Security Tools & Resources
Essential tools and resources I use for penetration testing, reconnaissance, and cybersecurity research.
🔍 Network Tools
Nmap
Network discovery and security auditing tool for port scanning and service detection.
nmap.org →Wireshark
Network protocol analyzer for deep packet inspection and traffic analysis.
wireshark.org →🌐 Web Application Testing
Burp Suite
Industry-standard web vulnerability scanner and proxy tool for finding security flaws in web applications.
portswigger.net →OWASP ZAP
Open-source web application security scanner for automated and manual testing.
zaproxy.org →⚔️ Exploitation & Post-Exploitation
Metasploit Framework
Comprehensive penetration testing framework with thousands of exploits and payloads.
metasploit.com →💻 Development & Productivity
Termius
Cross-platform SSH client with saved hosts, key management, and terminal organization.
termius.com →Visual Studio Code
Lightweight code editor with extensions for Python, PowerShell, and cybersecurity scripting.
code.visualstudio.com →Flameshot
Screenshot tool with built-in annotation for documenting findings and creating reports.
flameshot.org →🔎 Reconnaissance & OSINT
Whois.com
Domain and IP ownership lookup for identifying registrants and contact information.
whois.com →Wayback Machine
Historical snapshots of websites for finding old versions and deleted content.
archive.org →DNSDumpster
DNS reconnaissance and domain mapping tool for discovering subdomains and infrastructure.
dnsdumpster.com →ViewDNS.info
Reverse IP lookup, ASN queries, and DNS history for infrastructure reconnaissance.
viewdns.info →🔐 Hashing & Cryptography
CyberChef
Web-based data analysis toolbox for encoding, decoding, and data manipulation.
CyberChef →Have I Been Pwned
Check if email addresses have been compromised in data breaches.
haveibeenpwned.com →🎯 Practice Labs & Training
HackTheBox
Penetration testing labs with real-world scenarios and retired machines for practice.
hackthebox.com →🛡️ Threat Intelligence & Vulnerabilities
CVE Database
Public catalog of disclosed cybersecurity vulnerabilities and exposures.
cve.mitre.org →