commandlinefu.com is the place to record those command-line gems that you return to again and again.
Delete that bloated snippets file you've been using and share your personal repository with the world. That way others can gain from your CLI wisdom and you from theirs too. All commands can be commented on, discussed and voted up or down.
If you have a new feature suggestion or find a bug, please get in touch via http://commandlinefu.uservoice.com/
You can sign-in using OpenID credentials, or register a traditional username and password.
First-time OpenID users will be automatically assigned a username which can be changed after signing in.
Every new command is wrapped in a tweet and posted to Twitter. Following the stream is a great way of staying abreast of the latest commands. For the more discerning, there are Twitter accounts for commands that get a minimum of 3 and 10 votes - that way only the great commands get tweeted.
Use your favourite RSS aggregator to stay in touch with the latest commands. There are feeds mirroring the 3 Twitter streams as well as for virtually every other subset (users, tags, functions,…):
Subscribe to the feed for:
Unpack and build a WebLogic 9 or 10 domain
extension to tali713's random fact generator. It takes the output & sends it to notify-osd. Display time is proportional to the lengh of the fact.
Though without infinite time and knowledge of how the site will be designed in the future this may stop working, it still will serve as a simple straight forward starting point.
This uses the observation that the only item marked as strong on the page is the single logical line that includes the italicized fact.
If future revisions of the page show failure, or intermittent failure, one may simply alter the above to read.
wget randomfunfacts.com -O - 2>/dev/null | tee lastfact | grep \<strong\> | sed "s;^.*<i>\(.*\)</i>.*$;\1;"
The file lastfact, can then be examined whenever the command fails.
Connect-back shell using Bash built-ins. Useful in a web app penetration test, if it's the case of a locked down environment, without the need for file uploads or a writable directory.
/dev/tcp and /dev/udb redirects must be enabled at compile time in Bash.
Most Linux distros enable this feature by default but at least Debian is known to disable it.
Thanks to comment if that works or not...
If you have already typed that snippet or you know you already have IO::Interface::Simple perl module, you can type only the last command :
perl -e 'use IO::Interface::Simple; my $ip=IO::Interface::Simple->new($ARGV); print $ip->address,$/;' <INTERFACE>
( The first perl command will install the module if it's not there already... )
Exit with error if script is not run in a terminal
If your script needs to be run in a terminal, this line at the top will stop it running if you absent-mindedly double-click the icon, perhaps intending to edit it. (Of course this won't help with scripts that run in the background.)
I often need to cd where no man wants to go (i.e. long path). by enabling the shell option cdable_vars, I can tell cd to assume the destination is the name of a variable.
Initialized empty Git repository in /home/user/path/to/dir/.git/
Useful in while and if statements
if not grep string filename; then echo string not found; exit 1; fi
Remove everything in current directory except files starting with "ca".
Works in all shells. Does not require a test. Handles like an assertion.
Also searches for aliases and shell builtins
Searches in order of the directories of $PATH. Stops after finding the entry; looks for only that fileName. Works in Bourne, Korn, Bash and Z shells.
Manages everything through one sed script instead of pipes of greps and awks. Quoting of shell variables is generally easier within a sed script.
rkhunter (Rootkit Hunter) is a Unix-based tool that scans for rootkits, backdoors and possible local exploits. rkhunter is a shell script which carries out various checks on the local system to try and detect known rootkits and malware. It also performs checks to see if commands have been modified, if the system startup files have been modified, and various checks on the network interfaces, including checks for listening applications.
chkrootkit is a tool to locally check for signs of a rootkit,Get it from the website http://www.chkrootkit.org
To get information at your fingertips about Apache compilation.
Like many other thing in Linux ,you can see the same thing in different way.
This is a handy way to find which modules are loaded with Apache web server.
This command will reveal login has been made to the system as well as when the reboot occurs. It uses a file called /var/log/wtmp,which captures all the information about the successful login and reboot information. It has many switch ,by which you can get an idea when people login how long they stay.
This is wonderful perl script to check the web server security and vulnerability .Get it from here :http://www.cirt.net/nikto2
Here are some key features of "Nikto":
? Uses rfp's LibWhisker as a base for all network funtionality
? Main scan database in CSV format for easy updates
? Determines "OK" vs "NOT FOUND" responses for each server, if possible
? Determines CGI directories for each server, if possible
? Switch HTTP versions as needed so that the server understands requests properly
? SSL Support (Unix with OpenSSL or maybe Windows with ActiveState's Perl/NetSSL)
? Output to file in plain text, HTML or CSV
? Generic and "server type" specific checks
? Plugin support (standard PERL)
? Checks for outdated server software
? Proxy support (with authentication)
? Host authentication (Basic)
? Watches for "bogus" OK responses
? Attempts to perform educated guesses for Authentication realms
? Captures/prints any Cookies received
? Mutate mode to "go fishing" on web servers for odd items
? Builds Mutate checks based on robots.txt entries (if present)
? Scan multiple ports on a target to find web servers (can integrate nmap for speed, if available)
? Multiple IDS evasion techniques
? Users can add a custom scan database
? Supports automatic code/check updates (with web access)
? Multiple host/port scanning (scan list files)
? Username guessing plugin via the cgiwrap program and Apache ~user methods
Sometime you need to run firefox from the command just to rectify something about it.Means,if some of the addon broke you firefox setting or theme broke your ff setting then fall back to commandline i.e shell and type the mentioned command. It will open up an information box with few option along with the checkbox besides them(means you can select them) to start the web browser in safe mode.Besically deactivating all the addon and theme,except the default one.Once you are done/rectified thing ..close that session and reopen the browser normally.It should work.