My Toolbox.
How-to for everyone.
The tools I actually use — from AI to remote access to DevOps to cloud. No fluff. Copy-paste and go.
What it is
Claude is Anthropic's AI. I use it to write and debug code, draft documents, run entire projects, and build tools. Claude Code (the CLI) reads your files, edits code, and runs commands — like a developer that never sleeps.
Quick start
npm install -g @anthropic-ai/claude-code claude # launch in your project folder
claude "explain this codebase" claude "fix the bug in server.js" claude "write a bash script that backs up /var/www daily" claude "what does this error mean: ..."
What it is
git tracks every change to your files so you can go back in time, collaborate with others, and ship code confidently. It's the backbone of all software development. GitHub, GitLab, and Bitbucket are websites built around git.
The daily commands
git config --global user.name "Your Name" git config --global user.email "you@email.com" git config --global init.defaultBranch main
git init # start a new repo git clone https://github.com/u/r # copy a repo down git status # what changed? git add . # stage everything git commit -m "what I did" # save a snapshot git push # send to GitHub git pull # get latest from remote git log --oneline --graph # visual history git diff # what exactly changed git stash # save work-in-progress git stash pop # bring it back git checkout -b feature # new branch git merge feature # merge branch into current git reset --hard HEAD~1 # undo last commit (careful)
git commit --amend -m "better message"What it is
curl sends HTTP requests from the terminal. Indispensable for testing APIs, downloading files, checking headers, and debugging web servers without opening a browser.
Most-used one-liners
curl https://api.example.com/data # basic GET curl -I https://example.com # headers only curl -L https://example.com # follow redirects curl -o file.zip https://example.com/f.zip # save to file curl -s https://ipinfo.io/ip # your public IP
curl -X POST -H "Content-Type: application/json" \ -d '{"key":"value"}' https://api.example.com curl -X POST -H "Authorization: Bearer TOKEN" \ https://api.example.com/endpoint curl -u user:pass https://api.example.com # basic auth
-v verbose — see full request/response -k ignore SSL cert errors -w "%{http_code}" print HTTP status code --max-time 5 timeout after 5 seconds
What it is
btop is a resource monitor — more beautiful than top, more powerful than htop. Slick color graphs for everything. Great in a tmux pane on any server you SSH into.
sudo apt install btop # Ubuntu/Debian brew install btop # Mac sudo dnf install btop # Fedora
? help q quit m memory mode p sort by CPU e expand process k kill process f filter
What it is
Renders the green falling character rain from The Matrix in your terminal. Does nothing useful. Looks amazing on a second monitor or as a screensaver. Also great for impressing people at coffee shops.
sudo apt install cmatrix # Ubuntu/Debian brew install cmatrix # Mac cmatrix # run (Ctrl+C to exit) cmatrix -b # bold — brighter cmatrix -C red # change color cmatrix -s # screensaver mode
What it is
Tailscale builds a WireGuard mesh VPN across all your devices — Mac, Windows, Linux, iPhone, servers. Every node gets a private 100.x.x.x IP that can reach every other node from anywhere on the internet. No open ports, no router config.
One-liners
curl -fsSL https://tailscale.com/install.sh | sh sudo tailscale up # opens login link tailscale status # see all your nodes tailscale ip -4 # your IP on this machine tailscale ping hostname # test a node tailscale ssh user@hostname # SSH via Tailscale
scp file.db user@100.x.x.x:/home/user/ # send a file
What it is
SSH opens an encrypted terminal on any remote machine. Already installed on Mac, Linux, and modern Windows. Everything else builds on top of it: SCP, rsync, git, tunnels, port forwarding.
ssh user@host # connect ssh -p 2222 user@host # custom port ssh -i ~/.ssh/id_ed25519 user@host # specific key ssh-keygen -t ed25519 -C "mykey" # generate keypair ssh-copy-id user@host # install pub key scp file.txt user@host:/path/ # copy file scp -r folder/ user@host:/path/ # copy folder rsync -avz src/ user@host:/dest/ # sync (faster) ssh -L 8080:localhost:80 user@host # local tunnel ssh -N -f user@host -L 5432:db:5432 # background tunnel
Host myserver HostName 100.79.1.1 User lovesmiles IdentityFile ~/.ssh/id_ed25519 ssh myserver # now this is all you need
What it is
Free, open-source TeamViewer/AnyDesk replacement. Self-host your own relay so traffic never leaves your infrastructure. Works through NAT with no port forwarding.
docker run -d --name hbbs -p 21115-21116:21115-21116 \ rustdesk/rustdesk-server hbbs -r YOUR.SERVER.IP docker run -d --name hbbr -p 21117:21117 \ rustdesk/rustdesk-server hbbr
Then in the client: Settings → Network → ID Server → enter your server IP.
What it is
nmap ("Network Mapper") discovers hosts and services on a network. Essential for understanding what's running on your own servers, auditing your network, and basic security reconnaissance.
sudo apt install nmap # Ubuntu/Debian brew install nmap # Mac
nmap 192.168.1.1 # basic scan — open ports nmap -sV host # detect service versions nmap -sC -sV host # scripts + versions nmap -p- host # scan ALL 65535 ports nmap -sP 192.168.1.0/24 # ping scan — who's alive nmap -O host # OS detection nmap -sV -oN output.txt host # save results to file nmap -A host # aggressive — all of the above
⚠️ Only scan networks and hosts you own or have permission to test.
What it is
Kali Linux is built for penetration testing and security research. Pre-loaded with nmap, Metasploit, Burp Suite, Wireshark, Aircrack-ng, and hundreds more. You don't have to make it your daily driver — run it in WSL or a VM.
# PowerShell as Admin: wsl --install -d kali-linux wsl -d kali-linux
sudo apt update && sudo apt upgrade sudo apt install nmap wireshark metasploit-framework sudo apt install burpsuite hydra sqlmap john
nmap -sC -sV target # service scan nikto -h http://target # web vuln scan sqlmap -u "http://target/?id=1" --dbs # SQL injection test hydra -l admin -P wordlist.txt target ssh # brute force SSH
⚠️ Only use these tools on systems you own or have written authorization to test. Unauthorized access is a crime.
What it is
Docker runs apps in isolated containers — no "works on my machine" problems. Install Docker once, then run any service (databases, web servers, apps) without touching your host OS.
curl -fsSL https://get.docker.com | sh sudo usermod -aG docker $USER # run without sudo
docker ps # running containers docker ps -a # all (including stopped) docker images # local images docker run -d -p 8080:80 nginx # run nginx in background docker logs -f container_name # live logs docker exec -it container bash # shell inside container docker stop container # stop docker rm container # remove container docker rmi image_name # remove image docker system prune # clean up everything unused
docker compose up -d # start all services docker compose down # stop all docker compose logs -f # live logs all services docker compose pull # update images
What it is
Kubernetes runs and manages containers across multiple servers. When you need more than one machine, automatic scaling, self-healing restarts, and zero-downtime deploys — this is the tool.
kubectl get pods # list pods kubectl get pods -A # all namespaces kubectl get nodes # cluster nodes kubectl get services # list services kubectl apply -f deployment.yaml # deploy kubectl logs -f pod-name # live logs kubectl exec -it pod-name -- bash # shell in pod kubectl describe pod pod-name # debug kubectl rollout restart deploy/name # restart kubectl scale deploy/name --replicas=3 # scale up kubectl delete pod pod-name # delete (auto-restarts)
curl -Lo minikube https://storage.googleapis.com/.../minikube-linux-amd64 minikube start # spin up local cluster minikube dashboard # web UI
What it is
Ansible lets you describe server configuration as YAML playbooks, then apply those configs to any number of servers over SSH. No agent to install on targets — just SSH access.
pip install ansible # or: sudo apt install ansible
ansible all -i hosts.ini -m ping # test connections ansible all -i hosts.ini -m shell \ -a "df -h" # run command on all ansible-playbook -i hosts.ini site.yml # run a playbook ansible-playbook --check site.yml # dry run ansible-vault encrypt secrets.yml # encrypt secrets
What it is
Terraform lets you write your entire cloud infrastructure in code (HCL files) and version-control it. Works with AWS, Azure, GCP, DigitalOcean, and 1000+ providers. Run terraform apply and your servers exist. Run terraform destroy and they're gone.
terraform init # download providers terraform plan # preview what will change terraform apply # make it happen terraform destroy # tear it all down terraform output # show outputs (IPs, etc.) terraform state list # what's managed
What it is
GitHub Actions runs automated workflows when you push code. Typical uses: run tests, build Docker images, deploy to a server, send a Slack notification. Define it in YAML, check it in, it runs.
on: push: branches: [main] jobs: deploy: runs-on: ubuntu-latest steps: - uses: actions/checkout@v4 - name: Deploy via SSH run: | ssh -o StrictHostKeyChecking=no \ user@server "cd /app && git pull && pm2 restart app"
Key services
- EC2 — virtual machines (like any VPS)
- S3 — object storage; store any file, serve it globally
- RDS — managed databases (Postgres, MySQL, etc.)
- Lambda — serverless functions, pay per invocation
- EKS — managed Kubernetes
- CloudFront — CDN, put your site on edge servers worldwide
- Route 53 — DNS management
aws configure # set up credentials aws s3 ls # list buckets aws s3 cp file.txt s3://mybucket/ # upload file aws s3 sync ./dist s3://mybucket/ # sync folder aws ec2 describe-instances # list EC2s aws ec2 start-instances --instance-ids i-xxx
Key services
- Virtual Machines — Windows and Linux VMs
- Azure Blob Storage — object storage like S3
- Azure SQL / Cosmos DB — managed databases
- AKS — managed Kubernetes
- Azure Functions — serverless
- Entra ID (AAD) — identity and SSO
- Azure DevOps — pipelines, repos, boards
az login # authenticate az account list --output table # list subscriptions az vm list --output table # list VMs az vm start --name myVM --resource-group myRG az storage blob upload --file f.txt \ --container-name mycontainer
Key services
- Compute Engine — VMs
- Cloud Storage — object storage
- BigQuery — serverless data warehouse; query terabytes in seconds
- GKE — managed Kubernetes (the best managed K8s)
- Cloud Run — serverless containers
- Vertex AI — ML/AI platform
- Cloud SQL — managed Postgres/MySQL
gcloud auth login gcloud config set project my-project gcloud compute instances list gcloud storage cp file.txt gs://mybucket/ gcloud run deploy myapp --image gcr.io/proj/img
What I use it for
My go-to for personal and small-project servers. Droplets (VPS) start at $6/month. Dead simple to spin up, great docs, and no surprise bills. je9.us runs on a DigitalOcean Droplet.
- Droplets — Linux VPS, pay by the hour
- Spaces — S3-compatible object storage with CDN
- Managed Databases — Postgres, MySQL, Redis
- App Platform — deploy from GitHub automatically
- Kubernetes — managed DOKS cluster
brew install doctl doctl auth init doctl compute droplet list doctl compute droplet create myserver \ --size s-1vcpu-1gb --image ubuntu-22-04-x64 \ --region nyc3
What it is
Cloudflare sits in front of your site and handles DNS, caches content at 300+ edge locations worldwide, absorbs DDoS attacks, and can run serverless code at the edge. The free tier is genuinely excellent.
- DNS — fastest DNS in the world, free
- CDN — cache and serve your site from the edge
- Tunnels — expose a local server to the internet without opening ports
- Workers — serverless JS/WASM at the edge, 100k requests/day free
- Pages — deploy static sites from GitHub for free
- R2 — S3-compatible storage with zero egress fees
brew install cloudflared # or apt install cloudflared cloudflared tunnel login cloudflared tunnel create mytunnel cloudflared tunnel run --url http://localhost:3000 mytunnel
When to use them
- Hetzner — cheapest powerful servers on the market. A 4-core 8GB server is €5/mo. Europe-based, great for EU projects. No free tier but absurdly cheap.
- Vultr — similar to DigitalOcean, slightly cheaper, 32 global regions. Good $200 free credit offer for new accounts.
- Linode / Akamai — Linode was acquired by Akamai. Solid, long-running VPS provider with good pricing and a generous free tier.
For most personal/hobby projects: Hetzner if you want cheap raw power, DigitalOcean if you want the best developer experience.
📬 Get notified when new guides drop
Register and we'll email you when a new tool or how-to goes up. No spam — one email per guide.