First Merge of my own revisions into Main (#15)

I've made a large amount of restructuring changes to my fork. Please
consider this a baseline to begin further revisions and cleanup.
This commit is contained in:
Jacob Kraniak 2026-05-27 11:45:25 -04:00 committed by GitHub
commit 310a950e80
No known key found for this signature in database
GPG Key ID: B5690EEEBB952194
64 changed files with 4449 additions and 3429 deletions

View File

@ -1,46 +1,5 @@
# Contributor Covenant Code of Conduct
# Contributor Code of Conduct
## Our Pledge
_be excellent to each other_
In the interest of fostering an open and welcoming environment, we as contributors and maintainers pledge to making participation in our project and our community a harassment-free experience for everyone, regardless of age, body size, disability, ethnicity, gender identity and expression, level of experience, nationality, personal appearance, race, religion, or sexual identity and orientation.
## Our Standards
Examples of behavior that contributes to creating a positive environment include:
* Using welcoming and inclusive language
* Being respectful of differing viewpoints and experiences
* Gracefully accepting constructive criticism
* Focusing on what is best for the community
* Showing empathy towards other community members
Examples of unacceptable behavior by participants include:
* The use of sexualized language or imagery and unwelcome sexual attention or advances
* Trolling, insulting/derogatory comments, and personal or political attacks
* Public or private harassment
* Publishing others' private information, such as a physical or electronic address, without explicit permission
* Other conduct which could reasonably be considered inappropriate in a professional setting
## Our Responsibilities
Project maintainers are responsible for clarifying the standards of acceptable behavior and are expected to take appropriate and fair corrective action in response to any instances of unacceptable behavior.
Project maintainers have the right and responsibility to remove, edit, or reject comments, commits, code, wiki edits, issues, and other contributions that are not aligned to this Code of Conduct, or to ban temporarily or permanently any contributor for other behaviors that they deem inappropriate, threatening, offensive, or harmful.
## Scope
This Code of Conduct applies both within project spaces and in public spaces when an individual is representing the project or its community. Examples of representing a project or community include using an official project e-mail address, posting via an official social media account, or acting as an appointed representative at an online or offline event. Representation of a project may be further defined and clarified by project maintainers.
## Enforcement
Instances of abusive, harassing, or otherwise unacceptable behavior may be reported by contacting the project team at trimstray@gmail.com. The project team will review and investigate all complaints, and will respond in a way that it deems appropriate to the circumstances. The project team is obligated to maintain confidentiality with regard to the reporter of an incident. Further details of specific enforcement policies may be posted separately.
Project maintainers who do not follow or enforce the Code of Conduct in good faith may face temporary or permanent repercussions as determined by other members of the project's leadership.
## Attribution
This Code of Conduct is adapted from the [Contributor Covenant][homepage], version 1.4, available at [http://contributor-covenant.org/version/1/4][version]
[homepage]: http://contributor-covenant.org
[version]: http://contributor-covenant.org/version/1/4/
thank you for coming to my Ted talk

2
.github/FUNDING.yml vendored
View File

@ -1,2 +0,0 @@
open_collective: trimstray
github: trimstray

110
.github/workflows/ai-pr-review vendored Normal file
View File

@ -0,0 +1,110 @@
name: Grok AI PR Review
on:
pull_request:
types: [opened, synchronize, reopened]
permissions:
pull-requests: write
contents: read
jobs:
review:
runs-on: ubuntu-latest
steps:
- name: Checkout code
uses: actions/checkout@v4
with:
fetch-depth: 0 # Needed for git diff
- name: Set up Python
uses: actions/setup-python@v5
with:
python-version: '3.12'
- name: Install dependencies
run: |
python -m pip install --upgrade pip
pip install openai requests
- name: Run Grok Review
env:
XAI_API_KEY: ${{ secrets.XAI_API_KEY }}
GROK_MODEL: ${{ vars.GROK_MODEL || 'grok-code-fast-1' }} # fallback to fast coding model
run: |
python - << 'EOF'
import os
import requests
from openai import OpenAI
# Use OpenAI SDK with custom base URL for xAI compatibility
client = OpenAI(
api_key=os.environ["XAI_API_KEY"],
base_url="https://api.x.ai/v1"
)
# Get PR diff via GitHub API (or git diff origin/${{ github.base_ref }}...HEAD)
repo = "${{ github.repository }}"
pr_number = ${{ github.event.pull_request.number }}
token = os.environ.get("GITHUB_TOKEN") # built-in
headers = {
"Accept": "application/vnd.github.v3.diff",
"Authorization": f"token {token}"
}
diff_url = f"https://api.github.com/repos/{repo}/pulls/{pr_number}"
diff_response = requests.get(diff_url, headers=headers)
diff_text = diff_response.text
if not diff_text.strip():
print("No diff found or empty PR.")
exit(0)
# Truncate if too long (Grok context is large, but save tokens)
max_chars = 30000
if len(diff_text) > max_chars:
diff_text = diff_text[:max_chars] + "\n\n[Diff truncated; full context may be larger]"
# Strong, repo-specific prompt (tune this!)
prompt = f"""
You are a senior security & knowledge-base curator reviewing changes to 'The Book of Secret Knowledge' — a curated list of cybersecurity, pentesting, CLI/GUI tools, shell tricks, and secret-finding resources.
Review this PR diff carefully:
{diff_text}
Provide concise, actionable feedback in Markdown:
- **Summary**: One-sentence overview of changes
- **Strengths**: What is good (e.g., new valuable resources, clean formatting)
- **Issues/Suggestions**:
- Formatting/consistency (links, headings, lists)
- Potential inaccuracies or outdated info
- Security risks (e.g., dangerous commands without warnings)
- Improvements (clarity, better structure, missing cross-references)
- **Overall**: Approve, Request changes, or Comment (with emoji rating)
Be strict but constructive. Flag anything promotional/spammy.
"""
response = client.chat.completions.create(
model=os.environ["GROK_MODEL"],
messages=[
{"role": "system", "content": "You are an expert code/knowledge reviewer."},
{"role": "user", "content": prompt}
],
temperature=0.4, # lower for focused reviews
max_tokens=1200
)
review_body = response.choices[0].message.content.strip()
# Post as comment
comment_url = f"https://api.github.com/repos/{repo}/issues/{pr_number}/comments"
comment_headers = {
"Accept": "application/vnd.github+json",
"Authorization": f"Bearer {token}",
"X-GitHub-Api-Version": "2022-11-28"
}
payload = {"body": f"### Grok AI Review\n\n{review_body}"}
requests.post(comment_url, json=payload, headers=comment_headers)
print("Review posted.")
EOF

29
.github/workflows/link-check.yml vendored Normal file
View File

@ -0,0 +1,29 @@
name: Check Markdown Links
on:
push:
branches: [ "JK_Revisions" ]
pull_request:
branches: [ "JK_Revisions" ]
schedule:
- cron: "0 12 * * 1" # Weekly on Mondays at 12:00 UTC
workflow_dispatch: # Manual trigger
jobs:
link-check:
runs-on: ubuntu-latest
steps:
- name: Checkout repository
uses: actions/checkout@v4
with:
fetch-depth: 0
- name: Run Markdown Link Checker
uses: gaurav-nelson/github-action-markdown-link-check@v1
with:
use-verbose-mode: "yes"
check-modified-files-only: "false"
folder-path: "."
file-extension: ".md"
config-file: ".markdown-link-check.json" # Create this for ignores
max-depth: 2 # Adjust as needed

22
.github/workflows/markdown-link.yml vendored Normal file
View File

@ -0,0 +1,22 @@
name: Lint Markdown
on:
push:
branches: [ "*" ]
pull_request:
branches: [ master ]
jobs:
lint:
runs-on: ubuntu-latest
steps:
- uses: actions/checkout@v4
with:
fetch-depth: 0 # needed for some linters
- name: Lint Markdown files
uses: nosborn/github-action-markdown-cli@v3
with:
files: .
config_file: ".markdownlint.json"
ignore_path: ".markdownlintignore"

33
.github/workflows/pre-commit.yml vendored Normal file
View File

@ -0,0 +1,33 @@
name: Pre-commit Checks
on:
push:
branches: [ "JK_Revisions" ]
pull_request:
branches: [ "JK_Revisions" ]
schedule:
- cron: "0 8 * * 1" # Weekly on Mondays at 08:00 UTC
workflow_dispatch: # Allows manual trigger from Actions tab
jobs:
pre-commit:
runs-on: ubuntu-latest
steps:
- name: Checkout repository
uses: actions/checkout@v4
with:
fetch-depth: 0
- name: Set up Python
uses: actions/setup-python@v5
with:
python-version: '3.12'
- name: Install pre-commit
run: |
python -m pip install --upgrade pip
pip install pre-commit
- name: Run pre-commit hooks
run: pre-commit run --all-files --show-diff-on-failure

33
.github/workflows/update-toc.yml vendored Normal file
View File

@ -0,0 +1,33 @@
name: Update TOC
on:
push:
branches: [ JK_Revisions ]
paths:
- '**.md' # Trigger on any markdown change
jobs:
update-toc:
runs-on: ubuntu-latest
steps:
- uses: actions/checkout@v4
with:
fetch-depth: 0 # Important for commit history
- name: Install doctoc
run: npm install -g doctoc
- name: Run doctoc on README and INDEX files
run: |
doctoc README.md
doctoc tools/_INDEX.md # or tools/INDEX.md after rename
doctoc documentation/INDEX.md
# Add more files as needed, e.g.:
# doctoc tools/security/INDEX.md
- name: Commit changes if any
uses: stefanzweifel/git-auto-commit-action@v5
with:
commit_message: "chore: auto-update TOC [skip ci]"
branch: JK_Revisions
skip_dirty_check: false

2
.gitignore vendored Normal file
View File

@ -0,0 +1,2 @@
/.obsidian

16
.markdown-link-check.json Normal file
View File

@ -0,0 +1,16 @@
{
"ignorePatterns": [
{ "pattern": "^https?://stackoverflow.com" },
{ "pattern": "^https?://github.com/.*compare" },
{ "pattern": "^#" },
{ "pattern": "\\.md$" },
{ "pattern": "^https?://(www\\.)?github.com" }
],
"replacementPatterns": [],
"timeout": "10s",
"retryOn429": true,
"retryCount": 3,
"httpHeaders": [
{ "name": "User-Agent", "value": "markdown-link-check" }
]
}

30
.pre-commit-config.yaml Normal file
View File

@ -0,0 +1,30 @@
repos:
- repo: https://github.com/pre-commit/pre-commit-hooks
rev: v5.0.0
hooks:
- id: trailing-whitespace
- id: end-of-file-fixer
- id: check-yaml
- id: check-added-large-files
args: ['--maxkb=500']
- repo: https://github.com/igorshubovych/markdownlint-cli
rev: v0.44.0
hooks:
- id: markdownlint
args: ["--config", ".markdownlint.json"]
- repo: https://github.com/tcort/markdown-link-check
rev: v3.13.7
hooks:
- id: markdown-link-check
args: ["--config", ".markdown-link-check.json"]
- repo: local
hooks:
- id: validate-tool-tables
name: Validate Tool Table Schema
entry: python scripts/validate-tool-tables.py
language: python
files: ^tools/.*\.md$
types: [markdown]

10
Contibuting.md Normal file
View File

@ -0,0 +1,10 @@
I've recently started actively developing a fork of trimstray/the-book-of-secret-knowledge on my branch JK_Revisions<a href="https://github.com/jacob-kraniak/the-book-of-secret-knowledge/tree/JK_Revisions" target="_blank" rel="noopener noreferrer nofollow"></a>.
This original repo has been inactive since late 2024 with over 100 open PRs, and your PR shows updates reflecting an interest in ongoing maintenance. I'd love to centralize efforts to avoid fragmentation. My branch already has linting setup, GitHub Actions for PR labeling, .gitignore/CONTRIBUTING.md improvements, and markdown placeholders ready for content.
If you have changes/PRs from earlier (or ongoing work), would you consider submitting them as PRs or Issues to my fork? We can coordinate there, keep momentum going, and if trimstray returns, push a clean consolidation back upstream.
Happy to discuss direction, merge strategy, or even make you a collaborator if it aligns.
Looking forward to your thoughts!
Jacob

View File

@ -1,6 +1,6 @@
MIT License
Copyright (c) 2017 trimstray
Copyright (c) 2026 by Jacob K
Permission is hereby granted, free of charge, to any person obtaining a copy
of this software and associated documentation files (the "Software"), to deal

3462
README.md

File diff suppressed because it is too large Load Diff

View File

@ -0,0 +1,134 @@
### Revised SOP-Navigation-and-Layout.md (full suggested content)
# SOP: Repository Layout, Navigation & Index Files
**Purpose**
This SOP defines the standard structure, naming conventions, linking rules, and maintenance practices for the *Book of Secret Knowledge* fork (JK_Revisions branch). The goal is to keep the repo highly navigable on GitHub, consistent across folders, and easy to extend as new categories/tools are added.
**Last Updated**: March 2026
**Applies to**: All folders, especially `tools/`, `documentation/`, and root-level files
## 1. Core Principles (Updated)
- **Navigation-first design** — Every folder containing subfolders or >2–3 .md files **must** have an `INDEX.md`.
- **Recursive TOC in every INDEX.md** — Show the full subtree (nested folders + files) using indented, hyperlinked markdown lists. Use `<details>` + `<summary>` for collapsible deep sections to avoid overwhelming long pages.
- **Tabular lists preferred over full markdown tables** — For folder overviews / quick indexes use definition lists, bolded bullets, or simple indented pairs instead of | Name | Description | Link | tables.
- **Hyperlinks everywhere** — All files, folders, external sites, GitHub repos, and the schema must be clickable (relative links whenever possible).
- **Consistency over perfection** — Use the same patterns (naming, list styles, link formats) across the repo.
- **GitHub rendering** — Prefer native markdown (`<details>`, relative links, lists) over code blocks for interactive elements.
- **Tool tables only** — All tool/resource lists follow [TOOL-TABLE-SCHEMA.md](../TOOL-TABLE-SCHEMA.md) exactly (those remain proper tables).
## 2. Naming Conventions
- Navigation / overview file: **INDEX.md** (uppercase `I`) — preferred over README.md in content folders
Alternatives (legacy only): `_INDEX.md`, `00_index.md`
- Tool/resource list files: lowercase-with-dashes.md
e.g. `dns-tools.md`, `shell-one-liners.md`
- Personal section: `my-contributions.md` (keep at `tools/` root)
- Schema reference: `TOOL-TABLE-SCHEMA.md` (root level, never move)
**Rule**: No spaces in file/folder names (use `-` or `_`). Escape special characters in links when needed.
## 3. Folder-Level INDEX.md Structure (Recommended Template – Updated)
Every `INDEX.md` should follow this minimal layout:
# [Category Name] Index
Short 1–2 sentence purpose of this folder.
All tool tables in this section follow → [TOOL-TABLE-SCHEMA.md](../TOOL-TABLE-SCHEMA.md)
## Contents (Recursive Overview)
- **[Subfolder A](./subfolder-a/INDEX.md)** — brief one-line description of what it contains
- [file-one.md](./subfolder-a/file-one.md) — short note
- [file-two.md](./subfolder-a/file-two.md) — short note
- **[Nested Subfolder](./subfolder-a/nested/INDEX.md)** — purpose
- [deep-file.md](./subfolder-a/nested/deep-file.md)
- **[Subfolder B](./subfolder-b/INDEX.md)** — brief description
- ...
- **Standalone Files**
- [example-file.md](./example-file.md) — purpose / note
- [another.md](./another.md)
## Quick Navigation
- ↑ [Back to Parent Index](tools/INDEX.md) (or `../_INDEX.md` for legacy)
- ↑ [Back to Tools Root](../_INDEX.md) (adjust level as needed)
- ↑ [Repository Root](../../README.md)
**For deeper folders**, wrap large subtrees in:
```
<details>
<summary>Expand: Network Engineering subtree</summary>
- [diagnostics-troubleshooting/](./diagnostics-troubleshooting/INDEX.md)
- ...
</details>
```
This creates a recursive, explorable map without forcing the reader to click into every folder.
## 4. Top-Level README.md Requirements (Updated)
Near the top, include:
- Brief mission/fork statement
- Collapsible recursive-ish directory structure (use indented list with key folders hyperlinked; full recursion optional here to avoid bloat)
- **Quick Access** section using a simple tabular list (not full table)
Example:
```markdown
<details>
<summary>Repository Structure (click to expand)</summary>
- **[tools/](./tools/INDEX.md)** — main tool & resource collections
- [my-contributions.md](./tools/my-contributions.md)
- **[network-engineering/](./tools/network-engineering/INDEX.md)**
- **[security/](./tools/security/INDEX.md)**
- ...
- **[documentation/](./documentation/INDEX.md)** — guides, cheat sheets, learning
- [TOOL-TABLE-SCHEMA.md](./TOOL-TABLE-SCHEMA.md) — mandatory table format
- [SOP-Navigation-and-Layout.md](./SOP-Navigation-and-Layout.md)
</details>
### Quick Access
- **Tools Overview** → [tools/_INDEX.md](./tools/_INDEX.md) (or INDEX.md once renamed)
- **Documentation & Guides** → [documentation/INDEX.md](./documentation/INDEX.md)
- **Schema Rules** → [TOOL-TABLE-SCHEMA.md](./TOOL-TABLE-SCHEMA.md)
- **This SOP** → [SOP-Navigation-and-Layout.md](./SOP-Navigation-and-Layout.md)
```
## 5. Linking Rules (Mandatory – no change)
- Internal file: `[shell-one-liners.md](./manuals-howtos-guides/shell-one-liners.md)`
- Internal folder: `[diagnostics-troubleshooting/](./network-engineering/diagnostics-troubleshooting/)`
- Schema: `[TOOL-TABLE-SCHEMA.md](../TOOL-TABLE-SCHEMA.md)`
- Upward: `↑ [Tools Overview](../_INDEX.md)` or `↑ [Root](../../README.md)`
## 6. Maintenance Checklist (When Adding/Editing – Updated)
- Create/update `INDEX.md` in every qualifying folder
- Build recursive contents list with relative hyperlinks
- Use tabular lists (bold bullets / definition style) instead of tables for index overviews
- Ensure tool-list .md files match [TOOL-TABLE-SCHEMA.md](../TOOL-TABLE-SCHEMA.md) exactly
- Update parent `INDEX.md` and root `README.md` when structure changes
- Use `<details>` liberally for deep recursion
- Commit message example: "feat: recursive INDEX.md for security/; tabular list conversion"
## 7. Future Improvements (Nice-to-Have)
- Rename `tools/_INDEX.md` → `tools/INDEX.md` for consistency
- Add item counts next to folders in recursive lists (e.g. `(12 tools)` )
- Consider a single `all-tools.md` A–Z list if repo becomes very large
- Explore GitHub Actions to auto-generate/update recursive INDEX files
Questions or deviations? Open an issue or PR referencing this SOP.
Happy building!

31
TOOL-TABLE-SCHEMA.md Normal file
View File

@ -0,0 +1,31 @@
# TOOL TABLE SCHEMA
Use this exact column order and formatting for all tool lists in the repository.
| Name | Vendor/Webpage | GitHub Repo | Brief Description | Tags | Latest Commit | Creation Date | Stars |
### Rules
- **Name**: plain text, consistent capitalization (match official project name / branding)
- **Vendor/Webpage**: official site URL or — (use — when primarily GitHub-based with no strong separate homepage)
- **GitHub Repo**: shortened markdown link in format `[owner/repo](https://github.com/owner/repo)` — only include if the project lives on GitHub
- **Brief Description**: exactly 1 sentence, <120 characters, ends with period.
- **Tags**: comma-separated lowercase tags in [brackets], 4–8 max; include functional + interface + scope + primary language(s) when relevant
- **Latest Commit**: `YYYY-MM-DD` preferred; or `~Month YYYY` (with optional note e.g. `(major release)` or `(security fix)`)
- **Creation Date** (new): repository creation date in `YYYY-MM-DD` format if GitHub-hosted; for very old / non-GitHub projects use earliest known public release year (e.g. `1991`) or approximate decade if exact date unavailable (e.g. `~mid-1990s`). Leave blank or use `—` if unknown/irrelevant.
- **Stars** (new): current GitHub star count in format `Xk` or `X.Yk` (e.g. `35.4k`, `812`) with optional "as of YYYY-MM" note if not very recent (e.g. `5.2k as of 2026-03`). Use `—` for non-GitHub projects.
### Guidance
- **Creation Date** is especially valuable for legacy / classic Unix tools, early security utilities, and projects from the 1990s–early 2000s to give historical perspective.
- **Stars** provides at-a-glance community adoption signal — useful for readers new to the field who want to prioritize widely trusted tools.
- When adding or updating entries, fetch Creation Date and Stars directly from the GitHub repo page or API if possible.
- For extremely old projects without GitHub presence (e.g. original tcpdump releases, early versions of OpenSSH), prefer the initial public release year in Creation Date and leave Stars as `—`.
### Example row (classic tool)
| Name | Vendor/Webpage | GitHub Repo | Brief Description | Tags | Latest Commit | Creation Date | Stars |
|------|----------------|-------------|-------------------|------|---------------|---------------|-------|
| Vim | — | [vim/vim](https://github.com/vim/vim) | Highly configurable text editor for efficiently creating and changing any kind of text. | editor, text, cli, sysadmin, c | 2026-03-01 (v9.1 patch) | 1991-11-02 | 35.4k |
This format keeps tables readable, adds meaningful context without clutter, and aligns with the goal of making the book more educational for beginners while respecting the heritage of many tools listed.

25
documentation/INDEX.md Normal file
View File

@ -0,0 +1,25 @@
# Documentation Index
Guides, cheat sheets, how-tos, manuals, learning resources, and reference material for operators, pentesters, and developers.
All tool/resource tables in this section follow → [TOOL-TABLE-SCHEMA.md](../TOOL-TABLE-SCHEMA.md)
## Contents
**learning-resources** — daily/ongoing knowledge sources, news aggregators, blogs worth following
- [daily-knowledge-news.md](./learning-resources/daily-knowledge-news.md) — curated feed of daily security/dev/ops articles & updates
**manuals-howtos-guides** — practical shell, CLI, and workflow manuals
- [shell-one-liners.md](./manuals-howtos-guides/shell-one-liners.md) — concise, copy-paste shell commands for common tasks
- [shell-tricks-functions.md](./manuals-howtos-guides/shell-tricks-functions.md) — advanced functions, patterns, and productivity tricks
**Other files**
- [other-cheat-sheets.md](./other-cheat-sheets.md) — miscellaneous / uncategorized cheat sheets
- [readme - to refactor.md](./readme%20-%20to%20refactor.md) — legacy notes (refactor pending)
## Quick Navigation
- ↑ [Back to Repository Root](../README.md)
- → [Tools Overview](../tools/INDEX.md)
- → [Schema Rules](../TOOL-TABLE-SCHEMA.md)
- → [Navigation SOP](../SOP-Navigation-and-Layout.md)

View File

@ -0,0 +1,20 @@
# Resources & Learning – Containers & Orchestration
| Name | Vendor/Webpage | GitHub Repo / Link | Brief Description | Tags | Latest Commit | Creation Date | Stars |
|------------------------------------|----------------|------------------------------------------------------------------------------------|---------------------------------------------------------------------------|-------------------------------------------|---------------|---------------|--------|
| docker-cheat-sheet | — | [wsargent/docker-cheat-sheet](https://github.com/wsargent/docker-cheat-sheet) | Quick reference cheat sheet covering most common Docker commands. | docker, cheat-sheet, learning | 2023-04-10 | 2015-02-20 | 5.8k |
| awesome-docker | — | [veggiemonk/awesome-docker](https://github.com/veggiemonk/awesome-docker) | Curated list of Docker projects, tools, tutorials, and resources. | docker, awesome, curated, resources | 2026-01-15 | 2015-05-12 | 24.6k |
| docker_practice | — | [yeasy/docker_practice](https://github.com/yeasy/docker_practice) | Learn Docker technologies with real DevOps practice examples. | docker, tutorial, practice, devops | 2025-10-01 | 2015-12-08 | 24.2k |
| labs | Docker | [docker/labs](https://github.com/docker/labs) | Collection of tutorials for using Docker with various tools and platforms.| docker, tutorial, labs | 2024-06-05 | 2015-04-22 | 11.3k |
| dockerfiles | — | [jessfraz/dockerfiles](https://github.com/jessfraz/dockerfiles) | Various personal Dockerfiles used on desktops and servers. | docker, dockerfile, examples | 2022-11-18 | 2015-01-15 | 13.1k |
| kubernetes-the-hard-way | — | [kelseyhightower/kubernetes-the-hard-way](https://github.com/kelseyhightower/kubernetes-the-hard-way) | Bootstrap Kubernetes the hard way (no scripts) on Google Cloud. | kubernetes, tutorial, bootstrap, hard | 2023-09-20 | 2016-09-01 | 36.4k |
| kubernetes-the-easy-way | — | [jamesward/kubernetes-the-easy-way](https://github.com/jamesward/kubernetes-the-easy-way) | Bootstrap Kubernetes the easy way on Google Cloud. | kubernetes, tutorial, bootstrap, easy | 2022-05-12 | 2017-02-14 | ~1.2k |
| cheatsheet-kubernetes-A4 | — | [dennyzhang/cheatsheet-kubernetes-A4](https://github.com/dennyzhang/cheatsheet-kubernetes-A4) | Kubernetes cheatsheets formatted for A4 printing. | kubernetes, cheat-sheet, reference | 2023-01-08 | 2017-06-30 | 6.7k |
| k8s-security | — | [kabachook/k8s-security](https://github.com/kabachook/k8s-security) | Kubernetes security notes, checklists, and best practices. | kubernetes, security, best-practices | 2025-07-10 | 2018-11-05 | 4.9k |
| kubernetes-production-best-practices (learnk8s) | https://learnk8s.io/production-best-practices/ | — | Checklists and best practices for production-ready Kubernetes clusters. | kubernetes, production, best-practices | — | 2019 | — |
| kubernetes-security-best-practice | — | [freach/kubernetes-security-best-practice](https://github.com/freach/kubernetes-security-best-practice) | Guide to Kubernetes security best practices. | kubernetes, security, guide | 2024-04-22 | 2018-03-15 | 3.8k |
| kubernetes-failure-stories | — | [hjacobs/kubernetes-failure-stories](https://github.com/hjacobs/kubernetes-failure-stories) | Compilation of public Kubernetes failure and horror stories. | kubernetes, failure, lessons, postmortem | 2023-10-30 | 2019-01-20 | 7.4k |
↑ [Back to Containers & Orchestration Documentation](./INDEX.md)
↑ [Back to Documentation](../INDEX.md)
↑ [Back to Root](/README.md)

View File

@ -0,0 +1 @@

View File

File diff suppressed because it is too large Load Diff

View File

@ -0,0 +1,28 @@
#!/usr/bin/env python3
"""
Tool Table Schema Validator
Enforces TOOL-TABLE-SCHEMA.md rules.
"""
import re
import sys
from pathlib import Path
def main():
errors = []
for md_file in Path('.').rglob('tools/**/*.md'):
content = md_file.read_text(encoding='utf-8', errors='ignore')
# Simple header check
if '| Name | Vendor/Webpage | GitHub Repo | Brief Description | Tags | Latest Commit | Creation Date | Stars |' in content:
# Count columns in rows
rows = re.findall(r'\|\s*[^|]+\s*\|', content)
for row in rows:
if row.count('|') != 9: # 8 columns + separators
errors.append(f"Invalid row in {md_file}")
if errors:
print('\n'.join(errors))
sys.exit(1)
print('✅ Tool tables validated.')
sys.exit(0)
if __name__ == "__main__":
main()

Binary file not shown.

Before

Width:  |  Height:  |  Size: 39 KiB

66
tools/INDEX.md Normal file
View File

@ -0,0 +1,66 @@
# Tools Index
Main collection of categorized tools, utilities, scanners, analyzers, clients, hardening guides, and more — grouped by discipline.
All tool tables in this section **must** follow → [TOOL-TABLE-SCHEMA.md](../TOOL-TABLE-SCHEMA.md) exactly.
## Contents (Recursive Overview)
- [my-contributions.md](./my-contributions.md) — personally vetted / added tools & notes (always growing)
**network-engineering** — networking, diagnostics, DNS, routing, BGP/OSPFIGP
<details>
<summary>Expand Network Engineering subtree</summary>
- **diagnostics-troubleshooting** — packet capture, tracing, debug tools
- **dns-dhc-ipam** — DNS, DHCP, IPAM related tools
- [dns-tools.md](./network-engineering/dns-dhc-ipam/dns-tools.md)
- **routing-bgp-ospf** — routing protocols, BGP looking glasses, route analysis
- [BGP & Routing Tools.md](./network-engineering/routing-bgp-ospf/BGP%20%26%20Routing%20Tools.md)
</details>
**security** — offensive, defensive, recon, vuln research, exploitation
<details>
<summary>Expand Security subtree</summary>
- **pentest-recon-enum** — reconnaissance, enumeration, scanning phase tools
- [Packet Capture & Analysis.md](./security/pentest-recon-enum/Packet%20Capture%20%26%20Analysis.md)
- [Port Scanners & Network Discovery.md](./security/pentest-recon-enum/Port%20Scanners%20%26%20Network%20Discovery.md)
- [Recon & Threat Reputation.md](./security/pentest-recon-enum/Recon%20%26%20Threat%20Reputation.md)
- [ssl-tls-web-security.md](./security/pentest-recon-enum/ssl-tls-web-security.md)
- **vuln-analysis-exploitation** — vulnerability databases, exploit dev, packet crafting
- [Packet Crafting & Manipulation.md](./security/vuln-analysis-exploitation/Packet%20Crafting%20%26%20Manipulation.md)
- [Vulnerability & Exploit Databases.md](./security/vuln-analysis-exploitation/Vulnerability%20%26%20Exploit%20Databases.md)
- [Untitled.md](./security/Untitled.md) — placeholder / to be refactored
</details>
**sysadmin-devops** — operational tools, monitoring, hardening, terminals, browsers, remote access
<details>
<summary>Expand Sysadmin / DevOps subtree</summary>
- **Remote Access + SSH Clients.md** — SSH clients, remote desktop, tunnels
- **https-web-services** — web servers, proxies, load balancers, CDNs
- **benchmark-load** — performance / stress testing tools
- **browsers** — security-focused / privacy browsers & extensions
- **clients-inspectors** — API, database, message queue clients & inspectors
- **security-hardening** — OS, container, cloud hardening guides & tools
- **system-monitoring-tracing** — observability, tracing, log analysis
- [Log Analyzers.md](./sysadmin-devops/system-monitoring-tracing/Log%20Analyzers.md)
- **terminal-shell-productivity** — shells, terminals, editors, file managers
- **Files & Directories.md**
- **Shells.md**
- **Terminal Emulators.md**
- **Text Editors.md**
</details>
## Quick Navigation
- ↑ [Back to Repository Root](../README.md)
- ↑ [Documentation & Guides](../documentation/INDEX.md)
- → [Schema Rules](../TOOL-TABLE-SCHEMA.md)
- → [This SOP](../SOP-Navigation-and-Layout.md)

View File

@ -0,0 +1,25 @@
# Containers & Orchestration
Collection of CLI tools, web-based management platforms, reverse proxies/load balancers, security utilities, and related resources for container runtimes (Docker, containerd, etc.) and orchestration systems (primarily Kubernetes).
Focuses on actionable tools following the [TOOL-TABLE-SCHEMA](/TOOL-TABLE-SCHEMA.md). Learning materials, cheat sheets, tutorials, best practices, and failure stories are housed in [/documentation/containers-orchestration/](/documentation/containers-orchestration/INDEX.md).
↑ [Back to Tools Index](/tools/INDEX.md)
↑ [Back to Root](/README.md)
## Subcategories
- [CLI Tools](./cli-tools.md) — command-line utilities for container inspection, metrics, runtime sandboxes, and monitoring
- [Web / Management Tools](./web-tools.md) — dashboards, API gateways, reverse proxies, load balancers, and full container/Kubernetes management platforms
- [Security](./security.md) — vulnerability scanners, hardening benchmarks, secure registries, signing tools, and offensive/pentest container images
- [Learning & Best Practices](/documentation/containers-orchestration/INDEX.md) — cheat sheets, awesome lists, tutorials, labs, production guides, security checklists, and failure stories
<details>
<summary>Quick Navigation</summary>
- [CLI Tools](./cli-tools.md)
- [Web / Management Tools](./web-tools.md)
- [Security](./security.md)
- [Documentation & Learning](/documentation/containers-orchestration/INDEX.md)
</details>

View File

@ -0,0 +1,9 @@
# CLI Tools – Containers & Orchestration
| Name | Vendor/Webpage | GitHub Repo | Brief Description | Tags | Latest Commit | Creation Date | Stars |
|----------|---------------------|--------------------------------------------------|------------------------------------------------------------|------------------------------------|---------------|---------------|--------|
| gVisor | https://gvisor.dev/ | [google/gvisor](https://github.com/google/gvisor) | Container runtime sandbox focused on security and isolation. | container, runtime, sandbox, security | 2026-02-20 | 2017-12-11 | 15.8k |
| ctop | — | [bcicen/ctop](https://github.com/bcicen/ctop) | Top-like interface for monitoring running container metrics. | container, monitoring, cli, metrics | 2024-09-15 | 2017-03-01 | 15.1k |
↑ [Back to Containers & Orchestration Index](./INDEX.md)
↑ [Back to Tools](/tools/INDEX.md) | ↑ [Back to Root](/README.md)

View File

@ -0,0 +1,11 @@
# Security – Containers & Orchestration
| Name | Vendor/Webpage | GitHub Repo | Brief Description | Tags | Latest Commit | Creation Date | Stars |
|-----------------------|-------------------------|--------------------------------------------------------------|--------------------------------------------------------------------|-----------------------------------------|---------------|---------------|--------|
| docker-bench-security | — | [docker/docker-bench-security](https://github.com/docker/docker-bench-security) | Script checking Docker host for dozens of common security best practices. | docker, security, benchmark, hardening | 2025-11-20 | 2015-07-14 | 9.2k |
| Trivy | https://aquasecurity.github.io/trivy/ | [aquasecurity/trivy](https://github.com/aquasecurity/trivy) | Fast and comprehensive vulnerability scanner for containers / filesystems. | vulnerability, scanner, container, ci | 2026-03-07 | 2019-04-16 | 24.8k |
| Harbor | https://goharbor.io/ | [goharbor/harbor](https://github.com/goharbor/harbor) | Cloud native registry storing, signing, and scanning container images. | registry, security, signing, scan | 2026-03-03 | 2016-06-20 | 24.1k |
| Houdini | https://houdini.secsi.io/ | — | Collection of hundreds of offensive / useful Docker images for pentesting. | docker, offensive, pentest, security | 2025-08-15 | 2021-03-05 | ~1.1k |
↑ [Back to Containers & Orchestration Index](./INDEX.md)
↑ [Back to Tools](/tools/INDEX.md) | ↑ [Back to Root](/README.md)

View File

@ -0,0 +1,14 @@
# Web / Management Tools
| Name | Vendor/Webpage | GitHub Repo | Brief Description | Tags | Latest Commit | Creation Date | Stars |
|-------------------|---------------------------------|-----------------------------------------------------------|--------------------------------------------------------------------|-----------------------------------------------|---------------|---------------|---------|
| Moby | https://mobyproject.org/ | [moby/moby](https://github.com/moby/moby) | Collaborative project assembling container-based systems (Docker foundation). | container, runtime, ecosystem | 2026-03-05 | 2013-04-01 | 68.5k |
| Traefik | https://traefik.io/ | [traefik/traefik](https://github.com/traefik/traefik) | Modern HTTP reverse proxy / load balancer with dynamic config. | reverse-proxy, load-balancer, docker, letsencrypt | 2026-03-08 | 2016-07-12 | 49.2k |
| Kong | https://konghq.com/ | [Kong/kong](https://github.com/Kong/kong) | Cloud-native API gateway and microservices management layer. | api-gateway, proxy, orchestration | 2026-03-01 | 2015-03-10 | 39.1k |
| Rancher | https://rancher.com/ | [rancher/rancher](https://github.com/rancher/rancher) | Complete container management platform for Kubernetes clusters. | kubernetes, management, orchestration | 2026-03-04 | 2015-11-04 | 23.7k |
| Portainer | https://www.portainer.io/ | [portainer/portainer](https://github.com/portainer/portainer) | Simple web UI for managing Docker and Kubernetes environments. | docker, kubernetes, gui, management | 2026-03-06 | 2016-05-23 | 32.4k |
| nginx-proxy | — | [jwilder/nginx-proxy](https://github.com/jwilder/nginx-proxy) | Automated nginx reverse proxy for Docker using docker-gen. | reverse-proxy, docker, nginx | 2025-01-10 | 2014-07-15 | 17.3k |
| bunkerized-nginx | https://bunkerized.io/ | [bunkerity/bunkerized-nginx](https://github.com/bunkerity/bunkerized-nginx) | Nginx Docker image secure-by-default with many hardening features. | nginx, security, docker | 2026-02-25 | 2020-06-18 | 3.4k |
↑ [Back to Containers & Orchestration Index](./INDEX.md)
↑ [Back to Tools](/tools/INDEX.md) | ↑ [Back to Root](/README.md)

40
tools/my-contributions.md Normal file
View File

@ -0,0 +1,40 @@
# My Contributions (jacob-kraniak) – JK_Revisions Branch
Started: 2026-03-03 (fork date)
## Summary
- Total personal commits: ~40+ (as of 2026-03-07; rapid increase from restructuring)
- Focus: Major repo restructure to planned hierarchy, Obsidian vault management, tool documentation expansion (CLI/GUI/web/log analyzers), file moves/renames/cleanup, initial network/security tool additions
## Chronological Log (newest first)
- 2026-03-07: Added more network tools (likely to new network-engineering/ sections)
- 2026-03-07: Updated more tools (refinements to recently added entries)
- 2026-03-07: Moved Log Analyzers documentation (reorganized placement/format)
- 2026-03-07: Created planned folder structure (docs/security/, network-engineering/, sysadmin-devops/, cross-domain/)
- 2026-03-07: Revised Log Analyzers documentation format (standardization effort)
- 2026-03-06: Renamed/moved daily-knowledge-news.md → docs/learning-resources/daily-knowledge-news.md
- 2026-03-06: Deleted obsolete docs/web-tools.md (after transitional creation)
- 2026-03-06: Created gui-tools.md (new GUI tool documentation)
- 2026-03-06: Renamed/moved cli-tools.md → docs/tools/cli-tools.md
- 2026-03-06: Created /tools directory (transitional for migration)
- 2026-03-06: Created 00_index.md (placeholder/index file)
- 2026-03-06: Refactored CLI Tools section in README.md
- 2026-03-06: Enhanced CLI Tools documentation with shell plug-ins
- 2026-03-06: Created initial CLI Tools documentation
- 2026-03-03: Added markdown placeholders for future sections
- 2026-03-03: Created .markdownlintignore
- 2026-03-03: Added GitHub Actions workflow for PR labeling
- 2026-03-03: Added .markdownlint.json config
- 2026-03-03: Updated issue templates
- 2026-03-03: Added Markdown linting GitHub Action
- 2026-03-03: Replaced broken links (403, 404, 520 errors noted)
- 2026-03-03: Fixed .gitignore to exclude .obsidian/
- ... (earlier backups and setup)
## Future Additions / In Progress
- Populate new hierarchy sections (e.g. network-engineering/dns-dhcp-ipam/, snmp-nms-monitoring/, security/hardening-compliance/) with curated tools in standard table format
- Certification roadmaps & notes (from cyberseccertificates.com / pauljerimy.com)
- Personal progress tracking (e.g. cert study logs, tool evaluation notes)
- Further tool/link curation, deprecation of outdated entries, cross-linking between security/ and network-engineering/
- Migrate remaining flat docs/ files into subfolders (e.g. remove transitional /tools/ dir once complete)
All changes here are my own additions/refactors — original content credit remains with trimstray and upstream contributors.

View File

@ -0,0 +1,8 @@
|Name|Vendor/Webpage|GitHub Repo|Brief Description|Tags|Latest Commit|
|---|---|---|---|---|---|
|iPerf3|[https://iperf.fr/](https://iperf.fr/)|— (official mirrors)|Active measurement tool for TCP/UDP/SCTP bandwidth, jitter, and loss.|[bandwidth, test, cli, c]|Active|
|ethr|—|[Microsoft/Ethr](https://github.com/Microsoft/Ethr)|Cross-platform network performance tool for TCP, UDP, HTTP throughput/latency.|[performance, bandwidth, go]|Stable|
|Etherate|—|[jwbensley/Etherate](https://github.com/jwbensley/Etherate)|CLI Ethernet/MPLS layer-2 traffic generator and tester.|[ethernet, test, cli, c++]|Stable|
|bmon|—|[tgraf/bmon](https://github.com/tgraf/bmon)|Bandwidth monitor with visual interface for interface stats and rates.|[monitoring, bandwidth, cli, c]|Stable|
|iptraf-ng|[http://iptraf.seul.org/](http://iptraf.seul.org/)|—|Console-based IP traffic monitor showing connections, protocols, and stats.|[monitoring, traffic, tui, c]|Stable|
|vnstat|—|[vergoh/vnstat](https://github.com/vergoh/vnstat)|Console network traffic monitor logging and reporting usage per interface.|[monitoring, traffic, cli, c]|Active|

View File

@ -0,0 +1,3 @@
|Name|Vendor/Webpage|GitHub Repo|Brief Description|Tags|Latest Commit|
|---|---|---|---|---|---|
|RIPE NCC Atlas|[https://atlas.ripe.net/](https://atlas.ripe.net/)|[RIPE-NCC/ripe-atlas-tools](https://github.com/RIPE-NCC/ripe-atlas-tools)|Global open platform for distributed Internet measurements (ping, traceroute, DNS) via community probes.|[network-measurement, diagnostics, global, probing]|Sep 2025 (v3.2.0 or later cousteau ~Dec 2025)|

View File

@ -0,0 +1,6 @@
|Name|Vendor/Webpage|GitHub Repo|Brief Description|Tags|Latest Commit|
|---|---|---|---|---|---|
|Online Curl|[https://tools.keycdn.com/curl](https://tools.keycdn.com/curl)|—|Browser-based tool to run curl requests and inspect HTTP response headers/status.|[http, diagnostics, online-tool, curl]|Active (web service)|
|ExtendsClass Online Tools|[https://extendsclass.com/](https://extendsclass.com/)|—|Free online dev tools including HTTP testers, API playgrounds, encoders, formatters.|[dev-tools, http, encoders, online, api-tester]|Active (ongoing)|
|Ping.eu|[https://ping.eu/](https://ping.eu/)|—|Online ping, traceroute, DNS lookup, WHOIS, port scan, and basic network checks.|[diagnostics, ping, traceroute, whois, online]|Active (web service)|
|Network-Tools.com|[https://network-tools.com/](https://network-tools.com/)|—|Suite of web-based tools: ping, traceroute, WHOIS, DNS, subnet calc, bandwidth test.|[diagnostics, network-utils, online, whois]|Active (web service)|

View File

@ -0,0 +1,4 @@
|Name|Vendor/Webpage|GitHub Repo|Brief Description|Tags|Latest Commit|
|---|---|---|---|---|---|
|mtr|—|[traviscross/mtr](https://github.com/traviscross/mtr)|Combined traceroute + ping tool showing real-time path latency and packet loss.|[traceroute, ping, diagnostics, cli]|Active|
|mylg|—|[mehrdadrad/mylg](https://github.com/mehrdadrad/mylg)|All-in-one diagnostic tool combining ping, traceroute, whois, DNS, BGP lookup.|[diagnostics, multi-tool, cli, go]|~Older|

View File

@ -0,0 +1,5 @@
|Name|Vendor/Webpage|GitHub Repo|Brief Description|Tags|Latest Commit|
|---|---|---|---|---|---|
|netcat|[http://netcat.sourceforge.net/](http://netcat.sourceforge.net/)|—|Versatile TCP/UDP connector for reading/writing network data (Swiss army knife).|[netcat, transfer, cli, c]|Classic|
|socat|[http://www.dest-unreach.org/socat/](http://www.dest-unreach.org/socat/)|—|Bidirectional data transfer relay between two independent data channels.|[relay, transfer, multi-protocol, cli]|Active|
|aria2|[https://aria2.github.io/](https://aria2.github.io/)|[aria2/aria2](https://github.com/aria2/aria2)|Lightweight multi-protocol download utility supporting HTTP, FTP, BitTorrent.|[download, multi-source, cli, c++]|Active|

View File

@ -0,0 +1,15 @@
| Name | Vendor/Webpage | GitHub Repo | Brief Description | Tags | Latest Commit |
| ---------------- | -------------- | --------------------------------------------------------------------------- | ------------------------------------------------------------------ | --------------------------------------------- | ---------------- |
| dnsdiag | — | [farrokhi/dnsdiag](https://github.com/farrokhi/dnsdiag) | Suite for DNS measurement, tracing, and resolver evaluation. | [dns, diagnostics, performance, python] | ~Feb 2026 |
| fierce | — | [mschwager/fierce](https://github.com/mschwager/fierce) | DNS recon tool to locate non-contiguous IP space and hostnames. | [dns, recon, enumeration, python] | 2024-08-28 |
| subfinder | — | [projectdiscovery/subfinder](https://github.com/projectdiscovery/subfinder) | Fast passive subdomain enumeration using online sources. | [subdomain, enum, passive, go, recon] | 2026-03-05 |
| Sublist3r | — | [aboul3la/Sublist3r](https://github.com/aboul3la/Sublist3r) | Fast subdomain enumeration via OSINT sources for pentesting. | [subdomain, enum, osint, python] | 2020-07-29 |
| amass | — | [owasp-amass/amass](https://github.com/owasp-amass/amass) | In-depth attack surface mapping and subdomain/asset discovery. | [recon, osint, subdomain, go, amass] | 2025-09-04 |
| namebench | — | [google/namebench](https://github.com/google/namebench) | Benchmarks DNS servers using browsing history for recommendations. | [dns, benchmark, privacy, go] | ~2024 (archived) |
| massdns | — | [blechschmidt/massdns](https://github.com/blechschmidt/massdns) | High-performance stub resolver for bulk DNS lookups/recon. | [dns, resolver, bulk, performance, c] | 2025-07-21 |
| knock | — | [guelfoweb/knock](https://github.com/guelfoweb/knock) | Async subdomain enumeration via recon and brute-force. | [subdomain, enum, brute, python, tls] | 2026-02-19 |
| dnsperf | — | [DNS-OARC/dnsperf](https://github.com/DNS-OARC/dnsperf) | Benchmarks DNS server latency and throughput under load. | [dns, performance, benchmark, c] | 2026-02-04 |
| dnscrypt-proxy 2 | — | [jedisct1/dnscrypt-proxy](https://github.com/jedisct1/dnscrypt-proxy) | Flexible DNS proxy with encrypted protocols (DoH, DNSCrypt, ODoH). | [dns, proxy, encryption, privacy, go] | 2026-03-02 |
| dnsdbq | — | [dnsdb/dnsdbq](https://github.com/dnsdb/dnsdbq) | C client for querying passive DNS databases (DNSDB, CIRCL). | [dns, passive, api, query, c] | 2024-05-20 |
| grimd | — | [looterz/grimd](https://github.com/looterz/grimd) | Fast DNS proxy to block ads and malware domains. | [dns, proxy, adblock, malware, go] | ~Oct 2022 |
| dnstwist | — | [elceef/dnstwist](https://github.com/elceef/dnstwist) | Generates domain permutations to detect typosquatting/phishing. | [dns, typosquat, phishing, detection, python] | 2025-04-15 |

View File

@ -0,0 +1,4 @@
|Name|Vendor/Webpage|GitHub Repo|Brief Description|Tags|Latest Commit|
|---|---|---|---|---|---|
|BGPview|[https://bgpview.io/](https://bgpview.io/)|[CAIDA/bgpview](https://github.com/CAIDA/bgpview) (core lib)|Searchable BGP data for ASNs, prefixes, IPs, AS paths, peers, and routing stats.|[bgp, routing, asn, prefix-search, analytics]|~Mar 2026 (lib updates; service active)|
|Is BGP safe yet?|[https://isbgpsafeyet.com/](https://isbgpsafeyet.com/)|[cloudflare/isbgpsafeyet.com](https://github.com/cloudflare/isbgpsafeyet.com)|Tracks RPKI filtering status and BGP security adoption among major ISPs/operators.|[bgp, rpki, security, routing, monitoring]|Nov 18, 2025 (index.html update)|

40
tools/security/INDEX.md Normal file
View File

@ -0,0 +1,40 @@
# Security Index
Offensive security, defensive tools, reconnaissance, enumeration, vulnerability research, exploitation frameworks, web/SSL/TLS hardening, system service auditing, and related cheat sheets / resources.
All tool/resource tables in this section **must** follow → [TOOL-TABLE-SCHEMA.md](../../TOOL-TABLE-SCHEMA.md)
## Contents (Recursive Overview)
**pentest-recon-enum** — reconnaissance, footprinting, enumeration, scanning, and information-gathering phase tools
<details>
<summary>Expand Pentest Recon & Enumeration subtree</summary>
- [Packet Capture & Analysis.md](./pentest-recon-enum/Packet%20Capture%20%26%20Analysis.md) — Wireshark-like tools, tcpdump variants, dissectors
- [Port Scanners & Network Discovery.md](./pentest-recon-enum/Port%20Scanners%20%26%20Network%20Discovery.md) — Nmap forks, masscan, ZMap, unicornscan, etc.
- [Recon & Threat Reputation.md](./pentest-recon-enum/Recon%20%26%20Threat%20Reputation.md) — OSINT, subdomain enum, ASN lookup, reputation APIs
- [ssl-tls-web-security.md](ssl-tls-web-security.md) — SSL/TLS testing, certificate analysis, protocol downgrade, misconfig scanners (moved or duplicated here?)
</details>
**vuln-analysis-exploitation** — vulnerability scanning/analysis, exploit development, payload crafting, and exploitation tooling
<details>
<summary>Expand Vulnerability Analysis & Exploitation subtree</summary>
- [Packet Crafting & Manipulation.md](./vuln-analysis-exploitation/Packet%20Crafting%20%26%20Manipulation.md) — Scapy, hping3, packETH, fragroute, etc.
- [Vulnerability & Exploit Databases.md](./vuln-analysis-exploitation/Vulnerability%20%26%20Exploit%20Databases.md) — Exploit-DB mirrors, CVE search tools, VulnHub links, etc.
</details>
**Standalone / Uncategorized Files**
- [my-contributions.md](./my-contributions.md) — personally vetted / newly added security tools & notes (growing list)
- [system-services.md](./system-services.md) — security-focused auditing / hardening for common system daemons & services
- [Untitled.md](./Untitled.md) — legacy / placeholder file (refactor or rename pending)
## Quick Navigation
- ↑ [Back to Tools Root](../_INDEX.md) *(or update to INDEX.md after rename)*
- ↑ [Back to Repository Root](../../README.md)
- → [Schema Rules](../../TOOL-TABLE-SCHEMA.md)
- → [Navigation SOP](../../SOP-Navigation-and-Layout.md)
- → [Documentation Index](../../documentation/INDEX.md)

View File

@ -0,0 +1,10 @@
# Auditing & Host Security Tools
Security auditing, integrity monitoring, and privilege escalation detection.
All entries follow → [TOOL-TABLE-SCHEMA.md](../../TOOL-TABLE-SCHEMA.md)
| Name | Vendor/Webpage | GitHub Repo | Brief Description | Tags | Latest Commit | Creation Date | Stars |
|------|----------------|-------------|-------------------|------|---------------|---------------|-------|
| OSSEC | https://www.ossec.net | https://github.com/ossec/ossec-hids | Host-based intrusion detection and file integrity monitoring. | hids, audit, fim | Active | 2008 | High |
| Lynis | https://cisofy.com/lynis | https://github.com/CISOfy/lynis | Security auditing and hardening scanner for Linux/Unix. | audit, hardening, compliance | Active | 2007 | 15k+ |

View File

@ -0,0 +1,21 @@
# Pentest Recon & Enumeration Index
Core tools and resources for the reconnaissance and enumeration phases of penetration testing: passive/active information gathering, network/host discovery, port scanning, service fingerprinting, packet capture/analysis, OSINT, subdomain enumeration, threat intelligence/reputation checks, and curated pentest arsenals.
All tool/resource tables in this section **must** follow → [TOOL-TABLE-SCHEMA.md](../../../TOOL-TABLE-SCHEMA.md)
## Contents
- **[Packet Capture & Analysis.md](./Packet%20Capture%20%26%20Analysis.md)** — Tools for capturing, dissecting, and analyzing network traffic (Wireshark alternatives, command-line dissectors, tcpdump variants, etc.)
- **[Port Scanners & Network Discovery.md](./Port%20Scanners%20%26%20Network%20Discovery.md)** — High-performance scanners, mass scanners, host discovery utilities (Nmap forks, ZMap, masscan, unicornscan, etc.)
- **[Recon & Threat Reputation.md](./Recon%20%26%20Threat%20Reputation.md)** — OSINT frameworks, subdomain bruteforcers, ASN/BGP lookup, domain/URL reputation APIs, threat intel feeds
- **[pentest-arsenal.md](./pentest-arsenal.md)** — Curated personal/general collection of recon & enumeration tools (growing list of vetted additions)
## Quick Navigation
- ↑ [Back to Security Index](../INDEX.md)
- ↑ [Back to Tools Root](../../_INDEX.md) *(update to INDEX.md after eventual rename)*
- ↑ [Back to Repository Root](../../../README.md)
- → [Schema Rules](../../../TOOL-TABLE-SCHEMA.md)
- → [Navigation SOP](../../../SOP-Navigation-and-Layout.md)
- → [Vuln Analysis & Exploitation Index](../vuln-analysis-exploitation/INDEX.md) *(add once created)*

View File

@ -0,0 +1,14 @@
# Packet Capture & Analysis Tools
CLI and TUI tools for capturing, dumping, filtering, analyzing, and visualizing network traffic — essential for diagnostics, forensics, pentesting, and reconnaissance.
| Name | Vendor/Webpage | GitHub Repo | Brief Description | Tags | Latest Commit | Creation Date | Stars |
| ------------ | -------------------------- | ------------------------------------------------------------------------- | --------------------------------------------------------------------------------------- | ------------------------------------- | --------------------------- | ------------- | ----- |
| tcpdump | https://www.tcpdump.org/ | [the-tcpdump-group/tcpdump](https://github.com/the-tcpdump-group/tcpdump) | Powerful CLI packet capture and analyzer with advanced filtering expression support. | capture, analyzer, cli, c, pcap | ~Mar 2026 (very active) | 1988 | ~3k+ |
| tshark | https://www.wireshark.org/ | — (part of Wireshark repo) | CLI version of Wireshark for capturing, dumping, and dissecting network traffic. | capture, analyzer, cli, wireshark | ~Feb 2026 (Wireshark 4.6.4) | 1998 | — |
| Termshark | https://termshark.io/ | [gcla/termshark](https://github.com/gcla/termshark) | Terminal UI frontend for tshark with Wireshark-like interface and packet browsing. | capture, tui, wireshark, go | ~Jul 2022 (v2.4.0) | 2018 | ~7k+ |
| ngrep | — | [jpr5/ngrep](https://github.com/jpr5/ngrep) | Grep-like tool for searching and displaying network packets by string or regex pattern. | grep, capture, cli, c | ~Feb 2026 (v1.49.0) | 1999 | ~3k+ |
| netsniff-ng | http://netsniff-ng.org/ | [netsniff-ng/netsniff-ng](https://github.com/netsniff-ng/netsniff-ng) | High-performance toolkit for network sniffing, analysis, monitoring, and plumbing. | capture, toolkit, cli, c, performance | ~Jan 2025 (v0.6.9) | 2011 | ~3k+ |
| stenographer | — | [google/stenographer](https://github.com/google/stenographer) | High-speed packet capture spooler to disk for large-scale forensics and IDS buffering. | capture, spool, go, forensics | ~Nov 2020 (archived) | 2014 | ~2k+ |
| tcpterm | — | [sachaos/tcpterm](https://github.com/sachaos/tcpterm) | TUI visualizer for monitoring and displaying TCP packet streams in real time. | visualizer, tui, rust, tcp | ~Stable (low activity) | 2018 | ~1k+ |
| sockdump | — | [mechpen/sockdump](https://github.com/mechpen/sockdump) | Dumps Unix domain socket traffic for local debugging and protocol inspection. | socket, dump, cli, go, unix | ~Stable (low activity) | 2019 | — |

View File

@ -0,0 +1,11 @@
# Port Scanners & Network Discovery Tools
Essential CLI tools for port scanning, host discovery, OS fingerprinting, and large-scale network reconnaissance during pentesting and enumeration.
| Name | Vendor/Webpage | GitHub Repo | Brief Description | Tags | Latest Commit | Creation Date | Stars |
| -------- | ----------------- | ------------------------------------------------------------------------- | --------------------------------------------------------------------------------------------------- | ----------------------------------------- | ----------------------- | ------------- | ----- |
| nmap | https://nmap.org/ | [nmap/nmap](https://github.com/nmap/nmap) | Versatile network discovery and security auditing tool with port scanning, OS detection, scripting. | scanner, port, recon, nse, cli, os-detect | ~Mar 2026 (frequent) | 1997 | 10k+ |
| zmap | https://zmap.io/ | [zmap/zmap](https://github.com/zmap/zmap) | Fast single-packet scanner optimized for large-scale Internet-wide surveys and port scanning. | scanner, fast, internet-wide, cli, c | ~May 2025 (v4.3.4) | 2013 | 6.1k |
| RustScan | — | [bee-san/RustScan](https://github.com/bee-san/RustScan) | Ultra-fast port scanner that wraps nmap for full scans after quick open port discovery. | scanner, fast, rust, wrapper, cli | ~Feb 2025 (v2.4.1) | 2019 | ~3k+ |
| masscan | — | [robertdavidgraham/masscan](https://github.com/robertdavidgraham/masscan) | Asynchronous SYN scanner capable of scanning the entire Internet in minutes at high speed. | scanner, fast, async, cli, c | ~Jun 2025 (maintenance) | 2013 | ~20k+ |
| pbscan | — | [gvb84/pbscan](https://github.com/gvb84/pbscan) | Stateless SYN scanner with efficient banner grabbing and multi-threading support. | scanner, syn, banner, cli, c | ~Older (stable) | ~2015 | — |

View File

@ -0,0 +1,16 @@
# Threat Hunting & Intel / Reputation Tools
Online services and scanners for URL/domain/file reputation checking, malware analysis, IOC lookup, threat intelligence enrichment, and reconnaissance during cyber threat hunting or incident response. Many of these are used daily for quick triage of suspicious indicators.
| Name | Vendor/Webpage | Brief Description | Tags | Creation Date |
| ------------------ | -------------------------------- | -------------------------------------------------------------------------------- | --------------------------------------------------- | ------------- |
| AbuseIPDB | https://www.abuseipdb.com/ | Database and API for reporting/checking abusive IP addresses and reputation. | ip-reputation, abuse, threat-intel, blacklist | 2013 |
| AlienVault OTX | https://otx.alienvault.com/ | Open Threat Exchange for sharing and searching IOCs and pulses. | threat-intel, ioc, community, otx | 2015 |
| Any.Run | https://any.run/ | Interactive online malware sandbox for real-time threat analysis and hunting. | malware, sandbox, interactive, threat-hunting | 2016 |
| GreyNoise | https://www.greynoise.io/ | Distinguishes internet background noise from targeted threats and scans. | threat-intel, noise-filter, ip-reputation, hunting | 2018 |
| Hybrid Analysis | https://www.hybrid-analysis.com/ | Free automated malware analysis sandbox with Falcon Sandbox backend. | malware, sandbox, analysis, threat-hunting | 2015 |
| Joe Sandbox | https://www.joesandbox.com/ | Advanced behavioral malware analysis with detailed reports and IOC extraction. | malware, sandbox, behavioral, analysis | 2011 |
| Talos Intelligence | https://talosintelligence.com/ | Cisco threat intelligence portal with reputation, IOC search, and blog feeds. | threat-intel, reputation, cisco, ioc | 2013 |
| urlscan.io | https://urlscan.io/ | Automated website scanning with screenshots, DOM analysis, and threat detection. | recon, url-scanner, sandbox, threat-hunting | 2016 |
| urlvoid | https://www.urlvoid.com/ | Checks website reputation against blacklists for malware, phishing, and spam. | reputation, url-scanner, blacklist, threat-intel | 2010 |
| VirusTotal | https://www.virustotal.com/ | Analyzes files, URLs, domains, and IPs with 70+ antivirus engines and scanners. | threat-intel, malware, url-scanner, ioc, reputation | 2004 |

View File

@ -0,0 +1,202 @@
# Pentesters Arsenal Tools
Comprehensive, categorized collection of penetration testing tools.
Grouped by primary function following common pentest phases.
All entries adhere to the [TOOL-TABLE-SCHEMA.md](../../TOOL-TABLE-SCHEMA.md).
Use browser search (Ctrl+F) or expand sections below.
[↑ Back to Tools Overview](../../_INDEX.md) | [↑ Back to Pentest Recon & Enum INDEX](./INDEX.md)
<details>
<summary>Reconnaissance & OSINT</summary>
### Reconnaissance & OSINT
Tools for information gathering, domain/IP enumeration, crawling, username hunting, etc.
| Name | Vendor/Webpage | GitHub Repo | Brief Description | Tags | Latest Commit | Creation Date | Stars |
|-------------------|-----------------------------------------------------|-------------------------------------------------------|-----------------------------------------------------------------------------------|-----------------------------------------------|------------------|---------------|---------|
| Photon | — | [s0md3v/Photon](https://github.com/s0md3v/Photon) | Incredibly fast crawler designed for OSINT data extraction. | [osint, crawler, recon, python] | ~2022 | 2018 | 10k+ |
| Recon-ng | — | [lanmaster53/recon-ng](https://github.com/lanmaster53/recon-ng) | Full-featured web reconnaissance framework written in Python. | [recon, osint, framework, python] | ~2023 | 2012 | 10k+ |
| AutoRecon | — | [Tib3rius/AutoRecon](https://github.com/Tib3rius/AutoRecon) | Automated network reconnaissance tool for enumerating services and hosts. | [recon, automation, enumeration, python] | ~2024 | 2020 | 8k+ |
| aquatone | — | [michenriksen/aquatone](https://github.com/michenriksen/aquatone) | Tool for visual inspection of website screenshots during domain flyovers. | [recon, screenshot, domain, go] | ~2020 | 2017 | 5k+ |
| BillCipher | — | [m4ll0k/BillCipher](https://github.com/m4ll0k/BillCipher) | Information gathering tool for websites or IP addresses. | [recon, osint, enumeration, python] | ~2021 | 2018 | 1k+ |
| sherlock | — | [sherlock-project/sherlock](https://github.com/sherlock-project/sherlock) | Hunts down social media accounts by username across networks. | [osint, username, recon, python] | 2026 | 2018 | 50k+ |
| Osmedeus | [osmedeus.com](https://osmedeus.com) | [j3ssie/osmedeus](https://github.com/j3ssie/osmedeus) | Fully automated offensive security tool for recon and vulnerability scanning. | [automation, recon, scanner, python] | 2026 | 2019 | 5k+ |
| LeakLooker | — | — | Finds open databases powered by Binaryedge.io data. | [osint, database, leak, recon] | — | ~2020 | — |
[↑ Back to Top](#pentesters-arsenal-tools)
</details>
<details>
<summary>Web Proxies & Interception</summary>
### Web Proxies & Interception
Intercepting proxies and traffic manipulation tools (core for web app testing).
| Name | Vendor/Webpage | GitHub Repo | Brief Description | Tags | Latest Commit | Creation Date | Stars |
|-------------------|-----------------------------------------------------|-------------------------------------------------------|-----------------------------------------------------------------------------------|-----------------------------------------------|------------------|---------------|---------|
| Sandcat Browser | [syhunt.com/sandcat](https://www.syhunt.com/sandcat) | [syhunt/sandcat](https://github.com/syhunt/sandcat) | Penetration-oriented browser with Lua scripting, headers, and dev tools built-in. | [browser, pentest, lua, web, headers] | ~2023 | ~2015 | — |
| Burp Suite | [portswigger.net/burp](https://portswigger.net/burp) | — | Industry-standard web app security testing suite with proxy, scanner, and repeater. | [web, proxy, scanner, intercept, burp] | Active 2026 | 2006 | — |
| OWASP Zed Attack Proxy | [zaproxy.org](https://www.zaproxy.org) | [zaproxy/zaproxy](https://github.com/zaproxy/zaproxy) | Open-source intercepting proxy and automated web app vulnerability scanner. | [web, proxy, scanner, zap, owasp] | 2026 | 2010 | 12k+ |
| mitmproxy | [mitmproxy.org](https://mitmproxy.org) | [mitmproxy/mitmproxy](https://github.com/mitmproxy/mitmproxy) | Interactive TLS-capable HTTP/HTTPS intercepting proxy for traffic manipulation. | [proxy, intercept, tls, python, http] | 2026 | 2010 | 37k+ |
| WhatWaf | — | [Ekultek/WhatWaf](https://github.com/Ekultek/WhatWaf) | Detects and bypasses web application firewalls and protection systems. | [waf, bypass, detection, python] | ~2023 | 2018 | 3k+ |
| Corsy | — | [s0md3v/Corsy](https://github.com/s0md3v/Corsy) | Scanner for finding CORS misconfigurations and vulnerabilities. | [web, cors, scanner, python] | ~2022 | 2019 | 2k+ |
[↑ Back to Top](#pentesters-arsenal-tools)
</details>
<details>
<summary>Web Vulnerability Scanners & Auditors</summary>
### Web Vulnerability Scanners & Auditors
Web-specific scanners, directory enumeration, XSS/SQL injection focused tools.
| Name | Vendor/Webpage | GitHub Repo | Brief Description | Tags | Latest Commit | Creation Date | Stars |
|-------------------|-----------------------------------------------------|-------------------------------------------------------|-----------------------------------------------------------------------------------|-----------------------------------------------|------------------|---------------|---------|
| Nikto2 | [cirt.net/Nikto2](https://cirt.net/Nikto2) | [sullo/nikto](https://github.com/sullo/nikto) | Web server scanner performing comprehensive tests for misconfigs and issues. | [web, scanner, perl, server] | ~2024 | 2001 | 7k+ |
| w3af | [w3af.org](http://w3af.org) | [andresriancho/w3af](https://github.com/andresriancho/w3af) | Web application attack and audit framework for finding and exploiting vulns. | [web, framework, scanner, python] | ~2020 | 2007 | 4k+ |
| sqlmap | [sqlmap.org](http://sqlmap.org) | [sqlmapproject/sqlmap](https://github.com/sqlmapproject/sqlmap) | Automates detection and exploitation of SQL injection flaws. | [sql, injection, exploit, automation, python]| 2026 | 2006 | 31k+ |
| XSStrike | — | [s0md3v/XSStrike](https://github.com/s0md3v/XSStrike) | Most advanced XSS detection suite with payload generation and evasion. | [web, xss, scanner, python] | ~2023 | 2018 | 13k+ |
| dirhunt | — | [mkdocs/dirhunt](https://github.com/mkdocs/dirhunt) | Finds web directories and files without bruteforcing. | [web, directory, enumeration, python] | ~2023 | 2018 | 2k+ |
| Raccoon | — | [evyatarmeged/Raccoon](https://github.com/evyatarmeged/Raccoon) | High performance offensive security tool for recon and vulnerability scanning. | [recon, scanner, vuln, python] | ~2021 | 2019 | 4k+ |
[↑ Back to Top](#pentesters-arsenal-tools)
</details>
<details>
<summary>General/Network Vulnerability Scanners</summary>
### General/Network Vulnerability Scanners
Broader system/network vuln scanning, often agentless or plugin-extensible.
| Name | Vendor/Webpage | GitHub Repo | Brief Description | Tags | Latest Commit | Creation Date | Stars |
|-------------------|-----------------------------------------------------|-------------------------------------------------------|-----------------------------------------------------------------------------------|-----------------------------------------------|------------------|---------------|---------|
| vuls | [vuls.io](https://vuls.io) | [future-architect/vuls](https://github.com/future-architect/vuls) | Agent-less vulnerability scanner for Linux/FreeBSD and other systems. | [scanner, vuln, linux, go] | 2026 | 2016 | 10k+ |
| tsunami | [google.github.io/tsunami-security-scanner](https://google.github.io/tsunami-security-scanner/) | [google/tsunami-security-scanner](https://github.com/google/tsunami-security-scanner) | General-purpose network security scanner with extensible plugin system. | [scanner, network, plugin, java] | ~2024 | 2019 | 8k+ |
[↑ Back to Top](#pentesters-arsenal-tools)
</details>
<details>
<summary>Exploitation Frameworks & Automation</summary>
### Exploitation Frameworks & Automation
Full frameworks and automated exploit chains for offensive operations.
| Name | Vendor/Webpage | GitHub Repo | Brief Description | Tags | Latest Commit | Creation Date | Stars |
|-------------------|-----------------------------------------------------|-------------------------------------------------------|-----------------------------------------------------------------------------------|-----------------------------------------------|------------------|---------------|---------|
| Metasploit | [metasploit.com](https://www.metasploit.com) | [rapid7/metasploit-framework](https://github.com/rapid7/metasploit-framework) | Exploitation framework for pentesting systems, networks, web, and more. | [exploit, framework, ruby, metasploit] | 2026 | 2003 | 33k+ |
| Sn1per | [sn1persecurity.com](https://sn1persecurity.com) | [1N3/Sn1per](https://github.com/1N3/Sn1per) | Automated pentest framework for offensive security experts. | [automation, framework, recon, exploit] | ~2025 | 2015 | 7k+ |
| AutoSploit | — | [AutoSploit/AutoSploit](https://github.com/AutoSploit/AutoSploit) | Automated mass exploiter using public exploits. | [exploit, automation, mass] | ~2018 | 2018 | 2k+ |
| routersploit | — | [threat9/routersploit](https://github.com/threat9/routersploit) | Exploitation framework dedicated to embedded devices and routers. | [exploit, router, embedded, python] | 2026 | 2015 | 12k+ |
| beef | [beefproject.com](http://beefproject.com) | [beefproject/beef](https://github.com/beefproject/beef) | Browser exploitation framework focused on client-side attacks. | [browser, exploit, framework, ruby] | 2026 | 2010 | 8k+ |
[↑ Back to Top](#pentesters-arsenal-tools)
</details>
<details>
<summary>Password & Hash Cracking</summary>
### Password & Hash Cracking
High-performance crackers for hashes and passwords.
| Name | Vendor/Webpage | GitHub Repo | Brief Description | Tags | Latest Commit | Creation Date | Stars |
|-------------------|-----------------------------------------------------|-------------------------------------------------------|-----------------------------------------------------------------------------------|-----------------------------------------------|------------------|---------------|---------|
| John The Ripper | [openwall.com/john](https://www.openwall.com/john/) | [openwall/john](https://github.com/openwall/john) | Fast password cracker supporting many hash types and platforms. | [cracker, password, hash, c] | 2026 | 1996 | 9k+ |
| hashcat | [hashcat.net](https://hashcat.net/hashcat/) | [hashcat/hashcat](https://github.com/hashcat/hashcat) | World's fastest and most advanced password recovery utility (GPU-accelerated). | [cracker, gpu, password, hash, c] | 2026 | 2009 | 20k+ |
[↑ Back to Top](#pentesters-arsenal-tools)
</details>
<details>
<summary>Fuzzing & Fault Injection</summary>
### Fuzzing & Fault Injection
Coverage-guided fuzzers and attack pattern dictionaries.
| Name | Vendor/Webpage | GitHub Repo | Brief Description | Tags | Latest Commit | Creation Date | Stars |
|-------------------|-----------------------------------------------------|-------------------------------------------------------|-----------------------------------------------------------------------------------|-----------------------------------------------|------------------|---------------|---------|
| fuzzdb | — | [fuzzdb-project/fuzzdb](https://github.com/fuzzdb-project/fuzzdb) | Dictionary of attack patterns and primitives for black-box fault injection. | [fuzz, dictionary, patterns, attack] | ~2023 | 2010 | 3k+ |
| AFL | [lcamtuf.coredump.cx/afl](https://lcamtuf.coredump.cx/afl/) | [google/AFL](https://github.com/google/AFL) | Free software fuzzer focused on security-oriented coverage-guided fuzzing. | [fuzzer, coverage, security, c] | ~2018 | 2013 | 5k+ |
| AFL++ | [aflplus.plus](https://aflplus.plus) | [AFLplusplus/AFLplusplus](https://github.com/AFLplusplus/AFLplusplus) | AFL with community patches and improvements for better fuzzing. | [fuzzer, coverage, security, c++] | 2026 | 2019 | 5k+ |
| syzkaller | — | [google/syzkaller](https://github.com/google/syzkaller) | Unsupervised coverage-guided kernel fuzzer for OS kernels. | [fuzzer, kernel, coverage, go] | 2026 | 2015 | 5k+ |
[↑ Back to Top](#pentesters-arsenal-tools)
</details>
<details>
<summary>Reverse Engineering & Debugging</summary>
### Reverse Engineering & Debugging
Disassemblers, decompilers, and GDB enhancements for binary analysis.
| Name | Vendor/Webpage | GitHub Repo | Brief Description | Tags | Latest Commit | Creation Date | Stars |
|-------------------|-----------------------------------------------------|-------------------------------------------------------|-----------------------------------------------------------------------------------|-----------------------------------------------|------------------|---------------|---------|
| pwndbg | — | [pwndbg/pwndbg](https://github.com/pwndbg/pwndbg) | Exploit development and reverse engineering enhancements for GDB. | [gdb, exploit, reverse, python] | 2026 | 2015 | 7k+ |
| GDB PEDA | — | [longld/peda](https://github.com/longld/peda) | Python Exploit Development Assistance for GDB. | [gdb, exploit, reverse, python] | ~2022 | 2012 | 6k+ |
| IDA | [hex-rays.com/ida-pro](https://hex-rays.com/ida-pro/) | — | Multi-processor disassembler and debugger for reverse engineering malware. | [reverse, disassembler, debugger] | Active 2026 | 1991 | — |
| radare2 | [rada.re](https://rada.re) | [radareorg/radare2](https://github.com/radareorg/radare2) | Framework for reverse-engineering and analyzing binaries. | [reverse, framework, disassembler, c] | 2026 | 2009 | 20k+ |
| Ghidra | [nsa.gov/ghidra](https://ghidra-sre.org/) | [NationalSecurityAgency/ghidra](https://github.com/NationalSecurityAgency/ghidra) | Software reverse engineering framework with decompiler from NSA. | [reverse, decompiler, java, framework] | 2026 | 2019 | 50k+ |
| Cutter | [cutter.re](https://cutter.re) | [rizinorg/cutter](https://github.com/rizinorg/cutter) | SRE platform integrating Ghidra's decompiler with modern UI. | [reverse, gui, decompiler, cpp] | 2026 | 2017 | 15k+ |
[↑ Back to Top](#pentesters-arsenal-tools)
</details>
<details>
<summary>Post-Exploitation & Credential Tools</summary>
### Post-Exploitation & Credential Tools
Credential dumping, privilege escalation, and post-compromise utilities.
| Name | Vendor/Webpage | GitHub Repo | Brief Description | Tags | Latest Commit | Creation Date | Stars |
|-------------------|-----------------------------------------------------|-------------------------------------------------------|-----------------------------------------------------------------------------------|-----------------------------------------------|------------------|---------------|---------|
| mimikatz | — | [gentilkiwi/mimikatz](https://github.com/gentilkiwi/mimikatz) | Tool to play with Windows security features like credential extraction. | [windows, credential, post-exploit, c] | ~2024 | 2011 | 20k+ |
| SUDO_KILLER | — | [TH3xACE/SUDO_KILLER](https://github.com/TH3xACE/SUDO_KILLER) | Tool to identify and exploit sudo rules misconfigurations and vulns. | [linux, sudo, privilege, escalation] | ~2023 | 2019 | 1k+ |
[↑ Back to Top](#pentesters-arsenal-tools)
</details>
<details>
<summary>Miscellaneous / Specialized</summary>
### Miscellaneous / Specialized
Reporting, threat modeling, CTF helpers, collections, and other utilities.
| Name | Vendor/Webpage | GitHub Repo | Brief Description | Tags | Latest Commit | Creation Date | Stars |
|-------------------|-----------------------------------------------------|-------------------------------------------------------|-----------------------------------------------------------------------------------|-----------------------------------------------|------------------|---------------|---------|
| Faraday | [faradaysec.com](https://faradaysec.com) | [infobyte/faraday](https://github.com/infobyte/faraday) | Integrated multiuser pentest environment for collaboration and reporting. | [collaboration, reporting, pentest, python] | 2026 | 2012 | 4k+ |
| Vulnreport | — | [salesforce/vulnreport](https://github.com/salesforce/vulnreport) | Open-source pentesting management and automation platform. | [management, reporting, pentest, ruby] | ~2022 | 2015 | 1k+ |
| Mentalist | — | [sc0tfree/mentalist](https://github.com/sc0tfree/mentalist) | Graphical tool for custom wordlist generation. | [wordlist, generator, gui, python] | ~2020 | 2017 | 2k+ |
| archerysec | [archerysec.info](https://archerysec.info) | [archerysec/archerysec](https://github.com/archerysec/archerysec) | Vulnerability assessment and management platform for scans and tracking. | [vuln, management, scanner, python] | ~2025 | 2018 | 2k+ |
| yara | [virustotal.github.io/yara](https://virustotal.github.io/yara/) | [VirusTotal/yara](https://github.com/VirusTotal/yara) | Pattern matching swiss knife for malware research and rules. | [malware, rules, pattern, c] | 2026 | 2013 | 12k+ |
| exploitdb | [exploit-db.com](https://www.exploit-db.com) | [offensive-security/exploitdb](https://github.com/offensive-security/exploitdb) | Searchable archive of exploits and vulnerable software from Exploit Database. | [exploit, database, archive] | 2026 | 2004 | 9k+ |
| getsploit | — | [vulnerables/getsploit](https://github.com/vulnerables/getsploit) | Command-line utility for searching and downloading exploits. | [exploit, search, cli, python] | ~2021 | 2017 | 1k+ |
| ctf-tools | — | [zardus/ctf-tools](https://github.com/zardus/ctf-tools) | Collection of setup scripts for security research and CTF tools. | [ctf, setup, tools, python] | ~2022 | 2015 | 2k+ |
| pwntools | — | [Gallopsled/pwntools](https://github.com/Gallopsled/pwntools) | CTF framework and exploit development library. | [ctf, exploit, python, library] | 2026 | 2013 | 12k+ |
| p0f | [lcamtuf.coredump.cx/p0f3](https://lcamtuf.coredump.cx/p0f3/) | [lcamtuf/p0f](https://github.com/lcamtuf/p0f) | Passive TCP/IP stack fingerprinting tool to identify OS and apps. | [fingerprint, passive, network, c] | ~2014 | ~2000 | 1k+ |
| ssh_scan | — | [mozilla/ssh_scan](https://github.com/mozilla/ssh_scan) | Prototype SSH configuration and policy scanner. | [ssh, scanner, security, ruby] | ~2020 | 2015 | 2k+ |
| OWASP Threat Dragon | [owasp.org/www-project-threat-dragon](https://owasp.org/www-project-threat-dragon/) | [OWASP/Threat-Dragon](https://github.com/OWASP/Threat-Dragon) | Tool to create threat model diagrams and record possible threats. | [threat, modeling, diagram, security] | 2026 | 2015 | 2k+ |
[↑ Back to Top](#pentesters-arsenal-tools)
</details>

View File

@ -0,0 +1,85 @@
# Online DNS & Subdomain Recon Tools
Collection of **web-based / online** DNS tools useful during the reconnaissance phase of penetration testing and security assessments.
These tools focus on:
- DNS record lookups and analysis
- Subdomain enumeration
- DNS propagation checking
- Delegation and DNSSEC validation
- Historical reverse DNS records
- Wildcard / testing DNS services
They complement CLI-based recon tools (see [pentest-arsenal.md](./pentest-arsenal.md)) and are ideal for quick, passive OSINT without local installation.
[↑ Back to Pentest Recon & Enum INDEX](./INDEX.md)
[↑ Back to Tools Overview](../../_INDEX.md)
<details open>
<summary>Core DNS Lookup & Investigation Tools</summary>
### Core DNS Lookup & Investigation Tools
| Name | Vendor/Webpage | GitHub Repo | Brief Description | Tags | Latest Commit | Creation Date | Stars |
|-----------------------|---------------------------------------------------------|-------------|----------------------------------------------------------------------------------|-----------------------------------------------|---------------|---------------|-------|
| ViewDNS | [viewdns.info](https://viewdns.info/) | — | Multi-tool suite offering DNS, WHOIS, reverse IP, propagation, traceroute and more. | [dns, recon, lookup, propagation, osint] | — | ~2008 | — |
| DNSLookup | [dnslookup.org](https://dnslookup.org/) | — | Advanced DNS lookup tool with detailed record parsing and visualization. | [dns, lookup, records, analysis] | — | ~2015 | — |
| DNSlytics | [dnslytics.com](https://dnslytics.com/) | — | Online DNS and IP investigation platform with historical data and maps. | [dns, investigation, intel, osint] | — | ~2016 | — |
| DNS Spy | [dnsspy.io](https://dnsspy.io/) | — | Monitors DNS configurations, detects changes, and validates settings. | [dns, monitor, validation, config] | — | ~2017 | — |
| Zonemaster | [zonemaster.iis.se](https://zonemaster.iis.se/en/) | — | Advanced DNS zone testing tool to verify configuration and best practices. | [dns, tester, zone, validation] | — | ~2013 | — |
| Leaf DNS | [leafdns.com](http://leafdns.com/) | — | Comprehensive DNS health and delegation tester. | [dns, tester, health, delegation] | — | ~2010 | — |
| intoDNS | [intodns.com](https://intodns.com/) | — | Checks DNS and mail server health, misconfigurations, and common issues. | [dns, health, checker, mail] | — | ~2009 | — |
</details>
<details>
<summary>Subdomain Enumeration & DNS Recon</summary>
### Subdomain Enumeration & DNS Recon
| Name | Vendor/Webpage | GitHub Repo | Brief Description | Tags | Latest Commit | Creation Date | Stars |
|-----------------------|---------------------------------------------------------|-------------|----------------------------------------------------------------------------------|-----------------------------------------------|---------------|---------------|-------|
| Find Subdomains Online | [findsubdomains.com](https://findsubdomains.com/) | — | Web interface to discover subdomains for security assessments and pentests. | [subdomain, enum, recon, osint] | — | ~2018 | — |
| DNSdumpster | [dnsdumpster.com](https://dnsdumpster.com/) | — | Free DNS recon & research tool; maps hosts, subdomains, and records. | [dns, recon, subdomain, dump] | — | ~2014 | — |
| DNS Table | [dnstable.com](https://dnstable.com/) | — | Searches public DNS records by domain, IP, CIDR block, or ISP. | [dns, search, records, database] | — | ~2015 | — |
</details>
<details>
<summary>DNS Propagation & Delegation Checkers</summary>
### DNS Propagation & Delegation Checkers
| Name | Vendor/Webpage | GitHub Repo | Brief Description | Tags | Latest Commit | Creation Date | Stars |
|--------------------------|--------------------------------------------------------------------|-------------|----------------------------------------------------------------------------------|-----------------------------------------------|---------------|---------------|-------|
| What's My DNS | [whatsmydns.net](https://www.whatsmydns.net/) | — | Popular global DNS propagation checker from hundreds of locations worldwide. | [propagation, checker, dns, global] | — | ~2012 | — |
| dnslookup (ceipam) | [ceipam.eu/en/dnslookup.php](https://ceipam.eu/en/dnslookup.php) | — | Excellent DNS propagation checker with detailed global views and extras. | [propagation, checker, dns, global] | — | ~2015 | — |
| BuddyDNS Delegation LAB | [buddyns.com/delegation-lab](https://www.buddyns.com/delegation-lab/) | — | Visualizes, traces, and validates domain name delegation paths. | [dns, delegation, trace, visualize] | — | ~2012 | — |
| DNS Bajaj | [zonecut.net/dns](http://www.zonecut.net/dns/) | — | Simple delegation checker showing authoritative name servers. | [dns, delegation, checker] | — | ~2005 | — |
| DNSSEC Debugger | [dnssec-debugger.verisignlabs.com](https://dnssec-debugger.verisignlabs.com/) | — | Validates DNSSEC chain, DS, and DNSKEY records. | [dnssec, validation, debugger] | — | ~2010 | — |
</details>
<details>
<summary>Historical & Wildcard DNS Services</summary>
### Historical & Wildcard DNS Services
| Name | Vendor/Webpage | GitHub Repo | Brief Description | Tags | Latest Commit | Creation Date | Stars |
|---------------|----------------------------------------------|-------------|----------------------------------------------------------------------------------|-----------------------------------------------|---------------|---------------|-------|
| PTRarchive | [ptrarchive.com](http://ptrarchive.com/) | — | Archives and searches historical reverse DNS (PTR) records. | [ptr, historical, reverse, archive] | — | ~2010 | — |
| xip.io | [xip.io](http://xip.io/) | — | Free wildcard DNS service resolving to any IP (great for local/dev testing). | [wildcard, dns, testing, local] | — | 2011 | — |
| nip.io | [nip.io](https://nip.io/) | — | Dead-simple wildcard DNS for any IP address (modern xip.io alternative). | [wildcard, dns, testing, local] | — | ~2014 | — |
</details>
<details>
<summary>Advanced / Specialized DNS Tools</summary>
### Advanced / Specialized DNS Tools
| Name | Vendor/Webpage | GitHub Repo | Brief Description | Tags | Latest Commit | Creation Date | Stars |
|-----------|--------------------------------------------------------------------------------|-------------|----------------------------------------------------------------------------------|-----------------------------------------------|---------------|---------------|-------|
| DNSGrep | [blog.erbbysam.com/.../dnsgrep](https://blog.erbbysam.com/index.php/2019/02/09/dnsgrep/) | — | Command-line style search across large public DNS datasets (web interface). | [dns, search, grep, datasets] | — | 2019 | — |
</details>

View File

@ -0,0 +1,11 @@
# System Hardening & MAC
**Mandatory Access Control**, automated hardening frameworks, and related security tools.
All entries follow → [TOOL-TABLE-SCHEMA.md](../../TOOL-TABLE-SCHEMA.md)
| Name | Vendor/Webpage | GitHub Repo | Brief Description | Tags | Latest Commit | Creation Date | Stars |
|------|----------------|-------------|-------------------|------|---------------|---------------|-------|
| SELinux | https://selinuxproject.org | https://github.com/SELinuxProject/selinux | Flexible Mandatory Access Control (MAC) system in Linux kernel. | mac, hardening, kernel, linux | Active | 2000s | High |
| AppArmor | https://apparmor.net | - | Proactive protection via per-program profiles. | mac, hardening, linux | Active | 2006 | High |
| grapheneX | https://github.com/grapheneX/grapheneX | https://github.com/grapheneX/grapheneX | Automated system hardening framework. | hardening, automation, devsec | - | - | 1.1k |

View File

@ -0,0 +1,20 @@
# Vulnerability Analysis & Exploitation Index
Tools, databases, frameworks, and resources for vulnerability scanning, analysis, exploit development, payload generation, packet crafting/manipulation, exploit databases/search, proof-of-concept code, and post-exploitation tooling.
All tool/resource tables in this section **must** follow → [TOOL-TABLE-SCHEMA.md](../../../TOOL-TABLE-SCHEMA.md)
## Contents
- **[ssl-tls-web-security.md](./ssl-tls-web-security.md)** — Scanners, analyzers, testers, and hardening references for SSL/TLS protocols, certificate validation, web crypto misconfigurations, and related web security issues (may overlap with recon phase — consider moving if duplicated)
- **[Packet Crafting & Manipulation.md](.tools/security/vuln-analysis-exploitation/Packet-crafting-manipulation)** — tools like Scapy, hping3, packETH, etc. for custom packet building, fragmentation, spoofing, and injection
- **[Vulnerability & Exploit Databases](tools/security/vuln-analysis-exploitation/vuln-exploit-db)** — curated links to Exploit-DB, CVE search tools, Vulners, Packet Storm, etc.
## Quick Navigation
- ↑ [Back to Security Index](../INDEX.md)
- ↑ [Back to Tools Root](../../_INDEX.md) *(update to INDEX.md after eventual rename of top-level tools/_INDEX.md)*
- ↑ [Back to Repository Root](../../../README.md)
- → [Schema Rules](../../../TOOL-TABLE-SCHEMA.md)
- → [Navigation SOP](../../../SOP-Navigation-and-Layout.md)
- → [Pentest Recon & Enumeration Index](../pentest-recon-enum/INDEX.md)

View File

@ -0,0 +1,7 @@
| Name | Vendor/Webpage | GitHub Repo | Brief Description | Tags | Latest Commit |
| -------- | ---------------------------------------------- | --------------------------------------------------------------------- | -------------------------------------------------------------------------------------- | --------------------------------- | ---------------- |
| hping | [http://www.hping.org/](http://www.hping.org/) | — (source mirrors) | Command-line packet assembler/analyzer for TCP/IP crafting, firewall testing, DoS sim. | [packet-craft, analyzer, cli, c] | Stable (classic) |
| Nemesis | — | [troglobit/nemesis](https://github.com/troglobit/nemesis) | CLI tool to craft and inject custom packets for various protocols. | [packet-craft, injection, cli, c] | Active |
| Scapy | [https://scapy.net/](https://scapy.net/) | — (official repo separate) | Interactive packet manipulation library for forging, sending, decoding packets. | [packet, library, forge, python] | Active |
| packetfu | — | [packetfu/packetfu](https://github.com/packetfu/packetfu) | Mid-level packet manipulation library for Ruby (capture, forge, filter). | [packet, library, ruby] | Older |
| impacket | — | [SecureAuthCorp/impacket](https://github.com/SecureAuthCorp/impacket) | Python classes for low-level network protocol interaction (SMB, Kerberos, etc.). | [protocol, library, smb, python] | Active |

View File

@ -0,0 +1,143 @@
# SSL/TLS & Web Security Tools
Online scanners, analyzers, configuration generators, Certificate Transparency (CT) resources, testing/demo sites, and utilities for assessing and hardening web TLS/SSL configurations.
Also includes offline/CLI scanners, clients, and certificate management tools.
These help identify weak ciphers, protocol issues, certificate problems, CSP/HSTS misconfigurations, and more — essential for web pentesting, secure server setup, and compliance.
[↑ Back to Security Tools INDEX](../_INDEX.md)
[↑ Back to Tools Overview](../../_INDEX.md)
<details open>
<summary>SSL/TLS Scanners & Analyzers (Online)</summary>
### SSL/TLS Scanners & Analyzers (Online)
Deep analysis of server TLS configurations, vulnerabilities, compliance, and client support.
| Name | Vendor/Webpage | GitHub Repo | Brief Description | Tags | Latest Commit | Creation Date | Stars |
|-------------------------------|-----------------------------------------------------|------------------------------------------|-----------------------------------------------------------------------------------|-------------------------------------------|---------------|---------------|-------|
| SSLLabs Server Test | [ssllabs.com/ssltest](https://www.ssllabs.com/ssltest/) | — | Deep analysis of public SSL/TLS server configuration and vulnerabilities. | [ssl, tls, scanner, online, qualys, grading] | — | 2011 | — |
| ImmuniWeb SSL Security Test | [immuniweb.com/ssl](https://www.immuniweb.com/ssl) | — | Tests SSL/TLS for PCI DSS, HIPAA, NIST compliance and post-quantum readiness. | [ssl, tls, compliance, pci, hipaa, scanner] | — | 2015 | — |
| SSL Check | [jitbit.com/sslcheck](https://www.jitbit.com/sslcheck/) | — | Scans websites for mixed/insecure content and common SSL configuration issues. | [ssl, mixed-content, scanner, online] | — | 2012 | — |
| SSL Scanner | [sslshopper.com/ssl-checker.html](https://www.sslshopper.com/ssl-checker.html) | — | Validates SSL certificate chain, expiry dates, and basic misconfigurations. | [ssl, certificate, checker, online] | — | 2008 | — |
| CryptCheck | [cryptcheck.fr](https://cryptcheck.fr/) | — | Evaluates TLS configuration, ciphers, protocols, and client handshake support. | [tls, cipher, scanner, handshake, online] | — | 2015 | — |
| Hardenize | [hardenize.com](https://www.hardenize.com/) | — | Comprehensive security testing including TLS, email, headers, DNS, and CT logs. | [hardening, scanner, tls, multi-protocol] | — | 2018 | — |
| TLScan | [github.com/prbinu/tlscan](https://github.com/prbinu/tlscan) | [prbinu/tlscan](https://github.com/prbinu/tlscan) | Pure Python tool to scan and enumerate SSL/TLS protocols and cipher suites. | [tls, scanner, python, enumerator] | 2022-08-15 | 2019 | ~50 |
[↑ Back to Top](#ssltls--web-security-tools)
</details>
<details>
<summary>CLI & Offline SSL/TLS Scanners, Clients & Certificate Tools</summary>
### CLI & Offline SSL/TLS Scanners, Clients & Certificate Tools
Local/command-line tools for scanning TLS configurations, testing cipher support, certificate management, local dev certs, chain building, and expiration monitoring.
| Name | Vendor/Webpage | GitHub Repo | Brief Description | Tags | Latest Commit | Creation Date | Stars |
|-------------------|-----------------------------------------------------|-------------------------------------------------------|-----------------------------------------------------------------------------------|-----------------------------------------------|------------------|---------------|---------|
| openssl | [openssl.org](https://www.openssl.org/) | [openssl/openssl](https://github.com/openssl/openssl) | Robust, full-featured toolkit implementing the SSL/TLS protocols and utilities. | [tls, ssl, crypto, toolkit, c] | 2026 | 1998 | 25k+ |
| gnutls-cli | [gnutls.org](https://gnutls.org/) | [gnutls/gnutls](https://github.com/gnutls/gnutls) | Command-line client to establish and test TLS connections to remote servers. | [tls, client, gnutls, testing] | 2026 | 2000 | 1.5k+ |
| sslyze | — | [nabla-c0d3/sslyze](https://github.com/nabla-c0d3/sslyze) | Fast and comprehensive SSL/TLS server scanning library and CLI tool. | [tls, scanner, python, library] | 2026 | 2012 | 3.5k+ |
| sslscan | — | [rbsec/sslscan](https://github.com/rbsec/sslscan) | Tests SSL/TLS services to report supported cipher suites and protocol versions. | [tls, scanner, cipher, c] | ~2025 | 2005 | 2k+ |
| testssl.sh | — | [drwetter/testssl.sh](https://github.com/drwetter/testssl.sh) | Bash script to test TLS/SSL encryption on any port with detailed vulnerability checks. | [tls, scanner, bash, offline] | 2026 | 2014 | 8k+ |
| cipherscan | — | [mozilla/cipherscan](https://github.com/mozilla/cipherscan) | Simple tool to discover supported SSL/TLS cipher suites on a target. | [tls, cipher, scanner, python] | ~2020 | 2015 | 1k+ |
| spiped | [tarsnap.com/spiped.html](https://www.tarsnap.com/spiped.html) | — | Utility for creating symmetrically encrypted and authenticated network pipes. | [encryption, tunnel, pipe, c] | ~2023 | 2011 | — |
| Certbot | [certbot.eff.org](https://certbot.eff.org/) | [certbot/certbot](https://github.com/certbot/certbot) | EFF tool to automatically obtain and renew Let's Encrypt certificates. | [certificate, letsencrypt, automation, python] | 2026 | 2015 | 30k+ |
| mkcert | — | [FiloSottile/mkcert](https://github.com/FiloSottile/mkcert) | Zero-config tool to generate locally-trusted development certificates. | [certificate, dev, local, go] | 2026 | 2018 | 50k+ |
| certstrap | — | [square/certstrap](https://github.com/square/certstrap) | Tools to bootstrap your own certificate authority and sign certificates. | [ca, certificate, bootstrap, go] | ~2021 | 2015 | 2k+ |
| Sublert | — | [yassineaboukir/sublert](https://github.com/yassineaboukir/sublert) | Monitors certificate transparency logs for new subdomains of watched domains. | [subdomain, monitoring, ct, python] | ~2023 | 2020 | 1k+ |
| mkchain | — | [trimstray/mkchain](https://github.com/trimstray/mkchain) | Tool to build and verify a valid SSL/TLS certificate chain from PEM files. | [certificate, chain, builder, bash] | ~2022 | 2018 | 500+ |
| ssl-cert-check | — | [Matty9191/ssl-cert-check](https://github.com/Matty9191/ssl-cert-check) | Simple Nagios-compatible script to check SSL certificate expiration dates. | [certificate, expiration, monitoring, perl] | ~2020 | 2010 | 300+ |
[↑ Back to Top](#ssltls--web-security-tools)
</details>
<details>
<summary>Configuration Generators & Helpers</summary>
### Configuration Generators & Helpers
Tools to generate secure cipher suites, DH params, CAA records, and server configs.
| Name | Vendor/Webpage | GitHub Repo | Brief Description | Tags | Latest Commit | Creation Date | Stars |
|-------------------------------|-----------------------------------------------------|------------------------------------------|-----------------------------------------------------------------------------------|-------------------------------------------|---------------|---------------|-------|
| cipherli.st | [syslink.pl/cipherlist](https://syslink.pl/cipherlist) | — | Provides strong cipher suite configurations for Apache, Nginx, and Lighttpd. | [cipher, config, tls, server] | — | 2014 | — |
| Mozilla SSL Config Generator | [ssl-config.mozilla.org](https://ssl-config.mozilla.org/) | — | Generates secure TLS configurations following Mozilla guidelines for servers. | [tls, config, generator, mozilla, server] | — | 2016 | — |
| dhtool | [2ton.com.au/dhtool](https://2ton.com.au/dhtool/) | — | Generates strong Diffie-Hellman parameters to improve forward secrecy. | [dhparam, pfs, tls, generator] | — | 2015 | — |
| CAA Record Helper | [sslmate.com/caa](https://sslmate.com/caa/) | — | Generates proper Certificate Authority Authorization (CAA) DNS records. | [caa, dns, generator, certificate] | — | 2017 | — |
[↑ Back to Top](#ssltls--web-security-tools)
</details>
<details>
<summary>Certificate Transparency & Certificate Resources</summary>
### Certificate Transparency & Certificate Resources
Search, monitor, and stream CT logs; CA databases.
| Name | Vendor/Webpage | GitHub Repo | Brief Description | Tags | Latest Commit | Creation Date | Stars |
|-------------------------------|-----------------------------------------------------|------------------------------------------|-----------------------------------------------------------------------------------|-------------------------------------------|---------------|---------------|-------|
| crt.sh | [crt.sh](https://crt.sh/) | — | Search engine for certificates logged in public Certificate Transparency logs. | [ct, transparency, search, certificate] | — | 2015 | — |
| CERTSTREAM | [certstream.calidog.io](https://certstream.calidog.io/) | [Calidog/certstream](https://github.com/CaliDog/certstream) | Real-time streaming service for Certificate Transparency log updates. | [ct, transparency, stream, real-time] | 2025-11-20 | 2018 | ~400 |
| Common CA Database (CCADB) | [ccadb.my.salesforce-sites.com](https://ccadb.my.salesforce-sites.com/) | — | Repository of Certificate Authority information, roots, and intermediates. | [ca, certificate, database, root] | — | 2017 | — |
[↑ Back to Top](#ssltls--web-security-tools)
</details>
<details>
<summary>Testing & Demo Sites</summary>
### Testing & Demo Sites
Intentionally flawed setups, edge-case demos, and client compatibility testers.
| Name | Vendor/Webpage | GitHub Repo | Brief Description | Tags | Latest Commit | Creation Date | Stars |
|-------------------------------|-----------------------------------------------------|------------------------------------------|-----------------------------------------------------------------------------------|-------------------------------------------|---------------|---------------|-------|
| badssl.com | [badssl.com](https://badssl.com/) | — | Site with intentionally broken SSL/TLS setups for testing client behavior. | [tls, testing, badssl, client] | — | 2015 | — |
| tlsfun.de | [tlsfun.de](https://tlsfun.de/) | — | Collection of live demos and tests for various TLS/SSL protocol edge cases. | [tls, demo, testing, protocol] | — | 2016 | — |
| Cipher suite compatibility | [ssllabs.com/ssltest/viewMyClient.html](https://www.ssllabs.com/ssltest/viewMyClient.html) | — | Tests TLS cipher and protocol compatibility from your current browser/client. | [tls, compatibility, client, browser] | — | 2011 | — |
[↑ Back to Top](#ssltls--web-security-tools)
</details>
<details>
<summary>Web Security Headers & Policies</summary>
### Web Security Headers & Policies
CSP analyzers, HSTS/CSP monitoring, adoption trackers, and security.txt.
| Name | Vendor/Webpage | GitHub Repo | Brief Description | Tags | Latest Commit | Creation Date | Stars |
|-------------------------------|-----------------------------------------------------|------------------------------------------|-----------------------------------------------------------------------------------|-------------------------------------------|---------------|---------------|-------|
| Report URI | [report-uri.com](https://report-uri.com/) | — | Monitors CSP, HPKP, HSTS, and certificate transparency policy violations. | [csp, hsts, monitoring, reporting] | — | 2015 | — |
| CSP Evaluator | [csp-evaluator.withgoogle.com](https://csp-evaluator.withgoogle.com/) | — | Analyzes and scores the effectiveness of Content Security Policies. | [csp, security, policy, analyzer] | — | 2018 | — |
| Useless CSP | [github.com/0xInfection/Useless-CSP](https://github.com/0xInfection/Useless-CSP) | [0xInfection/Useless-CSP](https://github.com/0xInfection/Useless-CSP) | Collection exposing weak or useless CSP implementations on major websites. | [csp, security, list, github] | 2023-04-12 | 2020 | ~200 |
| Why No HTTPS? | [whynohttps.com](https://www.whynohttps.com/) | — | Tracks top websites lacking automatic HTTP to HTTPS redirection. | [https, adoption, tracking, list] | — | 2018 | — |
| security.txt | [securitytxt.org](https://securitytxt.org/) | — | Standard and generator for security contact/policy disclosure on websites. | [securitytxt, policy, contact, standard] | — | 2017 | — |
[↑ Back to Top](#ssltls--web-security-tools)
</details>
<details>
<summary>Miscellaneous Resources</summary>
### Miscellaneous Resources
Cipher databases, TLS cipher search, and other utilities.
| Name | Vendor/Webpage | GitHub Repo | Brief Description | Tags | Latest Commit | Creation Date | Stars |
|-------------------------------|-----------------------------------------------------|------------------------------------------|-----------------------------------------------------------------------------------|-------------------------------------------|---------------|---------------|-------|
| TLS Cipher Suite Search | [ciphersuite.info](https://ciphersuite.info/) | — | Searchable database of TLS cipher suites with security and support details. | [cipher, tls, search, database] | — | 2019 | — |
[↑ Back to Top](#ssltls--web-security-tools)
</details>

View File

@ -0,0 +1,12 @@
#### Vulnerability & Exploit Databases
| Name | Vendor/Webpage | GitHub Repo | Brief Description | Tags | Latest Commit |
|---------------|-----------------------------------------|--------------------------------------|-----------------------------------------------------------------------------------|-------------------------------------------|------------------------|
| CVE Mitre | [https://cve.mitre.org/](https://cve.mitre.org/) | [CVEProject](https://github.com/CVEProject) (various repos) | Official program that identifies, defines, and catalogs publicly disclosed cybersecurity vulnerabilities. | [cve, vuln-db, official, reference] | Active (ongoing CVE assignments) |
| CVE Details | [https://www.cvedetails.com/](https://www.cvedetails.com/) | — | Enhanced CVE database with advisories, exploits, tools, source code changes, and vulnerability statistics. | [cve, vuln-db, statistics, exploits] | Daily updates (e.g., 2026-03-07) |
| Exploit DB | [https://www.exploit-db.com/](https://www.exploit-db.com/) | [offensive-security/exploitdb](https://github.com/offensive-security/exploitdb) | CVE-compliant archive of public exploits, vulnerable software details, and proof-of-concepts. | [exploits, vuln-db, archive, pentest] | Recent (e.g., 2026-03-03) |
| 0day.today | [https://0day.today/](https://0day.today/) | — | Exploit marketplace for buying/selling zero-day exploits and vulnerabilities. | [exploits, market, zeroday, paid] | Active marketplace (ongoing listings) |
| Sploitus | [https://sploitus.com/](https://sploitus.com/) | — | Search engine aggregating exploits and hacking tools from multiple sources. | [exploits, search, aggregator, tools] | Active (real-time indexing) |
| CXSecurity | [https://cxsecurity.com/exploit/](https://cxsecurity.com/exploit/) | — | Free vulnerability and exploit database with CVE links and author credits. | [vuln-db, exploits, free, archive] | Recent (March 2026 entries) |
| Vulncode-DB | [https://www.vulncode-db.com/](https://www.vulncode-db.com/) | [google/vulncode-db](https://github.com/google/vulncode-db) | Database of vulnerabilities with corresponding source code snippets when available. | [vuln-db, source-code, code-vuln, reference] | Archived (2023-03-08) |
| cveapi | [https://cveapi.com/](https://cveapi.com/) | — (no active public repo found) | Free API providing detailed CVE data from NIST NVD feeds (no auth required). | [cve, api, vuln-data, free] | Deprecated (2023-12-15; no new data) |

View File

@ -0,0 +1,6 @@
|Name|Vendor/Webpage|GitHub Repo|Brief Description|Tags|Latest Commit|
|---|---|---|---|---|---|
|PuTTY|[https://www.putty.org/](https://www.putty.org/)|— (official mirrors; e.g. [github/putty](https://github.com/github/putty) archived)|SSH and telnet client with GUI, key auth, tunneling, and session management.|[ssh, client, telnet, gui, windows]|~2023 (archived; forks active)|
|Mosh|[https://mosh.org/](https://mosh.org/)|[mobile-shell/mosh](https://github.com/mobile-shell/mosh)|SSH wrapper for persistent, roaming sessions over intermittent connections with predictive local echo.|[ssh, remote, persistent, roaming, cli]|~2022 (stable; occasional fixes)|
|Eternal Terminal|[https://eternalterminal.dev/](https://eternalterminal.dev/)|[MisterTea/EternalTerminal](https://github.com/MisterTea/EternalTerminal)|Reconnectable SSH-like shell with mouse/tmux support and low-latency over unstable links.|[ssh, remote, reconnect, tmux, cli]|~Feb 2026 (recent fixes)|
|mRemoteNG|[https://mremoteng.org/](https://mremoteng.org/)|— (source on SourceForge/GitHub mirrors)|Multi-tabbed, tabbed remote connection manager (fork of mRemote) supporting SSH, RDP, VNC.|[remote, manager, multi-protocol, gui, windows]|Active (ongoing releases)|

View File

@ -0,0 +1,10 @@
# Database Clients & Query Tools
Universal and specialized CLI clients for databases.
All entries follow → [TOOL-TABLE-SCHEMA.md](../../TOOL-TABLE-SCHEMA.md)
| Name | Vendor/Webpage | GitHub Repo | Brief Description | Tags | Latest Commit | Creation Date | Stars |
|------|----------------|-------------|-------------------|------|---------------|---------------|-------|
| usql | https://github.com/xo/usql | https://github.com/xo/usql | Universal command-line interface for SQL databases. | sql, cli, universal | Active | - | High |
| pgcli | https://github.com/dbcli/pgcli | https://github.com/dbcli/pgcli | Postgres CLI with autocompletion. | postgres, cli | Active | - | High |

View File

@ -0,0 +1,17 @@
# ⚡ HTTP Benchmarking & Load Testing Tools
Tools for performance testing, load generation, latency measurement, simulated high traffic, and stress / slow HTTP attack testing on web servers.
| Name | Vendor/Webpage | GitHub Repo | Brief Description | Tags | Latest Commit | Creation Date | Stars |
|---------------|-----------------------------------------|------------------------------------------------------|-----------------------------------------------------------------------------------|-------------------------------------------|------------------|-----------------|------------------------|
| ab | https://httpd.apache.org/ | — | Single-threaded CLI tool for basic HTTP server benchmarking. | benchmark, http, apache, cli, c | legacy | 1995 | — |
| siege | https://www.joedog.org/siege-home/ | — | HTTP load tester and benchmarking utility with concurrency support. | load, testing, benchmark, http, c | ~2025 | 1999 | — |
| wrk | — | [wg/wrk](https://github.com/wg/wrk) | Modern high-performance HTTP benchmarking tool using evented I/O. | benchmark, http, load, cli, c, lua | ~2025 | 2012-09-10 | 37.8k as of 2026-03 |
| wrk2 | — | [giltene/wrk2](https://github.com/giltene/wrk2) | wrk variant with constant throughput and precise latency recording. | benchmark, http, latency, cli, c | ~2024 | 2015-03-20 | 4.1k as of 2026-03 |
| vegeta | — | [tsenart/vegeta](https://github.com/tsenart/vegeta) | Modern HTTP load tester with constant rate, latency histograms, and JSON output. | benchmark, http, load, cli, go | ~2026 | 2013-10-29 | 23.2k as of 2026-03 |
| bombardier | — | [codesenberg/bombardier](https://github.com/codesenberg/bombardier) | Fast cross-platform HTTP/1.x & HTTP/2 benchmarking tool written in Go. | benchmark, http, load, cli, go | ~2025 | 2016-02-14 | 5.6k as of 2026-03 |
| gobench | — | [cmpxchg16/gobench](https://github.com/cmpxchg16/gobench) | Simple HTTP/HTTPS load testing and benchmarking tool in Go. | benchmark, http, load, cli, go | low activity | 2015-08-12 | ~1.1k as of 2026-03 |
| hey | — | [rakyll/hey](https://github.com/rakyll/hey) | Modern ApacheBench (ab) replacement; HTTP load generator with good concurrency. | benchmark, http, load, cli, go | ~2024 | 2015-11-20 | 17.4k as of 2026-03 |
| boom | — | [tarekziade/boom](https://github.com/tarekziade/boom) | Quick HTTP smoke-test tool for web app deployments and simple load checks. | testing, http, smoke, cli, python | low activity | 2012-04-15 | 1.3k as of 2026-03 |
| SlowHTTPTest | — | [shekyan/slowhttptest](https://github.com/shekyan/slowhttptest) | Application-layer DoS simulation via slow HTTP headers/requests/POSTs. | dos, http, slowloris, testing, security, c | ~2024 | 2011-06-05 | 2.9k as of 2026-03 |
| h2spec | — | [summerwind/h2spec](https://github.com/summerwind/h2spec) | Conformance testing suite for HTTP/2 server implementations. | http2, testing, conformance, cli, go | 2020-08-04 | 2015-04-28 | 1.4k as of 2026-03 |

View File

@ -0,0 +1,13 @@
# 🌐 Text-Based & Headless Browsers
Terminal-friendly browsers (text/TUI) and curated resources for headless browsers—useful for scraping, automation, testing, lightweight access, or low-resource environments.
# 🌐 Text-Based & Headless Browsers
Terminal-friendly browsers (text/TUI) and curated resources for headless browsers—useful for scraping, automation, testing, lightweight access, or low-resource environments.
| Name | Vendor/Webpage | GitHub Repo | Brief Description | Tags | Creation Date | Latest Commit | Stars |
| ---------------- | ------------------------- | ------------------------------------------------------------------------------- | --------------------------------------------------------------------------------------- | ----------------------------------- | ------------- | ------------- | ----- |
| Lynx | https://lynx.browser.org/ | — | Classic, lightweight text-based browser for the web; keyboard-driven, no JS by default. | browser, text, terminal, classic, c | 1992-07-22 | 2024-05-31 | — |
| Browsh | — | [browsh-org/browsh](https://github.com/browsh-org/browsh) | Modern text-based browser with real-time rendering, JS support, and interactive TUI. | browser, text, tui, modern, go | 2016-04-23 | 2025-07-11 | 18.6k |
| HeadlessBrowsers | — | [dhamaniasad/HeadlessBrowsers](https://github.com/dhamaniasad/HeadlessBrowsers) | Curated awesome-style list of headless browsers and automation tools. | headless, browser, list, resource | 2015-11-11 | 2025-10-12 | 6.5k |

View File

@ -0,0 +1,13 @@
# 🔍 HTTP Clients & Inspectors
Modern CLI clients and tools for crafting, inspecting, profiling, and troubleshooting HTTP/HTTPS requests.
| Name | Vendor/Webpage | GitHub Repo | Brief Description | Tags | Latest Commit | Creation Date | Stars |
|-----------|-----------------------------|------------------------------------------------------|-----------------------------------------------------------------------------------|-------------------------------------------|------------------|-----------------|------------------------|
| curl | https://curl.se/ | — | Command line tool and library for transferring data with URLs supporting many protocols. | http, client, cli, curl, c | 2026-01 (8.18.0) | 1996 | — |
| kurly | — | [davidjpeacock/kurly](https://github.com/davidjpeacock/kurly) | Alternative to curl written in Golang (low activity / possibly archived). | http, client, cli, go, alternative | ~2018 | ~2017 | — (low visibility) |
| HTTPie | https://httpie.io/ | [httpie/cli](https://github.com/httpie/cli) | User-friendly HTTP client with JSON support, syntax highlighting, sessions, plugins. | http, client, cli, modern, python | 2024-12-17 | 2019-08-30 | 37.6k as of 2026-03 |
| wuzz | — | [asciimoo/wuzz](https://github.com/asciimoo/wuzz) | Interactive CLI TUI tool for crafting and inspecting HTTP requests live. | http, inspector, tui, cli, go | ~2021 | ~2016 | 10.7k as of 2026-03 |
| httpstat | — | [reorx/httpstat](https://github.com/reorx/httpstat) | Visualizes curl timing statistics with beautiful timelines and breakdowns. | http, stats, visualization, cli, python | ~2020 | ~2016 | 6.3k as of 2026-03 |
| htrace.sh| — | [trimstray/htrace.sh](https://github.com/trimstray/htrace.sh) | Swiss Army knife bash script for HTTP/HTTPS troubleshooting and profiling. | http, profiler, troubleshooting, bash, cli| ~2025 | ~2018 | 3.9k as of 2026-03 |
| Hurl | https://hurl.dev/ | [Orange-OpenSource/hurl](https://github.com/Orange-OpenSource/hurl) | Run and test HTTP requests defined in plain-text format; supports chaining and assertions. | http, testing, cli, hurl, rust | ~2026 | ~2020 | — (check repo) |

View File

@ -0,0 +1,10 @@
# 🔐 Web Security, Hardening & Scanning Tools
Utilities for hardening server configs, scanning security headers/SSL/TLS setups, and basic web reconnaissance (directory/DNS busting).
| Name | Vendor/Webpage | GitHub Repo | Brief Description | Tags | Latest Commit | Creation Date | Stars |
|-------------------|----------------|------------------------------------------------------|-----------------------------------------------------------------------------------|-------------------------------------------|------------------|-----------------|------------------------|
| h2t | — | [gildasio/h2t](https://github.com/gildasio/h2t) | Simple tool to scan websites and suggest security headers (with HTTP/2 focus). | http, hardening, security, headers, cli, python | low activity | ~2019 | 410 as of 2026-03 |
| ssllabs-scan | — | [ssllabs/ssllabs-scan](https://github.com/ssllabs/ssllabs-scan) | CLI client for Qualys SSL Labs API to assess and grade SSL/TLS configurations. | ssl, tls, scan, security, api, cli, go | 2024-03-27 | 2014 | 1.8k as of 2026-03 |
| http-observatory | — | [mozilla/http-observatory](https://github.com/mozilla/http-observatory) | CLI tool to scan websites for security headers and best practices (Mozilla Observatory). | security, headers, observatory, scan, cli, python | 2024-10-22 | 2016 | 1.9k as of 2026-03 |
| gobuster | — | [OJ/gobuster](https://github.com/OJ/gobuster) | Fast directory/file, DNS, and virtual host brute-forcing/busting tool. | busting, directory, dns, recon, cli, go | 2026-01-13 | ~2017 | 13.5k as of 2026-03 |

View File

@ -0,0 +1,19 @@
# System Monitoring & Tracing Index
Tools, utilities, and resources for system observability: log collection/analysis/visualization, metrics monitoring, distributed tracing, performance profiling, debugging utilities, real-time diagnostics, and alerting integrations — focused on production and troubleshooting workflows.
All tool/resource tables in this section **must** follow → [TOOL-TABLE-SCHEMA.md](../../../../TOOL-TABLE-SCHEMA.md)
## Contents
- **[Log Analyzers.md](./Log%20Analyzers.md)** — Log parsers, aggregators, visualizers, grep alternatives, structured log processors (e.g., jq patterns, goaccess, lnav, glogg, etc.)
- **[system-diagnostics-debuggers.md](./system-diagnostics-debuggers.md)** — Low-level system debuggers, strace/ltrace variants, perf tools, eBPF-based tracers, core dump analyzers, process inspectors
## Quick Navigation
- ↑ [Back to Sysadmin / DevOps Index](../INDEX.md)
- ↑ [Back to Tools Root](../../../_INDEX.md)
- ↑ [Back to Repository Root../../../../README.md)
- → [Schema Rules](../../../../TOOL-TABLE-SCHEMA.md)
- → [Navigation SOP](../../../../SOP-Navigation-and-Layout.md)
- → [Security Index](../../../security/INDEX.md)

View File

@ -0,0 +1,10 @@
# 📊 Log Analyzers
CLI tools for parsing, viewing, aggregating, real-time monitoring, and analyzing log files/streams (general, web server, nginx-specific).
| Name | Vendor/Webpage | GitHub Repo | Brief Description | Tags | Latest Commit | Creation Date | Stars |
|-----------------|-----------------------------|------------------------------------------------------|-----------------------------------------------------------------------------------|-------------------------------------------|------------------|-----------------|------------------------|
| angle-grinder | — | [rcoh/angle-grinder](https://github.com/rcoh/angle-grinder) | CLI tool to parse, aggregate, compute stats (sum/avg/percentiles), and slice/dice logs in real time (JSON/logfmt/generic). | log-analysis, cli, aggregation, real-time, rust | 2025-03-29 | ~2018 | 3.7k as of 2026-03 |
| lnav | https://lnav.org/ | [tstack/lnav](https://github.com/tstack/lnav) | Advanced terminal log navigator with auto-format detection, merging, tailing, search, filtering, SQLite queries, and TUI. | log-analysis, cli, tui, viewer, search, sqlite, c++ | 2026-03-07 | 2009-09-13 | 9.7k as of 2026-03 |
| GoAccess | https://goaccess.io/ | [allinurl/goaccess](https://github.com/allinurl/goaccess) | Real-time interactive terminal/web analyzer for HTTP access logs (visitors, requests, bandwidth, referrers; HTML/JSON/CSV output). | log-analysis, cli, real-time, web-logs, http, analytics, viewer, c | 2026-03-03 | 2009 | 20.3k as of 2026-03 |
| ngxtop | — | [lebinh/ngxtop](https://github.com/lebinh/ngxtop) | Real-time top-like metrics viewer for nginx (and compatible) access logs (requests, status, upstreams, bandwidth). | log-analysis, cli, real-time, nginx, web-logs, monitoring, python | 2026-03-01 | 2014-03-24 | 6.5k as of 2026-03 |

View File

@ -0,0 +1,27 @@
# System Diagnostics / Debuggers / Performance Analysis
Classic and modern tools for tracing, debugging, profiling, and system-level diagnostics on Linux/Unix-like systems.
| Name | Vendor/Webpage | GitHub Repo | Brief Description | Tags | Latest Commit | Creation Date | Stars |
| -------------------- | -------------------------------------------- | ------------------------------------------------------------------------- | ------------------------------------------------------------------------------ | ------------------------------------------------------- | ---------------- | ------------- | ----- |
| strace | https://strace.io/ | [strace/strace](https://github.com/strace/strace) | Diagnostic, debugging, and instructional userspace syscall tracer for Linux. | [tracer, debugger, syscall, linux, cli, c] | 2026-02-19 | 1992-03-14 | 2.6k |
| DTrace | http://dtrace.org/ | — | Dynamic tracing framework for performance analysis and troubleshooting. | [tracer, performance, kernel, solaris, bsd, dtrace] | ~2025-12 | 2001 | — |
| ltrace | — | — | Library call tracer for programs' calls to shared libraries. | [tracer, library, debugger, linux, cli, c] | — | ~1997 | — |
| ptrace-burrito | — | [brainsmoke/ptrace-burrito](https://github.com/brainsmoke/ptrace-burrito) | Friendly high-level wrapper around ptrace(2) for process tracing. | [ptrace, wrapper, debugger, cli, rust] | ~2023 | 2019 | ~100 |
| perf-tools | http://www.brendangregg.com/perf-tools.html | [brendangregg/perf-tools](https://github.com/brendangregg/perf-tools) | Performance analysis scripts using Linux perf_events and ftrace. | [perf, ftrace, tracing, performance, bash, linux] | ~2024-05 | 2014 | 2.8k |
| bpftrace | https://bpftrace.org/ | [iovisor/bpftrace](https://github.com/iovisor/bpftrace) | High-level tracing language for Linux eBPF. | [ebpf, tracing, bpf, performance, cli, cpp] | 2026-03 (active) | 2018 | 8.5k |
| sysdig | https://sysdig.com/ | [draios/sysdig](https://github.com/draios/sysdig) | System exploration and troubleshooting with deep container support. | [tracing, monitoring, container, ebpf, cli, cpp] | 2026-02 | 2014 | 8.1k |
| Valgrind | https://valgrind.org/ | — | Instrumentation framework for memory debugging, profiling, and leak detection. | [debugger, profiler, memory, valgrind, c] | ~2025-11 | 2002 | — |
| gperftools | https://google.github.io/gperftools/ | [gperftools/gperftools](https://github.com/gperftools/gperftools) | High-performance malloc plus CPU/heap profilers (pprof). | [profiler, malloc, performance, cpp, google] | 2026-01 | 2005 | 4.2k |
| glances | https://nicolargo.github.io/glances/ | [nicolargo/glances](https://github.com/nicolargo/glances) | Cross-platform curses-based system monitoring dashboard. | [monitoring, dashboard, python, cli, cross-platform] | 2026-03 | 2012 | 25k |
| htop | — | [htop-dev/htop](https://github.com/htop-dev/htop) | Interactive process viewer, improved version of top. | [monitor, process, viewer, cli, c] | 2026-02 | 2004 | 6.5k |
| bashtop | — | [aristocratos/bashtop](https://github.com/aristocratos/bashtop) | Linux resource monitor written in pure Bash. | [monitor, bash, resource, cli, linux] | ~2023 | 2019 | 10k |
| nmon | http://nmon.sourceforge.net/ | — | Performance monitoring and data analysis tool (single binary). | [monitor, performance, aix, linux, cli, c] | ~2024 | 1990s | — |
| atop | https://www.atoptool.nl/ | — | ASCII full-system performance monitor with process-level logging. | [monitor, performance, logging, cli, c] | 2025-10 | 2003 | — |
| lsof | — | — | Lists open files and the processes using them. | [files, process, open, cli, c] | — | 1990s | — |
| FlameGraph | http://www.brendangregg.com/flamegraphs.html | [brendangregg/FlameGraph](https://github.com/brendangregg/FlameGraph) | Stack trace visualizer for profiled data (flame graphs). | [visualizer, profiler, flamegraph, perl, visualization] | 2026-01 | 2011 | 17k |
| lsofgraph | — | [zevv/lsofgraph](https://github.com/zevv/lsofgraph) | Converts lsof output to graphs of FIFO/UNIX socket connections. | [graph, visualization, lsof, perl] | ~2020 | 2015 | ~200 |
| rr | https://rr-project.org/ | [mozilla/rr](https://github.com/mozilla/rr) | Lightweight record-and-replay debugger for deterministic execution replay. | [debugger, replay, record, cpp, linux] | 2026-02 | 2011 | 9.8k |
| Performance Co-Pilot | https://pcp.io/ | — | System performance analysis toolkit with metrics collection and visualization. | [monitoring, metrics, performance, pcp, c] | ~2025-09 | 1990s | — |
| hexyl | — | [sharkdp/hexyl](https://github.com/sharkdp/hexyl) | Colorful command-line hex viewer with highlighting. | [hex, viewer, cli, rust] | 2025-12 | 2017 | 9.5k |
| Austin | — | [p403n1x87/austin](https://github.com/p403n1x87/austin) | Python frame stack sampler and profiler for CPython. | [profiler, python, sampler, cli, rust] | 2026-01 | 2020 | 1.2k |

View File

@ -0,0 +1,7 @@
## Filesystem & Disk
- Disk usage/analyzers, mount/umount helpers, secure delete/wipe, inotify tools
|Name|Vendor/Webpage|GitHub Repo|Brief Description|Tags|Latest Commit|
|---|---|---|---|---|---|
|fd|—|[sharkdp/fd](https://github.com/sharkdp/fd)|Simple, fast and user-friendly alternative to find.|[find, search, filesystem, rust, cli]|2026-02-15|
|ncdu|[https://dev.yorhel.nl/ncdu](https://dev.yorhel.nl/ncdu)|—|Easy to use, fast disk usage analyzer with curses UI.|[disk, usage, analyzer, tui, cli]|~2025|

View File

@ -0,0 +1,33 @@
# 🐚 Shells & Prompting
Interactive shells, modern enhancers, customizable prompts, plugins, fuzzy finders, and directory jump tools for improved CLI productivity and workflow.
| Name | Vendor/Webpage | GitHub Repo | Brief Description | Tags | Latest Commit | Creation Date | Stars |
|-------------------|-----------------------------|------------------------------------------------------|-----------------------------------------------------------------------------------|-------------------------------------------|------------------|-----------------|------------------------|
| GNU Bash | https://www.gnu.org/software/bash/ | — | sh-compatible shell with ksh/csh-inspired features; the default on most Unix-like systems. | shell, bash, cli, scripting, gnu | 2025-12 | 1989 | — |
| Zsh | https://www.zsh.org/ | — | Advanced interactive shell and powerful scripting language with extensive completion. | shell, zsh, interactive, cli, scripting | 2025-11 | 1990 | — |
| Starship | https://starship.rs | [starship/starship](https://github.com/starship/starship) | Fast, minimal, highly customizable cross-shell prompt written in Rust. | prompt, rust, cross-shell, productivity, customizable | 2026-03-05 | 2019 | 54.6k as of 2026-03 |
| powerlevel10k | — | [romkatv/powerlevel10k](https://github.com/romkatv/powerlevel10k) | Very fast Zsh theme with extensive customization and instant prompt wizard. | zsh, theme, prompt, performance, fast | 2026-01-28 | 2019-03 | ~40k as of 2026-03 |
| Oh My Zsh | https://ohmyz.sh/ | [ohmyzsh/ohmyzsh](https://github.com/ohmyzsh/ohmyzsh) | Popular community framework for Zsh configuration with 300+ plugins and 140+ themes. | zsh, framework, plugins, productivity, themes | 2026-03-06 | 2009 | 185k as of 2026-03 |
## Shell Plugins
Frecency jumpers, fuzzy finders, autosuggestions, syntax highlighting, and other lightweight Zsh extensions.
| Name | Vendor/Webpage | GitHub Repo | Brief Description | Tags | Latest Commit | Creation Date | Stars |
|----------------------------|----------------|------------------------------------------------------|-----------------------------------------------------------------------------------|-------------------------------------------|------------------|-----------------|------------------------|
| z | — | [rupa/z](https://github.com/rupa/z) | Frecency-based directory jumper using cd history for fast navigation. | navigation, jump, shell, zsh, bash | 2023-12-09 | ~2010 | ~16k as of 2026-03 |
| fzf | — | [junegunn/fzf](https://github.com/junegunn/fzf) | General-purpose command-line fuzzy finder for files, commands, git, etc. | fuzzy, finder, cli, productivity, go | 2026-03-07 | 2015 | 78.4k as of 2026-03 |
| zsh-autosuggestions | — | [zsh-users/zsh-autosuggestions](https://github.com/zsh-users/zsh-autosuggestions) | Fish-style autosuggestions for Zsh based on history. | zsh, plugin, autosuggest, completion | 2025-06 | 2014 | ~30k as of 2026-03 |
| zsh-syntax-highlighting | — | [zsh-users/zsh-syntax-highlighting](https://github.com/zsh-users/zsh-syntax-highlighting) | Fish-like syntax highlighting for Zsh commands in the terminal. | zsh, plugin, highlighting, syntax | 2025-04 | 2012 | ~20k as of 2026-03 |
## Terminal & Multiplexing Utils
Fast modern replacements for classic CLI tools (grep/find/cat/diff) often used in shells/terminals; includes search, navigation, viewing, and diffing enhancers.
| Name | Vendor/Webpage | GitHub Repo | Brief Description | Tags | Latest Commit | Creation Date | Stars |
|-----------|----------------|------------------------------------------------------|-----------------------------------------------------------------------------------|-------------------------------------------|------------------|-----------------|------------------------|
| ripgrep | — | [BurntSushi/ripgrep](https://github.com/BurntSushi/ripgrep) | Recursively searches directories very fast while respecting .gitignore (rg command). | search, grep-alternative, rust, cli | 2026-02 | 2016-02-27 | 60.6k as of 2026-03 |
| fd | — | [sharkdp/fd](https://github.com/sharkdp/fd) | Simple, fast, user-friendly alternative to find with colorized output and ignores. | find, filesystem, rust, cli | 2026-01 | ~2017 | ~35k as of 2026-03 |
| bat | — | [sharkdp/bat](https://github.com/sharkdp/bat) | cat clone with syntax highlighting, Git integration, and line numbers. | syntax-highlighter, viewer, rust, cli | 2026-03 | ~2017 | ~50k as of 2026-03 |
| delta | — | [dandavison/delta](https://github.com/dandavison/delta) | Beautiful syntax-highlighting pager for git diff and other tools. | diff, git, pager, rust, cli | 2026-02 | ~2019 | ~25k as of 2026-03 |

View File

@ -0,0 +1,16 @@
# 🖥️ Terminal Emulators, File Managers & Multiplexers
Modern and classic terminal emulators (GPU-accelerated/fast), dropdown/tiling terminals, TUI file managers (dual-pane/minimal/vim-like), and session multiplexers (tmux/screen) plus cluster tools.
| Name | Vendor/Webpage | GitHub Repo | Brief Description | Tags | Latest Commit | Creation Date | Stars |
|-------------------|---------------------------------------|------------------------------------------------------|-----------------------------------------------------------------------------------|-------------------------------------------|------------------|-----------------|------------------------|
| Alacritty | https://alacritty.org/ | [alacritty/alacritty](https://github.com/alacritty/alacritty) | Cross-platform, GPU-accelerated terminal emulator focused on simplicity and speed. | terminal, gpu, fast, cross-platform, rust | 2026-03-05 | 2017 | 62.8k as of 2026-03 |
| Guake | https://github.com/Guake/guake | [Guake/guake](https://github.com/Guake/guake) | Dropdown/quake-style terminal that drops from top on hotkey (GNOME integration). | terminal, dropdown, gnome, productivity, python | 2025-11-15 | ~2008 | ~2.5k as of 2026-03 |
| Kitty | https://sw.kovidgoyal.net/kitty/ | [kovidgoyal/kitty](https://github.com/kovidgoyal/kitty) | GPU-accelerated terminal with smooth scrolling, image protocol, ligatures, kittens (plugins). | terminal, gpu, fast, images, cross-platform, python | 2026-03-05 | 2016 | ~25k as of 2026-03 |
| Midnight Commander | https://midnight-commander.org/ | [MidnightCommander/mc](https://github.com/MidnightCommander/mc) | Visual dual-pane file manager with built-in viewer, editor, and subshell support. | file-manager, tui, ncurses, classic, c | 2026-03-06 | 1994 (2009 repo)| 754 as of 2026-03 |
| nnn | — | [jarun/nnn](https://github.com/jarun/nnn) | Tiny, lightning-fast, feature-packed terminal file manager with plugins support. | file-manager, tui, minimal, c, fast | 2026-02-23 | 2016 | 21.4k as of 2026-03 |
| ranger | — | [ranger/ranger](https://github.com/ranger/ranger) | Vim-inspired console file manager with multi-pane view, previews, and extensibility. | file-manager, tui, vim-like, python | 2026-02-25 | 2009 | 17k as of 2026-03 |
| screen | https://www.gnu.org/software/screen/ | — | Full-screen window manager that multiplexes physical terminals (legacy but stable). | multiplexer, session, terminal, gnu, c | ~2024 | 1987 | — |
| Terminator | https://gnometerminator.blogspot.com/| [gnome-terminator/terminator](https://github.com/gnome-terminator/terminator) | Multi-pane terminal splitter with broadcast input, layouts, and sysadmin features. | terminal, multi-pane, splitter, gnome, python | 2025-10-20 | ~2006 | ~2.1k as of 2026-03 |
| tmux | — | [tmux/tmux](https://github.com/tmux/tmux) | Terminal multiplexer for easy session management, window/pane switching, persistence. | multiplexer, session, tmux, c, active | 2026-03-06 | 2007 | 42.7k as of 2026-03 |
| tmux-cssh | — | [peikk0/tmux-cssh](https://github.com/peikk0/tmux-cssh) | Tool for comfortable cluster SSH sessions using tmux panes (mirror of GitLab). | tmux, cssh, cluster, ssh, python | ~2023 | ~2015 | ~500 as of 2026-03 |

View File

@ -0,0 +1,9 @@
| Name | Vendor/Webpage | GitHub Repo | Brief Description | Tags | Latest Commit |
| --------- | -------------------------------------------------------------------------- | --------------------------------------------------- | -------------------------------------------------------------- | ----------------------------------------- | ------------- |
| vi | [http://ex-vi.sourceforge.net/](http://ex-vi.sourceforge.net/) | — | One of the most common text editors on Unix. | [editor, terminal, classic, unix] | — |
| vim | [https://www.vim.org/](https://www.vim.org/) | — | Highly configurable text editor built on vi. | [editor, terminal, extensible, vimscript] | ~2025 |
| emacs | [https://www.gnu.org/software/emacs/](https://www.gnu.org/software/emacs/) | — | Extensible, customizable free/libre text editor and more. | [editor, terminal, gui, lisp, extensible] | ~2025 |
| micro | — | [zyedidia/micro](https://github.com/zyedidia/micro) | Modern and intuitive terminal-based text editor. | [editor, terminal, modern, go] | 2025-12-20 |
| neovim | [https://neovim.io/](https://neovim.io/) | — | Free open source, powerful, extensible code editor (vim fork). | [editor, terminal, lua, modern] | ~2026 |
| spacemacs | [https://www.spacemacs.org/](https://www.spacemacs.org/) | — | Community-driven Emacs distribution with vim-like keybindings. | [editor, emacs, distribution, community] | ~2025 |
| spacevim | [https://spacevim.org/](https://spacevim.org/) | — | Community-driven vim distribution with plugin layers. | [editor, vim, distribution, community] | ~2025 |

0
tools/system-services.md Normal file
View File