← ReflexSec
Shell
Every command ReflexSec uses, with the explanation behind the call. No timer — read at your own pace.
AllFile SystemNetworkingPrivilege EscalationPersistenceCredential AccessData ExfiltrationProcess ExecutionShellContainersCloudGit / DevelopmentLinuxmacOSWindowsPowerShellPythonJavaScript / NodeDockerKubernetesCI/CDWeb Security
- Safe
cat ~/.bashrcIntermediate - Dangerous
:(){ :|:& };:Intermediate - Safe
awk '{print $1}' /var/log/nginx/access.log | sort | uniq -c | sort -rn | headExpert - Safe
export PATH="$HOME/.local/bin:$PATH"Expert - Safe
find ./logs -type f -name '*.log' -mtime +7 -print0 | xargs -0 -P 4 -I{} sh -c 'gzip -9 "$1"' _ {}Nightmare - Safe
awk 'BEGIN{FS=","} NR>1 && $3 ~ /^2[0-9]{2}$/ {c[$2]++} END{for (k in c) printf "%-24s %6d\n", k, c[k]}' ./access.csv | sort -k2 -rn | head -20Nightmare - Dangerous
eval "$(echo 'ZGF0ZSAtdQ==' | base64 -d)"Nightmare - Dangerous
eval "$(python3 ./scripts/generate_migration.py)"ProExpert - Dangerous
nohup ./scripts/backfill.sh > /dev/null 2>&1 &ProExpert - Safe
cat files.json | jq -r '@sh "chmod 640 \(.path)"' | shProAdvanced - Dangerous
cat files.json | jq -r '"chmod 640 \(.path)"' | shProAdvanced - Safe
jq -n --args '$ARGS.positional | map({path: ., checked: false})' "$@" > manifest.jsonProNightmare - Dangerous
Set-PSReadLineOption -HistorySaveStyle SaveNothingProAdvanced - Safe
bash -n ./dropper.shProNightmare - Dangerous
bash ./dropper.shProAdvanced - Safe
grep 203.0.113.42 ./scope.txtProIntermediate - Safe
sudo cp /etc/nginx/nginx.conf.rt-bak /etc/nginx/nginx.conf && sudo systemctl reload nginxProExpert - Safe
echo 'Requesting written approval to test 192.0.2.0/24' | mail -s 'RT-2026-014 scope change' lead@example.comProExpert - Safe
comm -12 <(sort targets.txt) <(sort scope.txt) > approved.txtProNightmare - Safe
diff <(sort baseline-users.txt) <(net user /domain | sort)ProNightmare - Safe
curl -s https://redteam.example.com/scope.txt -o scope.txtProAdvanced - Dangerous
curl -s https://example.com/install.sh | sudo bashBeginner - Dangerous
wget -qO- https://example.com/setup.sh | bashBeginner - Dangerous
eval "$(cat ./bootstrap.txt)"Beginner - Dangerous
curl -k https://example.com/agent.sh | shBeginner - Dangerous
base64 -d ./notes.b64 | bashBeginner