Nmap

Industry-standard network mapping and port scanning tool for discovering hosts, services, and operating systems across your attack surface. Essential for reconnaissance in every engagement.

Wireshark

Deep packet inspection and network traffic analysis for threat hunting, incident response, and protocol forensics. Capture and analyze live traffic or saved packet captures.

Burp Suite

Advanced web application security testing platform for identifying OWASP Top 10 vulnerabilities. Intercept, inspect, and modify traffic between browser and target applications.

Metasploit

The world's most used penetration testing framework for developing and executing exploit code against remote targets. Validate vulnerabilities with safe, controlled exploitation.

OWASP ZAP

Open-source web application security scanner for automated vulnerability detection in CI/CD pipelines. Ideal for DevSecOps integration and continuous security testing.

Kali Linux

Enterprise-grade penetration testing distribution with 600+ pre-installed security tools. The standard platform for security assessments, digital forensics, and reverse engineering.

Nessus

Industry-leading vulnerability scanner for identifying CVEs, misconfigurations, and compliance gaps across your entire infrastructure. Agent-based and remote scanning capabilities.

Snort

Real-time network intrusion detection and prevention system for analyzing traffic patterns and blocking malicious activity. Rule-based detection with community threat intelligence.