Subscribe
root@0xpriv:~# ls /opt/tools

Arsenal

The toolkit used across the writeups — what each tool is for, how to install it and one example to start from. Use them only on systems you own or are authorized to test.

Toolkit

4 tools
All4 Recon1 Web1 Network1 Exploit1

Recon

1

Finding out what exists before touching it: hosts, services, subdomains and content.

Recon
$nmap

Port, service and version scanner for mapping what a host exposes.

Linux, macOS, WindowsNmap Public Source License

Web

1

Intercepting, fuzzing and scanning web applications you are authorized to test.

Web
$Burp Suite

Intercepting proxy and toolkit for testing web applications by hand.

Linux, macOS, WindowsProprietary, with a free Community edition

Network

1

Seeing what is really on the wire, one packet at a time.

Network
$Wireshark

Graphical packet analyzer that decodes traffic protocol by protocol.

Linux, macOS, WindowsGPL-2.0

Exploit

1

Frameworks and libraries for building and running proofs of concept in a lab.

Exploit
$Metasploit

Framework of modules, payloads and post-exploitation tools behind one console.

Linux, macOS, WindowsBSD-3-Clause for the Framework