Red team / offensive security

Offensive Security Tools

Overview

The core toolset referenced throughout this section, organized by what layer of a system or application they operate on.

Key concepts

  • Network discovery: Nmap, Wireshark, Netcat
  • Web security: Burp Suite, OWASP ZAP, Nikto
  • Frameworks: Metasploit, Kali Linux, Nessus, OpenVAS

Tools & techniques

ToolPurposeWhen to use
NmapNetwork/port/service discoveryRecon and scanning phases
Metasploit FrameworkValidate known vulnerabilitiesExploitation phase
Burp SuiteWeb app traffic testingWeb application assessments
Kali LinuxPentesting-focused Linux distroPrimary testing environment

How it works

Network discovery tools

ToolPurpose
NmapIdentifies hosts, open ports, services, and operating-system information.
WiresharkCaptures and inspects network traffic packet-by-packet.
NetcatCommand-line tool for reading from or writing to network connections.

Web-security tools

ToolPurpose
Burp SuiteInspects and tests web application traffic and security controls.
OWASP ZAPIdentifies common web application vulnerabilities.
NiktoWeb-server scanner for insecure configurations and outdated server components.

Frameworks & testing platforms

ToolPurpose
Metasploit FrameworkHelps authorized users validate known vulnerabilities.
Kali LinuxA Linux distribution built for cybersecurity testing, digital forensics, and security research.
NessusIdentifies missing patches, known vulnerabilities, and insecure configurations.
OpenVASIdentifies known security weaknesses in systems and networks.