🛡️ Cybersecurity Tools Navigation
Welcome to the Cybersecurity Tools Wiki! This page serves as a hub for exploring various cybersecurity domains and tools. Click on the links to learn more about each tool or challenge.
🔎 1. Open Source Intelligence (OSINT)
Obtain information using publicly available data and tools.
Tools & Resources:
- Maltego – Visual link analysis for OSINT investigations.
- theHarvester – Gather emails, subdomains, hosts, and more.
- Recon-ng – Web reconnaissance framework.
- Shodan – Search for internet-connected devices.
- SpiderFoot – Automated OSINT collection and analysis.
🔐 2. Cryptography
Information is key, but it's not going to be easy to get it. Decipher these hidden messages to learn what is really going on.
Tools & Resources:
- CyberChef – "The Cyber Swiss Army Knife" for encryption, encoding, and data analysis.
- Hashcat – Advanced password cracking tool.
- GPG / OpenPGP – Encrypt and sign communications.
- John the Ripper – Password cracking software.
- CrypTool – Learn cryptography interactively.
🔑 3. Password Cracking
Try your hand at cracking these passwords.
Tools & Resources:
- Hashcat – GPU-accelerated password cracking.
- John the Ripper – Supports multiple hash formats.
- Hydra – Network logon cracker.
- Medusa – Fast, parallel, modular login brute-forcer.
- Ophcrack – Rainbow tables-based Windows password cracker.
🧬 4. Digital Forensics
Do you know where to look for the evidence? Help find the forensic trail that malicious actors leave behind.
Tools & Resources:
- Autopsy – Digital forensics platform.
- FTK Imager – Disk imaging and analysis.
- Sleuth Kit – Command-line forensic tools.
- Volatility – Memory forensics framework.
- Wireshark – Analyze captured network traffic.
📜 5. Log Analysis
Logs hold a ton of information. Use them to determine what hackers have been up to.
Tools & Resources:
- ELK Stack (Elasticsearch, Logstash, Kibana) – Centralized log analysis.
- Splunk – Enterprise log monitoring and SIEM.
- Graylog – Open-source log management.
- NXLog – Universal log collector and forwarder.
- GoAccess – Real-time web log analyzer.
📡 6. Network Traffic Analysis
Determine what happened and exactly when by analyzing network traffic captures.
Tools & Resources:
- Wireshark – Capture and analyze network packets.
- tcpdump – Command-line packet capture.
- NetworkMiner – Network forensics tool.
- Nmap/ZenMap – Network discovery and port scanning.
- Zeek (formerly Bro) – Network security monitoring.
🛰️ 7. Scanning & Reconnaissance
Before you catch hackers, you need to find them.
Tools & Resources:
- Nmap/ZenMap – Network discovery and port scanning.
- Masscan – Internet-scale port scanner.
- Recon-ng – Web reconnaissance framework.
- Amass – Subdomain enumeration and attack surface mapping.
- Angry IP Scanner - Network / IP Discovery
- Advanced IP Scanner - Network / IP Discovery
- MegaPing - Comprehensive Security Scanner, Port scanner (TCP and UDP ports), IP scanner, NetBIOS scanner, Share Scanner.
- NetScanToolsPro -Designed for use on Windows GUI systems, the software enables interactive scans
- Hping3 – Build and send custom TCP/IP packets.
- Unicornscan - a User-land Distributed TCP/IP stack for information gathering and correlation.
- Colasoft Packet Builder – Build custom network packets.
🌐 8. Web Application Security Testing
Find and demonstrate vulnerabilities in web applications.
Tools & Resources:
- Burp Suite – Web vulnerability scanner and proxy.
- OWASP ZAP – Open-source web app security scanner.
- SQLmap – Automated SQL injection tool.
- Nikto – Web server scanner.
- Wfuzz – Web application brute-forcer.
📶 9. Wireless Security Testing
Break into poorly secured wireless networks.
Tools & Resources:
- Aircrack-ng – Wireless network auditing.
- Kismet – Wireless network detector.
- Wifite – Automated Wi-Fi attack tool.
- Reaver – WPS attack tool.
- Fern Wifi Cracker – GUI wireless penetration tool.
🧭 10. Enumeration & Exploitation
Break training programs, exploit software, and secure your own programs.
Tools & Resources:
- Metasploit Framework – Penetration-testing platform.
- Nmap/ZenMap – Network discovery and port scanning.
~ - Nmap Cheat Sheet~ - Enum4linux – SMB/Windows enumeration.
- Responder – LLMNR, NBT-NS, and MDNS poisoner.
- PowerSploit – PowerShell post-exploitation framework.
- Empire – Post-exploitation agent.
- Windows Command Line – Enumeration and exploitation through the Windows command line.
- Linux Terminal – Enumeration and exploitation through the Linux terminal.
- NetBIOS Enumerator - A tool that enables the use of remote network support and several other techniques such as SMB to enumerate details
- snmp-check - A tool that enumerates SNMP devices.
snmp-check target
- Softperfect Network Scanner - A network scanner that can be used for snmp enumeration
- SNMPWall - A command line tool that scans numerous SNMP nodes instantly and identifies a set of variables that are available for accessing the target network
- AD Explorer - An advanced AD viewer and editor.
- Python - Python is a programming language that lets you work quickly and integrate systems more effectively.
- Ldap Search - A shell-accessible interface to the ldap_search_ext(3) library call
- RPCScan - communicates with RPC services and checks misconfigurations on NFS shares.
- SuperEnum - Includes a script that performs a basic enumeration of any open port
- DNS Recon - A python script to preform DNS enumeration
- Global Network Inventory - a powerful and flexible software and hardware inventory system that can be used as an audit scanner in an agent-free and zero deployment environments.