Tools

Tools

A list of tools I use.

Unformatted

Fun/media

I am aggressively de-googling my life in 2025/2026.

Programming

  • python: general purpose language
  • rust: faster than python.
  • bash: scripting language
  • just: very good build tool
  • ohmygit - interactive Git learning game
  • postman: http requests
    • bruno is probably better, TODO use it
    • in general, ditch postman. they're starting to put their client behind a paywall/login wall. move to an OSS tool that's free. it's not rocket science to make something that ingests OpenAPI Spec and just runs curl...so why force corporations or individuals to pay for the simple feature of saving a Postman collection?

Text Editing

  • windsurf: bloated, use zed

  • cursor: bloated, use zed

  • vscode - bloated, only use if you absolutely need to. It's slow and used to be my favorite, but...

  • zed - Fast and simple text editor. Rust backend. (zeditor is the CLI command)

  • nano - command line editor

CICD

  • jenkins
    • AVOID. legacy and lots of design bugs
    • pipeline is useful but...its 2025. try to use github cicd or similar. AVOID jenkins.
  • get good at bash
  • understand yaml
  • github runners
    • (literally just docker containers w/ some yaml command runner. its all the same pattern.)
    • can also do self hosted
  • openstatus - uptime/health monitoring, can self host
  • forgejo - self-hosted Git forge (Gitea fork), lightweight GitHub alternative

OS

i highly recommend never using windows, for many, many reasons

Linux distros

  • ubuntu - server OS
  • nixos - server/desktop OS
  • cachyOS - easy arch based OS, fast. bleeding edge so stuff breaks. avoid if u value ur time or are new to linux.
  • TrueNAS CORE - freebsd based NAS OS that uses ZFS, ZFS is superior for use as a NAS for many reasons
    • AVOID hardware based RAID. if ur card dies and u cant replace it, kiss your data goodbye. software based raid does not suffer from this issue.

Dotfiles

  • chezmoi - dotfile manager, handles templating/secrets/multi-machine setups

Windows utilities

Hardware

I run various cheap laptops and a few HEPC (High-End Personal Computer) setups. Only Linux, except for a Windows computer I use for piano playing/DAW/Frooty Loops.

AI

My current AI stack is here. I used to use ollama but it has issues with ROCm drivers on AMD GPUs, so I switched to llama.cpp!

cachyos-whitedragon-ai-lab

Current working stack:

Corpo AI for coding

  • claude: You can use this, but you can also self-host local AI and use CLI tools like:

The basic pattern to locally host is just to run llama.cpp (or ollama if you have NVIDIA GPUs) on a powerful PC, set up a VPN with tailscale, and then connect to the LLM endpoint with your less powerful computer via a coding agent like aider or a frontend like openwebui.

Local AI models

These models were intended for ollama but can be converted for llama.cpp. I plan on running my own benchmarks on each.

  • llama3.2:3b
    • TODO: Test.
  • yuiseki/devstral-small-2507:24b
    • TODO: Test.
  • hf.co/bartowski/Qwen2.5-Coder-14B-Instruct-abliterated-GGUF:Q4_K_S
    • TODO: Test.
  • hf.co/mlabonne/gemma-3-27b-it-abliterated-GGUF:Q4_K_M
    • Human remarks: It is indeed abliterated. It will happily generate usable Python malware.
    • TODO: Test.

Anti AI/Anti Slop

  • nepenthes - Markov chain babble generator, wastes the time/CPU of scrapers

Infra

  • docker: containerization platform
  • kubernetes: container orchestration
  • grafana: monitoring visualization
  • prometheus: monitoring metrics/backend
  • copyparty - portable file server with upload, search, media playback, and more

Backup

  • dd - data duplicator/data destroyer

Media

Streaming

Other

Hacking links

Dark web / anonymity

  • tor - onion routing anonymity network
  • i2p - garlic routing anonymity network
  • ahmia - clearnet Tor search engine
  • torch - Tor search engine (.onion)
  • dread - Reddit-like forum on Tor (.onion)
  • exploit.in - Russian-language cybercrime/exploit forum
  • raidforums - data leak forum (seized by law enforcement)
  • leaks - data leak aggregator

References & resources

Hacking tools

Used

  • kali linux - penetration testing distro by Offensive Security

  • parrotos - security/privacy-focused Linux distro

  • dirb - web content scanner / directory brute-forcer

  • ffuf - Fuzz Faster U Fool, fast web fuzzer for directories/params/vhosts

  • gobuster - directory/DNS/vhost brute-forcer

  • nmap - network mapper and port scanner

  • rustscan - fast Rust-based port scanner, feeds into nmap

  • ftp - file transfer protocol CLI client

  • some python idk lol

  • /etc/hosts - local DNS override file, useful for redirecting domains or lab environments

  • searchsploit - offline CLI search for exploit-db

  • msfconsole - Metasploit Framework interactive console

  • GodPotato - Windows privilege escalation via impersonation (SeImpersonatePrivilege / Potato family)

  • msfvenom - Metasploit payload and shellcode generator

  • evilginx2 - adversary-in-the-middle phishing framework, bypasses 2FA by proxying real login pages and capturing session cookies

To investigate