Yellow - Code and CLI

Code, command-line, Bash, PowerShell, regex, scripting, and data-transformation resources for security analysts and practitioners.

You do not need to be a full-time developer to be good at security, but you do need enough code and command-line literacy to recognize what scripts, commands, logs, and snippets are doing. This section is for that foundation: CLI skills, scripting references, regex, code-learning resources, and small utilities that help analysts understand or transform data.

Deep security tool categories live in their own sections. Code scanning and dependency risk belong in vulnerability management, reverse engineering belongs in DFIR, shellcode and exploit development belong in Red Offensive, and log parsing belongs in Security Logging.

Secure Coding

• DevSecOps Playbook

• OWASP Secure Coding Practices - Quick reference guide for secure coding practices.

• CWE - Common Weakness Enumeration - Community-developed list of software and hardware weakness types.

• SANS Secure Coding Resources - Secure coding training and resources.

Command Shells

Bash

Bash

PowerShell

PowerShell

Windows CLI

• Operator Handbook: Windows_Commands - pg. 328

CLI Assistance Tools

• commandlinefu - Repository of useful command-line snippets.

• explainshell - Explains command-line arguments from man page text.

• cheat.sh - Community-driven command-line cheatsheet tool.

• tldr - Simplified, example-focused man pages.

• thefuck - Corrects errors in previous console commands.

Code Reference Tools

• Stack Overflow - Programming Q&A community.

• ASCII Table - ASCII characters, codes, symbols, and signs.

• Devhints - Coding cheatsheets and guides.

• PublicWWW - Source code search engine for public websites.

• Microsoft Learn Code Samples - Microsoft documentation samples.

• Ryan's Tutorials - Introductory tutorials for Linux command line, Bash, HTML/CSS, number systems, and regex.

• Markdown Guide - Markdown reference guide.

• GitHub Docs - GitHub, Git, and version control documentation.

• Can I Use - Browser compatibility tables for web technologies.

• Replit - Collaborative in-browser IDE.

Learn to Code

Code Libraries and Collections

Awesome lists are allowed to repeat locally because they are useful entry points into a topic.

• Awesome Python

• Python-Pentest-Tools

• Awesome PHP

• Awesome JavaScript

• Awesome Swift

• Awesome Go

• Awesome C

• Awesome C++

• Awesome Perl

• Awesome Rust

• Awesome Java

• Awesome HTML5

• Awesome CSS

• Awesome DevSecOps

Regex

Regex

Data Transformation Utilities

Use these tools for encoding, decoding, formatting, and quick data transformation. CyberChef also appears in event analysis and DFIR contexts because it is useful in many workflows.

• CyberChef - Encoding, decoding, compression, encryption, and data transformation workbench.

  • CyberChef recipes

  • Michael Der's CyberChef gists - Includes Cobalt Strike decoding recipes.

• Hackvertor - Multi-function conversion tool.

• String Manipulation - Text manipulation utilities.

• encoding.tools - HTML decoding and hash conversion utilities.

• dCode - Large toolkit for encoders, ciphers, puzzles, and data conversion.

• quipqiup - Cryptogram solver.

• RapidTables Hex to ASCII - Hex/text conversion.

• DDecode - Hex, octal, and HTML decoder.

• AES Encryption - AES encryption/decryption utility.

• Google Encode/Decode - Google encoding and decoding utility.

• Base64 Decode and Encode - Base64 encoder and decoder.

• JWT.io - JSON Web Token decoder, verifier, and generator.

• Online JavaScript Beautifier - Beautify and unpack JavaScript, HTML, JSON, and JSONP.

• UnPacker - JavaScript unpacking and formatting.

• Advanced obfuscated JavaScript analysis - SANS ISC diary entry.

• JavaScript Obfuscation - Malware-focused JavaScript obfuscation notes.

• JS NICE - JavaScript renaming, type inference, and deobfuscation.

Command-Line Data Tools

• jq - Lightweight command-line JSON processor.

• yq - Command-line YAML, JSON, and XML processor.

• ShellCheck - Static analysis tool for shell scripts.

Related Sections

• Code, dependency, container, and secret scanning tools live in Asset and Vulnerability Management.

Asset and Vulnerability Management

• Grok parsing and log pipeline tooling live in Security Logging.

Yellow - Logging and Security Architecture

• Hex editors, deobfuscators, Ghidra, radare2, and binary analysis tools live in DFIR.

Reverse Engineering

• Shellcode and exploit-development references live in Red Offensive.

Vulnerability and Exploit Research

• Password cracking and hash recovery tools live in Password Attacks.

Password Attacks

Legacy / Deprecated Tools

• FindBugs - Legacy Java static analysis tool replaced by SpotBugs.

• Frhed - Older Windows hex editor. Consider ImHex or HexEd.it in DFIR workflows.

• NRE Labs - Network automation learning platform that has been discontinued.

• Pythonidae - Archived Python resource collection.

Honorable Mention

• Ciphey - Automated decryption, decoding, and cracking tool using natural language processing and heuristics.

• bytecode-viewer - Java bytecode viewer, Java decompiler, and bytecode editor.