- Nmap — Network Mapper — the fundamental network scanner: host discovery, open port detection, service identification, and OS fingerprinting; indispensable for network reconnaissance.
- Wireshark — an interactive network packet analyzer; deep inspection of protocols and traffic (Ethernet, TCP/IP, VoIP, etc.).
- Metasploit Framework — a modular platform for developing/executing exploits and performing post-exploitation; the go-to tool for simulating attacks. Site: https://www.metasploit.com/ (and the repository https://github.com/rapid7/metasploit-framework)
- Burp Suite (PortSwigger) — a full-featured toolkit for web application testing: proxy, scanner, repeaters, decoders. Excellent for both manual and automated vulnerability discovery. Site: https://portswigger.net/burp
- sqlmap — an automated tool for detecting and exploiting SQL injections and extracting data from databases. Site: https://sqlmap.org/
- John the Ripper / Hashcat — tools for brute-forcing and cracking password hashes (wordlist / GPU acceleration). John is the classic; Hashcat delivers fast GPU-based attacks. John: https://www.openwall.com/john/ · Hashcat: https://hashcat.net/hashcat/
- Aircrack-ng — a suite for working with wireless networks: capturing handshakes, analysis, PSK brute-forcing, and WEP/WPA/WPA2 testing. Site: https://www.aircrack-ng.org/
- Nikto — a simple, fast web server scanner for common vulnerabilities, outdated software versions, and misconfigurations. Site: https://cirt.net/Nikto2
- Suricata — a high-performance IDS/IPS/network traffic logger; well suited for monitoring networks and detecting attacks in real time. Site: https://suricata.io/
- OpenVAS / Greenbone — a vulnerability assessment system (vulnerability scanning) with task management and reporting. Site: https://www.greenbone.net/
- Splunk — a platform for collecting and analyzing logs and events (SIEM-like capabilities when properly configured); useful for incident correlation. Site: https://www.splunk.com/
- Maltego — a tool for OSINT and relationship visualization (reconnaissance, building link graphs between entities/domains/emails). Site: https://www.maltego.com/
- Shodan — the “search engine for the Internet of Things” and services; lets you find publicly exposed services and inspect banners/exposure. Site: https://www.shodan.io/
- Kali Linux — a specialized distribution with a huge collection of pentest tools (Nmap, Metasploit, Burp, etc. included). Notable for its ease of deployment and ready-made images. Site: https://www.kali.org/
- Cobalt Strike — a commercial platform for red-team/attack simulation and post-exploitation (beacon, command-and-control functionality). Used in professional engagements; requires caution and licensing. Site: https://www.cobaltstrike.com/
- BloodHound — an Active Directory graph visualizer; analyzes privilege escalation paths in Windows environments. Repository/info: https://github.com/BloodHoundAD/BloodHound
- (BEB6) — caution — looks like clickbait/a scam: sites under “BEB6” claim to “guess Wi-Fi passwords” via posting/scripts — this is not a real tool and is frequently a scam/junk site. Not recommended. (Examples of such pages/discussions can be found in open sources.)
- XSpider — a vulnerability scanner (historically a Positive Technologies product / commercial scanner for audit tasks). Suitable for local and corporate assessments (usually paid). Info: https://ru.wikipedia.org/wiki/XSpider (and Positive Technologies resources)
- CrowdStrike Falcon — a commercial EDR/cloud platform for endpoint protection with attack detection and prevention capabilities. Site: https://www.crowdstrike.com/
- CrackMapExec (CME) — the “Swiss army knife” for pentesting AD/Windows environments: scanning, command execution, credential brute-forcing, lateral movement. Repository: https://github.com/byt3bl33d3r/CrackMapExec
Brief recommendations on usage and safety
- Always run these tools only within an authorized scope — a pentest engagement/lab environment/your own infrastructure. Unauthorized scanning and exploitation is illegal.
- For a quick setup, use Kali / containers with official tool images; for automation, use scripts + CI (in a test environment).
- Don’t trust “instant sites” that promise to crack passwords through a web form (for example, BEB6) — these are frequently phishing/scams.