Inxi is a system information script that can display various things about your hardware and software to users in an IRC chatroom or support forum. It runs with the /exec command in most IRC clients.

nnn is a fork of noice, a fast and minimal text terminal file browser with keyboard shortcuts for navigation, opening files and running tasks. There is no configuration file and MIME associations are hard-coded.

The Fuck tries to match a rule for a previous, mistyped command, creates a new command using the matched rule, and runs it.

Sudo (su "do") allows a system administrator to delegate authority to give certain users (or groups of users) the ability to run some (or all) commands as root or another user while providing an audit trail of the commands and their arguments.

The GNU Shepherd is a daemon-managing daemon, meaning that it supervises the execution of system services, replacing similar functionality found in typical init systems. It provides dependency-handling through a convenient interface and is based on GNU Guile.

Lynis is a security auditing tool. It performs an in-depth security scan and runs on the system itself. The primary goal is to test security defenses and provide tips for further system hardening. It will also scan for general system information, vulnerable software packages, and possible configuration issues.

Iftop does for network usage what top does for CPU usage. It listens to network traffic on a named interface and displays a table of current bandwidth usage by pairs of hosts.

Tcpdump is a command-line tool to analyze network traffic passing through the network interface controller.

Detox is a program that renames files to make them easier to work with under Unix and related operating systems. Spaces and various other unsafe characters (such as "$") get replaced with "_". ISO 8859-1 (Latin-1) characters can be replaced as well, as can UTF-8 characters.

wlgreet provides a greetd greeter that runs on a Wayland compositor such as sway. It is implemented with pure Wayland APIs, so it does not depend on a GUI toolkit.

libpcap is an interface for user-level packet capture. It provides a portable framework for low-level network monitoring. Applications include network statistics collection, security monitoring, network debugging, etc.

CoreCtrl allows you to control with ease your computer hardware using application profiles.

This package provides a utility to flash a new firmware image to a Netgear device. It has been tested on Netgear EX2700, EX6120, EX6150v2, DNG3700v2, R6100, R6220, R7000, D7000, WNR3500, R6400, R6800, R8000, R8500, WNDR3800, but is likely to be compatible with many other Netgear devices.

This is htop, an interactive process viewer. It is a text-mode application (for console or X terminals) and requires ncurses.

Shadow provides a number of authentication-related tools, including: login, passwd, su, groupadd, and useradd.

Sysdig is a simple tool for deep system visibility, with native support for containers. It combines features of multiple system administration tools such as the strace, tcpdump, htop, iftop and lsof into a single interface. The novel architecture of the tool means that the performance impact of the tracing on the system is very light, compared to the likes of strace. The sysdig command has an interface similar to strace, while the csysdig command is better suited for interactive used, and has a user interface similar to htop.

If you use Guix System, the kernel Linux has BPF support, and you should launch this tool using the --modern-bpf argument of the sysdig or csysdig commands. The following Bash aliases can be added to your ~/.bash_profile file, for example:

alias sysdig=sudo sysdig --modern-bpf alias cysdig=sudo csysdig --modern-bpf

The Neighbor Discovery Protocol Proxy Daemon (ndppd) proxies some IPv6 NDP messages between interfaces to allow IPv6 routing between machines that are in the same network but not on the same local link. It currently only supports Neighbor Solicitation and Neighbor Advertisement messages.

Fail2Ban scans log files like /var/log/auth.log and bans IP addresses conducting too many failed login attempts. It does this by updating system firewall rules to reject new connections from those IP addresses, for a configurable amount of time. Fail2Ban comes out-of-the-box ready to read many standard log files, such as those for sshd and Apache, and is easily configured to read any log file of your choosing, for any error you wish.

Though Fail2Ban is able to reduce the rate of incorrect authentication attempts, it cannot eliminate the risk presented by weak authentication. Set up services to use only two factor, or public/private authentication mechanisms if you really want to protect services.

jc JSONifies the output of many CLI tools and file-types for easier parsing in scripts.

pam_uaccess is a PAM module that grants access to devices tagged uaccess in udev for the duration of the users' session, replacing elogind's uaccess feature.

The witr (why-is-this-running), is a utility to show:

1. What is running?

2. How did it start?

3. What is keeping it running?

4. What context does it belong to?

It shows which process uses the port, and its information like process tree, working directory, user, pid, command, and so on.

wpa_supplicant is a WPA Supplicant with support for WPA and WPA2 (IEEE 802.11i / RSN). Supplicant is the IEEE 802.1X/WPA component that is used in the client stations. It implements key negotiation with a WPA Authenticator and it controls the roaming and IEEE 802.11 authentication/association of the WLAN driver.

This package provides the wpa_supplicant daemon and the wpa_cli command.

di is a disk information utility, displaying everything that your df command does and more. It features the ability to display your disk usage in whatever format you prefer. It is designed to be highly portable and produce uniform output across heterogeneous networks.

stress-ng stress-tests a computer system by exercising both physical subsystems as operating system kernel interfaces. It can stress the CPU, cache, disk, memory, socket and pipe I/O, scheduling, and much more, in various selectable ways. This can trip hardware issues such as thermal overruns as well as operating system bugs that occur only when a system is being thrashed hard.

You can also measure test throughput rates, which can be useful to observe performance changes across different operating system releases or types of hardware. However, stress-ng is not a benchmark. Use it with caution: some of the tests can make poorly designed hardware run dangerously hot or make the whole system lock up.

Compared to its inspiration, stress, stress-ng offers many additional options such as the number of bogo operations to run, execution metrics, verification of memory and computational operations, and considerably more stress mechanisms.