Offensive Security Tools
Overview
The core toolset referenced throughout this section, organized by what layer of a system or application they operate on.
Key concepts
- Network discovery: Nmap, Wireshark, Netcat
- Web security: Burp Suite, OWASP ZAP, Nikto
- Frameworks: Metasploit, Kali Linux, Nessus, OpenVAS
Tools & techniques
| Tool | Purpose | When to use |
|---|---|---|
| Nmap | Network/port/service discovery | Recon and scanning phases |
| Metasploit Framework | Validate known vulnerabilities | Exploitation phase |
| Burp Suite | Web app traffic testing | Web application assessments |
| Kali Linux | Pentesting-focused Linux distro | Primary testing environment |
How it works
Network discovery tools
| Tool | Purpose |
|---|---|
| Nmap | Identifies hosts, open ports, services, and operating-system information. |
| Wireshark | Captures and inspects network traffic packet-by-packet. |
| Netcat | Command-line tool for reading from or writing to network connections. |
Web-security tools
| Tool | Purpose |
|---|---|
| Burp Suite | Inspects and tests web application traffic and security controls. |
| OWASP ZAP | Identifies common web application vulnerabilities. |
| Nikto | Web-server scanner for insecure configurations and outdated server components. |
Frameworks & testing platforms
| Tool | Purpose |
|---|---|
| Metasploit Framework | Helps authorized users validate known vulnerabilities. |
| Kali Linux | A Linux distribution built for cybersecurity testing, digital forensics, and security research. |
| Nessus | Identifies missing patches, known vulnerabilities, and insecure configurations. |
| OpenVAS | Identifies known security weaknesses in systems and networks. |