Nmap
Network discovery and security auditing. The de facto standard for port scanning and service enumeration.
Metasploit Framework
The world's most used penetration testing framework. Modular exploit development and payload delivery.
Volatility 3
Advanced memory forensics framework for incident response and malware analysis.
CyberChef
The Cyber Swiss Army Knife — a web app for encryption, encoding, compression, and data analysis.
pwntools
CTF framework and exploit development library for Python. Essential for binary exploitation challenges.
Shodan
Search engine for internet-connected devices. Identify exposed services, open ports, and vulnerable systems.
Suricata
High-performance network IDS, IPS, and network security monitoring engine.
Hashcat
World's fastest and most advanced password recovery utility supporting 300+ hash types.
Ghidra
NSA's open-source software reverse engineering framework. Disassembler, decompiler, and analysis suite.
Wireshark
The world's foremost network protocol analyser. Capture and interactively browse network traffic.
Burp Suite
Integrated platform for web application security testing. Proxy, scanner, intruder, and repeater.
Wazuh
Open-source security platform for threat detection, integrity monitoring, and incident response.