Linux Tools — Hub
Everything you run from a Linux shell during OSCP — parsing output, hunting files, transferring data, and quick scripting.
OSCP use: After you land a shell or SSH in, these are your daily drivers. Chain Text Processing tools with pipes for log parsing, cred hunting, and wordlist building.
Install: Most utilities are preinstalled. Package list → Installation - Kali Setup > 📌 Linux utilities
📌 Sub-Folders & Notes
Text Processing (grep, awk, find, pipes)
| Note | Purpose |
|---|---|
| Text Processing | Hub — pipes, tool picker, quick cheat sheet |
| grep | Filter lines by pattern |
| find | Search filesystem (SUID, configs, keys) |
| awk | Extract/transform columns |
| sed | Find/replace, delete lines |
| cut | Simple column extraction |
| sort / uniq | Sort and dedupe |
| xargs | Run commands on find results |
| tr | Character translation |
| Pipelines & Chaining | Combine all of the above — OSCP recipes |
Standalone Linux Tools
| Note | Purpose |
|---|---|
| Curl | HTTP requests, file download, API testing |
| Netcat | Bind/reverse shells, port listen, file transfer |
| tcpdump | Capture packets — ICMP ping to Kali, verify reverse shells |
| rlwrap | Arrow keys + history for nc listeners |
| Penelope | Full shell handler — PTY, transfer, modules |
| File Transfer | HTTP server, smbserver, certutil, tftp — move tools/loot |
| Git & GitHub | Exposed .git dump, git log cred hunt, GitHub OSINT, git clone tools |
| Archives - unzip 7z zip | 7z, unzip, zipinfo — backup zips from web/SMB |
| Python | One-liners, reverse shells, simple scripts |
| Ruby | exec/socket reverse shells, sudo GTFOBins, shebang cron |
| xxd | Hex dump / binary inspection |
| OpenSSL | TLS, certs, passwd hashes, enc/decrypt, dgst |
| exiftool | EXIF/XMP metadata read/write — full flag reference |
| File Analysis | strings, binwalk hub + workflows |
| Steghide | Extract hidden data from images/audio (CTF) |
| stegseek | Crack steghide passphrases — see Steghide > Option 1 — stegseek (recommended) |
📌 Quick OSCP Cheat Sheet
# Parse logs → user list
grep domain.local log.txt | awk -F@ '{print $1}' | sort -u > users.txt
# Hunt creds on box
grep -rni "password" /var/www/ 2>/dev/null
find / -name "*.conf" 2>/dev/null | xargs grep -l "password" 2>/dev/null
# SUID enum
find / -perm -4000 -type f 2>/dev/null
# Reverse shell listener
rlwrap nc -lvnp 4444
# Serve file to target
python3 -m http.server 8080
impacket-smbserver share /tmp/tools -smb2supportSee Pipelines & Chaining for full multi-tool recipes.
Related Tools
- grep
- find
- Netcat
- rlwrap
- File Transfer
- OpenSSL
- exiftool
- File Analysis
- Curl
- Python
- Git & GitHub
- Text Processing
Related Notes
- Tools
- Linux (privesc concepts)
- Basic Commands
- Shells
- Initial foothold
- Git & GitHub
- Text Processing