🐧 RTK — Token-Saving CLI Proxy

RTK is a newer GitHub-trending Rust CLI tool that acts as a lightweight proxy for AI/dev commands.

Its goal is to reduce token usage on repeated development workflows, making terminal-based AI coding and automation cheaper and faster.

Why it is interesting

- Single Rust binary
- Zero-dependency style
- Built for modern AI CLI workflows
- Useful for developers using terminal agents

Install

cargo install rtk

Basic Usage

rtk --help
rtk proxy

Use RTK if you experiment with AI coding tools, terminal agents, or local automation and want to optimize repeated command context.

GitHub: https://github.com/rtk-ai/rtk

#Linux #RTK #CLI #Rust #AItools #TryHacking

RustNet — per-process network visibility

RustNet is a new Rust TUI for watching live TCP/UDP/QUIC connections and mapping each flow to the process that owns it. It is interesting because it combines Linux eBPF attribution, DPI hints, GeoIP, filters, and sandboxing in one terminal workflow.

brew install rustnet
sudo rustnet
# or: cargo install rustnet-monitor

Use it to spot noisy services, unknown egress, DNS/QUIC activity, or stale lab connections. Legal note: monitor only systems and traffic you own or are authorized to inspect.

GitHub: https://github.com/domcyrus/rustnet

#Linux #CLI #Networking #eBPF #CyberSecurity

🐧 Binsider — Analyze ELF Binaries

Binsider is a terminal tool for inspecting Linux ELF binaries with a clean TUI, hex view, strings, symbols, headers, and sections.

🔹 Why it is useful:
- Understand unknown Linux executables faster
- Explore symbols, sections, and binary metadata
- Practice reverse engineering basics from the terminal

🛠 Install:

cargo install binsider

⚡ Basic usage:

binsider ./program

🎯 Use it for:
Learning ELF internals before moving to heavier tools like Ghidra or radare2.

🔗 GitHub:
https://github.com/orhun/binsider

⚖️ Analyze only binaries you own or are authorized to inspect.

#Linux #Terminal #ReverseEngineering #EthicalHacking #TryHacking

Kali Linux Toolkit — 5 Essential Tools

Kali is powerful, but the tool matters more than the distro. Start with these legal-lab basics:

1. Nmap
Network discovery and port scanning.

nmap -sV 192.168.1.10

2. Gobuster
Find hidden web paths and DNS names.

gobuster dir -u http://target -w wordlist.txt

3. Wireshark
Inspect packets and understand traffic behavior.

4. Hydra
Password-audit logins in authorized labs only.

5. Metasploit
Learn exploitation flow and validation in test environments.

Practice rule: scan only your own machines, CTF boxes, or targets where you have written permission.

#KaliLinux #Linux #CyberSecurity #EthicalHacking #TryHacking

🕷️ Katana — Web Crawling for Recon

Katana is a fast crawling and spidering tool from ProjectDiscovery. It helps you discover URLs, endpoints, JavaScript files, forms, and hidden paths during authorized web recon.

🔹 Why it is useful:
- Builds a larger attack surface map
- Extracts URLs from pages and scripts
- Works well with other tools like httpx and nuclei

🛠 Install:

go install github.com/projectdiscovery/katana/cmd/katana@latest

⚡ Basic usage:

katana -u https://example.com -d 2

🎯 Use it for:
Finding endpoints before testing for misconfigurations or vulnerabilities.

🔗 GitHub:
https://github.com/projectdiscovery/katana

⚖️ Crawl only sites you own or have permission to test.

#Linux #KaliLinux #WebSecurity #Recon #TryHacking

Inner Warden — Guardrails for AI agents on Linux

Inner Warden is a newer self-hosted security layer for AI agents. It can screen risky terminal or MCP/tool actions before they run, watch what really happens on the Linux host with eBPF, and keep the audit trail local.

Install:

curl -fsSL https://www.innerwarden.com/install | sudo bash

Basic usage:

innerwarden setup
sudo innerwarden agent scan

Use it when coding or ops agents can touch real machines and you want visibility before a bad prompt becomes damage.

GitHub:
https://github.com/InnerWarden/innerwarden

⚖️ Monitor only systems you own or are authorized to manage.

#Linux #Security #AIAgents #eBPF #CLI #TryHacking

TInjA — Template Injection Analyzer now in Kali Linux 2025.2

TInjA is a CLI tool for detecting template injection vulnerabilities in web pages. It can identify SSTI and CSTI cases, recognize many popular template engines, and route traffic through a proxy like Burp Suite for deeper testing.

Why it matters:
- Finds server-side and client-side template injection faster
- Supports dozens of template engines across multiple languages
- Accepts raw HTTP requests, custom headers, cookies, POST data, and JSONL input
- Useful for web app pentesting and bug bounty recon

Install on Kali:

sudo apt update && sudo apt install tinja -y

Basic example:

tinja url -u 'https://target.example/search?q=FUZZ'

Use it only on systems you own or are authorized to test.

Source: Kali Linux 2025.2 + Hackmanit/TInjA

Metasploit Framework — the classic exploitation toolkit in Kali Linux

Metasploit is one of the most important tools for penetration testing. It helps security teams discover vulnerabilities, validate exploitability, run controlled tests, and document real risk instead of guessing.

What it is used for:
- Testing known vulnerabilities in authorized environments
- Building repeatable penetration testing workflows
- Running auxiliary scanners and enumeration modules
- Managing payloads, sessions, and post-exploitation checks
- Learning how real-world attack chains work in a lab

Start Metasploit on Kali:

msfconsole

Search for a module:

search type:exploit platform:linux

Show module options:

show options

Metasploit is powerful, so use it only in your own lab, CTFs, or systems where you have clear permission.

Source: Rapid7 Metasploit + Kali Linux

WPScan — WordPress Security Scanner in Kali Linux

WPScan is a popular security scanner for WordPress websites. It helps administrators and penetration testers identify risky WordPress versions, vulnerable plugins, weak configuration, and exposed information before attackers abuse it.

What it can help you check:
- WordPress core version exposure
- Vulnerable plugins and themes
- User enumeration risks
- Publicly exposed backup/config files
- Basic password-audit workflows in authorized labs

Install on Kali:

sudo apt update && sudo apt install wpscan -y

Basic scan:

wpscan --url https://target.example

Enumerate plugins:

wpscan --url https://target.example --enumerate p

Use WPScan only on WordPress sites you own, manage, or have clear written permission to test.

Source: WPScan + Kali Linux Tools

Aircrack-ng — WiFi Security Auditing Suite in Kali Linux

Aircrack-ng is a well-known suite of tools for auditing wireless network security. It is commonly used in labs to monitor WiFi traffic, test packet capture workflows, analyze handshakes, and validate whether weak wireless configurations can be improved.

What it helps you practice:
- Capturing and analyzing WiFi packets
- Monitoring nearby wireless networks in a lab
- Testing WPA/WPA2 handshake capture workflows
- Checking weak passwords against authorized captures
- Learning how wireless security attacks work defensively

Install on Kali:

sudo apt update && sudo apt install aircrack-ng -y

Check the installed version:

aircrack-ng --help

Analyze a capture file:

aircrack-ng capture.cap

Use Aircrack-ng only on networks you own or have explicit permission to test.

Source: Aircrack-ng + Kali Linux Tools

grep — Search Text Fast in Linux

grep is one of the most useful Linux commands. It searches inside files or command output and prints the lines that match a word, pattern, or regular expression. For admins, developers, and security learners, it is essential for reading logs, configs, and large text files quickly.

Basic search inside a file:

grep "error" app.log

Search recursively in a directory:

grep -R "password" /etc

Ignore uppercase/lowercase differences:

grep -i "failed" auth.log

Show line numbers:

grep -n "PermitRootLogin" /etc/ssh/sshd_config

Use grep with another command:

ps aux | grep nginx

Pro tip: combine grep with tail, journalctl, or find to investigate logs and system behavior faster.

Source: GNU grep + Linux manual pages

journalctl — Read Linux System Logs Like a Pro

journalctl is a powerful Linux command for reading logs collected by systemd-journald. Instead of digging through many log files manually, you can quickly inspect boot logs, service errors, authentication events, and recent system activity from one place.

Show recent system logs:

journalctl -n 50

Follow logs live:

journalctl -f

View logs for a specific service:

journalctl -u ssh

Show logs since today:

journalctl --since today

Check logs from the current boot:

journalctl -b

Use it when debugging Linux servers, investigating failed services, or reviewing what happened before a crash.

Pro tip: add -p err to show only errors:

journalctl -p err -b

Source: systemd journalctl manual + Linux documentation

ufw — Simple Firewall Management for Linux Servers

ufw stands for Uncomplicated Firewall. It is a friendly command-line tool for managing firewall rules on Linux servers, especially Ubuntu and Debian-based systems. Instead of writing complex low-level rules manually, you can allow or deny ports with simple commands.

Install UFW:

sudo apt update && sudo apt install ufw -y

Check firewall status:

sudo ufw status verbose

Allow SSH before enabling the firewall:

sudo ufw allow OpenSSH

Allow a web server:

sudo ufw allow 80/tcp
sudo ufw allow 443/tcp

Enable UFW:

sudo ufw enable

Deny a specific port:

sudo ufw deny 23/tcp

Important: always allow SSH first on remote servers, or you may lock yourself out.

Source: Ubuntu UFW documentation + Linux manual pages

Hydra — Login Security Testing Tool in Kali Linux

Hydra is a fast authentication testing tool used by security professionals to audit login services in authorized environments. It helps teams verify whether weak passwords, exposed services, or missing rate limits could put servers at risk.

Common defensive use cases:
- Testing password policy strength in a lab
- Checking whether SSH, FTP, or web logins have rate limiting
- Validating account lockout and monitoring rules
- Training blue teams to detect brute-force patterns
- Auditing only systems you own or are allowed to test

Install on Kali:

sudo apt update && sudo apt install hydra -y

View supported options safely:

hydra -h

Check installed version:

hydra -V

Defensive tip: protect servers with strong passwords, SSH keys, MFA where possible, rate limiting, fail2ban, and log monitoring.

Source: THC Hydra + Kali Linux Tools

Netdiscover — ARP Scanner for Local Network Discovery

Netdiscover is a lightweight network discovery tool commonly available in Kali Linux. It uses ARP requests to identify live hosts on a local network, making it useful for lab inventory, quick troubleshooting, and understanding what devices are active on the same LAN.

What it is useful for:
- Finding active devices on a local subnet
- Discovering IP and MAC addresses during lab setup
- Checking unknown devices on your own network
- Quick network mapping before deeper analysis
- Learning how ARP-based discovery works

Install on Kali:

sudo apt update && sudo apt install netdiscover -y

Scan a specific private range:

sudo netdiscover -r 192.168.1.0/24

Choose a network interface:

sudo netdiscover -i eth0 -r 192.168.1.0/24

Use Netdiscover only on networks you own, manage, or have permission to assess.

Source: Netdiscover + Kali Linux Tools