Useful One-Liners

Ready-to-use Linux/Unix one-liner collection. HTTP servers, file transfer, text extraction, advanced find, process analysis, binary data, and network debugging recipes organized by category

56 one-liners

python3 -m http.server 8080

Python3 HTTP server

python3 -m http.server 8080

python3 -m http.server 8080 --bind 127.0.0.1

Bind to specific address

python3 -m http.server 8080 --bind 127.0.0.1

python -m SimpleHTTPServer 8080

Python2 HTTP server

python -m SimpleHTTPServer 8080

ruby -run -e httpd . -p 8080

Ruby HTTP server

ruby -run -e httpd . -p 8080

php -S 0.0.0.0:8080

PHP built-in server

php -S 0.0.0.0:8080

npx http-server -p 8080

Node.js HTTP server

npx http-server -p 8080

busybox httpd -f -p 8080

BusyBox HTTP server

busybox httpd -f -p 8080

perl -MHTTP::Daemon -e '$d=HTTP::Daemon->new(LocalPort=>8080)||die;print "URL: ",$d->url;while($c=$d->accept){while($r=$c->get_request){$c->send_file_response(".".$r->url->path)}}'

Perl HTTP server

perl -MHTTP::Daemon -e '$d=HTTP::Daemon->new(LocalPort=>8080)||die;...'

nc -lvnp 4444 < file.txt

Send file with Netcat

nc -lvnp 4444 < file.txt

nc HOST 4444 > file.txt

Receive file with Netcat

nc HOST 4444 > file.txt

curl -T file.txt http://HOST:8080/

Upload file with curl

curl -T file.txt http://HOST:8080/

curl -O http://HOST:8080/file.txt

Download file with curl

curl -O http://HOST:8080/file.txt

scp file.txt user@host:/path/

Transfer file with SCP

scp file.txt user@host:/path/

rsync -avz --progress src/ user@host:dest/

Sync with rsync

rsync -avz --progress src/ user@host:dest/

base64 file.bin | tr -d '\n'

Transfer via Base64 encoding

base64 file.bin | tr -d '\n'

wget -r -np -nH --cut-dirs=1 http://HOST/dir/

Recursive download with wget

wget -r -np -nH --cut-dirs=1 http://HOST/dir/

grep -oE '[a-zA-Z0-9._%+-]+@[a-zA-Z0-9.-]+\.[a-zA-Z]{2,}' file.txt

Extract email addresses

grep -oE '[a-zA-Z0-9._%+-]+@[a-zA-Z0-9.-]+\.[a-zA-Z]{2,}' file.txt

grep -oE '([0-9]{1,3}\.){3}[0-9]{1,3}' file.txt

Extract IP addresses

grep -oE '([0-9]{1,3}\.){3}[0-9]{1,3}' file.txt

grep -oE 'https?://[^ "]+' file.txt

Extract URLs

grep -oE 'https?://[^ "]+' file.txt

grep -oE '[a-zA-Z0-9.-]+\.[a-zA-Z]{2,}' file.txt | sort -u

Extract domains

grep -oE '[a-zA-Z0-9.-]+\.[a-zA-Z]{2,}' file.txt | sort -u

sort file.txt | uniq -c | sort -rn | head -20

Sort by occurrence count

sort file.txt | uniq -c | sort -rn | head -20

sed '/^$/d' file.txt

Remove blank lines

sed '/^$/d' file.txt

sed -n '/START/,/END/p' file.txt

Extract between patterns

sed -n '/START/,/END/p' file.txt

awk -F',' '{print $1,$3}' file.csv

Extract specific CSV columns

awk -F',' '{print $1,$3}' file.csv

find / -perm -4000 -type f 2>/dev/null

Find SUID files

find / -perm -4000 -type f 2>/dev/null

find / -writable -type d 2>/dev/null

Find writable directories

find / -writable -type d 2>/dev/null

find / -writable -type f 2>/dev/null

Find writable files

find / -writable -type f 2>/dev/null

find / -mtime -1 -type f 2>/dev/null

Find files modified in last 24h

find / -mtime -1 -type f 2>/dev/null

find / -size +100M -type f 2>/dev/null

Find files larger than 100MB

find / -size +100M -type f 2>/dev/null

find . -empty -type f

Find empty files

find . -empty -type f

find . -name "*.tmp" -type f -delete

Find and delete matching files

find . -name "*.tmp" -type f -delete

find . -name "*.log" -exec grep -l "error" {} \;

Find and execute command

find . -name "*.log" -exec grep -l "error" {} \;

lsof -p PID

Open files by process

lsof -p PID

lsof -i -P -n | grep LISTEN

Listening ports

lsof -i -P -n | grep LISTEN

lsof -i :8080

Process using a port

lsof -i :8080

ls -la /proc/PID/fd

Process file descriptors

ls -la /proc/PID/fd

strace -p PID -f -e trace=network

Trace system calls

strace -p PID -f -e trace=network

ps auxf

Display process tree

ps auxf

ps aux --sort=-%mem | head -20

Top memory consumers

ps aux --sort=-%mem | head -20

ps aux --sort=-%cpu | head -20

Top CPU consumers

ps aux --sort=-%cpu | head -20

xxd file.bin | head -50

Hex dump

xxd file.bin | head -50

xxd -p file.bin

Binary to hex string

xxd -p file.bin

xxd -r -p hex.txt file.bin

Hex string to binary

xxd -r -p hex.txt file.bin

strings -n 8 file.bin

Extract strings from binary

strings -n 8 file.bin

dd if=/dev/sda of=backup.img bs=4M status=progress

Copy disk image

dd if=/dev/sda of=backup.img bs=4M status=progress

objdump -h binary

Binary section headers

objdump -h binary

base64 file.bin > file.b64

Base64 encode

base64 file.bin > file.b64

base64 -d file.b64 > file.bin

Base64 decode

base64 -d file.b64 > file.bin

tcpdump -i eth0 -w capture.pcap

Packet capture

tcpdump -i eth0 -w capture.pcap

tcpdump -i eth0 'port 80' -A

Capture HTTP traffic

tcpdump -i eth0 'port 80' -A

iptables -L -n -v --line-numbers

List firewall rules

iptables -L -n -v --line-numbers

ss -tulnp

Listening TCP/UDP ports

ss -tulnp

curl -o /dev/null -s -w 'DNS: %{time_namelookup}s\nConnect: %{time_connect}s\nTLS: %{time_appconnect}s\nTotal: %{time_total}s\n' https://example.com

curl connection timing

curl -o /dev/null -s -w 'DNS: %{time_namelookup}s\nConnect: %{time_connect}s\n...' https://example.com

ss -s

Network connection statistics

ss -s

arp -a

Display ARP table

arp -a

ip route show

Display routing table

ip route show