Reconnaissance
Tools used for authorized information gathering, asset discovery, enumeration, and reconnaissance.
NmapAmasstheHarvesterRecon-ng
CYBERSECURITY TOOLKITKnow the tool.
Know the tool.
Know the purpose.
Explore the tools commonly used across reconnaissance, web security, network analysis, penetration testing, blue team, malware analysis, and security research.
Use security tools responsibly
These tools can perform powerful security operations. Use them only on systems you own or have explicit authorization to assess.
01 / TOOL CATEGORIES
Tools organized by purpose.
Understanding why a tool exists is more important than simply memorizing commands.
Web Security
Tools for analyzing web applications, HTTP traffic, APIs, and web security vulnerabilities.
Burp SuiteOWASP ZAPNiktoGobuster
Network Analysis
Analyze network traffic, protocols, hosts, and communication patterns inside authorized environments.
WiresharktcpdumpNmapNetcat
Penetration Testing
Tools commonly used during authorized security assessments and penetration-testing workflows.
MetasploitNmapBurp SuiteNetcat
Password Security
Tools for password auditing, credential analysis, and authentication-security testing in authorized labs.
HashcatJohn the RipperHydra
Linux Security
Utilities for Linux administration, investigation, enumeration, and security testing.
Lynispssslsof
Windows & AD
Tools for understanding Windows environments, Active Directory, identity, and enterprise security.
BloodHoundSysinternalsPowerShell
Blue Team
Defensive tools for monitoring, detection, investigation, log analysis, and incident response.
SplunkWazuhZeekSuricata
Malware Analysis
Tools used for controlled malware analysis, reverse engineering, debugging, and binary inspection.
GhidraWiresharkYARAREMnux
02 / CORE TOOLKIT
The tools worth learning first.
Start with the tools that appear repeatedly across the cybersecurity learning path.
01
⌁
RECONNAISSANCENmap
Network discovery and security auditing tool used to identify hosts, services, and network characteristics.
Official Resource↗02
◈
WEB SECURITYBurp Suite
A web-security testing platform used to inspect and analyze HTTP requests and responses.
Official Resource↗03
◉
NETWORK ANALYSISWireshark
Network protocol analyzer for capturing and inspecting network traffic.
Official Resource↗04
⚡
PENETRATION TESTINGMetasploit
A security framework used for authorized vulnerability research, security testing, and validation.
Official Resource↗05
🔐
PASSWORD SECURITYHashcat
Password recovery and auditing tool designed for authorized password-security assessments.
Official Resource↗06
▣
REVERSE ENGINEERINGGhidra
Software reverse-engineering framework developed by the NSA Research Directorate.
Official Resource↗07
◆
WEB SECURITYOWASP ZAP
Open-source web application security scanner and testing proxy.
Official Resource↗08
⬡
ACTIVE DIRECTORYBloodHound
A tool for analyzing relationships and attack paths in Active Directory environments.
Official Resource↗09
▤
MALWARE ANALYSISYARA
A tool designed to help identify and classify malware through pattern-based rules.
Official Resource↗10
●
NETWORK SECURITYZeek
An open-source network security monitor that provides detailed visibility into network activity.
Official Resource↗11
◫
NETWORK SECURITYSuricata
An open-source network analysis and threat detection engine.
Official Resource↗12
▦
BLUE TEAMWazuh
An open-source security platform for threat detection, monitoring, and security analytics.
Official Resource↗03 / SECURITY WORKFLOW
Learn tools through a workflow.
Tools become easier to understand when you know where they fit into a real security assessment or defensive process.
01
Discover
Nmap • Amass • Recon-ngUnderstand the authorized environment and identify relevant assets.
→
02
Analyze
Wireshark • Burp Suite • ZeekInspect traffic, services, requests, responses, and system behavior.
→
03
Assess
Nmap • Nikto • OWASP ZAPIdentify potential weaknesses through controlled security assessment.
→
04
Validate
Metasploit • Burp SuiteValidate security findings only within the authorized scope.
→
05
Detect
Wazuh • Suricata • YARABuild defensive visibility and analyze suspicious activity.
→
06
Investigate
Ghidra • Wireshark • SysinternalsInvestigate binaries, endpoints, traffic, and security events.
→
04 / SECURITY ENVIRONMENT
Your toolkit needs an environment.
Kali Linux provides a security-focused Linux environment containing many tools commonly used for cybersecurity learning and authorized security testing.
Explore Kali Linux↗SECURITY TERMINAL
┌──[user@kali]
└─$ security-toolkit --list
[+] reconnaissance
[+] network-analysis
[+] web-security
[+] vulnerability-assessment
[+] penetration-testing
[+] digital-forensics
[+] reverse-engineering
└─$ _
05 / RECOMMENDED ORDER
Don't learn every tool at once.
Build capability progressively and learn tools when they become relevant to the roadmap.
01Networking
Nmap • Wireshark • tcpdump
02Linux
Shell • ss • lsof • system utilities
03Web Security
Burp Suite • OWASP ZAP
04Assessment
Nmap • Nikto • vulnerability tools
05Offensive Security
Metasploit • specialized tools
06Defense & Research
Wazuh • Suricata • YARA • Ghidra
RESPONSIBLE SECURITY
Tools don't make you a hacker.
Understanding systems, networking, security principles, methodology, and responsible testing matters more than knowing a large number of tools.
✓ Understand the technology first✓ Practice in authorized environments✓ Learn the purpose behind every tool✓ Document and report findings responsibly
Learn the concept.
Master the tool.
Use the roadmap to understand when each tool becomes relevant in your cybersecurity journey.