M4cCrypt0
cat ~/snippets/*.md

command snippets

// reusable, tested command templates — recon, web exploitation, privesc, pivoting, forensics. Copy, swap the <placeholders>, go.

$ grep -ri
all binary exploitation (2) cryptography (2) python (2) red team (4) web-exploitation (8) blue-team (1) forensics (1) foundation (1) privilege escalation (1)
// tool any checksec (1) curl (2) feroxbuster (1) ffuf (1) gobuster (1) hashcat (1) nc (1) nmap (1) pwntools (1) ssh (1)
2026-08-06 bash nmap foundationRed Team

Nmap Full TCP Port Sweep + Service Scan

Two-stage recon: fast all-ports scan, then version/script scan only the ports that came back open.

bash 
# 1) fast sweep of all 65535 TCP ports
nmap -p- --min-rate 5000 -T4 -oN nmap-allports.txt <target-ip>

# 2) pull the open ports from the sweep, then deep-scan just those
ports=$(grep -oP '^\d+(?=/tcp\s+open)' nmap-allports.txt | paste -sd, -)
nmap -sC -sV -p "$ports" -oN nmap-services.txt <target-ip>

used in: Nmap basics: host discovery and port scanning