ADD CUSTOM TOOL / LINK
MY CUSTOM TOOLS
LINUX QUICK AUDIT
One-liner to check open ports, listening services, and recent auth failures on any Linux box.
ss -tlnp && \ last -n 10 && \ grep "Failed password" /var/log/auth.log 2>/dev/null | tail -5 && \ find /tmp /var/tmp -type f -newer /etc/passwd 2>/dev/null
WINDOWS QUICK AUDIT (POWERSHELL)
Check listening ports, recent logon events, and running services. Run as Administrator.
netstat -ano | findstr LISTENING
Get-WinEvent -LogName Security -MaxEvents 20 | Where-Object {$_.Id -eq 4624}
Get-Service | Where-Object {$_.Status -eq "Running"} | Select Name,DisplayName
NMAP COMMON SCANS
Frequently used nmap scan types. Replace TARGET with IP or hostname.
# Quick port scan nmap -F TARGET # Service/version detection nmap -sV -sC TARGET # Full port scan + OS detect nmap -p- -A -T4 TARGET # UDP top ports nmap -sU --top-ports 100 TARGET # Vulnerability scripts nmap --script vuln TARGET
NGINX SSL HEALTH CHECK
Quick cert and redirect verification for your VPS. Replace DOMAIN.
DOMAIN=gng4life.tech curl -I http://$DOMAIN curl -I https://$DOMAIN openssl s_client -connect $DOMAIN:443 \ -servername $DOMAIN &1 \ | grep -E "subject|issuer|Verify|expire" sudo certbot certificates
LINUX HARDENING QUICK WINS
Apply these on any fresh Ubuntu/Debian server. Review each before running.
# Update everything apt update && apt upgrade -y # Enable UFW firewall ufw allow ssh && ufw allow 80 && ufw allow 443 ufw --force enable # Disable root SSH login sed -i 's/PermitRootLogin yes/PermitRootLogin no/' \ /etc/ssh/sshd_config # Change SSH port (optional, use your port) sed -i 's/#Port 22/Port 2222/' /etc/ssh/sshd_config # Enable automatic security updates apt install unattended-upgrades -y dpkg-reconfigure --priority=low unattended-upgrades systemctl restart sshd
CREDENTIAL BREACH CHECK
Check if an email has appeared in known data breaches using HaveIBeenPwned API.
EMAIL="you@example.com" curl -s -H "hibp-api-key: YOUR_API_KEY" \ "https://haveibeenpwned.com/api/v3/breachedaccount/$EMAIL" \ | python3 -m json.tool # Or just visit: # https://haveibeenpwned.com # Free web check, no API key needed