/TOOLS

Tool Rack

A curated rack of things I reach for. Updated whenever.

jump to →
ENCLOSURE 01 / MY PROJECTS 9 units
viaduct Modern terminal-native traceroute with ECMP multipath discovery, ASN enrichment, and a live-updating TUI. GO · ↗ nbor TUI tool for discovering network neighbors via CDP and LLDP — 20 built-in themes, real-time CSV logging. GO · ↗ flo TUI SNMP interface monitor with sparkline graphs, encrypted credentials, and concurrent dashboards. GO · ↗ wiremap Network topology discovery and assessment tool — recursive BFS crawling, multi-vendor support, and automated reports. PYTHON · ↗ dotfiles Modular macOS/Linux dotfiles — Zsh, Neovim (NVChad), Tmux, Starship, 25+ utility scripts. SHELL · ↗ fdm-snmp Cisco FDM API script for SNMP configuration changes. PYTHON · ↗ asa-audit Audit ACEs and unused configuration items on Cisco ASA. PYTHON · ↗ pfx2pem Convert PFX certificates to PEM + Key format. SHELL · ↗ tm Interactive tmux session manager with colorful TUI and a keybinding cheat sheet parser. SHELL · ↗
ENCLOSURE 02 / BUILT-IN 5 units · on-site
probe Unified intel — paste any ASN, IP, prefix, or domain. LIVE dns DNS record browser via Cloudflare DoH (A/AAAA/MX/NS/TXT/SOA). LIVE subnet IPv4 + IPv6 subnet calculator. Pure client-side math. LIVE password Decode Cisco type 7 and Juniper $9$ passwords. LIVE mac MAC / OUI vendor lookup. Normalizes any MAC format. LIVE
ENCLOSURE 03 / WEB TOOLS 14 units
BGP Hurricane Electric BGP toolkit — looking glass, route analysis, prefix reports. ↗ BGP.Tools Modern BGP analytics with real-time routing data and AS insights. ↗ PeeringDB Interconnection database for networks, IXPs, and facilities. ↗ Shodan Internet-connected device search engine and security scanner. ↗ NetworkCalc Suite of network calculators, DNS tools, and monitoring APIs. ↗ DNS Checker Global DNS propagation checker from 20+ locations. ↗ MX Toolbox MX record lookup, blacklist check, SMTP diagnostics. ↗ SSL Labs Deep SSL/TLS server configuration analysis. ↗ TCPDump101 Visual packet capture filter builder for tcpdump syntax. ↗ Traceroute Online Visual traceroute with interactive network path maps. ↗ Wireshark Tools OUI lookup, IPv4/IPv6 connectivity tests, capture filters. ↗ KeyCDN Tools HTTP/2 test, performance check, traceroute from global PoPs. ↗ Speed Test (Cloudflare) Network quality test measuring latency, jitter, and throughput. ↗ IP Geolocation IP location, timezone, currency, and threat intelligence lookup. ↗
ENCLOSURE 04 / BOOKMARKED 10 units
netlab Virtual networking labs made easy — spin up multi-vendor topologies with a single command. ↗ tailscale Zero-config WireGuard-based mesh VPN that just works. ↗ Security Onion Free and open platform for threat hunting, network security monitoring, and log management. ↗ secure_cartography Network discovery and topology mapping via SSH-based device interrogation. ↗ netbox-docker Docker deployment for NetBox — the leading open-source IPAM and DCIM tool. ↗ Loop Elegant macOS window management with radial menu and keyboard shortcuts. ↗ omarchy Beautiful, modern, and opinionated Linux desktop setup from Basecamp. ↗ SecLists The security tester's companion — wordlists for fuzzing, passwords, usernames, and more. ↗ hagezi dns-blocklists DNS blocklists for ad-blocking, tracking protection, and malware filtering. ↗ ntc-templates TextFSM templates for parsing CLI output from network devices. ↗
ENCLOSURE 05 / CLI · REPLACEMENTS 11 units
bat cat with syntax highlighting, git integration, and paging. replaces: cat eza Modern ls with colors, icons, git status, and tree view. replaces: ls ripgrep Blazingly fast recursive grep that respects .gitignore. replaces: grep fd User-friendly find alternative — fast, colorized, smart defaults. replaces: find zoxide Smarter cd that learns your directory habits. replaces: cd dust Intuitive du with visual disk usage breakdown. replaces: du procs Modern ps with color, search, filtering, and tree view. replaces: ps dog dig with color, DNS-over-TLS, and DNS-over-HTTPS support. replaces: dig sd Intuitive sed alternative for find-and-replace. replaces: sed prettyping Colorful, compact ping output with live graph. replaces: ping git-delta Beautiful syntax-highlighting pager for git diffs and grep. replaces: diff
ENCLOSURE 06 / CLI · NETWORK 19 units
mtr Combines traceroute + ping for continuous path analysis. ↗ gping Graphical ping — live latency graph in the terminal. ↗ trippy Network diagnostic combining traceroute + ping with TUI. ↗ nmap The gold standard for network discovery and security auditing. ↗ httpie Human-friendly HTTP client for API testing. ↗ curl The Swiss army knife of data transfer. ↗ arp-scan ARP-based network discovery and fingerprinting tool. ↗ bandwhich Terminal bandwidth utilization by process, connection, and host. ↗ iftop Real-time interface bandwidth display — top for network traffic. ↗ ipcalc The classic IPv4/IPv6 subnet calculator for the CLI. ↗ iperf3 Network throughput measurement between two endpoints. ↗ ipinfo IP address geolocation, ASN lookup, and bulk queries from the terminal. ↗ masscan The fastest port scanner — scans the entire internet in under 5 minutes. ↗ tcpdump The packet capture and analysis Swiss army knife. ↗ socat Multipurpose network relay — netcat on steroids. ↗ wireguard-tools Fast, modern VPN tunnel configuration and management. ↗ speedtest-cli Ookla Speedtest from the command line. ↗ rdap Modern WHOIS replacement using the RDAP protocol. ↗ testssl.sh Comprehensive SSL/TLS testing from the command line — ciphers, protocols, vulnerabilities. ↗
ENCLOSURE 07 / CLI · SECURITY 5 units
aircrack-ng WiFi security auditing suite — capture, analyze, and test wireless networks. ↗ nikto Web server vulnerability scanner with 7,000+ checks. ↗ gobuster Directory, DNS, and vhost brute-forcing tool written in Go. ↗ certbot Let's Encrypt certificate automation — free HTTPS for everyone. ↗ mkcert Make locally-trusted development certificates with zero config. ↗
ENCLOSURE 08 / CLI · PRODUCTIVITY 18 units
fzf Command-line fuzzy finder — search files, history, processes. ↗ tmux Terminal multiplexer for persistent, split-pane sessions. ↗ starship Minimal, fast, customizable prompt for any shell. ↗ lazygit Terminal UI for git — stage, commit, rebase visually. ↗ jq Lightweight command-line JSON processor and query tool. ↗ yq YAML/XML/TOML processor — like jq but for structured configs. ↗ tldr Community-driven man pages with practical examples. ↗ btop Beautiful resource monitor — CPU, memory, disk, network. ↗ ncdu Disk usage analyzer with interactive TUI. ↗ neovim Hyperextensible Vim-based text editor. ↗ NvChad Blazing fast Neovim config with beautiful UI and 40+ plugins out of the box. ↗ ghostty Fast, native terminal emulator with GPU rendering and zero config needed. ↗ atuin Magical shell history — sync, search, and stats across machines. ↗ git-delta Beautiful syntax-highlighting pager for git diffs and grep. ↗ gum Charm toolkit for glamorous, interactive shell scripts. ↗ yazi Blazing fast terminal file manager with image preview. ↗ topgrade One command to upgrade everything — brew, pip, cargo, npm, and more. ↗ grex Generate regular expressions from test cases automatically. ↗
EOF · rack revision 2026.04.24 this rack is incomplete · that's on purpose