Recognize the tool and read the output.

Git in the Zone explains security tools and attack terminology so you can recognize them and defend against them. Practice only on systems you own or have written permission to test. Nothing on this site runs a command or an exploit.

• Aircrack-ng

  A suite for assessing wireless networks you are allowed to test.

• arp command

  Shows the local cache of protocol-to-hardware address mappings.

• Burp Suite

  An intercepting proxy for authorized web-application testing.

• chmod

  Changes read, write, and execute permissions on a Unix file.

• chown

  Changes the user and group that own a Unix file.

• curl

  Transfers data from a URL, including headers or a response body.

• dig

  A detailed name-lookup utility that shows the question and the answer.

• ffuf

  A fast web fuzzer that filters responses by status, size, or words.

• find

  Walks directories and lists files that match conditions you set.

• Get-Process

  A PowerShell cmdlet that lists processes and their resource use.

• Gobuster

  A wordlist tool for finding hidden web paths or DNS names.

• grep

  Prints lines in a file or stream that match a pattern.

• Hashcat

  A GPU tool for offline audits of password hashes you are allowed to test.

• hostname

  Prints the computer's own host name.

• Hydra

  A tool that tries authorized logins against a live service.

• ifconfig

  An older Unix command for interface addresses and status.

• ip

  The modern Linux utility for addresses, links, and routes.

• ipconfig

  Shows Windows address, mask, gateway, and related settings.

• John the Ripper

  A CPU tool for offline audits of password hashes you are allowed to test.

• Metasploit

  A framework that organizes authorized security tests into modules.

• Nessus

  Tenable's commercial scanner for known flaws and missing patches.

• Netcat

  A simple utility for reading and writing a network connection.

• netstat

  Lists network connections, listening ports, and routes.

• Nikto

  A scanner for outdated web servers and common dangerous files.

• Nmap

  A scanner that discovers hosts and the ports that respond.

• nslookup

  A simple utility that asks a name server for records.

• OpenVAS

  The open-source vulnerability scanner from the Greenbone project.

• ping

  Sends an echo request to test whether a host replies.

• route

  Shows the table a host uses to choose the next hop.

• sqlmap

  A tool that detects SQL injection in an application you may test.

• ss

  A Linux utility that lists sockets and listening ports.

• systemctl

  Controls and inspects services on Linux systems that use systemd.

• tasklist

  Lists running processes on Windows.

• tcpdump

  A command-line tool that captures packets matching a filter.

• Test-NetConnection

  A PowerShell cmdlet that tests reachability and a specific TCP port.

• traceroute

  Lists the routers a packet passes through on the way to a destination.

• wget

  Downloads a file from a URL and saves it locally.

• WhatWeb

  A tool that identifies technologies a website appears to use.

• whoami

  Prints the user identity of the current session.

• Wireshark

  A graphical analyzer for captured network packets.