Ghostty
GPU-accelerated, native, fast. The terminal i actually open.
// zero config, real native feel.
curl -L ~/joe/toolbelt.json
# the tools i'd hand to a junior on day one. no affiliate links.
WezTerm
Lua-configurable cross-platform terminal. Fallback when Ghostty isn't available.
// best multi-mux config story in the business.
tmux
Terminal multiplexer. Surviving SSH disconnects since forever.
// pair with tpm and you're set for life.
Starship
Cross-shell prompt. Fast, configurable, looks good out of the box.
// toml config, instant startup.
fzf
Command-line fuzzy finder. Ctrl-R will never feel slow again.
// pipe anything into it. anything.
ripgrep (rg)
grep replacement. Faster than you'd believe.
// respects .gitignore by default.
bat
cat with syntax highlighting and git integration.
// alias cat=bat. you'll never look back.
eza
Modern ls. Colors, git status, tree mode.
// the maintained fork of exa.
Neovim
Modal editing the way it should be. LSP, treesitter, the lot.
// lazyvim or kickstart.nvim to start.
Visual Studio Code
The big tent editor. Extensions ecosystem nobody can match.
// remote ssh + dev containers.
Cursor
VSCode fork with AI baked in. Tab autocomplete that actually understands context.
// composer mode for multi-file edits.
Zed
Rust-native editor from the Atom alumni. Insanely fast.
// real-time collab without lag.
Burp Suite Pro
The intercepting proxy. Pro tier unlocks the scanner and extensions you actually want.
// worth the license, no question.
Caido
Modern web proxy. Lighter than Burp. Workflows are first-class.
// the burp alternative i actually reach for now.
Nuclei
Template-based vulnerability scanner. Community templates ship daily.
// low false-positive rate when tuned.
ProjectDiscovery suite
subfinder, httpx, naabu, katana — the recon backbone.
// every tool composable via stdin/stdout.
Ghidra
NSA-built reverse engineering platform. Free IDA Pro competitor.
// decompiler that doesn't crash.
Wireshark
Network protocol analyzer. The ground truth when nothing else makes sense.
// still the GOAT.
T-Pot
All-in-one honeypot platform. The basis for joe's honeypots.
// 20+ honeypots in one docker compose.
OrbStack
Docker Desktop replacement. Faster, lighter, also runs linux VMs.
// the macOS dev container experience finally fixed.
Terraform
Infra as code. The default for multi-cloud.
// plan output is a contract.
OpenTofu
Terraform's open-source fork. License-resilient.
// drop-in for terraform with a future.
k9s
Kubernetes TUI. Navigate clusters without kubectl carpal tunnel.
// best k8s tool, period.
Lens
Kubernetes IDE. When you need a UI, this is it.
// the right tool for the demo.
Tailscale
WireGuard mesh that just works. Zero config, real SSO.
// free tier covers a small lab.
Cloudflare WARP
Free fast VPN-ish layer using Cloudflare's 1.1.1.1 backbone.
// useful when you don't need full vpn.
Mullvad VPN
Privacy-first VPN. No accounts, flat fee, pay in cash if you want.
// the only vpn i'd write a check for.
Raycast
Spotlight replacement on creatine. Extensions for everything.
// ai + window mgmt + clipboard history in one ⌘-space.
Rectangle
Window management with keyboard shortcuts. Free alternative to Magnet.
// snap-to-edge that actually feels native.
1Password
Password manager. Worth every cent for SSH key delegation alone.
// the only secret store i trust on my main laptop.
Bitwarden
Open-source password manager. Self-hostable.
// the right answer if you can't justify 1password.
Numi
Notepad calculator. 'how many days until friday' just works.
// the math tool i actually use.
Obsidian
Local-first markdown notes. Backlinks, graph, plugins.
// your second brain owns its files.
Logseq
Outliner-first PKM. Open source, local-first.
// great daily journal flow.
Anki
Spaced repetition flashcards. For the things you want to actually remember.
// the only study tool that survives years.
OrbStack
(See cloud) — the fast docker replacement on mac.
// lightning quick.
mise
Polyglot tool version manager. Replaces asdf + nvm + pyenv + rbenv.
// one tool, ten language toolchains.
uv
10–100x faster Python package manager from Astral. Replaces pip + venv + pipx.
// python tooling finally got fast.
Bun
Fast all-in-one JS runtime, bundler, package manager.
// drop-in node speedup.
gh CLI
GitHub from the terminal. PRs, issues, releases, gists.
// extensions make it scary good.
lazygit
Terminal git UI. Stage hunks, rebase, resolve conflicts without leaving your terminal.
// the only git GUI i actually like.
Homebrew
The missing package manager for macOS. Or Linux.
// still the default.
Stats
Menubar system monitor. CPU, GPU, network, disk, fans.
// the macOS htop replacement that lives in the menu bar.
AlDente
Battery charging limit for Mac laptops. Extends battery lifespan.
// if your laptop lives on the charger, install this.
CleanShot X
Screenshot tool that fixes every macOS screenshot pain point.
// annotation, blur, scrolling capture, cloud upload.
iStat Menus
Menubar system monitor — the paid alternative to Stats.
// every metric, on the bar, customizable.
Arc
Browser as workspace. Sidebar tabs, spaces, profiles.
// rethinks tab management completely.
Zen Browser
Firefox-based, privacy-first, beautiful UI.
// the arc clone that's open source.
Firefox
The browser that still cares about the open web.
// containers + ublock + bitwarden = your daily.
Figma
Collaborative design tool. The default for UI/UX.
// browser-first means no version sync drama.
Excalidraw
Hand-drawn diagrams. The whiteboard tool.
// self-host or use online. instant.
Affinity Photo / Designer
One-time purchase Photoshop/Illustrator. No subscription.
// buy-once, use-forever, real apps.
Davinci Resolve
Pro video editing for free (Studio is paid). Color, audio, fusion.
// the free tier alone is better than most paid editors.
# no affiliate links, no kickbacks. corrections / suggestions: /contact.