Post cover image

August 27, 2026

10 Linux Commands Every Cybersecurity Beginner Should Know (No Geek Talk, Promise)

So you want to get into cybersecurity? Cool. But here’s the thing nobody tells you at the start:

By Bhaskar Vikas

2 min read

Linux is the language of hackers, security pros, and servers everywhere.

You don't need to be a coding genius. You just need to know a handful of commands to move around, look at files, and figure out what's happening on a system. That's it. That's the whole secret.

Let's break down 10 commands that'll make you feel like you actually know what you're doing.

1. pwd — "Where Am I?"

Type this, hit enter, and it tells you exactly which folder you're standing in.

pwd

Think of it like dropping a pin on Google Maps, but for your terminal. Simple, but you'll use it constantly.

2. ls — "What's In Here?"

This shows you everything inside the folder you're in — files, other folders, all of it.

ls

Want more detail, like file sizes and permissions? Add -l:

ls -l

Want to see hidden files too? Add -a:

ls -a

Hidden files matter a lot in security. Sneaky stuff often hides there.

3. cd — "Let Me Walk Over There"

Short for "change directory." This is how you move between folders.

cd Documents

Want to go back a step? Use:

cd ..

Simple movement, but master this and you'll navigate any system like it's your own house.

4. cat — "Just Show Me the File"

cat opens a file and dumps its content right into your screen. No fancy editor needed.

cat notes.txt

Security folks use this all the time to quickly peek inside log files or config files.

5. grep — "Find the Needle in the Haystack"

This one's a personal favorite. grep searches through text and pulls out exactly what you're looking for.

grep "error" logfile.txt

That command searches logfile.txt and shows you every line containing the word "error." When you're hunting through thousands of lines of logs looking for something suspicious, this command is your best friend.

6. chmod — "Who's Allowed to Touch This?"

Every file on Linux has permissions — who can read it, write to it, or run it. chmod lets you change those permissions.

chmod 755 script.sh

Messed-up permissions are a huge deal in security. Files that are too "open" can let attackers sneak in or mess with things they shouldn't touch.

7. chown — "This File Belongs to Who Now?"

While chmod controls what you can do with a file, chown controls who owns it.

chown user1 file.txt

This matters because if the wrong person (or attacker) owns a sensitive file, that's a red flag.

8. ps — "What's Running Right Now?"

ps shows you all the processes (programs) currently running on the system.

ps aux

If something shady is running in the background — like malware pretending to be a normal process — this is one of the first places you'd spot it.

9. netstat (or ss) — "Who's Talking to My Computer?"

This shows you active network connections — basically, what's connecting in and out of your machine.

netstat -tulpn

or on newer systems:

ss -tulpn

If your computer is secretly chatting with some sketchy server somewhere, this command helps you catch it red-handed.

10. sudo — "Let Me Be the Boss for a Second"

sudo stands for "superuser do." It lets you run commands with admin-level power.

sudo apt update

Use it carefully — with great power comes great potential to break things. But it's essential for installing tools, updating systems, and doing serious security work.

Final Thoughts

You don't need to memorize a textbook to start your cybersecurity journey. You just need these 10 commands in your back pocket, and a lot of curiosity.

Open up a terminal. Try them out. Break something (safely, in a virtual machine). That's how real learning happens.

Welcome to the world of Linux. It's going to be fun.