Linux#
Warning
Authorization required. Only run these tools against systems the operator owns or has written authorization to test. The skill is neutral; the use is not. See Disclaimers for the full text.
For the operator, Linux is the platform at the core of the tradecraft. The laptop the operator carries on a job, the workstation the operator returns to for analysis, the cloud instance the operator stands up for a campaign, Raspberry Pi the operator employs, portable routers all running Linux. Proficiency here is non-negotiable.
Linux is the open-source kernel that powers most servers, mobile devices, and embedded systems on the planet. In everyday use, “Linux” has multiple meanings, the kernel itself and the operating systems or distributions built on it. A distribution bundles the kernel with a userland (GNU coreutils, a shell, an init system, a package manager) into a complete OS; 200 to 300 are actively maintained.
Servers, networking devices, and embedded systems are typically headless and are managed via a command-line interface over a remote connection. Graphical user interfaces are common on desktops and laptops where ergonomics matter more than resource cost. The operator works almost exclusively through the CLI in operational settings.
Kernel, filesystem, processes, users, permissions, packages, services, boot, and hardening. The host the operator works from and against.
Tools ls, ps, top, systemctl, journalctl.
Bash, zsh, fish, dash, ksh, and friends. The interactive front-end and how to customise it.
Tools bash, zsh, fish, dash, ksh.
AI coding agents and tooling running on the operator’s box.
Tools claude, cursor, aider, copilot, codex.
vim, emacs, nano, VS Code, Cursor. Editors the operator reaches for at the keyboard and on a target.
Tools vim, nvim, emacs, nano, code.
Bash, awk, sed. The glue that turns one-off commands into repeatable tradecraft.
Tools bash, awk, sed, grep, jq.
TCP/IP, DNS, SSH, TLS, HTTP, and the protocols the operator crosses every engagement.
Tools ssh, curl, wget, nc, dig.
Display servers, window managers, and desktop environments. The operator’s graphical session above the shell.
Tools i3, sway, hyprland, gnome, kde.