Reconnaissance
Nmap
nmap -sV -A [target]
Service detection & OS Fingerprinting
Gobuster
gobuster dir -u [url] -w [dict]
Directory & Subdomain Brute Force
Web Vulns
SQLmap
sqlmap -u [url] --dbs
Automated SQL Injection testing
Nikto
nikto -h [target]
Web server vulnerability scanner
Traffic Analysis
Wireshark
tshark -i eth0
Command-line packet capturing
Bettercap
net.sniff on
Network monitoring & MitM toolkit
Cracking
John the Ripper
john --wordlist=[w] [hash]
Password hash recovery
Hydra
hydra -l [user] -P [pass] telnet://[ip]
Network logon cracker