OpsFieldOperator Academy
All cheatsheets

Cheatsheet · beginner

Home LAN audit

Fast inventory → ports → shares/IoT → WAN check → harden loop for networks you own.

Authorized testing only. Practice on systems you own, isolated labs, or targets with written permission. Unauthorized access is illegal.

home-network
inventory
router

Inventory live hosts

Only on networks you own or administer.

ARP sweep
sudo arp-scan --localnet
Ping sweep
nmap -sn 192.168.1.0/24 -oA home-discovery
DHCP leases
# Router UI → LAN → DHCP clients  |  cat /var/lib/misc/dnsmasq.leases
Neighbor table
ip neigh

Silent IoT discovery

mDNS
avahi-browse -a -r
NetBIOS
nbtscan 192.168.1.0/24
UPnP maps
upnpc -l

Gentle service census

Start light on cameras/bulbs.

Command
nmap -sV --top-ports 100 192.168.1.0/24 -oA home-top100
Command
nmap -p 80,443,8080 --script http-title 192.168.1.1
Command
smbclient -L //192.168.1.20 -N

WAN / exposure check

Command
curl -s https://api.ipify.org && echo
Command
shodan host YOUR.PUBLIC.IP
Command
# https://www.grc.com/shieldsup

Checklist

  • Asset sheet started (IP, MAC, vendor, role, segment)
  • WPS and WAN admin disabled on router
  • Unexpected UPnP forwards removed
  • Default passwords changed on cameras/NAS
  • Guest/IoT isolation plan written