References

Bottom Line. For the operator, References is the index of last resort during execution. Cheat sheets, command tables, snippet libraries, lookup tables, the glossary, the source catalog, and the alphabetical operator handbook. Treat this section as the page the operator opens when something needs to happen now and they don’t have time to read prose.

The skill this section builds is reference fluency. Knowing where to look.

Scope Note. The per-letter pages (A through Z) are the alphabetical operator handbook: CLI tools, cloud services, protocols, lookup tables (ports, signals, exit codes, log formats), code snippets, keybindings, and ops playbooks all filed under the letter they begin with. One entry per topic, reference material only, short examples and not tutorials. Glossary covers doctrine, IC, and cyber-offensive vocabulary. Source-named -INT disciplines (OSINT, SIGINT, GEOINT, and the rest) live in their own folders under the letter they begin with.

Sourcing. Entries are validated on Debian-family Linux. Kali-only tools are marked, and offensive tools carry an authorization notice where applicable.

A-Z

A

adb, AI models, airports / seaports, Android, Ansible, API security, ASCII, AWS / Azure ops.

A

B

bash, biases, biometrics, BloodHound, blue team, breaches, bug bounty.

B

C

Calendar, cameras / CCTV, CDNs, certifications, cherrytree, cities, cloud regions, CNCF, Cobalt Strike, containers, countries, cryptography, cti-sources, currencies, cursor.

C

D

dash, databases, default passwords, defender-atp, defense contractors, devops, disasters, distributions, DNS, Docker, drones.

D

E

EDR / XDR, elements, email security, energy infrastructure, exchanges, extremist groups.

E

F

File formats, filesystems, fish, flamingo, forensics, Frida.

F

G

Gangs, GCP ops, GEOINT, ghidra, GIS, git, GitHub, GreyNoise.

G

H

Hacker groups, hacking, hashcat, hashes, hazmat, healthcare, Helix, HTTP headers / status, HUMINT.

H

I

ICS / SCADA, identity providers, IMINT, Impacket, incident response, indicators, intel agencies, iptables, IPv4 / IPv6.

I

J

JavaScript, Jenkins exploit, JetBrains, John the Ripper, jq.

J

K

Kakoune, Kali, kubectl, Kubernetes.

K

L

Languages, law enforcement, leaks, Linguistics, Linux ops, log formats.

L

M

macOS ops, malware, map sources, MASINT, medical devices, Metasploit, Mimikatz, MITRE ATT&CK, msfvenom.

M

N

Neovim, netcat, network devices, news media, nftables, nmap, Nushell.

N

O

Operating systems, OSINT, osquery.

O

P

Package managers, password cracking, password managers, payment systems, physical entry, ports, PowerShell, protocols, Puppet, Python.

P

Q

Commands and topics starting with Q.

Q

R

Radio frequencies, red team, regex, registry, release types, religions, Responder, reverse engineering, reverse shells.

R

S

Sanctions, satellites, SDR, secure messaging, security tools, Shodan, SIEM / SOAR, SIGINT, Snort, social media, sqlmap, ssh, standards, stealer-logs, Sublime.

S

T

tcpdump, TECHINT, threat actors, threat intel, timezones, tmux, treaties, triangulation, tshark.

T

U

UAP, Unicode, units, user-agents.

U

V

Vehicle identifiers, versions, Vim, Visual Studio, Volatility, VPN providers, vulnerabilities, vulnerability databases.

V

W

Weapons, web exploit, Windows ops, wireless frequencies, Wireshark, world leaders.

W

X

Xcode.

X

Y

YARA.

Y

Z

Zed, zmap, zsh.

Z

Curated

Glossary

Doctrine, IC, and cyber-offensive vocabulary in one place.

Glossary

Countries

One page per country. Facts, government, connectivity, security services, cyber posture, and OSINT sources.

Countries

Linguistics

One page per language. Native name, family, script, varieties, alphabet, keyboards, and linguistic data sets the operator pulls from.

Languages