A field-tested security arsenal reimagined as a digital equipment rack. Search by purpose, scan the operating specs, and jump directly to each project's official home.
A Debian-based security OS with a broad collection of auditing and forensic tools for legitimate lab and assessment work.
sudo apt updateNetwork Mapper for host discovery, service enumeration, OS fingerprinting, and authorized security auditing.
sudo apt install nmapA mature penetration-testing framework for controlled exploit simulation, auxiliary modules, and remediation validation.
sudo apt install metasploit-frameworkPacket-level network protocol analysis for troubleshooting, research, and spotting anomalous traffic.
sudo apt install wiresharkWireless-security toolkit for authorized Wi-Fi assessment, packet capture, injection testing, and password auditing.
sudo apt install aircrack-ngPassive wireless detector, sniffer, and IDS supporting Wi-Fi, Bluetooth, RF, and SDR-based research.
sudo apt install kismetWeb-application security platform centered on an intercepting proxy for authorized HTTP/S testing and analysis.
launch Burp SuiteSearch engine for Internet-connected systems, services, banners, and externally visible infrastructure.
shodan host <authorized-target>Fast password auditing and recovery suite supporting many hash and cipher types for authorized security assessments.
sudo apt install johnOpen-source web-server scanner for dangerous files, outdated software, and common configuration weaknesses.
sudo apt install niktoOSINT utility for extracting metadata from publicly shared Google documents during lawful investigations.
pip3 install xeuledocSocial-engineering demonstration tooling intended only for consent-based training and authorized awareness testing.
authorized lab use onlyOWASP's web-security proxy and automated scanner for learning, testing, and defensive application-security workflows.
launch zaproxyGPU-accelerated password recovery utility supporting hundreds of hash formats and multiple audit modes.
sudo apt install hashcatField guide covering common password-auditing tools, their purposes, official sources, and legitimate testing contexts.
open pwnHACKER guideVisual link-analysis platform for mapping relationships among people, domains, infrastructure, organizations, and accounts.
launch MaltegoThese tools are intended for education, lab work, defensive research, and security testing where you have explicit authorization.