+- Hack Forums (https://hackforums.net)
+-- Forum: Tech (https://hackforums.net/forumdisplay.php?fid=444)
+--- Forum: Computing (https://hackforums.net/forumdisplay.php?fid=88)
+---- Forum: Linux (https://hackforums.net/forumdisplay.php?fid=85)
+---- Thread: 10 Linux Commands for Basic Security Analysis (/showthread.php?tid=6333114)
10 Linux Commands for Basic Security Analysis - FatCat - Oct 6, 2026
Hey everyone,
I'm currently learning cybersecurity and put together a small list of Linux commands that I find useful for basic security and network analysis.
1. ss -tulpn
Check listening TCP/UDP ports and associated processes.
2. ss -tunap
View active network connections and associated processes.
3. ip addr
Display network interfaces and IP addresses.
4. ip route
Display the routing table.
5. sudo lsof -i
Show processes using network connections.
6. dig example.com
Perform DNS lookups.
7. ps aux
List running processes.
8. journalctl -u ssh
Review SSH service logs.
9. grep -i "failed" /var/log/auth.log
Search authentication logs for failed attempts.
10. sudo tcpdump -i eth0
Capture network traffic for analysis.
These are simple commands, but I think they are useful for beginners learning Linux and cybersecurity.
What other commands would you recommend adding?