Improve command quality

Author: SimonSchubert

assets/commands/apropos.md

@@ -20,9 +20,9 @@ Search with **regex**
 
 ```apropos -r "[network.*config]"```
 
-Show **long descriptions**
+**Match all** keywords (AND)
 
-```apropos -l [keyword]```
+```apropos -a [keyword1] [keyword2]```
 
 # SYNOPSIS
 
@@ -32,15 +32,15 @@ Show **long descriptions**
 
 **apropos** searches the manual page names and short descriptions for keywords, helping you find relevant commands when you don't know the exact name.
 
-The search queries the whatis database built by mandb. Multiple keywords are OR'd together; use regex for AND behavior.
+The search queries the whatis database built by mandb. By default each keyword is treated as a regular expression. Multiple keywords are OR'd together; use **-a** to require all of them to match.
 
 # PARAMETERS
 
 **-e**, **--exact**
 > Search for exact keyword match
 
 **-r**, **--regex**
-> Interpret keyword as regular expression
+> Interpret each keyword as a regular expression. This is the default behaviour.
 
 **-w**, **--wildcard**
 > Interpret keyword as shell wildcard
@@ -49,7 +49,7 @@ The search queries the whatis database built by mandb. Multiple keywords are OR'
 > Search only specified manual sections
 
 **-l**, **--long**
-> Don't truncate output lines
+> Do not trim output to the terminal width.
 
 **-a**, **--and**
 > Require all keywords to match

assets/commands/bd.md

@@ -4,58 +4,66 @@ Navigate to parent directories by name
 
 # TLDR
 
-**Go back** to parent directory by name
+**Go back** to a parent directory by name (or its first few letters)
 
-```bd [dirname]```
+```bd [name]```
 
-**List** parent directories
+**Case-sensitive** match
 
-```bd -l```
+```bd -s [name]```
+
+**Run a command** in a parent directory without changing to it
+
+```ls `bd [name]` ```
 
 # SYNOPSIS
 
-**bd** _directory-name_
+**bd** [_-si_] _name_
 
 # DESCRIPTION
 
-**bd** (back directory) is a bash utility for quickly navigating to parent directories by name instead of using multiple `cd ../../../` commands. It searches upward in the directory tree for a matching directory name.
+**bd** (back directory) is a bash utility for quickly navigating to a parent directory by name instead of typing multiple `cd ../../../` commands. It searches upward in the current path for a directory whose name matches (matching on the first few letters is enough).
 
-The tool simplifies navigation in deep directory structures.
+If several ancestors share the same name, bd jumps to the closest one (the immediate parent is not considered a match). It is installed as a shell alias so the directory change persists in your shell:
+
+```alias bd=". bd -si"```
 
 # PARAMETERS
 
-**-l**, **--list**
-> List all parent directories
+**-s**
+> Case-sensitive matching (the default alias uses **-si** for case-insensitive).
 
-**-h**, **--help**
-> Show help
+**-i**
+> Case-insensitive matching (no-op when already the default).
 
 # WORKFLOW
 
 ```bash
 # Current path: /home/user/projects/myapp/src/components
-# Jump to 'myapp' directory
+# Jump up to 'myapp'
 bd myapp
 # Now in: /home/user/projects/myapp
 
-# List available parent directories
-bd -l
+# Or just the first letters
+bd my
+
+# Use a parent path inline without leaving the current directory
+cp file.txt `bd projects`
 ```
 
 # FEATURES
 
-- Fuzzy matching on directory names
-- Tab completion support
-- Fast parent directory navigation
-- Integration with bash/zsh
+- Prefix matching on parent directory names
+- Bash completion support (via the bundled completion file)
+- Closest-match resolution when names repeat in the path
 
 # CAVEATS
 
-Requires installation and sourcing in shell config. Only works upward (not sideways). Name must be unique in path. Not available by default on most systems.
+Requires installation and an alias in your shell config (the alias sources the script so the `cd` sticks). Only walks upward through the current path, not into sibling trees. Built for bash; separate ports exist for zsh and fish. Not available by default on most systems.
 
 # HISTORY
 
-**bd** was created by Vignesh Warar around **2013** to simplify navigating up directory trees by name.
+**bd** was created by Vigneshwaran Raveendran (vigneshwaranr) to simplify navigating up directory trees by name.
 
 # SEE ALSO
 

assets/commands/conda-export.md

@@ -22,14 +22,35 @@ environment specification exporter
 
 # PARAMETERS
 
+**-n**, **--name** _name_
+> Name of environment to export. Defaults to the active environment.
+
+**-p**, **--prefix** _path_
+> Full path to the environment to export (alternative to **--name**).
+
+**-f**, **--file** _file_
+> Write output to a file. Format is auto-detected from the filename. Defaults to standard output.
+
+**--format** _format_
+> Output format: yaml (default), json, explicit, or requirements.
+
 **--no-builds**
-> Exclude build strings from output.
+> Exclude build strings from the dependency list, making the file more portable.
 
 **--from-history**
-> Only include packages explicitly requested.
+> Only include packages explicitly requested, omitting transitive dependencies.
 
-**-n**, **--name** _name_
-> Name of environment to export.
+**-c**, **--channel** _channel_
+> Additional channel to include in the export.
+
+**--override-channels**
+> Do not include channels from .condarc.
+
+**--ignore-channels**
+> Do not prepend channel names to package specs.
+
+**--json**
+> Report output as JSON, suitable for programmatic use.
 
 # CONFIGURATION
 
@@ -41,9 +62,11 @@ environment specification exporter
 
 # DESCRIPTION
 
-**conda export** outputs the current environment specification in YAML format. This can be used to recreate the environment on another system.
+**conda export** outputs the current environment specification in YAML format by default. This can be used to recreate the environment on another system with **conda env create -f environment.yml**.
+
+**conda export** is the newer subcommand and supports multiple output formats via **--format**. The traditional **conda env export** remains supported and produces equivalent YAML.
 
-Use **--from-history** for more portable exports that don't include transitive dependencies.
+Use **--from-history** for more portable exports that omit transitive dependencies and platform-specific build strings.
 
 # SEE ALSO
 

assets/commands/cryptsetup-luksformat.md

@@ -28,23 +28,47 @@ LUKS provides standardized on-disk encryption with multiple key slots, secure ke
 
 # PARAMETERS
 
-**--label** _label_
-> Set LUKS2 label
-
 **--type** _type_
-> LUKS type (luks1, luks2)
+> LUKS type: luks1 or luks2. Defaults to luks2.
+
+**-c**, **--cipher** _cipher_
+> Encryption cipher specification. Compiled-in default (typically aes-xts-plain64).
+
+**-s**, **--key-size** _bits_
+> Key size in bits, must be a multiple of 8. For XTS the volume key is split between two ciphers, so 512 yields AES-256.
+
+**-h**, **--hash** _hash_
+> Hash algorithm used in the LUKS key setup and volume key digest.
+
+**-i**, **--iter-time** _ms_
+> Milliseconds to spend on PBKDF passphrase processing. Higher values increase brute-force resistance.
 
-**--cipher** _cipher_
-> Encryption cipher
+**--pbkdf** _algo_
+> PBKDF algorithm for LUKS2: pbkdf2, argon2i, or argon2id (the default).
 
-**--key-size** _bits_
-> Key size in bits
+**-d**, **--key-file** _file_
+> Read the passphrase from a file. Use - to read from standard input.
 
-**--hash** _hash_
-> Hash algorithm for PBKDF
+**-l**, **--keyfile-size** _bytes_
+> Read at most this many bytes from the key file.
+
+**-y**, **--verify-passphrase**
+> Ask for the passphrase twice and fail if the entries differ.
+
+**-q**, **--batch-mode**
+> Suppress all confirmation questions. Useful for scripting.
+
+**--use-urandom**, **--use-random**
+> Select the kernel RNG (/dev/urandom or /dev/random) used to generate the volume key.
+
+**--sector-size** _bytes_
+> Encryption sector size for LUKS2: a power of two between 512 and 4096.
+
+**--label** _label_
+> Set the LUKS2 device label.
 
-**--iter-time** _ms_
-> PBKDF iteration time in milliseconds
+**--integrity** _algo_
+> Enable authenticated disk encryption with the given integrity algorithm (LUKS2 only).
 
 # CAVEATS
 

assets/commands/dockdiver.md

@@ -1,65 +1,99 @@
 # TAGLINE
 
-Docker image secrets scanner
+explore and extract Docker registry contents
 
 # TLDR
 
-**Scan Docker Hub** for secrets
+**List all repositories** in a registry
 
-```dockdiver -u [username]```
+```dockdiver -url [registry_host] -list```
 
-**Scan specific image**
+**Dump a specific repository**
 
-```dockdiver -i [image:tag]```
+```dockdiver -url [registry_host] -dump [repository]```
 
-**Scan with output** file
+**Dump every repository** into a directory
 
-```dockdiver -u [username] -o [results.txt]```
+```dockdiver -url [registry_host] -dump-all -dir [output_dir]```
 
-**Scan with custom** patterns
+**Authenticate with basic** credentials
 
-```dockdiver -i [image:tag] -p [patterns.json]```
+```dockdiver -url [registry_host] -username [user] -password [pass] -list```
+
+**Use a bearer token** and skip TLS verification
+
+```dockdiver -url [registry_host] -bearer [token] -insecure -dump-all```
 
 # SYNOPSIS
 
 **dockdiver** [_options_]
 
 # PARAMETERS
 
-**-u** _USERNAME_
-> Docker Hub username to scan.
+**-url** _STRING_
+> Base URL or hostname of the Docker registry (required).
+
+**-port** _INT_
+> Registry port used when not specified in the URL. Default 5000.
+
+**-list**
+> List all repositories in the registry.
+
+**-dump** _REPOSITORY_
+> Download a single repository (manifest, config blob, and layer tarballs).
+
+**-dump-all**
+> Download all repositories found in the registry.
+
+**-dir** _DIRECTORY_
+> Output directory for dumped files. Default docker_dump.
+
+**-username** _STRING_
+> Username for HTTP Basic authentication.
+
+**-password** _STRING_
+> Password for HTTP Basic authentication.
+
+**-bearer** _STRING_
+> Bearer token for the Authorization header.
+
+**-headers** _JSON_
+> Custom request headers as JSON, e.g. '{"X-Custom": "Value"}'.
+
+**-insecure**
+> Skip TLS certificate verification.
 
-**-i** _IMAGE_
-> Specific image to analyze.
+**-rate** _INT_
+> Requests per second. Default 3.
 
-**-o** _FILE_
-> Output file for results.
+**-timeout** _DURATION_
+> HTTP request timeout, e.g. 10s or 500ms. Default 30s.
 
-**-p** _FILE_
-> Custom pattern file.
+**-proxy** _URL_
+> Proxy URL (http, https, or socks5).
 
-**-v**
-> Verbose output.
+**-proxy-username** _STRING_
+> Username for SOCKS5 proxy authentication.
 
-**--help**
-> Display help information.
+**-proxy-password** _STRING_
+> Password for SOCKS5 proxy authentication.
 
 # DESCRIPTION
 
-**dockdiver** is a security tool for analyzing Docker images and Docker Hub repositories for exposed secrets, credentials, and sensitive information. It scans image layers to identify potentially dangerous data leakage.
+**dockdiver** is a Go utility that enumerates and extracts the contents of a Docker registry exposed over the Registry HTTP API V2. It can list repositories, dump a single repository, or dump every repository, retrieving manifests, configuration blobs, and layer tarballs while verifying each blob with its SHA256 digest.
 
-The tool searches for common secret patterns including API keys, passwords, private keys, and credentials embedded in Docker images. It can scan individual images or entire user repositories.
+It is aimed at penetration testing, bug bounty, and CTF scenarios where a registry (often a self-hosted one on port 5000) is reachable and may expose images that contain source code, configuration, or credentials. Authentication via Basic credentials or a bearer token, custom headers, proxy support, and a configurable request rate make it suitable for working against access-controlled or rate-limited registries.
 
-dockdiver helps security teams audit container images before deployment and identify credential exposure in public registries.
+This tool targets the registry itself rather than the public Docker Hub web interface, and it downloads raw image data for offline inspection rather than scanning layers for secrets on its own.
 
 # CAVEATS
 
-Scanning large images may take time. Some secrets may be obfuscated or encoded. Only scans accessible images. Pattern matching may produce false positives.
+Only registries reachable over the HTTP API V2 are supported. Use against registries you are authorized to access. Dumping all repositories can transfer large amounts of data; the default rate of 3 requests per second limits load and helps avoid tripping rate limits.
 
 # HISTORY
 
-dockdiver was created as a security research tool to address the widespread problem of secrets being accidentally committed to Docker images. It automates the discovery of exposed credentials in container registries.
+dockdiver is an open-source Go tool published on GitHub by MachiavelliII. It ships with a registry lab environment in its lab directory for safe testing.
 
 # SEE ALSO
 
-[dive](/man/dive)(1), [trivy](/man/trivy)(1), [grype](/man/grype)(1)
+[dive](/man/dive)(1), [trivy](/man/trivy)(1), [grype](/man/grype)(1), [docker-pull](/man/docker-pull)(1)

assets/commands/docker-images.md

@@ -43,7 +43,7 @@ list Docker images stored locally
 > Filter output.
 
 **--format** _string_
-> Format output using Go template.
+> Format output using a custom template: table, table TEMPLATE, json, or a Go template string.
 
 **--no-trunc**
 > Don't truncate output.
@@ -54,5 +54,5 @@ list Docker images stored locally
 
 # SEE ALSO
 
-[docker-image-ls](/man/docker-image-ls)(1), [docker-rmi](/man/docker-rmi)(1)
+[docker-image-ls](/man/docker-image-ls)(1), [docker-rmi](/man/docker-rmi)(1), [docker-pull](/man/docker-pull)(1)