My favourite online pentest toolkit.

My favourite online pentest toolkit.

Kali Linux

1. Kali Linux

Kali Linux is one of the most popular ethical hacking distros available, it is provided with hundreds of pentesting tools preloaded for use straight after download. You can download Kali Linux on bare metal, cloud services and ISO all from there site, they also have a great community forums for anybody who is unsure starting out!


2. NMAP

NMAP is a Command Line Tool for auditing networks, you can use an IP Address, Website or URL and scan for Open Ports, and use a variety or modules to audit sites and launch sophisticated attacks on certain devices. It’s the first step for any Pentester.

Download NMAP On Ubuntu

apt install nmap
META

3. Metasploit

The Metasploit Project is a computer security project that provides information about security vulnerabilities and aids in penetration testing and IDS signature development. Many Pentester will use this after they have used NMAP, from NMAP you can then search for vulnerabilities in a certain service or device. You can download it from here.


WIRESHARK

4. Wireshark

Wireshark is a network traffic analytics tool, it can be used to analyse the traffic and data packets from your current network. Wireshark lets the user put network interface controllers into promiscuous mode (if supported by the network interface controller), so they can see all the traffic visible on that interface including unicast traffic not sent to that network interface controller's MAC address. You can download it here.


5. Lynis

Lynis is a different kind of tool, I added it as it can provide advance vulnerability information about the host machine but you would have to install on the machine itself. Lynis will help you resolve any vulnerability’s on your device with ease and also provides a link online which has advance troubleshooting. You can download Lynis from there repository’s from there website :: https://cisofy.com/lynis/


6. VyperVPN

VyperVPN is one of the fastest and most secure Windows & Linux VPN’s I’ve used, it uses WireGuard for state of the art encryption of your traffic and also has its own Zero Logging DNS servers with the ability to change them in settings. They guarantee Zero Logging on all there servers and have been audited you can find the report here, they have apps for windows, IPhone, Android and Provide OpenVPN Details for Linux. The Auto Connect On Boot feature for Windows will auto connect to the nearest server when you boot into windows so your IP is never exposed. You can purchase it here.


7. BurpSuite

BurpSuite is a set of tools used for website security testing, It is used by thousands of penetration testers worldwide. It is the most popular tool among professional web app security researchers and bug bounty hunters. The tool includes module to scan sites for vulnerabilities (this isn’t available in the community version), proxy for intercepting requests, website endpoint crawler and many more features built in. You can download it here.


Disclaimer: These tools are to be used within your own network or with written consent of the owner, please do not use these tools for the purpose of breaking and entering into a network without permission or for any illegal purposes. We will not be responsible for your any illegal actions.