L#
Index#
Reference for the world’s spoken languages. Around 7,000 living languages are cataloged; only a few hundred have meaningful written or digital corpora, and roughly forty cover the lion’s share of speakers, internet…
Reference of major law-enforcement, judicial, and regulatory agencies an operator may interact with or whose authority shapes operations. The list is national-level + multilateral; sub- national (state / provincial /…
Reference catalog of consequential data leaks an operator should recognize. Leaks differ from breaches in origin: an insider, a whistleblower, a source, or an exposed misconfiguration releases the material rather…
Reference pages for the human languages the operator most often has to read, translate, or run collection against. Each entry names the native form, the language family, the writing system, and the principal…
Day-to-day Linux commands the operator runs on their attack platform and on compromised hosts. Filesystem navigation, system facts, process control, networking, permissions, and the basic compression and search…
Triage recipes for Linux hosts. Artifact collection follows the order of volatility (RFC 3227), process forensics walks /proc, and memory capture preserves what the operator cannot recover from disk.
Tradecraft for the operator on a Linux foothold. Enumeration runs through LinEnum, BeRoot, and linux-smart-enumeration; common kernel exploits handle privilege escalation; persistence chains and cover-track recipes…
Configuration guidance the operator points a blue team at when locking down a Linux host. The CIS benchmarks carry the per-distribution checklists; STIGs cover the DoD baseline; ANSSI publishes a tighter French…
Reference of well-known port assignments on Linux systems. The operator consults this during scan triage and target development.
Filesystem Hierarchy Standard layout. The operator uses this map to know where binaries, configuration, user data, and runtime state live on any Linux distribution.
Bash one-liners for exfil, in-memory execution, scanning, persistence, and operator hygiene. Each recipe is short, narrow, and earns its place by saving a tool install on a live host.
Reference list of current Linux distributions, current versions, and the forks they descend from. The operator uses this to size up the distro on a target host and predict the package manager and init system.
Files and Directories
Reference of common log formats an operator parses, ingests, or generates: syslog, JSON, NCSA Combined, journald, OpenTelemetry, Windows Event Log, and the structured-logging conventions in common languages.