⌁
Nmap
Network discovery and security auditing in authorized environments.
ReconnaissanceLearn the tools. Respect the rules.
Educational overviews for common cybersecurity tools. Practice only on systems you own or have explicit permission to test.
⌁
Wireshark
Inspect packet captures and network protocols.
Network analysis⌁
Burp Suite
Web security testing proxy for applications you own or are authorized to test.
Web security⌁
Metasploit Framework
Security testing framework for controlled labs and approved assessments.
Lab testing⌁
Nikto
Web server assessment utility for authorized testing.
Web assessment⌁
Gobuster
Content and directory discovery in your own lab or authorized target.
Discovery⌁
SQLmap
SQL injection testing in intentionally vulnerable labs or with permission.
Web security⌁
John the Ripper
Password auditing for accounts/files you are authorized to assess.
Password auditing⌁
Hydra
Login security auditing in authorized lab environments.
Authentication testing⌁
Aircrack-ng
Wireless assessment for networks you own or are authorized to test.
Wireless⌁
OWASP ZAP
Open-source web application scanner for your own apps and labs.
Web security⌁
WhatWeb
Web server fingerprinting and configuration review in safe labs.
Fingerprinting⌁
Autopsy
Digital forensics platform for examining disk images and evidence copies.
Forensics⌁
Volatility
Memory forensics for authorized incident response and training.
Forensics⌁
Ghidra
Reverse engineering for legitimate software research.
Reverse engineering⌁
Netcat
Learn TCP/UDP connections in controlled labs.
Networking⌁
tcpdump
Command-line packet capture and troubleshooting.
Network analysis⌁
Lynis
Linux hardening and auditing for systems you administer.
Defensive security⌁
ClamAV
Antivirus engine for defensive file-scanning workflows.
Blue team⌁
Fail2ban
Protect services against repeated suspicious authentication attempts.
HardeningEducational guides only. Always get written authorization before testing systems.