All commands

Downloads BlackArch tool pages and prints only GitHub links using pure awk filtering.

curl -sL blackarch.org/{tools,recon}.html | awk -F'"' '$4 ~ /^https:\/\/github\.com\// { print $4 }'

This is sample output - yours may be different.

nmcli connection import type wireguard file wireguard_config.conf

This is good when the other option on this site not includes ´tput´ like on minimal shell

printf '%*s\n' "${COLUMNS:-80}" '' | tr ' ' "${1-_}"

This is sample output - yours may be different.

kdeconnect-cli -d $(kdeconnect-cli -a --id-only) --share kdeconnect-cli-send-file.sh

This is sample output - yours may be different.

cat /dev/urandom | play -q -t raw -r 8000 -e unsigned-integer -b 8 -c 1 -t alsa default

This is sample output - yours may be different.

udevadm monitor --udev --subsystem-match=usb | gawk '/add/ { system("espeak \"USB device attached\"") }'

This is sample output - yours may be different.

lsmod | awk 'NR>1 && $4!="-" {print $1; split($4,a,","); for(i in a) print " -> used by:", a[i]; print ""}'

This is sample output - yours may be different.

awk 'NR==13' /etc/services

This is sample output - yours may be different.

awk '{sum += $0} END {print sum}' file

This is sample output - yours may be different.

netstat -ntu | tail -n +3 | awk '{print $5}' | sed 's/:[0-9]*$//' | sort | uniq -c | sort -rn

Do not use this in production! This is a true hardware random number generator using your system as the entropy source. It models flipping a coin by pitting a fast clock (the CPU) against a slow clock (the RTC). The CPU models the coin flipping head over tails during flight and the RTC models the duration of the coin's flight in the air. A timer is set 1 millisecond into the future and a bit is flipped as fast as possible before the timer expires. 256 bits are collected then hashed with SHA-256 to whiten the data and ensure uniformity. This makes some assumptions however. It assumes that your system is not compromised. It assumes your system is generating enough interrupts for the kernel scheduler to be unpredictable on what gets CPU priority. It assumes that your installed sha256sum(1) command is correctly implemented. Just because you can, doesn't mean you should. Use your system's RNG (EG, /dev/urandom) instead. Show Sample Output

$ trng
277def6b073f1d6d17749a203e47e35e1d0bbdda1d7a863ca561678cd456130b
$ trng
717bc9424bb93da075f996457677675b2eef01a4261cff28adb7cb9443b33ad4
$ trng
385286d0add7e763065af60ac80ee0499b7154494c9304ae14ee307bb0b0d60a

trng() { zmodload zsh/datetime; local flips=""; while ((${#flips}<256)); do local coin=0; local t=$((EPOCHREALTIME+0.001)); while (($EPOCHREALTIME<$t)); do ((coin^=1)); done; flips+=$coin; done; local h=($(print "$flips"|sha256sum));

Calculates the ceiling of the log2 of a given argument. Show Sample Output

$ log2 64
6
$ log2 32529
15
$ log2 4294967296
32
$ log2 1337
11

log2() { local n=0; for ((i=$1-1; i>0; i>>=1)); do ((n+=1)); done; echo $n; }

Issues & improvements Race conditions: the check for writability then mv is not fully atomic — another process could create/remove/change the target between the test and mv. Permissions and ownership: mv will preserve contents but the resulting file may have the temp file's permissions/ownership (mktemp default). Signal safety: if interrupted (SIGINT, SIGTERM) the temp file may remain. Portability: uses bash-compatible constructs but relies on mktemp and -a (POSIX [ -a ] is obsolete; better to use -e). Better error messages and exit status handling. Allow optional mode to write to stdout when no filename given. Support setting desired file mode (umask or chmod) and preserve atomic replace semantics. Enhanced version Uses safer existence test ([ -e ] not deprecated -a). Installs traps to clean up temp file on exit/signals. Preserves mode of the existing file (if it exists) or allows a chmod option. Attempts a safer atomic replace: write to temp in same directory as target when a filename is supplied (reduces window for cross-filesystem mv failure and preserves atomicity). If no filename given, writes temp contents to stdout. Returns non-zero on failure and prints concise errors to stderr.

buffer(){ tty -s&&return; d=${1:-/tmp}; tmp=$(mktemp "$d/.b.XXXXXX")||return; trap 'rm -f "$tmp"' EXIT; cat>"$tmp"||{ rm -f "$tmp"; return 1; }; [ -z "$1" ]&&{ cat "$tmp"; rm -f "$tmp"; return 0; }; mv -f "$tmp" "$1"; }

This is sample output - yours may be different.

adb shell input keyevent KEYCODE_VOLUME_DOWN

This fetches ipfs v0.36.0 for GNU/LInux and puts it in ~/bin without a tmp file or anything else. This works if you already have ~/bin. The `--strip-components=1` flag removes the "kubo" directory in this case. If you have a tar with an even deeper directory structure, say: `some/other/directory/file`, you can just use `--strip-components=3` and it will only extract `file` for you. `-C ~/bin` puts the file in the designated path. In this case, `~/bin`. Show Sample Output

$ tar -C ~/bin/ --strip-components=1 -xzf <( curl -L https://dist.ipfs.tech/kubo/v0.36.0/kubo_v0.36.0_linux-amd64.tar.gz ) kubo/ipfs
  % Total    % Received % Xferd  Average Speed   Time    Time     Time  Current
                                 Dload  Upload   Total   Spent    Left  Speed
100 49.0M  100 49.0M    0     0  26.1M      0  0:00:01  0:00:01 --:--:-- 26.1M

tar --strip-components=1 -C ~/bin/ -xzf <( curl -L https://dist.ipfs.tech/kubo/v0.36.0/kubo_v0.36.0_linux-amd64.tar.gz ) kubo/ipfs

Show top 10 users by memory combined consumption in percentage. Show Sample Output

user01 1.6
user02 2.8
user03 2.8
user04 3.2
user05 4.9
user06 5.5
user07 6.6
user08 13.6
user09 13.7
user10 16.5

ps aux | awk '{arr[$1]+=$4}; END {for (i in arr) {print i,arr[i]}}' | sort -hk2 | tail -10

If you need to see a list of the reboots of your system with date and time stamps then on a Linux with systemd you can use (as non-root) the command: journalctl --list-boots This could be useful if you are trying to track when a power outage occurred. An alternative is: /bin/sudo grep "^-" /var/log/boot.log ^ This only shows the boot start date/times while the journalctl command shows a "LAST ENTRY" associated with each "BOOT ID". Show Sample Output

$ journalctl --list-boots
IDX BOOT ID                          FIRST ENTRY                 LAST ENTRY                 
[data redacted]

$ journalctl --list-boots # display tabular history of reboots

This is sample output - yours may be different.

while true; do input tap $(wm size | awk -F 'x' '{print $1/2 " " $2/2}'); done

This is sample output - yours may be different.

mount -t cifs -o username=administrator,password=xxx,vers=1.0,sec=ntlmv2 //192.168.0.30/nas_share /mnt/win_share

This will download a video when given the link and it will extract the audio from the video. The filename will be the same as the video's title. File extension in mp3.

yt-dlp --extract-audio --audio-format mp3 --audio-quality 0 -o "%(title)s.%(ext)s" <youtube_link_here>

Hit an API with curl returning a random quote, then parse the result with jq. Show Sample Output

"A guy that clean has to be dirty." -- Hank Schrader

curl -s https://api.breakingbadquotes.xyz/v1/quotes | jq -r '.[] | "\"\(.quote)\" -- \(.author)"'

No sample. Try it and see the magic!

while true; do printf "\e[32m%*s\e[0m" $(tput cols) $(shuf -e {0..1} -n $(tput cols)); sleep 0.1; done

Remove clear; sleep 5 and echo for not doing sample!

clear; sleep 5; echo 'while :; do printf "\e[32m%*s\e[0m" $(tput cols) $(shuf -e {0..1} -n $(($(tput lines) * $(tput cols)))); sleep 0.1; done'

This is sample output - yours may be different.

tshark -s 512 -i eno1 -n -f'tcp dst port 3306' -Y'<mysql.query>' -T fields -e <mysql.query>

This is sample output - yours may be different.

eval "$(E3LFbgu='CAT /ETC/PASSWD';printf %s "${E3LFbgu~~}")"