OSINT & Recon Tools

Nmap

Network Scanning

Industry-standard network mapper for host discovery, port scanning, service and OS fingerprinting.

Use case: Build a complete map of a target's exposed services and open ports before touching anything else.

Metasploit

Vulnerability Scanning

Exploitation framework with thousands of ready-made payloads, encoders and auxiliary modules.

Use case: Verify a discovered vulnerability by safely running an exploit against a test environment.

Burp Suite

Web App Testing

Intercepting proxy for manipulating, scanning and fuzzing HTTP traffic between a browser and a target.

Use case: Intercept and rewrite requests to find SQLi, XSS and broken access control flaws in web apps.

Wireshark

Packet Analysis

Deep packet analyzer that captures live traffic and decodes hundreds of network protocols.

Use case: Trace a conversation between two hosts to spot credentials or sensitive data sent in clear text.

Kali Linux

Vulnerability Scanning

Debian-based penetration testing distribution preloaded with over 600 security tools.

Use case: A full ready-to-use attack lab, ideal for CTFs, training and structured red-team engagements.

Ghidra

Reverse Engineering

NSA's open-source reverse engineering suite with a powerful interactive decompiler.

Use case: Decompile a suspicious binary to understand what it does before it ever gets executed.

SQLMap

Web App Testing

Automated tool that detects and exploits SQL injection flaws across many database engines.

Use case: Prove an injection point exists and safely extract a single row from a training database.

Hashcat

Credential Testing

World's fastest password recovery tool, using GPU acceleration across dozens of hash modes.

Use case: Audit leaked or captured password hashes to prove how weak the underlying passwords are.

OWASP ZAP

Web App Testing

Open-source web app scanner with an easy proxy mode, active scanning and fuzzing engine.

Use case: Run a first-pass automated scan against your own staging environment during a code review.

Hydra

Credential Testing

Parallel network login cracker supporting dozens of protocols from SSH and FTP to HTTP forms.

Use case: Test whether weak or default passwords exist across your lab's exposed login services.

Nuclei

Vulnerability Scanning

Fast, template-based vulnerability scanner that sends targeted requests with YAML templates.

Use case: Continuously scan your own assets against thousands of known CVE and misconfiguration checks.

Aircrack-ng

Wireless

Complete suite for monitoring, attacking, testing and cracking Wi-Fi networks.

Use case: Audit your own home router's WPA2 configuration by capturing handshakes and testing passphrases.