Reconnaissance & OSINT4

nmap

network mapping & port scanning

98 commands TRAIN →

amass

subdomain enumeration & asset mapping

12 commands TRAIN →

subfinder

passive subdomain discovery

12 commands TRAIN →

httpx

fast HTTP probing & recon

12 commands TRAIN →

Web Application7

gobuster

directory & DNS brute-forcing

27 commands TRAIN →

ffuf

fast web fuzzing & content discovery

12 commands TRAIN →

nikto

web server vulnerability scanner

23 commands TRAIN →

sqlmap

SQL injection & database takeover

31 commands TRAIN →

nuclei

template-based vulnerability scanning

12 commands TRAIN →

owasp zap

web app scanning & DAST automation

25 commands TRAIN →

mitmproxy

CLI HTTP/HTTPS interception & analysis proxy

50 commands TRAIN →

Network & Traffic Analysis4

tshark

CLI packet capture & analysis

85 commands TRAIN →

tcpdump

CLI packet capture & filtering

14 commands TRAIN →

netcat

TCP/UDP swiss army knife

26 commands TRAIN →

openssl

TLS, certificates & cryptography

14 commands TRAIN →

Exploitation & Post-Exploitation5

metasploit

exploitation framework

30 commands TRAIN →

impacket

Windows & AD network protocol attacks

20 commands TRAIN →

netexec

network protocol swiss army knife

20 commands TRAIN →

frida

dynamic instrumentation & hooking

30 commands TRAIN →

setoolkit

phishing, cloned sites & social engineering

23 commands TRAIN →

Password & Credential Attacks4

hydra

password brute-forcing

33 commands TRAIN →

john

offline password hash cracking

26 commands TRAIN →

hashcat

GPU password hash cracking

13 commands TRAIN →

aircrack-ng

802.11 WEP & WPA/WPA2 auditing

21 commands TRAIN →

Reverse Engineering & Debugging3

gdb

GNU debugger & exploitation

21 commands TRAIN →

lldb

LLVM debugger for macOS & iOS

20 commands TRAIN →

rizin

reverse engineering & binary analysis

45 commands TRAIN →

Forensics & Malware Analysis4

sleuth kit

disk image & file system forensics

38 commands TRAIN →

volatility

memory forensics & analysis

14 commands TRAIN →

yara

malware pattern matching & hunting

12 commands TRAIN →

exiftool

file metadata & EXIF analysis

13 commands TRAIN →

Vulnerability Management & Monitoring2

nessus

vulnerability scanning & management

28 commands TRAIN →

splunk

SIEM search, indexing & forwarding

29 commands TRAIN →

Systems & Utilities7

linux

core commands & privilege escalation

202 commands TRAIN →

windows

cmd, powershell & active directory

113 commands TRAIN →

git

version control & collaboration

49 commands TRAIN →

aws-cli

cloud recon, IAM & S3 enumeration

14 commands TRAIN →

github-cli

repos, PRs, issues & actions

17 commands TRAIN →

docker

containers, images & compose stacks

21 commands TRAIN →

kubectl

pods, secrets & RBAC enumeration

15 commands TRAIN →