Sysadmin Toolbox
Curated tool recommendations and practical shell one-liners for operational work.
When to Auto-Consult
Load relevant references when user is:
- Debugging network connectivity, ports, traffic
- Troubleshooting DNS or SSL/TLS
- Analyzing processes, memory, disk usage
- Working with logs or system diagnostics
- Writing shell scripts or one-liners
- Asking "what's a good tool for..."
- Doing security audits or pentesting
- Working with containers/Docker/K8s
Reference Files
| File |
Use When |
references/shell-oneliners.md |
Need practical commands for: terminal, networking, SSL, curl, ssh, tcpdump, git, awk, sed, grep, find |
references/cli-tools.md |
Recommending CLI tools: shells, file managers, network utils, databases, security tools |
references/web-tools.md |
Web-based tools: SSL checkers, DNS lookup, performance testing, OSINT, scanners |
references/security-tools.md |
Pentesting, vulnerability scanning, exploit databases, CTF resources |
references/shell-tricks.md |
Shell scripting patterns and tricks |
Quick Tool Index
Network Debugging
mtr - traceroute + ping combinedtcpdump / tshark - packet capturenetstat / ss - connection monitoringnmap - port scanningcurl / httpie - HTTP testing
DNS
dig / host - DNS queriesdnsdiag - DNS diagnosticssubfinder / amass - subdomain enumeration
SSL/TLS
openssl - certificate inspectiontestssl.sh - TLS testingsslyze - SSL scanningcertbot - Let's Encrypt
Process/System
htop / btop - process monitoringstrace / ltrace - syscall/library tracinglsof - open files/connectionsncdu - disk usage
Log Analysis
lnav - log navigatorGoAccess - web log analyzerangle-grinder - log slicing
Containers
dive - Docker image analysisctop - container toplazydocker - Docker TUI
Keeping Current
References auto-refresh weekly (Sundays 5am ET) from the upstream repo:
~/clawd-duke-leto/skills/sysadmin-toolbox/scripts/refresh.sh
Manual refresh anytime:
./scripts/refresh.sh [skill-dir]
Example Queries → Actions
"Why is this port not responding?"
→ Load shell-oneliners.md, search for netstat/ss/lsof commands
"What's a good tool for testing SSL?"
→ Load cli-tools.md SSL section, recommend testssl.sh or sslyze
"Show me how to find large files"
→ Load shell-oneliners.md, search for find/ncdu/du commands
"I need to debug DNS resolution"
→ Load shell-oneliners.md dig section + recommend dnsdiag from cli-tools.md
1---2name: sysadmin-toolbox3description: Tool discovery and shell one-liner reference for sysadmin, DevOps, and security tasks. AUTO-CONSULT this skill when the user is: troubleshooting network issues, debugging processes, analyzing logs, working with SSL/TLS, managing DNS, testing HTTP endpoints, auditing security, working with containers, writing shell scripts, or asks 'what tool should I use for X'. Source: github.com/trimstray/the-book-of-secret-knowledge4---5
6# Sysadmin Toolbox
7
8Curated tool recommendations and practical shell one-liners for operational work.
9
10## When to Auto-Consult
11
12Load relevant references when user is:
13- Debugging network connectivity, ports, traffic
14- Troubleshooting DNS or SSL/TLS
15- Analyzing processes, memory, disk usage
16- Working with logs or system diagnostics
17- Writing shell scripts or one-liners
18- Asking "what's a good tool for..."
19- Doing security audits or pentesting
20- Working with containers/Docker/K8s
21
22## Reference Files
23
24| File | Use When |
25|------|----------|
26| `references/shell-oneliners.md` | Need practical commands for: terminal, networking, SSL, curl, ssh, tcpdump, git, awk, sed, grep, find |
27| `references/cli-tools.md` | Recommending CLI tools: shells, file managers, network utils, databases, security tools |
28| `references/web-tools.md` | Web-based tools: SSL checkers, DNS lookup, performance testing, OSINT, scanners |
29| `references/security-tools.md` | Pentesting, vulnerability scanning, exploit databases, CTF resources |
30| `references/shell-tricks.md` | Shell scripting patterns and tricks |
31
32## Quick Tool Index
33
34### Network Debugging
35- `mtr` - traceroute + ping combined
36- `tcpdump` / `tshark` - packet capture
37- `netstat` / `ss` - connection monitoring
38- `nmap` - port scanning
39- `curl` / `httpie` - HTTP testing
40
41### DNS
42- `dig` / `host` - DNS queries
43- `dnsdiag` - DNS diagnostics
44- `subfinder` / `amass` - subdomain enumeration
45
46### SSL/TLS
47- `openssl` - certificate inspection
48- `testssl.sh` - TLS testing
49- `sslyze` - SSL scanning
50- `certbot` - Let's Encrypt
51
52### Process/System
53- `htop` / `btop` - process monitoring
54- `strace` / `ltrace` - syscall/library tracing
55- `lsof` - open files/connections
56- `ncdu` - disk usage
57
58### Log Analysis
59- `lnav` - log navigator
60- `GoAccess` - web log analyzer
61- `angle-grinder` - log slicing
62
63### Containers
64- `dive` - Docker image analysis
65- `ctop` - container top
66- `lazydocker` - Docker TUI
67
68## Keeping Current
69
70References auto-refresh weekly (Sundays 5am ET) from the upstream repo:
71```bash
72~/clawd-duke-leto/skills/sysadmin-toolbox/scripts/refresh.sh
73```
74
75Manual refresh anytime:
76```bash
77./scripts/refresh.sh [skill-dir]
78```
79
80## Example Queries → Actions
81
82**"Why is this port not responding?"**
83→ Load shell-oneliners.md, search for netstat/ss/lsof commands
84
85**"What's a good tool for testing SSL?"**
86→ Load cli-tools.md SSL section, recommend testssl.sh or sslyze
87
88**"Show me how to find large files"**
89→ Load shell-oneliners.md, search for find/ncdu/du commands
90
91**"I need to debug DNS resolution"**
92→ Load shell-oneliners.md dig section + recommend dnsdiag from cli-tools.md
danstrem2