Learn
Ethical Hacking Tools
What widely used security tools are for, how to recognize their results, and where they belong in authorized practice.
- Name the right kind of tool for a task
- Read a simple result without treating the tool as magic
- Keep practice inside systems you own or are allowed to test
Discovery
- Nmap
A scanner that discovers hosts and the ports that respond.
Packet analysis
Connectivity
- Netcat
A simple utility for reading and writing a network connection.
Web testing
- Burp Suite
An intercepting proxy for authorized web-application testing.
- ffuf
A fast web fuzzer that filters responses by status, size, or words.
- Gobuster
A wordlist tool for finding hidden web paths or DNS names.
- Nikto
A scanner for outdated web servers and common dangerous files.
- sqlmap
A tool that detects SQL injection in an application you may test.
Assessment frameworks
- Metasploit
A framework that organizes authorized security tests into modules.
Password auditing
- Hashcat
A GPU tool for offline audits of password hashes you are allowed to test.
- Hydra
A tool that tries authorized logins against a live service.
- John the Ripper
A CPU tool for offline audits of password hashes you are allowed to test.
Wireless
- Aircrack-ng
A suite for assessing wireless networks you are allowed to test.
Vulnerability scanning
Reconnaissance
- WhatWeb
A tool that identifies technologies a website appears to use.