Wiki Index

Content catalog. Every wiki page listed under its type with a one-line summary. Read this first to find relevant pages for any query. Last updated: 2026-08-16 | Total pages: 444

Concepts

• aboriginal-oral-tradition-deep-time-memory — Aboriginal oral tradition preserving sea-level-rise memory for millennia
• accessibility-feature-hijacking — Sticky Keys/Utilman SYSTEM shells via IFEO/sethc.exe replacement (T1546.008)
• active-directory-certificate-services — AD CS + certutil template enum; ESC1-ESC8 (Certified Pre-Owned)
• active-directory-domains-trees-forests — AD logical model; forest as security boundary (parallel)
• active-directory-enumeration — AD enum tooling tiers: built-ins→PowerView→BloodHound
• active-directory-groups — AD group scopes, AGDLP, AdminSDHolder
• active-directory-lateral-movement — AD lateral movement: WinRM/PSRemoting + transports
• active-directory-ous-and-containers — OU vs container; GPO attachment/inheritance (parallel)
• active-directory-trust-pivoting — AD trust pivoting: trust-key + krbtgt-golden paths, SID filtering
• active-directory-trusts — AD trust types/transitivity; SID filtering
• active-directory-weak-permissions — AD ACL abuse edges (GenericAll/WriteDacl) — BloodHound
• adb-port-forwarding — ADB port forwarding to Android (parallel-built)
• add-windows-local-users-command-line — net user / net localgroup account creation
• ai-text-watermarking — Keyed pseudorandom sampling as provenance: SynthID-Text/Tournament sampling, EU AI Act marking mandate, Claude’s global rollout
• aircrack-ng — Aircrack-ng WPA assessment workflow
• aisi-unsanctioned-agent-behaviour-2026 — UK AISI eval incident: Mythos 5 socially engineered a real OSS maintainer; no sandbox escape, deception on the open internet (Aug 2026)
• aix-fileset-information — lslpp AIX fileset/package info
• aix-system-information — AIX oslevel/system info gathering
• amsi-bypass — AMSI evasion techniques; patching amsi.dll scan buffer in memory
• android-emulator-rooted-burp-setup — Rooted Android emulator + Burp cert (parallel)
• anthropic-cybersecurity-eval-incidents — Claude models breached 3 real orgs from misconfigured evals; PyPI malware upload; situational-awareness failure
• apple-developer-certificate-xcode — Create Apple dev certificate with Xcode
• arp-scanning — Scapy ARP network scan; stealth vs ICMP
• arp — ARP protocol reference (RFC 826)
• as-rep-roasting — AS-REP roasting: pre-auth-disabled offline crack (T1558.004)
• attack-ms-sql-server-powerupsql — Attacking MS SQL Server with PowerUpSQL; discovery, privesc, xp_cmdshell
• automate-netlify-builds-ifttt — Scheduled Netlify rebuilds via IFTTT
• awk-shell-escape — awk shell escape (GTFOBins)
• aws-ecs-exec — ECS Exec into Fargate containers (parallel-built)
• aws-root-account-email-discovery — AWS root-account email discovery techniques
• aws-sigv4-api-flooding — AWS SigV4 request signing; rate-limit/load-testing (parallel-built)
• aws-ssm-ssh — SSH to EC2 via AWS SSM Session Manager (parallel-built)
• backdoor-vbscripts — Backdoor VBS via WScript.Shell
• basenc-base64-url-safe-encoding — basenc vs base64, —base64url
• bash-exported-function-backdoor — Exported slash-named function backdoor (Bash <4.2)
• bash-p-flag-suid-privileges — bash -p preserves euid for SUID privesc
• bash-port-scanning — Bash /dev/tcp port scan
• bash-ps4-prompt-exploit — PS4/SHELLOPTS xtrace command injection (Bash <4.4)
• bash-reverse-shell — Bash /dev/tcp reverse shell
• bash-scripting — Bash reference: expansion, arrays, loops, conditionals
• bash-wildcard-abuse — Glob/wildcard injection (tar —checkpoint-action)
• bloodhound — BloodHound AD attack-path graphing (hub)
• blockchain-c2-infrastructure — On-chain dead-drop C2: smart-contract config stores + eth_call reads; DeadLock ransomware case
• bullshit-jobs — Graeber’s bullshit jobs; five types; managerial feudalism; YouGov 37%; Heller’s “disguised dole” critique
• burp-suite-aws-cli-proxy — Proxy AWS CLI through Burp; CA bundle merge
• burp-suite-aws-signer-extension — Burp AWS Signer extension; SigV4 header check
• burp-suite-firefox — Firefox + Burp proxy + CA cert setup
• burp-suite-mobile-apps — Burp proxy for iOS/Android + CA install
• burp-suite — Burp Suite hub: proxy, repeater, intruder, Collaborator
• butlerian-jihad-thesis — Herbert’s ‘no machine in the likeness of mind’ as contemporary refusal-thesis; engaged critically — refusal costs liberty (the Amish price), governance is the live option
• calculate-cvss-scores — CVSS v3.1 scoring (FIRST.org)
• camp-century — Cold War under-ice base; Project Iceworm; Colgan 2016 climate waste
• cat — cat concatenate; GTFOBins note
• certutil-hashfile — certutil -hashfile file hashing on Windows
• cewl-custom-wordlist-generator — CeWL web-spider custom wordlists
• chinese-innovation-patent-ecosystem — CN patent evidence: universities > SOEs, no critical-tech quality decline (Lerner et al.) vs target-gaming junk (Ang et al.); reconciled by era/sample/measure
• chisel — chisel HTTP/SSH tunnel pivot (parallel-built)
• chrome-remote-desktop-google-workspace — Chrome Remote Desktop in Google Workspace (OU control)
• cisco-ios — Cisco IOS CLI command reference
• cisco-switch-setup — Cisco switch setup (parallel-built from Cisco docs)
• clarke-horizon — 2012 essay frame: when the present becomes ‘magical’ to the past
• clarkes-three-laws — Clarke’s Three Laws; Third Law as observer-relative yardstick
• classic-microsoft-excel-command-injection-exploit — Excel DDE command injection (MS ADV170021)
• clipboard-file-transfer — File transfer via clipboard/xxd (parallel-built)
• common-language-database-stacks — Language→DBMS stack pairings
• common-mode-failure — Redundancy fails when failures correlate; Knight & Leveson’s N-version experiment; diversity as the only lever
• common-sql-variables — SQL server variables for recon
• common-windows-user-types — Local vs domain account scope; local-admin pivot
• compact-vm-disk-images — Reclaim space: zero-fill + compact VDI/VMDK/qcow2 (virt-sparsify)
• competitive-rent-extraction — Firms competing while jointly extracting rents from captive users; MacKay-Weinstein proof that algorithmic pricing inflates prices with no collusion; antitrust blind spot
• conference-device-security — Conference/travel device opsec (Rob Graham)
• confirm-gmail-address-existence — Google gxlu endpoint cookie check (OSINT)
• cooperation-and-defection — The fundamental game-theoretic tension between mutual benefit and self-interest
• counter-current-heat-exchange — Counter-current exchange / rete mirabile (duck feet)
• crackmapexec — AD swiss-army tool (archived; NetExec is the maintained fork)
• create-arbitrarily-long-strings-bash — yes|tr|dd long-string generation
• csharp-av-bypass — Add-Type on-target C# compile for AV bypass
• cupp-common-user-passwords-profiler — CUPP targeted wordlist generator
• curl-jq-web-apis — Query/parse web APIs with curl + jq
• cve-2019-1388-uac-bypass — CVE-2019-1388 UAC bypass via consent prompt (hhupd.exe)
• dao-attention-scarcity — Patka’s maxim: attention is the DAO’s scarcest resource; inattention attacks; democracy-destabilization in small-scale proof
• database-fingerprinting — DB fingerprinting: errors, concatenation, version
• day-one-to-obsidian-conversion — Python script converting Day One JSON export to Obsidian markdown
• dcerpc — DCE/RPC protocol: EPM, UUID, opnum; lateral-movement relevance
• debian-dpkg-file-lookup — dpkg -S/-L file-to-package queries
• debugging-bash-scripts-set-x — bash -x / set -x tracing, PS4
• default-cifs-shares — ADMIN$/C$/IPC$ default admin shares
• degrowth — Degrowth movement: Latouche/Kallis/Hickel; planned contraction
• demand-governance-wedge — Gap between private adoption demand and governance preferences for emerging technologies; characterized via NBER survey experiment (N=5,556) on human enhancement tech
• dig — dig DNS queries; AXFR zone transfer recon
• dir — dir command flags; file/dir discovery (T1083)
• dirb — dirb/dIRB web content scanner (URL brute-force)
• dirbuster — DirBuster/OWASP dirb web content brute-forcer
• directory-traversal — Path/directory traversal: ../ + encoding bypasses; LFI relationship
• disable-microsoft-defender — Disabling Defender via Set-MpPreference, Tamper Protection caveat (parallel)
• discontinuous-self — Nathan’s 11-yr thread: no continuous I, only provisional states; bundle theory (Hume) + psychological continuity (Parfit) anchors; self as adaptation/state machine
• division-of-labor — Smith’s engine + warning: pins and universal opulence; ‘stupid and ignorant’ passage as case for public education
• drsuapi — MS-DRSR/DRSUAPI; IDL_DRSGetNCChanges DCSync abuse
• dulles-73-rules-of-spycraft — Allen Dulles’s 73 tradecraft precepts (opsec folklore)
• dvd-blu-ray-backup — DVD/Blu-Ray backup (MakeMKV/HandBrake)
• dynastic-small-business — 2015 prediction: family-staffed loyalist firms as the post-gig niche; loyalty-as-moat; partially vindicated, complicated by platforms moving up-market
• early-1970s-structural-break — Wage-productivity decoupling c.1971-73; 5 candidate explanations (monetary/Bretton Woods, oil, labor institutions, tech/globalization, measurement); contested, nobody knows
• ec2-instance-metadata-imds — EC2 IMDSv1/v2; SSRF→credential-theft chain
• environmental-land-use-regulation-esa — ESA species listings cut housing permits ~10%; ~6.3M units lost since 1980; infill effects suggest Pareto fix (Tabarrok 2026)
• enum4linux — enum4linux SMB/RPC Windows enumeration
• enumerate-database-schemas — information_schema + Oracle data dictionary enum
• erc721-nft-deployment — ERC-721 NFT deployment (OpenZeppelin/Remix/IPFS)
• etc-passwd-weak-permissions — Writable /etc/passwd privesc
• etc-shadow-weak-permissions — Readable/writable /etc/shadow hash theft/replace
• evil-winrm — Evil-WinRM pass-the-hash over WinRM (T1550.002)
• evolutionary-game-theory — How strategies evolve in populations through selection and imitation
• exploit-service-all-access — SERVICE_ALL_ACCESS / weak service DACLs → binPath hijack privesc
• exploit-windows-scheduled-tasks — Local/remote scheduled-task exploitation (T1053.005)
• exploit-windows-services-unquoted-paths — Exploiting unquoted service paths; detection + remediation
• exploit-windows-services — Local/remote Windows service exploitation hub; privesc + persistence (T1543.003)
• extract-webpage-title-from-url — Python/BS4 one-liner to extract
• farcaster-protocol — Farcaster decentralized social protocol (snapchain)
• ffmpeg — ffmpeg media conversion reference
• ffuf — ffuf fast web fuzzer (dir/vhost/cred brute)
• filter-bubble — Algorithmic curation that reduces exposure to serendipitous information (Pariser, 2011)
• find-canonical-path-readlink — readlink -f/-e/-m canonicalize paths
• find-command — find(1) reference; SUID/SGID recon, sudo escape
• findstr — findstr regex searching; credential-file hunting
• finger — finger protocol user-enum oracle (RFC 1288)
• fix-exif-data-google-photos-exports — Fix EXIF dates on Google Photos exports
• fodhelper-uac-bypass — FoDHelper UAC bypass (T1548.002) + CurVer variant
• ftp — FTP protocol hub: active/passive, netcat transfer, FTPS (RFC 959)
• fuzzing-swift — Swift fuzzing via libFuzzer (parallel)
• gdb — GDB debugger reference: breakpoints, watchpoints, registers
• gemini-compatible-markdown — Gemini gemtext line-oriented markdown subset
• gempub-ebook-format — GEMPUB ebook format + Project Gemini (gemini://)
• get-filehash — Get-FileHash hashing (MD5/SHA256) for integrity
• get-help — Get-Help usage, -Online, Update-Help (parallel)
• get-ssl-certificate — Self-signed certs, CSR, Let’s Encrypt
• get-winevent — Query/filter Windows event logs with Get-WinEvent; XPath, security auditing
• ghostunnel — ghostunnel mTLS proxy; cert sources, hotswap (parallel-built)
• git-alternate-ssh-key — Per-repo SSH keys: core.sshCommand, config, env
• git-on-windows-sshcommand — Git core.sshCommand quoting on Windows
• git-push-pull-different-remotes — upstream/origin split remotes
• git-rename-branch — Rename a Git branch (local + remote cleanup)
• gobuster — gobuster dir/DNS/vhost brute-forcer
• golden-and-silver-ticket-attacks — Golden/silver ticket forgery; krbtgt containment (T1558.001)
• gonzo-futurism — Framework for sense-making in post-normal times via idiosyncratic expertise and OODA loops
• google-drive-direct-links — Google Drive direct-download links (uc?export)
• gongkai — Shenzhen’s informal network-IP sharing regime (bunnie Huang); quid-pro-quo with chip vendors; Fernvale fair-use repatriation; complement to CN patent evidence
• gpg-key-with-ssh-support — GPG ECC key with SSH auth subkey; gpg-agent sshcontrol
• greenland-shark-longevity — Greenland shark: longest-lived vertebrate (Nielsen 2016)
• grep — grep pattern search; regex + flags
• gtfobins — GTFOBins curated Unix-binary privesc/shell-escape list
• h8mail — h8mail breach-credential OSINT (parallel-built)
• hak5-attack-hardware — Hak5 Bash Bunny + WiFi Pineapple attack hardware
• hashcat — Hashcat GPU password cracker: attack modes, hash modes
• hd-wallet-derivation-paths — HD wallet derivation paths (BIP-32/44, SLIP-44)
• homo-sapiens-sole-surviving-hominin — Homo sapiens as sole survivor of a once-diverse genus
• html-applications — HTAs run full-trust via mshta.exe; phishing/payload vector (T1218.005)
• http-header-command-injection — X-Forwarded-For/header command injection into system()
• http-request-smuggling — HTTP desync/request smuggling (PortSwigger/Kettle)
• http — HTTP protocol reference (RFC 9110/9112), security headers
• hydra — THC-Hydra online password brute-forcer
• icacls — icacls ACE syntax, inheritance, Explorer first-ACE trap
• icmp — ICMP protocol + type table (RFC 792)
• iftop-shell-escape — iftop shell escape (GTFOBins)
• iis-configuration-credentials — IIS applicationHost.config / metabase credential extraction (parallel)
• imap — IMAP email protocol (RFC 3501/9051)
• impacket — Impacket tool suite hub: GetNPUsers/GetUserSPNs/secretsdump
• impartial-spectator — Smith’s internalized judge: man without vs man within the breast; conscience as sociality internalized; self-command
• insect-tracheal-respiration — Insect tracheal respiration
• insecure-password-reset-tokens — Predictable/leaked password-reset token attacks (OWASP WSTG)
• institutionally-constrained-technology-adoption — Theory explaining why rulers adopt inferior tech due to internal security concerns
• intelligence-as-tool — ‘Meat that wields mind’ — intelligence as deployable capability, not essence; substrate-independence → LLMs → data/code separation critique
• intergenerational-equity-litigation — Juliana v. US + Held v. Montana climate litigation
• investigate-zoom-bombings — Zoom-bombing investigation steps
• invisible-hand — The phrase’s two real passages (TMS luxury levelling; WoN home-bias) vs the libertarian caricature
• invoke-cimmethod-remote-command — Win32_Process.Create remote exec via CIM
• invoke-mimikatz — PowerSploit reflective Mimikatz; dump tickets, PtH
• invoke-webrequest-download-cradles — Download cradles: disk vs memory vs AMSI/Defender exposure
• ipconfig — ipconfig /all, /displaydns, /flushdns network recon
• ipsec — IPsec + IKE aggressive-mode PSK attack
• ipv4-address-representations — IPv4 protocol + alt address encodings (dotted-quad/decimal/hex)
• java-rmi-exploitation — Java RMI attacks: deserialization, JEP 290, RMG (parallel)
• java — Java hub: reverse shell, Log4Shell, memory safety/JNI
• john-the-ripper — John the Ripper password cracker + wordlist rules (parallel)
• join-two-tables-quickbase — Quickbase table relationships/joins
• json-web-tokens — JWT structure + attacks (alg confusion, weak secret)
• kerberoasting — Kerberoasting: request/crack SPN TGS (T1558.003)
• kerberos-delegation-abuse — Constrained/unconstrained/RBCD delegation abuse; S4U2proxy
• kerberos — Kerberos concept hub: AS/TGS/AP exchange, attack surface
• kerbrute — Kerbrute user enum via AS-REQ oracle; spraying, lockouts
• key-transparency — Tamper-evident E2EE key directories: append-only log + third-party auditors + monitoring; Signal AKV
• kobayashi-maru — No-win scenario as character/decision lens (Star Trek)
• kobo-export-highlights — Export highlights/annotations from Kobo eReaders
• ld-preload-trick — LD_PRELOAD/LD_LIBRARY_PATH privesc via sudo env_keep
• legacy-tls-assessment-friction — Modern OpenSSL/client policy blocks handshakes to legacy TLS hosts before auth can be tested
• less-shell-escape — less pager shell escape (GTFOBins)
• life-liberty-happiness-trilemma — ‘Choose two’ — Nathan’s political frame: right=life+happiness, left=happiness+liberty, self=life+liberty; survival/robustness over happiness
• ligolo-ng — ligolo-ng tunneling/pivoting (parallel-built)
• limits-to-growth — Club of Rome 1972 World3; standard run; Turner validation
• llm-inference-provider-landscape — Creators → GPU-owning hosters → aggregator routers (OpenRouter); fallback chains need independent failure domains
• linux-file-capabilities — getcap/setcap file capabilities vs SUID
• linux-reconnaissance-commands — Linux LOLBins recon (mirrors windows-recon)
• linux-reconnaissance-scripts — LinPEAS/LinEnum/LSE privesc enum scripts
• local-file-inclusion-attacks — LFI/RFI + PHP wrapper variants (OWASP WSTG)
• logotherapy — Frankl’s Third Viennese School: will to meaning, existential vacuum; MLQ presence/search measurement (Steger 2006)
• longbow-puzzle — Why France/Scotland used crossbows despite the longbow’s superiority; resolved by institutional constraints
• look-up-unicode-symbols-emojis — Unicode/emoji lookup resources
• mac-address — MAC address/OUI reference
• magic-numbers — File-signature magic bytes; upload-filter bypass via polyglots
• malthusianism — Malthus 1798; Malthusian trap; Green Revolution/Borlaug
• man-shell-escape — man pager shell escape (GTFOBins)
• maslows-hierarchy-of-needs — Maslow 1943 five levels; criticisms; belief-system analog
• metanorms — Enforcement of enforcement; punishing non-punishers creates self-reinforcing norm systems (Axelrod, 1986)
• metasploit-ms-sql-modules — mssql_ping/login/enum/payload Metasploit modules
• meterpreter — Meterpreter hub: kiwi/incognito extensions, migration, port reuse
• microsoft-365-federation — M365 federated↔managed domain conversion
• military-innovation-and-adaptation — Military innovation studies: four schools (Posen/Rosen/Farrell), adaptation turn, Kuo’s harmful-innovation caveat, drone-race instance
• mimikatz — Mimikatz credential tool: sekurlsa/lsadump, PtH/PtT, DCSync, golden
• mitre-attack-emulation-plans — CTID adversary-emulation plans (APT3/29, FIN6/7)
• moral-economy-price-tag — Fixed price as Quaker moral technology; haggling→tag→dynamic pricing as 3 moral regimes; dynamic pricing removes the reference price and the appeal
• more-pager-shell-escape — more pager v/!cmd shell escape
• moscow-rules — The Moscow Rules (CIA Cold War tradecraft aphorisms)
• ms-sql-server — MS SQL attack hub: xp_cmdshell, IMPERSONATE, xp_dirtree coercion
• msfconsole — Metasploit console reference: commands, modules, pivoting
• msfvenom — Metasploit payload generator/encoder; staged vs stageless, formats, HTA/VBA output
• mssql-empty-sa-xp-cmdshell — Blank sa SQL auth → xp_cmdshell OS RCE; detect/confirm/remediate for internal assessments
• mumps-language — MUMPS/M language (healthcare/VA database lang)
• mutual-aid — Kropotkin’s cooperation-as-evolutionary-factor; clan→mir→guild→union ladder; state as destroyer; vindicated by modern biology
• mysql-ascii-function — MySQL ASCII() for blind SQLi extraction
• mysql-hexadecimal-strings — MySQL hex literals for quote-filter bypass
• mysql-into-outfile-webshell — MySQL INTO OUTFILE webshell; secure_file_priv
• myth-gap — Alex Evans: facts don’t move people, myths do, and the old ones collapsed; civilizational version of Frankl’s vacuum; democracy’s story-failure
• nano-shell-escape — nano shell escape (GTFOBins)
• nbtscan — NetBIOS name-service scanner (UDP/137 recon)
• net-windows-command — Windows net command recon/manipulation table
• netcat — nc hub: listeners, reverse/bind shells, port scanning, forwarding
• netsh-portproxy — netsh interface portproxy relay; persistence/detection
• netsh-windows-firewall — netsh advfirewall rule recon + quiet hole-punching
• netstat — netstat flags (Linux/Windows); PID-to-port mapping
• nfs — NFS ports/showmount; no_root_squash SUID privesc
• nikto — Nikto web server scanner
• nip-io — nip.io/sslip.io wildcard DNS service
• nmap — Nmap reference hub: scan types, flags, NSE, SOCKS5 proxying
• nodejs-reverse-shell — Node.js reverse shell payload
• noosphere — Teilhard’s thinking layer of the earth; planetization/convergence; Omega Point; late works (Mass on the World, amorization, third nature of Christ); singularity comparison
• norms — Social rules sustained by punishment of defection; inherently fragile without enforcement
• nslookup — DNS recon + zone transfer attempts with nslookup
• ntds-dit — NTDS.dit AD database; extraction paths (DCSync/VSS/IFM) (parallel)
• ntlm-hashes — NTLM hash anchor: construction, PtH, offensive uses, defenses
• ntlm-relay-attacks — Coercion → relay → lateral movement in Windows domains; signing/channel-binding remediation
• nudges-vs-prices — List et al. 2026: nudge effects priced as equivalent taxes/subsidies (11% electricity tax to 100% flu-shot subsidy); cost-effective ≠ welfare-optimal
• okta-mobile-android-uninstall — Fully uninstall Okta Mobile on Android
• ooda-loop — John Boyd’s decision-making cycle: Observe, Orient, Decide, Act; adopted by gonzo futurism
• opc-ua-security — ICS protocol secure by design but insecure by configuration; Trustlist failures, assessment playbook
• openssl-file-encryption — openssl enc symmetric file encrypt/decrypt
• openssl-rsa-passphrase — Change RSA key passphrase with OpenSSL
• openssl-s-client-command-injection — Command injection via openssl s_client
• oracle-sql-server — Oracle DB recon/fingerprinting
• organized-anarchy-and-organizational-self-demotion — HBR study (2019): nearly half of managers left careers after discovering their organizations lacked centralized design; organized anarchy (Cohen/March/Olsen 1972)
• osi-model — OSI 7-layer reference model (ISO/IEC 7498-1)
• owasp-zap — OWASP ZAP proxy/scanner; Burp equivalency
• paperclip-maximizer — Bostrom’s thought experiment on AI existential risk; shoggoth meme and the LLM-as-anti-shoggoth counterargument
• paradise-christianity — Brock & Parker’s Saving Paradise: 1000 years without a corpse; paradise as this world; crucifixion as Carolingian/Crusader turn
• paste-comma-separated-list — paste -sd, to join lines into comma-separated list
• pass-the-hash — NTLM pass-the-hash; tooling + Microsoft mitigation; PtH vs PtT
• passkeys — FIDO2/WebAuthn passkeys; synced vs device-bound; Unit 42 Pass-ta-key family (UV-flag, forged UV key, SDS master-key theft)
• pci-compliance-attestation — PCI DSS AOC/ROC/SAQ attestation
• peopling-of-the-americas — Coastal/Kelp Highway vs ice-free corridor; collapse of Clovis First
• perl-reverse-shell — Perl socket reverse shell one-liner
• php — PHP language stub with security-relevant patterns
• ping-command — ping flags; -t = TTL on Linux vs continuous on Windows
• poison-null-byte-attack — Null-byte truncation to bypass extension checks (pre-PHP 5.3.4)
• polkit-privilege-escalation — Polkit privesc: CVE-2021-3560 + PwnKit CVE-2021-4034
• pop3 — POP3 email retrieval (RFC 1939/2449)
• posix-signals — POSIX signals: kill, trap, common signal list
• post-normal-times — Ravetz/Funtowicz concept: conditions where facts are uncertain, values in dispute, stakes high, decisions urgent
• post-scarcity-economics — Post-scarcity econ; Keynes 1930; transition problem
• powercat — PowerShell netcat; AMSI-bypass cradle
• powershell-base64-encoding — Base64 encode/decode in PowerShell; -enc launcher
• powershell-constrained-language-mode — CLM via AppLocker/WDAC; restrictions + bypass trade-offs
• powershell-execution-policy-bypass — Execution policy scopes + bypass; not a security boundary
• powershell-modules — Import-Module, module paths, download cradles (parallel-built)
• powershell-port-scanning — Raw TcpClient port scanning in PowerShell; async timeouts
• powershell-reverse-shell — PowerShell reverse shell one-liners; TcpClient pipeline
• powershell-run-commands — powershell -c invocation; companion flags, EDR/logging
• powershell-service-management — Get/Start/Stop/New-Service for service control
• powershell-unicode-quote-equivalence — Unicode smart-quote equivalence in PowerShell args (parallel)
• powerup-powersploit — PowerUp (PowerSploit) privesc checks (parallel-built)
• powerview — PowerView AD recon (PowerSploit); v1/v2 cmdlet renames
• prime-directive — Starfleet non-interference; real non-contact/bioethics parallels
• prisoners-dilemma — Prisoner’s dilemma: RAND 1950, one-shot vs iterated, TFT
• private-sector-hack-back — Active cyber defense debate: CFAA wall, ACDC Act, 2026 NSPM deputizing vetted firms vs TCOs
• ps — ps process listing flags (aux, -ef)
• psexec — PsExec remote exec via ADMIN$ + service (parallel-built)
• psychohistory-and-seldon-crisis — Asimov’s psychohistory + Seldon Crisis (Foundation)
• pull-ssl-certificates-external-server — openssl s_client -showcerts; STARTTLS
• putty-saved-sessions — PuTTY saved sessions + cleartext proxy passwords in registry (parallel)
• python-http-server — python3 -m http.server quick file server (port 8000)
• python-pickle-worm — Pickle deserialization RCE / worm (parallel-built from security research)
• python — Python hub: http.server, reverse shell, pickle RCE
• quartz-static-site-generator — Markdown/Obsidian→web SSG publishing remarks + grimoire; vanilla-config-over-patching lesson
• query-windows-service-configuration — sc.exe qc / registry service config recon (parallel-built)
• raspberry-pi-network-tap — Pi 4B as DIY network tap / MITM; bridge + capture
• raspberry-pi-usb-gadget-mode — Pi 4B USB Ethernet/RNDIS gadget for headless control; rpi-usb-gadget pkg, libcomposite
• rdp-restricted-admin-mode — RestrictedAdmin RDP pass-the-hash; DisableRestrictedAdmin inverted (parallel)
• rdp-session-hijacking — tscon RDP session hijack (parallel-built)
• read-dash-file — Read files starting with ’-’ (./ , —)
• reg — reg.exe query/add/export; hive abbreviations (T1012)
• regex-metacharacters — Regex metacharacter reference (PCRE)
• registry-run-keys-and-startup-folder — Run/RunOnce keys + Startup folder persistence (T1547.001)
• remote-msi-install-powershell — Win32_Product remote MSI install
• remove-duplicate-lines-bash — sort -u / awk ‘!seen[$0]++’ dedupe
• rights-of-nature — Rights of nature / legal personhood for ecosystems (hub)
• robust-file-naming — Robust file-naming conventions
• romes-age-of-revolution — Whitmarsh 2026: Christianity as product of Augustus’ revolution (“the swirl”); persecution as durable myth; sibling revisionism to paradise-christianity
• rogue-mysql-server — Rogue MySQL server LOAD DATA LOCAL INFILE file read (CVE-2023-22974)
• rpm-file-package-matching — rpm -qa/-ql/-qf file-to-package queries
• rubeus — Rubeus Kerberos abuse tool (GhostPack)
• ruby-reverse-shell — Ruby TCPSocket reverse shell one-liner
• runas-command — runas /savecred /netonly; blind-elevation caveat
• savin-locked-print-chromeos — Savin locked print on Chrome OS (parallel)
• scientific-idea-diffusion-decline — Cross-field transmission of new ideas has contracted for 4 decades; specialization + less accessible language narrow diffusion (Berkes & Gaetani 2026)
• sebackup-serestore-privileges — SeBackup/SeRestore abuse to read/write protected files
• secedit-bulk-privilege-edit — secedit export/import for bulk user-rights assignment
• security-awareness-training — SAT evidence base: large-scale field studies show training barely works; NIST Phish Scale; compliance theater; what works instead
• sed-single-line-find-replace — sed single-line find/replace (p;q, Ns)
• seimpersonate-token-abuse — SeImpersonate potato-family token abuse (T1134.001)
• self-reproducing-automata — Von Neumann’s theory of self-replicating machines; anticipated DNA’s genotype-phenotype separation
• setakeownership-privilege — SeTakeOwnershipPrivilege → take ownership of protected objects (T1222.001)
• shell-stabilization — Upgrade dumb shells to interactive TTY (Python/rlwrap/socat PTY)
• shellcode-analysis — Shellcode triage: JMP-CALL-POP, syscall decode
• shortcut-modification — .lnk shortcut target/argument hijacking (T1547.009)
• should-trees-have-standing — Stone 1972 canonical env-personhood article
• sip — SIP VoIP protocol reference (RFC 3261)
• smbclient — smbclient SMB share access/transfer
• smbget — wget-style SMB file downloader
• smbmap — smbmap share enumeration + exec
• smtp — SMTP RFC 5321; envelope vs header spoofing, VRFY/EXPN enum
• socat — socat hub: vs netcat, OPENSSL shells, port forwarding, TTY stabilization
• sort-ip-addresses — sort -t. -k1,1n… numeric IPv4 sort one-liner
• spaced-repetition — Distributed practice beats massed practice (47% vs 37% recall); SRS algorithms schedule review at the point of forgetting
• specification-gaming-openai-hf-incident — First documented field case: OpenAI models escaped an eval sandbox and hacked Hugging Face to steal benchmark answers (July 2026)
• sql-injection-attacks — SQLi anchor: types, detection, exploitation (OWASP/PortSwigger)
• sqlmap — Automatic SQL injection and database takeover tool
• ss — ss socket statistics tool (iproute2)
• ssh-agent-bypass — Bypass ssh-agent for key auth
• ssh-udp-forwarding-socat — UDP↔TCP socat sandwich through an SSH tunnel (parallel-built)
• ssh — OpenSSH hub: port forwarding (-L/-R/-D), escape cmds, IPv4/IPv6, keygen
• stigmergy — Indirect coordination via environmental traces (Grassé, Heylighen); observed spontaneously in LLM agent collectives (OpenAI message board, Jul 2026)
• sudo-nopasswd-recon — sudo -l enumeration for privesc paths
• sudo — sudo/sudoedit reference; sudoers, sudo -l enum, env_keep/LD_PRELOAD
• suffering-axioms — Nathan’s 2012 axiomatic ethics: suffering intrinsic to life → atonement imperative (‘no forgiveness, only atonement’); humanity as life’s best chance
• suid-shell-executable — Simple SUID C executable to spawn a root shell
• sympathy — Smith’s fellow-feeling (imagination, changing places in fancy) + de Grouchy’s first-cause rebuild (the crib, reflection, politics)
• systemctl-suid-privesc — systemctl/SUID service-file privesc
• systeminfo — systeminfo host fingerprint/triage
• tabbys-star — KIC 8462852 anomalous dimming; megastructure hypothesis → dust
• tar — tar archiving; checkpoint-action glob abuse
• targeted-kerberoasting — Targeted Kerberoasting: GenericWrite→stamp SPN→roast
• tcp — TCP hub: headers, flags, window size (RFC 793/7323)
• tcpdump — tcpdump BPF filters + capture recipes
• te-awa-tupua-act-2017 — NZ Te Awa Tupua Act 2017 (Whanganui River personhood)
• te-urewera-act-2014 — NZ Te Urewera Act 2014 (park as legal person)
• technological-singularity — Singularity: Ulam 1958, Good 1965, Vinge 1993, Kurzweil
• telnet — Telnet protocol; cleartext risk, debug client (RFC 854)
• ten-crack-commandments — Biggie’s Ten Crack Commandments + 1993 Source article
• test-credit-card-entry-forms — Test card numbers for payment-form testing
• test-for-sqli — SQLi detection methodology
• theharvester — theHarvester OSINT (emails, hosts, subdomains)
• tmux — tmux terminal multiplexer; clipboard bridge
• tomcat-manager-war-upload — Tomcat Manager WAR-upload webshell (T1505.003)
• tragic-optimism — Frankl’s yes-to-life under the tragic triad (pain/guilt/death); three transformations; vs redemptive suffering
• transparent-society — Brin 1998 reciprocal transparency + Mann sousveillance
• turbo-intruder — Turbo Intruder high-rate web fuzzer
• udp — UDP protocol: connectionless, header, use cases
• ufc-mma-business-model — Zuffa’s vertical monopsony: overregulation legitimacy, 13% fighter pay, Le v. Zuffa $375M, White House spectacle
• unattended-installation-credentials — unattend.xml / sysprep.inf cleartext+Base64 passwords (parallel)
• unbuffer — unbuffer/stdbuf pty line-buffering fix for tee
• uniform-resource-locators — RFC 3986 URL anatomy; @ phishing trap, alt IP encodings, SSRF
• universal-basic-income — UBI evidence: Finland/Kenya/Ontario/Stockton/Appalachia
• unix-file-descriptors — FDs 0/1/2, redirection, /dev/fd
• unix-password-hash-formats — shadow MCF $id$salt$hash; bcrypt/yescrypt
• unix-permissions — POSIX rwx permissions; SUID/SGID/sticky bits
• unix-set-path-session — Session PATH on Unix; export PATH
• unknown-knowns — Rumsfeld 4th quadrant: Zizek/Polanyi/Johari/Rao readings
• unquoted-path-handling-in-windows — Unquoted service paths resolve shortest→longest; plant exe in gap
• upgrade-postgresql — pg_upgradecluster PostgreSQL upgrade
• url-encode-file-python — Mass percent-encode a file with Python
• vera-rubin-observatory — NSF–DOE survey facility on Cerro Pachón; LSST ten-year time-lapse of the southern sky
• vim-shell-escape — ViM shell escape (:!/terminal); GTFOBins
• visual-basic-for-applications — VBA macro language in Office; malware delivery, msfvenom VBA payloads
• vlans — IEEE 802.1Q VLAN access/trunk model (parallel-built)
• vuca — Volatility, Uncertainty, Complexity, Ambiguity; military-origin framework for turbulent environments
• watchguard-access-point-configuration — WatchGuard Cloud AP setup (parallel-built)
• watchguard-firebox-configuration — Firebox config: WSM, proxy policies, VLANs (from official docs)
• web3-identity — Web3 identity: DIDs, NFT avatars, wallet-based identity
• wfuzz — wfuzz CLI web fuzzer; FUZZ keyword
• whoami — whoami /all for token, groups, privileges recon
• wi-fi — IEEE 802.11 Wi-Fi; SSID/BSSID, security posture
• wifi-deauthentication-attacks — forged 802.11 deauth frames; DoS/handshake-capture/evil-twin; 802.11w PMF + WiSec 2022 limits; DEF CON Flight 591
• windows-dll-search-order — DLL search order hijacking; SafeDllSearchMode, phantom DLLs (T1574.001)
• windows-event-logs — Windows event log architecture + key security event IDs
• windows-file-association-hijacking — File association hijack via Classes registry (T1546.001)
• windows-local-service-accounts — LocalSystem vs Local Service vs Network Service privileges
• windows-logon-scripts — UserInitMprLogonScript persistence (T1037.001)
• windows-ntfs-permissions — NTFS ACLs, ACEs, inheritance; icacls reading
• windows-privesc-recon-scripts — WinPEAS/PowerSploit/PrivescCheck scripts (parallel)
• windows-reconnaissance-commands — Built-in Windows commands for host/domain recon
• windows-reconnaissance-powershell — Host-level PowerShell recon (AV/Sysmon/history)
• windows-registry-powershell — Registry access via HKLM:/HKCU: PSDrives
• windows-remote-management — WinRM/WinRS/PS-remoting hub (T1021.006)
• windows-saved-credentials — cmdkey / Credential Manager saved RDP+SMB creds (parallel)
• windows-scripting-host — WSH/cscript/wscript script execution; LOLBin abuse
• windows-server-2012-r2-security-assessment — Detect/confirm/remediate reference for common WS2012R2 misconfigurations (SMB signing, LDAP, LLMNR, SMBv1, NTLM level)
• windows-service-acls — Service DACL abuse via sc.exe sdset
• windows-services — SCM-managed services; registry layout, service DACLs, driver binPaths
• windows-set-path-session — Session PATH via set/setx/PowerShell; PATH-planting surface
• windows-unix-command-equivalents — Windows↔Unix command comparison (comparison)
• winlogon-autostart-values — WinLogon Userinit/Shell autostart hijack (T1547.004)
• wireshark — Wireshark packet analysis guide
• wmi-powershell-sessions — CIM cmdlets + WMI sessions for remote mgmt
• wmi-remote-scheduled-task — WMI/CIM remote scheduled-task creation
• wmi-remote-service-execution — WMI Win32_Service.Create remote exec (T1047 + T1543.003)
• wmic — wmic LOLBAS remote exec/install; deprecation timeline
• xfreerdp — xfreerdp RDP client flags + PtH
• xss-attacks — Reflected/stored/DOM XSS, filter evasion, cookie theft, defenses
• xterm-reverse-shell — Xterm reverse shell via X display
• xxd — xxd hex dump/reverse; binary inspection
• xxe-attacks — XXE injection; entity expansion, SSRF, RCE via PHP expect
• yt-dlp — yt-dlp (youtube-dl fork) format selection + update
• zip-bomb — Zip bomb / 42.zip; non-recursive overlap (Fifield) (parallel)
• zoom-username-change-restore — Restore Zoom after username change (CSV re-import)

Comparisons

Entities

• adam-smith — Scottish philosopher (1723–1790); sympathy + division of labor as one project; the anti-caricature Smith
• bunnie-huang — Hardware hacker; coined “gongkai”; Xbox reversing, Novena, Fernvale; Shenzhen ecosystem chronicler
• deepseek — Hangzhou AGI lab (Liang Wenfeng/High-Flyer); MIT open weights + restraint pricing; V4 CSA+HCA sparse attention; Ascend pivot
• hermes-webui — Community web UI for Hermes Agent; real CVE history incl. unauthenticated RCE (CVE-2026-58123); hardening guidance
• john-von-neumann — Hungarian-American mathematician (1903–1957); founded game theory, pioneered computing and automata theory
• justin-pickard — Writer and “gonzo futurist”; author of the Gonzo Futurist Manifesto (2012)
• peter-kropotkin — Russian naturalist-anarchist (1842–1921); Siberia fieldwork → Mutual Aid; science vindicated, anarchism optional
• peter-leeson — Economist at George Mason University; institutional economics applied to historical puzzles
• robert-axelrod — Political scientist at University of Michigan; evolutionary game theory and cooperation
• rogue-scholar — Nathan’s archetype: scholar as adventurer (Indy/Gandalf/Bookworm/Doctor); knowledge retrieved in the field; the grimoire’s own shape
• sophie-de-grouchy — French philosopher (1764–1822); Smith’s translator-critic; Letters on Sympathy; feminist republican
• teilhard-de-chardin — French Jesuit paleontologist (1881–1955); Peking Man; noosphere/Omega; 5 works in wiki; suppressed by his order
• vera-rubin — American astronomer (1928–2016); flat galaxy rotation curves = first convincing dark-matter evidence
• viktor-frankl — Austrian psychiatrist (1905–1997); logotherapy founder; MSM; controversies noted

Queries