nmap Web
https://nmap.org/
Nmap network scanner
How to use it
`nmap -sV target.com` to discover open ports and services; add -sC for default scripts, -A for full fingerprinting. Scan only systems you own or are authorized to test.
Open resource →
metasploit Web
https://www.metasploit.com/
Metasploit exploitation framework
How to use it
Launch `msfconsole` in Kali, `search` for an exploit matching your target service, set RHOSTS/options, and run — authorized testing only.
metasploit-framework GitHub
https://github.com/rapid7/metasploit-framework/
Open-source code repository
How to use it
Open the repo page, read the README for install instructions (usually a git clone or pip install command), then run it in a terminal. Check the 'Issues' and 'Releases' tabs for updates.
portswigger Web
https://portswigger.net/burp/
Burp Suite
How to use it
Intercept browser traffic through Burp's proxy, inspect/modify requests, and use Repeater/Intruder to probe web apps. Free Community edition; the Web Security Academy teaches techniques.
zaproxy Web
https://www.zaproxy.org/
OWASP ZAP proxy
How to use it
Free Burp alternative: proxy your browser, then run automated scans against your target app.
mitmproxy Web
https://mitmproxy.org/
mitmproxy
How to use it
Scriptable HTTPS intercepting proxy — run `mitmweb` for a UI, route device traffic through it to inspect app API calls.
bettercap Web
https://www.bettercap.org/
bettercap network attack tool
How to use it
Modular MITM framework for WiFi/Ethernet recon and attacks in authorized lab environments.
aircrack-ng Web
https://www.aircrack-ng.org/
Aircrack-ng WiFi suite
How to use it
Capture handshakes (airodump-ng/aireplay-ng) and crack WiFi keys (aircrack-ng) — only on networks you own.
aircrack-ng GitHub
https://github.com/aircrack-ng/aircrack-ng/
Open-source code repository
How to use it
Open the repo page, read the README for install instructions (usually a git clone or pip install command), then run it in a terminal. Check the 'Issues' and 'Releases' tabs for updates.
macchanger GitHub
https://github.com/alobbs/macchanger/
Open-source code repository
How to use it
Open the repo page, read the README for install instructions (usually a git clone or pip install command), then run it in a terminal. Check the 'Issues' and 'Releases' tabs for updates.
gnu Web
https://www.gnu.org/software/macchanger/
GNU software project page
How to use it
Read the documentation and download the source tarball or install via your distro's package manager (e.g., `sudo apt install macchanger`).
masscan GitHub
https://github.com/robertdavidgraham/masscan/
Open-source code repository
How to use it
Open the repo page, read the README for install instructions (usually a git clone or pip install command), then run it in a terminal. Check the 'Issues' and 'Releases' tabs for updates.
zmap GitHub
https://github.com/zmap/zmap/
Open-source code repository
How to use it
Open the repo page, read the README for install instructions (usually a git clone or pip install command), then run it in a terminal. Check the 'Issues' and 'Releases' tabs for updates.
zgrab2 GitHub
https://github.com/zmap/zgrab2/
Open-source code repository
How to use it
Open the repo page, read the README for install instructions (usually a git clone or pip install command), then run it in a terminal. Check the 'Issues' and 'Releases' tabs for updates.
RustScan GitHub
https://github.com/bee-san/RustScan/
Open-source code repository
How to use it
Open the repo page, read the README for install instructions (usually a git clone or pip install command), then run it in a terminal. Check the 'Issues' and 'Releases' tabs for updates.
ffuf GitHub
https://github.com/ffuf/ffuf/
Open-source code repository
How to use it
Open the repo page, read the README for install instructions (usually a git clone or pip install command), then run it in a terminal. Check the 'Issues' and 'Releases' tabs for updates.
feroxbuster GitHub
https://github.com/epi052/feroxbuster/
Open-source code repository
How to use it
Open the repo page, read the README for install instructions (usually a git clone or pip install command), then run it in a terminal. Check the 'Issues' and 'Releases' tabs for updates.
gobuster GitHub
https://github.com/OJ/gobuster/
Open-source code repository
How to use it
Open the repo page, read the README for install instructions (usually a git clone or pip install command), then run it in a terminal. Check the 'Issues' and 'Releases' tabs for updates.
dirsearch GitHub
https://github.com/maurosoria/dirsearch/
Open-source code repository
How to use it
Open the repo page, read the README for install instructions (usually a git clone or pip install command), then run it in a terminal. Check the 'Issues' and 'Releases' tabs for updates.
sqlmap GitHub
https://github.com/sqlmapproject/sqlmap/
Open-source code repository
How to use it
Open the repo page, read the README for install instructions (usually a git clone or pip install command), then run it in a terminal. Check the 'Issues' and 'Releases' tabs for updates.
sqlmap Web
https://sqlmap.org/
sqlmap site
How to use it
Docs and downloads for the SQL-injection automation tool.
nikto GitHub
https://github.com/sullo/nikto/
Open-source code repository
How to use it
Open the repo page, read the README for install instructions (usually a git clone or pip install command), then run it in a terminal. Check the 'Issues' and 'Releases' tabs for updates.
cirt Web
https://cirt.net/Nikto2/
Nikto project page
How to use it
Nikto docs plus default-password databases.
dalfox GitHub
https://github.com/hahwul/dalfox/
Open-source code repository
How to use it
Open the repo page, read the README for install instructions (usually a git clone or pip install command), then run it in a terminal. Check the 'Issues' and 'Releases' tabs for updates.