [wordlist.txt]
jf
JFrog CLI for interacting with JFrog platform services
jf config add
jfrog
Official CLI for the JFrog Platform
jfrog config add [server-id]
metasploit
penetration testing platform for developing, testing, and executing exploits
msfconsole
mktorrent
creates BitTorrent metainfo files
mktorrent -a [http://tracker.example.com/announce] [file]
nc
Read and write arbitrary data across TCP and UDP connections — the network Swiss-army knife
nc -l [8080]
nc_openbsd
OpenBSD rewrite of netcat for TCP/UDP connections and port scanning
nc.openbsd -l [8080]
netcat
versatile networking utility for reading and writing data across TCP and UDP
nc [host] [port]
nmap
Network exploration and security auditing tool
nmap [192.168.1.1]
pkeyutl.1s
Perform low-level public key operations
openssl pkeyutl -sign -rawin -digest sha256 -in [data] -inkey [key.pem] -out [signature]
rcrack
Crack password hashes using rainbow tables
rcrack [path/to/tables] -h [5d41402abc4b2a76b9719d911017c592]
relic
End-to-end encrypted secret manager for developers
relic login
scp
Secure copy files over SSH
scp [path/to/file] [user]@[host]:[path/to/destination]
srm
Secure file deletion with overwriting
srm [file.txt]
sublist3r
Subdomain enumeration using search engines
sublist3r -d [example.com]
update-manager
Ubuntu graphical software update manager
update-manager
zmap
Fast internet-wide network scanner
sudo zmap -p [80] [192.168.1.0/24]
Network diagnostics
28 commands
aa-audit
Set AppArmor profiles to audit mode
sudo aa-audit [profile_name]
aa-complain
Set AppArmor profiles to complain mode
sudo aa-complain [path/to/profile]
arpspoof
Forge ARP replies for man-in-the-middle interception.
sudo arpspoof -i wlan0 host_ip
aws-ec2
Manage virtual servers and networking on Amazon EC2.
aws ec2 run-instances --image-id [ami-0c55b159cbfafe1f0] --instance-type [t2.micro] --key-name [my-key]
aws-iam
Manage identity, access, and permissions for AWS resources.
aws iam create-user --user-name [my-user]
aws-vpc
Manage Virtual Private Cloud networks, subnets, and gateways.
aws ec2 describe-vpcs
az-devops
Manage Azure DevOps organizations and projects
az devops configure --defaults organization=[https://dev.azure.com/contoso] project=[ContosoWebApp]
flarectl
Cloudflare management from the command line
flarectl dns list --zone [example.com]
fossa
dependency license and security scanner
fossa analyze
frida
Dynamic instrumentation toolkit for developers and security researchers
frida [process_name]
gnucash-cli
command-line interface for GnuCash reports and quotes
gnucash-cli --quotes get [file.gnucash]
grpconv
convert to shadow group format
sudo grpconv
impacket-ping6
ICMPv6 ping implementation using raw sockets via the Impacket library
impacket-ping6 [2001:db8::1]
ip-neighbour
manages the ARP and NDP neighbour tables
ip neighbour
ipset
Create and manage IP address sets for firewall rules
ipset create [set_name] hash:ip
kube-linter
analyzes Kubernetes YAML files and Helm charts for security and best practices
kube-linter lint [path/to/manifests]
lastb
same as last, but shows failed login attempts as recorded in /var/log/btmp
sudo lastb
masscan
fastest asynchronous Internet port scanner
sudo masscan [192.168.1.0/24] -p [80]
nxc-vnc
netExec VNC module
nxc vnc [target]
pam_permit
always returns success
auth sufficient pam_permit.so
pip-hash
Compute hash digests of package archives
pip hash [package.whl]
prowler-kubernetes
Kubernetes cluster security assessment
prowler kubernetes
pw-container
Run apps in isolated PipeWire security contexts
pw-container
pwn
Exploit development and CTF utilities
pwn asm "xor edi, edi"
rehash
Rebuild the command hash table
rehash
semanage-login
Map Linux users to SELinux users
sudo semanage login -l
snapd
Background service for snap package management
sudo systemctl start snapd
trezorctl
Trezor hardware wallet command-line interface
trezorctl list
Processes and services
16 commands
abrt-action-analyze-backtrace
analyze crash backtrace for duplication and quality
abrt-action-analyze-backtrace
ansible-lint
Check playbooks for best practices
ansible-lint [playbook.yml]
az-acr
Manage Azure Container Registries
az acr create -n [registry-name] -g [resource-group] --sku [Standard]
az-advisor
View and manage Azure best-practice recommendations
az advisor recommendation list
doctl-databases-maintenance-window
configure database cluster maintenance schedules
doctl databases maintenance-window get [cluster_id]
git-create-branch
Create and optionally switch to new branch
git create-branch [branch_name]
homectl
manages user accounts and home directories via systemd-homed, a systemd
homectl list
massdns
high-performance DNS stub resolver for bulk lookups
massdns -r [resolvers.txt] -t A [domains.txt]
mysql_secure_installation
improves MySQL security after installation
mysql_secure_installation
pmount
Mount removable devices as regular user
pmount [/dev/sdb1]
startplasma-wayland
Start KDE Plasma on Wayland
startplasma-wayland
symfony
Symfony PHP framework development CLI
symfony new [project_name]
systemd-analyze
Analyze system boot-up performance
systemd-analyze
ubuntu-security-status
Show package security support status
ubuntu-security-status
xsp
Mono ASP.NET development web server
xsp
zm
Manage ZoneMinder surveillance daemons
sudo zmpkg.pl start
Users and permissions
13 commands
aa-logprof
Update AppArmor profiles from log events interactively
sudo aa-logprof
argon2
Hash passwords using the Argon2 algorithm
echo -n "password" | argon2 [salt] -e
ausearch
Search and query audit log events
sudo ausearch -m avc
firejail
application sandboxing with Linux namespaces
sudo firecfg
genid
random identifier and UUID generator
genid
git-verify-commit
Verify GPG signatures of commits
git verify-commit [commit]
gksudo
Graphical frontend for sudo with GTK password dialog
gksudo -u [userid] [command]
grpck
verify integrity of group files
sudo grpck
ike-scan
discovers and fingerprints IPsec VPN servers
sudo ike-scan [192.168.1.0/24]
jj-config-set
sets configuration values in Jujutsu config files
jj config set --user [user.name] "[John Doe]"
makepasswd
generates random passwords suitable for user accounts
makepasswd
postfix
Control the Postfix mail system
sudo postfix check
yast2
SUSE system configuration tool
sudo yast2
Shell workflow
6 commands
disable
Disable shell builtins or other named elements
disable [builtin_name]
fswebcam
command-line webcam image capture
fswebcam [image.jpg]
grype
vulnerability scanner for container images and filesystems
grype [image:tag]
safety
Check Python dependencies for known vulnerabilities
safety scan
terrascan
Static security scanner for IaC
terrascan init
uv-export
Export dependencies to requirements format
uv export > requirements.txt
Package management
5 commands
androguard
Reverse engineer and analyze Android applications
androguard analyze [app.apk]
apksigner
Sign and verify Android APK files
apksigner sign --ks [keystore.jks] [app.apk]
bun-audit
Scan dependencies for known security vulnerabilities
bun audit
composer-audit
scan PHP dependencies for security vulnerabilities
composer audit
pnpm-audit
Check pnpm dependencies for vulnerabilities
pnpm audit
SSH and remote access
5 commands
cockpit-desktop
secure desktop access to Cockpit pages
cockpit-desktop [url] [SSH_host]
crackmapexec
post-exploitation tool for Windows/AD networks
crackmapexec smb [192.168.1.0/24] -u [user] -p [password] --shares
exo-compute-instance
Exoscale virtual machine lifecycle management
exo compute instance list
exo-compute
Exoscale compute instance and infrastructure management
exo compute instance list
pam_motd
displays message of the day
session optional pam_motd.so
HTTP and downloads
4 commands
driftnet
capture images from network traffic
driftnet -i [eth0]
goldeneye.py
HTTP stress testing tool
goldeneye.py [url]
kanha
Web application pentesting suite
kanha fuzz -u [https://example.com/FUZZ] -w [path/to/wordlist.txt]
mitmdump
command-line companion to mitmproxy, a powerful HTTPS proxy
mitmdump
Security tools
4 commands
prowler commands
4 commands
prowler-aws
AWS cloud security assessment
prowler aws
prowler-azure
Azure cloud security assessment
prowler azure
prowler-github
GitHub organization security assessment
prowler github
prowler-m365
Microsoft 365 tenant security assessment
prowler m365
Archive and compression
1 commands
git-get-tar-commit-id
Extract commit ID from tar archive
git get-tar-commit-id < [archive.tar]
airolib-ng commands
1 commands
airolib-ng
Pre-compute WPA/WPA2 PMK databases for faster cracking
airolib-ng [database.db] --init
apptainer commands
1 commands
apptainer-sign
Cryptographically sign SIF container images
apptainer sign [path/to/image.sif]
az commands
1 commands
az-network
Manage Azure networking resources
az network dns zone create -g [resource-group] --name [example.com]
crane commands
1 commands
crane-catalog
list repositories in container registries
crane catalog [registry]
dch commands
1 commands
debsecan commands
1 commands
eksctl commands
1 commands
genpmk commands
1 commands
gixy-next commands
1 commands
golangci-lint commands
1 commands
golangci-lint
Fast Go linter aggregator
golangci-lint run
hash commands
1 commands
holehe commands
1 commands
impacket-smbclient commands
1 commands
impacket-smbclient
generic SMB client for listing shares and files, uploading
impacket-smbclient [domain]/[user]:[password]@[target]
keyctl commands
1 commands
kubeaudit commands
1 commands
msfvenom commands
1 commands
pkcs11-tool commands
1 commands
pkcs11-tool
Manage PKCS#11 cryptographic tokens and smart cards
pkcs11-tool --list-token-slots
pkg commands
1 commands
rtgen commands
1 commands
runcon commands
1 commands
secon commands
1 commands
session commands
1 commands
pam_selinux
PAM module to set the default SELinux security context
session required pam_selinux.so
sestatus commands
1 commands
ss-server commands
1 commands
systemd-cryptenroll commands
1 commands
systemd-cryptenroll
Enroll LUKS2 disk unlock methods
systemd-cryptenroll --password [/dev/luks_device]
tshark commands
1 commands
vlock commands
1 commands
sudo aa-audit [profile_name]
权限或系统影响较大，执行前请核对目标。
sudo aa-cleanprof [profile_name]
权限或系统影响较大，执行前请核对目标。
sudo aa-complain [path/to/profile]
权限或系统影响较大，执行前请核对目标。
sudo aa-disable [path/to/profile]
权限或系统影响较大，执行前请核对目标。
sudo aa-enforce [path/to/profile]
权限或系统影响较大，执行前请核对目标。
sudo aa-genprof [/path/to/program]
权限或系统影响较大，执行前请核对目标。
sudo aa-logprof
权限或系统影响较大，执行前请核对目标。
sudo aa-mergeprof [file1] [file2]
权限或系统影响较大，执行前请核对目标。
aa-notify --since-last
复制后可按需替换文件名、目录或参数。
sudo aa-teardown
权限或系统影响较大，执行前请核对目标。
sudo aa-unconfined
权限或系统影响较大，执行前请核对目标。
abrt-action-analyze-backtrace
复制后可按需替换文件名、目录或参数。
sudo airbase-ng -e "[FakeSSID]" -c [6] [wlan0mon]
权限或系统影响较大，执行前请核对目标。
aircrack-ng -w [wordlist.txt] [capture.cap]
复制后可按需替换文件名、目录或参数。
airdecap-ng -w [hex_key] [capture.cap]
复制后可按需替换文件名、目录或参数。
sudo aireplay-ng -0 [5] -a [AP_BSSID] -c [CLIENT_MAC] [wlan0mon]
权限或系统影响较大，执行前请核对目标。
sudo airmon-ng
权限或系统影响较大，执行前请核对目标。
sudo airodump-ng-oui-update
权限或系统影响较大，执行前请核对目标。
sudo airodump-ng [wlan0mon]
权限或系统影响较大，执行前请核对目标。
airolib-ng [database.db] --init
复制后可按需替换文件名、目录或参数。
sudo airserv-ng -d [wlan0mon] -c [6] -p [666]
权限或系统影响较大，执行前请核对目标。
amap -b [192.168.1.1] [80]
复制后可按需替换文件名、目录或参数。
amass track -d [example.com]
复制后可按需替换文件名、目录或参数。
androguard analyze [app.apk]
复制后可按需替换文件名、目录或参数。
sudo angryoxide -i [wlan0]
权限或系统影响较大，执行前请核对目标。
ansible-lint [playbook.yml]
复制后可按需替换文件名、目录或参数。
apgbfm -f [filter.bf] -d [dictionary.txt]
复制后可按需替换文件名、目录或参数。
apkeep -a [com.example.app] .
复制后可按需替换文件名、目录或参数。
apkleaks -f [app.apk]
复制后可按需替换文件名、目录或参数。
apksigner sign --ks [keystore.jks] [app.apk]
复制后可按需替换文件名、目录或参数。
sudo aa-status
权限或系统影响较大，执行前请核对目标。
sudo apparmor_parser -a [profile_file]
权限或系统影响较大，执行前请核对目标。
sudo apptainer config fakeroot --add [username]
权限或系统影响较大，执行前请核对目标。
apptainer sign [path/to/image.sif]
复制后可按需替换文件名、目录或参数。
man apt-secure
复制后可按需替换文件名、目录或参数。
echo -n "password" | argon2 [salt] -e
涉及管道、覆盖或删除，执行前请先确认路径和参数。
arjun -u [https://example.com/page]
复制后可按需替换文件名、目录或参数。
sudo arpspoof -i wlan0 host_ip
权限或系统影响较大，执行前请核对目标。
sudo aspell-autobuildhash
权限或系统影响较大，执行前请核对目标。
assetfinder [example.com]
复制后可按需替换文件名、目录或参数。
attr -s [attribute_name] -V [value] [path/to/file]
复制后可按需替换文件名、目录或参数。
sudo auditd
权限或系统影响较大，执行前请核对目标。
auggie
复制后可按需替换文件名、目录或参数。
sudo ausearch -m avc
权限或系统影响较大，执行前请核对目标。
authelia validate-config --config [config.yml]
复制后可按需替换文件名、目录或参数。
sudo autorecon 192.168.1.1
权限或系统影响较大，执行前请核对目标。
aws accessanalyzer list-analyzers
复制后可按需替换文件名、目录或参数。
aws acm-pca create-certificate-authority --certificate-authority-configuration [file://config.json] --certificate-authority-type ROOT
复制后可按需替换文件名、目录或参数。
aws autoscaling create-auto-scaling-group --auto-scaling-group-name [my-asg] --launch-template LaunchTemplateId=[lt-12345] --min-size [1] --max-size [5] --vpc-zone-identifier "[subnet-abc,subnet-def]"
复制后可按需替换文件名、目录或参数。
aws cloudtrail lookup-events --lookup-attributes AttributeKey=Username,AttributeValue=[user@example.com]
复制后可按需替换文件名、目录或参数。
aws dynamodb create-table --table-name [my-table] --attribute-definitions AttributeName=id,AttributeType=S --key-schema AttributeName=id,KeyType=HASH --billing-mode PAY_PER_REQUEST
复制后可按需替换文件名、目录或参数。
aws ec2 run-instances --image-id [ami-0c55b159cbfafe1f0] --instance-type [t2.micro] --key-name [my-key]
复制后可按需替换文件名、目录或参数。
aws eks create-cluster --name [my-cluster] --role-arn [arn:aws:iam::account:role/eks-role] --resources-vpc-config subnetIds=[subnet-1],[subnet-2],securityGroupIds=[sg-123]
复制后可按需替换文件名、目录或参数。
aws-google-auth
复制后可按需替换文件名、目录或参数。
aws iam create-user --user-name [my-user]
复制后可按需替换文件名、目录或参数。
aws iot list-things
复制后可按需替换文件名、目录或参数。
aws sts get-caller-identity
复制后可按需替换文件名、目录或参数。
aws-vault add [profile-name]
权限或系统影响较大，执行前请核对目标。
aws ec2 describe-vpcs
复制后可按需替换文件名、目录或参数。
az acr create -n [registry-name] -g [resource-group] --sku [Standard]
复制后可按需替换文件名、目录或参数。
az advisor recommendation list
复制后可按需替换文件名、目录或参数。
az apim create --name [MyApim] --resource-group [MyResourceGroup] --publisher-email [email@domain.com] --publisher-name [MyCompany] --location [eastus]
复制后可按需替换文件名、目录或参数。
az devops configure --defaults organization=[https://dev.azure.com/contoso] project=[ContosoWebApp]
复制后可按需替换文件名、目录或参数。
az network dns zone create -g [resource-group] --name [example.com]
复制后可按需替换文件名、目录或参数。
az storage blob upload -f [/path/to/file] -c [container-name] -n [blob-name] --account-name [account]
复制后可按需替换文件名、目录或参数。
b2sum [file]
复制后可按需替换文件名、目录或参数。
b3sum [file]
复制后可按需替换文件名、目录或参数。
beef-xss
复制后可按需替换文件名、目录或参数。
beef-xss
复制后可按需替换文件名、目录或参数。
besside-ng [wlan0mon]
复制后可按需替换文件名、目录或参数。
bettercap -iface [eth0]
复制后可按需替换文件名、目录或参数。
binwalk [firmware.bin]
复制后可按需替换文件名、目录或参数。
bloodhound-python -d [domain.local] -u [username] -p [password] -ns [dc_ip] -c all
复制后可按需替换文件名、目录或参数。
bloodhound
复制后可按需替换文件名、目录或参数。
boltctl
复制后可按需替换文件名、目录或参数。
boltd
复制后可按需替换文件名、目录或参数。
borg init --encryption=[repokey] [/path/to/repo]
复制后可按需替换文件名、目录或参数。
bpftool prog list
复制后可按需替换文件名、目录或参数。
brave
复制后可按需替换文件名、目录或参数。
btshowmetainfo [file.torrent]
复制后可按需替换文件名、目录或参数。
bwrap --ro-bind /usr /usr --symlink usr/lib64 /lib64 --proc /proc --dev /dev --unshare-pid [command]
复制后可按需替换文件名、目录或参数。
bun audit
复制后可按需替换文件名、目录或参数。
bun pm hash
复制后可按需替换文件名、目录或参数。
bun pm trust [package1] [package2]
复制后可按需替换文件名、目录或参数。
bundletool dump manifest --bundle=[app.aab]
复制后可按需替换文件名、目录或参数。
burpsuite
复制后可按需替换文件名、目录或参数。
burpsuite
复制后可按需替换文件名、目录或参数。
caddy run
复制后可按需替换文件名、目录或参数。
caligula burn [path/to/image.iso]
复制后可按需替换文件名、目录或参数。
getcap [/path/to/binary]
复制后可按需替换文件名、目录或参数。
cargo version
复制后可按需替换文件名、目录或参数。
cat [domains.txt] | cariddi
涉及管道、覆盖或删除，执行前请先确认路径和参数。
certutil -L -d [~/.pki/nssdb]
复制后可按需替换文件名、目录或参数。
chage -l username
复制后可按需替换文件名、目录或参数。
chainctl auth login
复制后可按需替换文件名、目录或参数。
sudo chattr +i path/to/file
权限或系统影响较大，执行前请核对目标。
sudo chcat -L
权限或系统影响较大，执行前请核对目标。
ls -lZ path/to/file
复制后可按需替换文件名、目录或参数。
check-support-status
复制后可按需替换文件名、目录或参数。
checkov -d [path/to/directory]
复制后可按需替换文件名、目录或参数。
sudo checkrestart
权限或系统影响较大，执行前请核对目标。
checksec --file=[path/to/binary]
复制后可按需替换文件名、目录或参数。
chmod +x [script.sh]
权限或系统影响较大，执行前请核对目标。
chntpw -l [path/to/sam_file]
复制后可按需替换文件名、目录或参数。
cifs.idmap --help
复制后可按需替换文件名、目录或参数。
cifscreds add [server_hostname]
权限或系统影响较大，执行前请核对目标。
clef init
复制后可按需替换文件名、目录或参数。
cloudsploit scan
复制后可按需替换文件名、目录或参数。
cntlm -c [/etc/cntlm.conf]
复制后可按需替换文件名、目录或参数。
cockpit-desktop [url] [SSH_host]
复制后可按需替换文件名、目录或参数。
cockpit-tls --port [port]
复制后可按需替换文件名、目录或参数。
coderabbit
复制后可按需替换文件名、目录或参数。
codesign -s "[Developer ID]" [MyApp.app]
复制后可按需替换文件名、目录或参数。
codex
复制后可按需替换文件名、目录或参数。
composer audit
复制后可按需替换文件名、目录或参数。
conda notices
复制后可按需替换文件名、目录或参数。
container-diff analyze [image:tag]
复制后可按需替换文件名、目录或参数。
cosign sign [registry/image@sha256:digest]
复制后可按需替换文件名、目录或参数。
cowpatty -f [wordlist.txt] -r [capture.cap] -s [SSID]
复制后可按需替换文件名、目录或参数。
crackmapexec smb [192.168.1.0/24] -u [user] -p [password] --shares
复制后可按需替换文件名、目录或参数。
crane catalog [registry]
复制后可按需替换文件名、目录或参数。
crc32 [path/to/file]
复制后可按需替换文件名、目录或参数。
openssl crl -in [crl.pem] -text -noout
复制后可按需替换文件名、目录或参数。
crunch [4] [6]
复制后可按需替换文件名、目录或参数。
dalfox url [https://example.com?q=test]
复制后可按需替换文件名、目录或参数。
darkhttpd .
复制后可按需替换文件名、目录或参数。
db_load -T -t hash [database.db] < [data.txt]
复制后可按需替换文件名、目录或参数。
dbus-daemon --config-file [path/to/file]
复制后可按需替换文件名、目录或参数。
dcfldd if=[/dev/sda] of=[disk.img]
权限或系统影响较大，执行前请核对目标。
dch "[changelog message]"
复制后可按需替换文件名、目录或参数。
debsecan
复制后可按需替换文件名、目录或参数。
pip install deflect-one
复制后可按需替换文件名、目录或参数。
deno run [script.ts]
复制后可按需替换文件名、目录或参数。
d2j-dex2jar [classes.dex]
复制后可按需替换文件名、目录或参数。
dexdump [classes.dex]
复制后可按需替换文件名、目录或参数。
dexter -i [classes.dex]
复制后可按需替换文件名、目录或参数。
dillo
复制后可按需替换文件名、目录或参数。
dirac "[describe the task]"
复制后可按需替换文件名、目录或参数。
eval "$(direnv hook bash)"
复制后可按需替换文件名、目录或参数。
dirsearch -u [https://example.com]
复制后可按需替换文件名、目录或参数。
disable [builtin_name]
复制后可按需替换文件名、目录或参数。
distccd --daemon
复制后可按需替换文件名、目录或参数。
dmitry -w [domain.com]
复制后可按需替换文件名、目录或参数。
dnf changelog [package]
复制后可按需替换文件名、目录或参数。
dnsenum [domain.com]
复制后可按需替换文件名、目录或参数。
dnsrecon -d [example.com]
复制后可按需替换文件名、目录或参数。
cat [domains.txt] | dnsx -a
涉及管道、覆盖或删除，执行前请先确认路径和参数。
doas [command]
复制后可按需替换文件名、目录或参数。
dockdiver -u [username]
复制后可按需替换文件名、目录或参数。
docker buildx version
复制后可按需替换文件名、目录或参数。
docker network ls
复制后可按需替换文件名、目录或参数。
doctl databases firewalls list [cluster_id]
复制后可按需替换文件名、目录或参数。
doctl databases maintenance-window get [cluster_id]
复制后可按需替换文件名、目录或参数。
doctl databases user list [cluster_id]
复制后可按需替换文件名、目录或参数。
dolt blame [table_name]
复制后可按需替换文件名、目录或参数。
dpkg-deb -I [path/to/file.deb]
复制后可按需替换文件名、目录或参数。
driftnet -i [eth0]
复制后可按需替换文件名、目录或参数。
sudo dsniff -i [eth0]
权限或系统影响较大，执行前请核对目标。
dumpcap -i [eth0] -w [capture.pcapng]
复制后可按需替换文件名、目录或参数。
dvc add [data.csv]
权限或系统影响较大，执行前请核对目标。
dvc commit
复制后可按需替换文件名、目录或参数。
dvc diff
复制后可按需替换文件名、目录或参数。
sudo easside-ng -f [wlan0] -s [buddy_ip]
权限或系统影响较大，执行前请核对目标。
openssl ec -in [key.pem] -text -noout
复制后可按需替换文件名、目录或参数。
editcap -r [input.pcap] [output.pcap] [1-100]
复制后可按需替换文件名、目录或参数。
eksctl create cluster --name [cluster_name]
复制后可按需替换文件名、目录或参数。
elasticsearch-certutil ca
复制后可按需替换文件名、目录或参数。
elasticsearch-users list
复制后可按需替换文件名、目录或参数。
ettercap -G
复制后可按需替换文件名、目录或参数。
evil-winrm -i [target_ip] -u [username] -p [password]
复制后可按需替换文件名、目录或参数。
exo compute instance list
复制后可按需替换文件名、目录或参数。
exo compute instance list
复制后可按需替换文件名、目录或参数。
expect [path/to/file]
复制后可按需替换文件名、目录或参数。
sudo extrace
权限或系统影响较大，执行前请核对目标。
extrepo search keyword
复制后可按需替换文件名、目录或参数。
faillock
复制后可按需替换文件名、目录或参数。
fastd --config [/etc/fastd/fastd.conf]
复制后可按需替换文件名、目录或参数。
sudo fatrace
权限或系统影响较大，执行前请核对目标。
fclones group [directory]
复制后可按需替换文件名、目录或参数。
fcrackzip [-b|--brute-force] [-l|--length] 4-8 [-c|--charset] aA1 [archive]
涉及管道、覆盖或删除，执行前请先确认路径和参数。
feroxbuster --url [https://example.com]
复制后可按需替换文件名、目录或参数。
ffuf -u [https://target.com/FUZZ] -w [wordlist.txt]
复制后可按需替换文件名、目录或参数。
fido2-token -L
复制后可按需替换文件名、目录或参数。
findomain -t [example.com]
复制后可按需替换文件名、目录或参数。
sudo firecfg
权限或系统影响较大，执行前请核对目标。
fixfiles restore
复制后可按需替换文件名、目录或参数。
fixmynpm doctor
复制后可按需替换文件名、目录或参数。
flarectl dns list --zone [example.com]
复制后可按需替换文件名、目录或参数。
flask-unsign --decode --cookie "[cookie_value]"
复制后可按需替换文件名、目录或参数。
flatpak remote-info [remote_name] [com.example.app]
复制后可按需替换文件名、目录或参数。
flatpak update
复制后可按需替换文件名、目录或参数。
fluxion
复制后可按需替换文件名、目录或参数。
forge
复制后可按需替换文件名、目录或参数。
fossa analyze
复制后可按需替换文件名、目录或参数。
frida [process_name]
复制后可按需替换文件名、目录或参数。
fswebcam [image.jpg]
复制后可按需替换文件名、目录或参数。
gau [example.com]
复制后可按需替换文件名、目录或参数。
gcloud kms decrypt --ciphertext-file=[encrypted.enc] --plaintext-file=[decrypted.txt] --key=[key] --keyring=[keyring] --location=[global]
复制后可按需替换文件名、目录或参数。
genid
复制后可按需替换文件名、目录或参数。
openssl genpkey -algorithm RSA -out [key.pem]
复制后可按需替换文件名、目录或参数。
genpmk -f [wordlist.txt] -d [hashfile] -s [SSID]
复制后可按需替换文件名、目录或参数。
getenforce
复制后可按需替换文件名、目录或参数。
getfattr -d [path/to/file]
复制后可按需替换文件名、目录或参数。
GetNPUsers.py [DOMAIN]/[username]:[password] -request -format hashcat -outputfile [hashes.txt]
复制后可按需替换文件名、目录或参数。
giskismet -x [kismet-output.netxml]
复制后可按需替换文件名、目录或参数。
git agecrypt init
复制后可按需替换文件名、目录或参数。
git annotate [file]
复制后可按需替换文件名、目录或参数。
git brv
复制后可按需替换文件名、目录或参数。
git cherry-pick [commit]
复制后可按需替换文件名、目录或参数。
echo "[message]" | git commit-tree [tree_hash]
涉及管道、覆盖或删除，执行前请先确认路径和参数。
git commit -m "[message]"
复制后可按需替换文件名、目录或参数。
git create-branch [branch_name]
复制后可按需替换文件名、目录或参数。
git config credential.helper cache
复制后可按需替换文件名、目录或参数。
git config credential.helper store
复制后可按需替换文件名、目录或参数。
git daemon --base-path=[/path/to/repos]
复制后可按需替换文件名、目录或参数。
git get-tar-commit-id < [archive.tar]
复制后可按需替换文件名、目录或参数。
git hash-object [file]
复制后可按需替换文件名、目录或参数。
git log
复制后可按需替换文件名、目录或参数。
git ls-tree HEAD | git mktree
涉及管道、覆盖或删除，执行前请先确认路径和参数。
git show-index < [.idx file]
复制后可按需替换文件名、目录或参数。
git unpack-file [blob_hash]
复制后可按需替换文件名、目录或参数。
git verify-commit [commit]
复制后可按需替换文件名、目录或参数。
git verify-pack .git/objects/pack/pack-hash.idx
复制后可按需替换文件名、目录或参数。
git verify-tag [tag]
复制后可按需替换文件名、目录或参数。
gixy-next [/etc/nginx/nginx.conf]
复制后可按需替换文件名、目录或参数。
gixy [/etc/nginx/nginx.conf]
复制后可按需替换文件名、目录或参数。
gksu -u [userid] [command]
复制后可按需替换文件名、目录或参数。
gksudo -u [userid] [command]
权限或系统影响较大，执行前请核对目标。
gmssl sm2keygen -pass [password] -out [key.pem]
复制后可按需替换文件名、目录或参数。
gnucash-cli --quotes get [file.gnucash]
复制后可按需替换文件名、目录或参数。
gobuster dir -u [https://example.com] -w [wordlist.txt]
复制后可按需替换文件名、目录或参数。
golangci-lint run
复制后可按需替换文件名、目录或参数。
goldeneye.py [url]
复制后可按需替换文件名、目录或参数。
./gophish
复制后可按需替换文件名、目录或参数。
gpg2 --full-generate-key
权限或系统影响较大，执行前请核对目标。
cat /etc/security/group.conf
复制后可按需替换文件名、目录或参数。
cat /etc/group
复制后可按需替换文件名、目录或参数。
sudo grpck
权限或系统影响较大，执行前请核对目标。
sudo grpconv
权限或系统影响较大，执行前请核对目标。
sudo grub2-mkpasswd-pbkdf2
权限或系统影响较大，执行前请核对目标。