Ultimate Command Cheat Sheets
Your comprehensive resource for command-line tools, cybersecurity utilities, and development frameworks.
1,900+Tool Cheat Sheets
100+In-Depth Guides
100+External Resources
Featured Categories
Section titled “Featured Categories”Cybersecurity
Penetration testing, network security, digital forensics, and security automation tools.
Browse →Development
Programming languages, frameworks, IDEs, and development workflow tools.
Browse →Cloud & DevOps
AWS, Azure, GCP, Kubernetes, Docker, and infrastructure automation tools.
Browse →System Administration
Linux, Windows, networking, monitoring, and system management utilities.
Browse →Latest Cheat Sheets
bpfilter - BPF-Based Linux Packet Filtering Cheatsheetbpfilter is a daemon that translates familiar firewall rules into optimized BPF programs — keep iptables and nftables syntax while gaining eBPF performance and XDP-level packet processing on modern Linux.rattler - Rust Conda Package Management Library Cheatsheetrattler is a fast Rust library and CLI toolkit for working with the conda ecosystem — resolve environments, download packages, and build conda recipes with rattler-build, powering modern tools like pixi.conda-lock - Reproducible Conda Environment Locking Cheatsheetconda-lock generates fully reproducible lock files from conda environment specs — pin exact package versions and hashes across Linux, macOS, and Windows so every machine and CI run installs an identical environment.Tracy Profiler - Real-Time Frame Profiler CheatsheetTracy is a real-time, nanosecond-resolution hybrid frame and sampling profiler for C++, Rust, and games — instrument zones in your code and watch CPU, GPU, memory, and locks live in a rich desktop UI.magic-trace - Intel PT High-Resolution Tracing Cheatsheetmagic-trace collects and displays high-resolution execution traces using Intel Processor Trace — capture the last few milliseconds before a slow event with nanosecond detail, revealing exactly which functions ran and for how long.async-profiler - Low-Overhead JVM Profiler Cheatsheetasync-profiler is a low-overhead sampling profiler for the JVM that avoids the safepoint bias of traditional Java profilers — profile CPU, allocations, locks, and native code, and export flame graphs or JFR recordings.bacon - Background Rust Code Checker Cheatsheetbacon is a background code checker for Rust — it watches your source, reruns cargo check, clippy, or tests on every save, and keeps a compact always-visible summary of errors in a side terminal.cargo-nextest - Next-Generation Rust Test Runner Cheatsheetcargo-nextest is a faster, better Rust test runner — it runs each test in its own process for isolation and parallelism, gives clean output, detects flaky tests with retries, and typically finishes 2-3x faster than cargo test.
Latest Blog Posts
The Fast Build Toolchain in 2026: sccache, mold, nextest, and the Cost of WaitingSlow builds are not just annoying — they change how developers work. A practical guide to cutting compile, link, and test time with sccache, mold, and cargo-nextest, and how to measure whether any of it actually helped.LLM Red Teaming in 2026: garak, PyRIT, DeepTeam, and What Each One CatchesTesting an LLM app means attacking it. This guide covers the 2026 LLM red teaming landscape — model-layer scanners, application-layer suites, and agentic fuzzers — explaining what each tool catches, what it misses, and how to build a layered testing practice.AI Security Tooling in 2026: Agentic Pentesting and the Exposed AI Attack SurfaceAI changed security tooling twice over — agents that hunt vulnerabilities and validate them with real exploits, and a whole new attack surface of exposed inference servers. A guide to Strix, AIMap, and what the shift means for defenders.Observability on Object Storage in 2026: Why Logging Got 100x CheaperLog storage costs used to force teams to throw data away. A new generation of tools built on S3 rather than local disk changed the economics. A guide to the object-storage observability stack — Quickwit, OpenObserve, and Vector — and how to adopt it.Reproducible Dev Environments in 2026: Devbox, devenv, DevPod, and Dev Containers"Works on my machine" is a solvable problem. This guide covers the 2026 landscape of reproducible development environments — Nix-based tools like Devbox and devenv, container-based Dev Containers and DevPod — and how to pick the right approach for your team.Reverse Engineering WebAssembly in 2026: Reading the Web's New BinaryWebAssembly now runs everywhere — browsers, edge, plugins, and malware — and analysts increasingly need to read it. This guide covers wasm reverse engineering in 2026: the format, the toolchain (WABT, diswasm, Binaryen, wasm-tools), and a practical analysis workflow.Code-First AI Agents in 2026: Why Agents Are Learning to Write CodeJSON tool calls are giving way to agents that act by writing Python. This guide explains the code-first agent paradigm — why it reduces LLM calls and improves performance — through smolagents and Pydantic AI, plus the sandboxing that makes it safe.Open-Source Web App Scanning in 2026: ZAP, Nuclei, Wapiti, and the DAST StackNo single scanner finds every web vulnerability. This guide explains dynamic application security testing in 2026 and how the open-source tools — ZAP, Nuclei, Wapiti, Nikto — fit together into a layered DAST pipeline that plugs into CI/CD.