-- RECON / SCANNING --
Nmap
- if u dont know nmap ur not a real security person
i use it to scan networks and find what services are running on what ports.
"-sS -sV -O" is like my go-to command combo.
you have to check it out seriously.
Wireshark
- wireshark is like a microscope for ur network, u can see EVERY packet
going in and out
actually looking at a real TCP handshake in wireshark made it click for me way more
than any textbook ever could.
Hydra
- hydra is a fast login brute force tool for testing auth security.
great for checking weak passwords in labs and CTF practice.
i use it carefully in legal environments only.
|
|
-- OS / PLATFORMS --
Kali Linux
- kali is a great OS and VM's are awesome
Metasploit
- metasploit framework is what they use in the movies when hackers r "hacking"
it is amazing for understanding exploits and how vulnerabilities work.
i use it in lab environments and on Tryhackme machines ONLY obviously.
Burp Suite
- for web app security testing. intercepts HTTP requests so u can modify them
and find SQL injection and XSS. the community edition is free which is awesome.
|