
Network protocol analyzer that lets you see every packet flowing through your network. Essential for understanding network traffic and spotting anomalies.
Network protocol analyzer that lets you see every packet flowing through your network. Essential for understanding network traffic and spotting anomalies.
What to learn: Capture filters, display filters, following TCP streams, HTTP analysis
Network mapper used for discovering devices and services on a network. The foundation of reconnaissance.
What to learn: Port scanning, OS detection, service version detection, NSE scripts
nmap -sV -sC -O target.com
Web application security testing platform. Intercepts HTTP/S traffic for manual testing.
What to learn: Proxy setup, request interception/intruder, repeater, decoder
Penetration testing framework with hundreds of exploits, payloads, and auxiliary modules.
What to learn: Search for exploits, configure payloads, run auxiliary scanners, post-exploitation
Open-source web app scanner. Easier to use than Burp for beginners.
What to learn: Automated scanning, manual explore, active/passive scanning, alerts
Password cracking tool. Essential for understanding password security.
What to learn: Hash identification, wordlist attacks, rules-based attacks, incremental mode
Login brute-forcing tool. Tests authentication security.
hydra -l admin -P passwords.txt target.com http-post-form "/login:user=^USER^&pass=^PASS^:F=incorrect"
Web server scanner that checks for outdated software, dangerous files, and misconfigurations.
What to learn: Basic scans, tuning options, output formats
Automates SQL injection detection and exploitation.
sqlmap -u "http://target.com/page?id=1" --batch --dbs
Digital forensics platform. Analyzes disk images for evidence.
What to learn: File system analysis, keyword search, deleted file recovery, timeline analysis
No approved comments are visible yet. New community replies may wait for moderation.