Madhnw0rm.com - Information About Cyber Security Awareness: Kali Linux

Kali Linux Commands

<div dir="ltr" style="text-align: left;" trbidi="on">
Kali Linux (Formerly known as BackTrack) is a Debian-based distribution with a collection of security and forensics tools. It features timely security updates, support for the ARM architecture, a choice of four popular desktop environments, and seamless upgrades to newer versions. 
 
<a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEhjKr6q_dsDRDpM_ObAJIMo7pLh01S6V2NXjR7YFmEVlT3KnTvQ9lv-kJS2uTqy6MV25k7twHdQQZ-EuLYaHRPHX4D_f93Gyp0vjpByITgnNwNbddgCaO6t9rv5W94CviYlXOCw3auKoiSh/s1600/An+A-Z+Index+of+the+Bash+command+line+for+Linux.jpg" imageanchor="1" style="clear: right; float: right; margin-bottom: 1em; margin-left: 1em;"><img alt="An A-Z Index of the Bash command line for Linux" border="0" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEhjKr6q_dsDRDpM_ObAJIMo7pLh01S6V2NXjR7YFmEVlT3KnTvQ9lv-kJS2uTqy6MV25k7twHdQQZ-EuLYaHRPHX4D_f93Gyp0vjpByITgnNwNbddgCaO6t9rv5W94CviYlXOCw3auKoiSh/s1600/An+A-Z+Index+of+the+Bash+command+line+for+Linux.jpg" title="Kalilinux Commands" /></a>Kali Linux commands cheat sheet. All basic commands from A to Z in Kali Linux has been listed below. 
 
<div style="background-color: white; color: #494949; font-family: Verdana, sans-serif; line-height: 20.4px; margin-bottom: 1.2em; margin-top: 0.6em; padding: 0px;">
All commands (A-Z) for Kali Linux here:</div>
<div style="background-color: white; margin-bottom: 1.2em; margin-top: 0.6em; padding: 0px;">
 A</div>
<div style="background-color: white; color: #494949; font-family: Verdana, sans-serif; font-size: 12px; line-height: 20.4px; margin-bottom: 1.2em; margin-top: 0.6em; padding: 0px;">
apropos : Search Help manual pages (man -k) apt-get : Search for and install software packages (Debian/Ubuntu) aptitude : Search for and install software packages (Debian/Ubuntu) aspell : Spell Checker awk : Find and Replace text, database sort/validate/index </div>
<div style="background-color: white; color: #494949; font-family: Verdana, sans-serif; font-size: 12px; line-height: 20.4px; margin-bottom: 1.2em; margin-top: 0.6em; padding: 0px;">
B</div>
<div style="background-color: white; color: #494949; font-family: Verdana, sans-serif; font-size: 12px; line-height: 20.4px; margin-bottom: 1.2em; margin-top: 0.6em; padding: 0px;">
basename : Strip directory and suffix from filenames bash : GNU Bourne-Again SHell bc : Arbitrary precision calculator language bg : Send to background break : Exit from a loop builtin : Run a shell builtin bzip2 : Compress or decompress named file(s) </div>
<div style="background-color: white; color: #494949; font-family: Verdana, sans-serif; font-size: 12px; line-height: 20.4px; margin-bottom: 1.2em; margin-top: 0.6em; padding: 0px;">
C</div>
<div style="background-color: white; color: #494949; font-family: Verdana, sans-serif; font-size: 12px; line-height: 20.4px; margin-bottom: 1.2em; margin-top: 0.6em; padding: 0px;">
cal : Display a calendar case : Conditionally perform a command cat : Concatenate and print (display) the content of files cd : Change Directory cfdisk : Partition table manipulator for Linux chgrp : Change group ownership chmod : Change access permissions chown : Change file owner and group chroot : Run a command with a different root directory chkconfig : System services (runlevel) cksum : Print CRC checksum and byte counts clear : Clear terminal screen cmp : Compare two files comm : Compare two sorted files line by line command : Run a command – ignoring shell functions • continue : Resume the next iteration of a loop • cp : Copy one or more files to another location cron : Daemon to execute scheduled commands crontab : Schedule a command to run at a later time csplit : Split a file into context-determined pieces cut : Divide a file into several parts </div>
<div style="background-color: white; color: #494949; font-family: Verdana, sans-serif; font-size: 12px; line-height: 20.4px; margin-bottom: 1.2em; margin-top: 0.6em; padding: 0px;">
D</div>
<div style="background-color: white; color: #494949; font-family: Verdana, sans-serif; font-size: 12px; line-height: 20.4px; margin-bottom: 1.2em; margin-top: 0.6em; padding: 0px;">
date : Display or change the date & time dc : Desk Calculator dd : Convert and copy a file, write disk headers, boot records ddrescue : Data recovery tool declare : Declare variables and give them attributes • df : Display free disk space diff : Display the differences between two files diff3 : Show differences among three files dig : DNS lookup dir : Briefly list directory contents dircolors : Colour setup for `ls’ dirname : Convert a full pathname to just a path dirs : Display list of remembered directories dmesg : Print kernel & driver messages du : Estimate file space usage </div>
<div style="background-color: white; color: #494949; font-family: Verdana, sans-serif; font-size: 12px; line-height: 20.4px; margin-bottom: 1.2em; margin-top: 0.6em; padding: 0px;">
E</div>
<div style="background-color: white; color: #494949; font-family: Verdana, sans-serif; font-size: 12px; line-height: 20.4px; margin-bottom: 1.2em; margin-top: 0.6em; padding: 0px;">
echo : Display message on screen • egrep : Search file(s) for lines that match an extended expression eject : Eject removable media enable : Enable and disable builtin shell commands • env : Environment variables ethtool : Ethernet card settings eval : Evaluate several commands/arguments exec : Execute a command exit : Exit the shell expect : Automate arbitrary applications accessed over a terminal expand : Convert tabs to spaces export : Set an environment variable expr : Evaluate expressions </div>
<div style="background-color: white; color: #494949; font-family: Verdana, sans-serif; font-size: 12px; line-height: 20.4px; margin-bottom: 1.2em; margin-top: 0.6em; padding: 0px;">
F</div>
<div style="background-color: white; color: #494949; font-family: Verdana, sans-serif; font-size: 12px; line-height: 20.4px; margin-bottom: 1.2em; margin-top: 0.6em; padding: 0px;">
false : Do nothing, unsuccessfully fdformat : Low-level format a floppy disk fdisk : Partition table manipulator for Linux fg : Send job to foreground fgrep : Search file(s) for lines that match a fixed string file : Determine file type find : Search for files that meet a desired criteria fmt : Reformat paragraph text fold : Wrap text to fit a specified width. for : Expand words, and execute commands format : Format disks or tapes free : Display memory usage fsck : File system consistency check and repair ftp : File Transfer Protocol function : Define Function Macros fuser : Identify/kill the process that is accessing a file </div>
<div style="background-color: white; color: #494949; font-family: Verdana, sans-serif; font-size: 12px; line-height: 20.4px; margin-bottom: 1.2em; margin-top: 0.6em; padding: 0px;">
G</div>
<div style="background-color: white; color: #494949; font-family: Verdana, sans-serif; font-size: 12px; line-height: 20.4px; margin-bottom: 1.2em; margin-top: 0.6em; padding: 0px;">
gawk : Find and Replace text within file(s) getopts : Parse positional parameters grep : Search file(s) for lines that match a given pattern groupadd : Add a user security group groupdel : Delete a group groupmod : Modify a group groups : Print group names a user is in gzip : Compress or decompress named file(s) </div>
<div style="background-color: white; color: #494949; font-family: Verdana, sans-serif; font-size: 12px; line-height: 20.4px; margin-bottom: 1.2em; margin-top: 0.6em; padding: 0px;">
H</div>
<div style="background-color: white; color: #494949; font-family: Verdana, sans-serif; font-size: 12px; line-height: 20.4px; margin-bottom: 1.2em; margin-top: 0.6em; padding: 0px;">
hash : Remember the full pathname of a name argument head : Output the first part of file(s) help : Display help for a built-in command history : Command History hostname : Print or set system name </div>
<div style="background-color: white; color: #494949; font-family: Verdana, sans-serif; font-size: 12px; line-height: 20.4px; margin-bottom: 1.2em; margin-top: 0.6em; padding: 0px;">
I</div>
<div style="background-color: white; color: #494949; font-family: Verdana, sans-serif; font-size: 12px; line-height: 20.4px; margin-bottom: 1.2em; margin-top: 0.6em; padding: 0px;">
iconv : Convert the character set of a file id : Print user and group id’s if : Conditionally perform a command ifconfig : Configure a network interface ifdown : Stop a network interface ifup : Start a network interface up import : Capture an X server screen and save the image to file install : Copy files and set attributes </div>
<div style="background-color: white; color: #494949; font-family: Verdana, sans-serif; font-size: 12px; line-height: 20.4px; margin-bottom: 1.2em; margin-top: 0.6em; padding: 0px;">
J</div>
<div style="background-color: white; color: #494949; font-family: Verdana, sans-serif; font-size: 12px; line-height: 20.4px; margin-bottom: 1.2em; margin-top: 0.6em; padding: 0px;">
jobs : List active jobs join : Join lines on a common field </div>
<div style="background-color: white; color: #494949; font-family: Verdana, sans-serif; font-size: 12px; line-height: 20.4px; margin-bottom: 1.2em; margin-top: 0.6em; padding: 0px;">
K</div>
<div style="background-color: white; color: #494949; font-family: Verdana, sans-serif; font-size: 12px; line-height: 20.4px; margin-bottom: 1.2em; margin-top: 0.6em; padding: 0px;">
kill : Stop a process from running killall : Kill processes by name </div>
<div style="background-color: white; color: #494949; font-family: Verdana, sans-serif; font-size: 12px; line-height: 20.4px; margin-bottom: 1.2em; margin-top: 0.6em; padding: 0px;">
L</div>
<div style="background-color: white; color: #494949; font-family: Verdana, sans-serif; font-size: 12px; line-height: 20.4px; margin-bottom: 1.2em; margin-top: 0.6em; padding: 0px;">
less : Display output one screen at a time let : Perform arithmetic on shell variables ln : Create a symbolic link to a file local : Create variables locate : Find files logname : Print current login name logout : Exit a login shell look : Display lines beginning with a given string lpc : Line printer control program lpr : Off line print lprint : Print a file lprintd : Abort a print job lprintq : List the print queue lprm : Remove jobs from the print queue ls : List information about file(s) lsof : List open files </div>
<div style="background-color: white; color: #494949; font-family: Verdana, sans-serif; font-size: 12px; line-height: 20.4px; margin-bottom: 1.2em; margin-top: 0.6em; padding: 0px;">
M</div>
<div style="background-color: white; color: #494949; font-family: Verdana, sans-serif; font-size: 12px; line-height: 20.4px; margin-bottom: 1.2em; margin-top: 0.6em; padding: 0px;">
make : Recompile a group of programs man : Help manual mkdir : Create new folder(s) mkfifo : Make FIFOs (named pipes) mkisofs : Create an hybrid ISO9660/JOLIET/HFS filesystem mknod : Make block or character special files more : Display output one screen at a time mount : Mount a file system mtools : Manipulate MS-DOS files mtr : Network diagnostics (traceroute/ping) mv : Move or rename files or directories mmv : Mass Move and rename (files) </div>
<div style="background-color: white; color: #494949; font-family: Verdana, sans-serif; font-size: 12px; line-height: 20.4px; margin-bottom: 1.2em; margin-top: 0.6em; padding: 0px;">
N</div>
<div style="background-color: white; color: #494949; font-family: Verdana, sans-serif; font-size: 12px; line-height: 20.4px; margin-bottom: 1.2em; margin-top: 0.6em; padding: 0px;">
netstat : Networking information nice Set : the priority of a command or job nl Number : lines and write files nohup : Run a command immune to hangups notify-send : Send desktop notifications nslookup : Query Internet name servers interactively </div>
<div style="background-color: white; color: #494949; font-family: Verdana, sans-serif; font-size: 12px; line-height: 20.4px; margin-bottom: 1.2em; margin-top: 0.6em; padding: 0px;">
O</div>
<div style="background-color: white; color: #494949; font-family: Verdana, sans-serif; font-size: 12px; line-height: 20.4px; margin-bottom: 1.2em; margin-top: 0.6em; padding: 0px;">
open : Open a file in its default application op : Operator access </div>
<div style="background-color: white; color: #494949; font-family: Verdana, sans-serif; font-size: 12px; line-height: 20.4px; margin-bottom: 1.2em; margin-top: 0.6em; padding: 0px;">
P</div>
<div style="background-color: white; color: #494949; font-family: Verdana, sans-serif; font-size: 12px; line-height: 20.4px; margin-bottom: 1.2em; margin-top: 0.6em; padding: 0px;">
passwd : Modify a user password paste : Merge lines of files pathchk : Check file name portability ping : Test a network connection pkill : Stop processes from running popd : Restore the previous value of the current directory pr : Prepare files for printing printcap : Printer capability database printenv : Print environment variables printf : Format and print data • ps : Process status pushd : Save and then change the current directory pwd : Print Working Directory </div>
<div style="background-color: white; color: #494949; font-family: Verdana, sans-serif; font-size: 12px; line-height: 20.4px; margin-bottom: 1.2em; margin-top: 0.6em; padding: 0px;">
Q</div>
<div style="background-color: white; color: #494949; font-family: Verdana, sans-serif; font-size: 12px; line-height: 20.4px; margin-bottom: 1.2em; margin-top: 0.6em; padding: 0px;">
quota : Display disk usage and limits quotacheck : Scan a file system for disk usage quotactl : Set disk quotas </div>
<div style="background-color: white; color: #494949; font-family: Verdana, sans-serif; font-size: 12px; line-height: 20.4px; margin-bottom: 1.2em; margin-top: 0.6em; padding: 0px;">
R</div>
<div style="background-color: white; color: #494949; font-family: Verdana, sans-serif; font-size: 12px; line-height: 20.4px; margin-bottom: 1.2em; margin-top: 0.6em; padding: 0px;">
ram : ram disk device rcp : Copy files between two machines read : Read a line from standard input readarray : Read from stdin into an array variable readonly : Mark variables/functions as readonly reboot : Reboot the system rename : Rename files renice : Alter priority of running processes remsync : Synchronize remote files via email return : Exit a shell function rev : Reverse lines of a file rm : Remove files rmdir : Remove folder(s) rsync : Remote file copy (Synchronize file trees) </div>
<div style="background-color: white; color: #494949; font-family: Verdana, sans-serif; font-size: 12px; line-height: 20.4px; margin-bottom: 1.2em; margin-top: 0.6em; padding: 0px;">
S</div>
<div style="background-color: white; color: #494949; font-family: Verdana, sans-serif; font-size: 12px; line-height: 20.4px; margin-bottom: 1.2em; margin-top: 0.6em; padding: 0px;">
screen : Multiplex terminal, run remote shells via ssh scp : Secure copy (remote file copy) sdiff : Merge two files interactively sed : Stream Editor select : Accept keyboard input seq : Print numeric sequences set: Manipulate shell variables and functions sftp : Secure File Transfer Program shift : Shift positional parameters shopt : Shell Options shutdown : Shutdown or restart linux sleep : Delay for a specified time slocate : Find files sort : Sort text files source : Run commands from a file `.’ split : Split a file into fixed-size pieces ssh : Secure Shell client (remote login program) strace : Trace system calls and signals su : Substitute user identity sudo : Execute a command as another user sum : Print a checksum for a file suspend : Suspend execution of this shell symlink : Make a new name for a file sync : Synchronize data on disk with memory </div>
<div style="background-color: white; color: #494949; font-family: Verdana, sans-serif; font-size: 12px; line-height: 20.4px; margin-bottom: 1.2em; margin-top: 0.6em; padding: 0px;">
T</div>
<div style="background-color: white; color: #494949; font-family: Verdana, sans-serif; font-size: 12px; line-height: 20.4px; margin-bottom: 1.2em; margin-top: 0.6em; padding: 0px;">
tail : Output the last part of file tar : Tape Archiver tee : Redirect output to multiple files test : Evaluate a conditional expression time : Measure Program running time times : User and system times touch : Change file timestamps top : List processes running on the system trace route : Trace Route to Host trap : Run a command when a signal is set tr : Translate, squeeze, and/or delete characters true : Do nothing, successfully tsort : Topological sort tty : Print file name of terminal on stdin type : Describe a command </div>
<div style="background-color: white; color: #494949; font-family: Verdana, sans-serif; font-size: 12px; line-height: 20.4px; margin-bottom: 1.2em; margin-top: 0.6em; padding: 0px;">
U</div>
<div style="background-color: white; color: #494949; font-family: Verdana, sans-serif; font-size: 12px; line-height: 20.4px; margin-bottom: 1.2em; margin-top: 0.6em; padding: 0px;">
ulimit : Limit user resources umask : Users file creation mask umount : Unmount a device unalias : Remove an alias uname : Print system information unexpand : Convert spaces to tabs uniq : Uniquify files units : Convert units from one scale to another unset : Remove variable or function names unshar : Unpack shell archive scripts until : Execute commands (until error) uptime : Show uptime useradd : Create new user account userdel : Delete a user account usermod : Modify user account users : List users currently logged in uuencode : Encode a binary file uudecode : Decode a file created by uuencode </div>
<div style="background-color: white; color: #494949; font-family: Verdana, sans-serif; font-size: 12px; line-height: 20.4px; margin-bottom: 1.2em; margin-top: 0.6em; padding: 0px;">
V</div>
<div style="background-color: white; color: #494949; font-family: Verdana, sans-serif; font-size: 12px; line-height: 20.4px; margin-bottom: 1.2em; margin-top: 0.6em; padding: 0px;">
v : Verbosely list directory contents (`ls -l -b’) vdir : Verbosely list directory contents (`ls -l -b’) vi : Text Editor vmstat : Report virtual memory statistics </div>
<div style="background-color: white; color: #494949; font-family: Verdana, sans-serif; font-size: 12px; line-height: 20.4px; margin-bottom: 1.2em; margin-top: 0.6em; padding: 0px;">
W</div>
<div style="background-color: white; color: #494949; font-family: Verdana, sans-serif; font-size: 12px; line-height: 20.4px; margin-bottom: 1.2em; margin-top: 0.6em; padding: 0px;">
wait : Wait for a process to complete watch : Execute/display a program periodically wc : Print byte, word, and line counts whereis : Search the user’s $path, man pages and source files for a program which : Search the user’s $path for a program file while : Execute commands who : Print all usernames currently logged in whoami : Print the current user id and name (`id -un’) wget : Retrieve web pages or files via HTTP, HTTPS or FTP write : Send a message to another user </div>
<div style="background-color: white; color: #494949; font-family: Verdana, sans-serif; font-size: 12px; line-height: 20.4px; margin-bottom: 1.2em; margin-top: 0.6em; padding: 0px;">
x</div>
<div style="background-color: white; color: #494949; font-family: Verdana, sans-serif; font-size: 12px; line-height: 20.4px; margin-bottom: 1.2em; margin-top: 0.6em; padding: 0px;">
xargs : Execute utility, passing constructed argument list(s) xdg-open : Open a file or URL in the user’s preferred application.</div>
 Run a command script in the current shell ! Run the last command again </div>

Kali Linux Commands

Kali Linux (Formerly known as BackTrack) is a Debian-based distribution with a collection of security and forensics tools. It features time...

Top 10 Security Tools

<div dir="ltr" style="text-align: left;" trbidi="on">
Kali Linux, It is the most important operating system for the hackers and it is very powerful linux distribution and even it is my favorite operating system,but also many hackers and pentesters choosing kali linux as their favorite hacking tool 
 
<div class="separator" style="clear: both; text-align: center;">
<a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjAJz8Ou3LoE6wIvGXxwtlgZPjzAAzrLZ8a98HfgUYFnBHnTZiN-lWo0Ohd9ymZGhFQEoZm1QWq2RhzKp7xT3v0xtB_3whqY2edm3tJ_RdoRJoidCbq1OlnUIP2m2oNuxnI1fi1EFuhp2m1/s1600/Top+10+Security+Tools.png" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img alt="Kali Linux, It is the most important operating system for the hackers and it is very powerful linux distribution and even it is my favorite operating system,but also many hackers and pentesters choosing kali linux as their favorite hacking tool" border="0" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjAJz8Ou3LoE6wIvGXxwtlgZPjzAAzrLZ8a98HfgUYFnBHnTZiN-lWo0Ohd9ymZGhFQEoZm1QWq2RhzKp7xT3v0xtB_3whqY2edm3tJ_RdoRJoidCbq1OlnUIP2m2oNuxnI1fi1EFuhp2m1/s1600/Top+10+Security+Tools.png" title="top 10 security tools" /></a></div>
 
The main reason for choosing kali linux operating system because it has 600+ hacking tools and developed by offensiive security team ,so i am gonna to tell about top 10 kali linux hacking tools i liked the most in kali linux 
 
Here i am giving tutorials for each hacking tools so it will be easy for every body can understand it well 
 
If you want to know more about Kali Linux then first read this article first  
 
<a href="http://www.madhnw0rm.com/2015/09/kali-linux-penetration-testing-and.html" target="_blank">KALI LINUX | PENETRATION TESTING AND ETHICAL HACKING LINUX</a> 
 
 
<a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEhmlVsDp1gUqbF0Zohzv_J4AlrzSZs3rHPgQUZYXny6VvQ4aOjjikB8q1xepSZVhkB0DO7fDdRXe1HzXZ79PW_RNpOGAQ2cYJWtRqg-Q5Ncfy0M2-5K3CuIe1eNalzkAxM37tRWLx3NyENz/s1600/aircrack-ng.png" imageanchor="1" style="clear: left; float: left; margin-bottom: 1em; margin-right: 1em;"><img alt="Aircrack-ng is an 802.11 WEP and WPA-PSK keys cracking program that can recover keys once enough data packets have been captured. It implements the standard FMS attack along with some optimizations like KoreK attacks, as well as the PTW attack, thus making the attack much faster compared to other WEP cracking tools." border="0" height="219" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEhmlVsDp1gUqbF0Zohzv_J4AlrzSZs3rHPgQUZYXny6VvQ4aOjjikB8q1xepSZVhkB0DO7fDdRXe1HzXZ79PW_RNpOGAQ2cYJWtRqg-Q5Ncfy0M2-5K3CuIe1eNalzkAxM37tRWLx3NyENz/s320/aircrack-ng.png" title="aircrack-ng" width="320" /></a>Aircrack-ng 
 
Aircrack-ng is an 802.11 WEP and WPA-PSK keys cracking program that 
can recover keys once enough data packets have been captured. It 
implements the standard FMS attack along with some optimizations like 
KoreK attacks, as well as the PTW attack, thus making the attack much 
faster compared to other WEP cracking tools. 
  
 Burpsuite 
 
Burp Suite is an integrated platform for performing 
security testing of web applications. Its various tools work seamlessly 
together to support the entire testing process, from initial mapping and 
analysis of an application's attack surface, through to finding and 
exploiting security vulnerabilities.   
 
<div class="separator" style="clear: both; text-align: center;">
<a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEhMfAwrxIcUvXifMYRnvggUJOQqebFWhhRFziP7PmrKaZK0Otc2oecVGcy_M6jcGrlaKfAoaZnl30-W5z3dVtvtJjH_sUyIGxG1p4YYO6kP1zlKsVdcRXMiXit07Rx8Uuc56eXQmMlUqP6A/s1600/burpsuite.png" imageanchor="1" style="clear: left; float: left; margin-bottom: 1em; margin-right: 1em;"><img alt="Burp Suite is an integrated platform for performing security testing of web applications. Its various tools work seamlessly together to support the entire testing process, from initial mapping and analysis of an application's attack surface, through to finding and exploiting security vulnerabilities. " border="0" height="226" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEhMfAwrxIcUvXifMYRnvggUJOQqebFWhhRFziP7PmrKaZK0Otc2oecVGcy_M6jcGrlaKfAoaZnl30-W5z3dVtvtJjH_sUyIGxG1p4YYO6kP1zlKsVdcRXMiXit07Rx8Uuc56eXQmMlUqP6A/s320/burpsuite.png" title="Burpsuite" width="320" /></a></div>
 
Burp gives you full control, letting you combine advanced manual 
techniques with state-of-the-art automation, to make your work faster, more 
effective, and more fun. 
 
 
 
 
 
 
 
 Hydra 
 
Hydra,
 now in version 8.1 and last updated December 12th 2014, is a very 
well-known and respected network log on cracker which can support many 
different services. (Similar projects and tools include medusa and John The Ripper).  
 
<div class="separator" style="clear: both; text-align: center;">
<a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjpwtRPJLRhW8ALQgRtcFJNdrhbj-w7e9iT-KGC4N5dLF1-LQEpQZF8lbdNuTsKxG7gna2vH1qQiThsHO6HH9GwwqCtx6dYkRCqYQufv9TjGzh3H4uuFnRFqt6JnQToeYL9UZ3-up_SRj3o/s1600/hydra+password+cracker.png" imageanchor="1" style="clear: right; float: right; margin-bottom: 1em; margin-left: 1em;"><img alt="Hydra is a brute force password cracking tool. In information security (IT security)," border="0" height="215" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjpwtRPJLRhW8ALQgRtcFJNdrhbj-w7e9iT-KGC4N5dLF1-LQEpQZF8lbdNuTsKxG7gna2vH1qQiThsHO6HH9GwwqCtx6dYkRCqYQufv9TjGzh3H4uuFnRFqt6JnQToeYL9UZ3-up_SRj3o/s320/hydra+password+cracker.png" title="hydra password cracker" width="320" /></a></div>
 
 
Hydra is a brute force password cracking tool. In information security 
(IT security), password cracking is the methodology of guessing 
passwords from databases that have been stored in or are in transit 
within a computer system or network. A common approach, and the approach
 used by Hydra and many other similar pentesting tools and programs is referred to as Brute Force. We could easily do a Concise Bytes
 on ‘Brute Force Hacking’ but since this post is all about Hydra let’s 
place the brute-force attack concept within this password-guessing tool 
 
JOHN 
 
 
<div style="text-align: justify;">
John the Ripper is designed to be both 
feature-rich and fast. It combines several cracking modes in one program
 and is fully configurable for your particular needs (you can even 
define a custom cracking mode using the built-in compiler supporting a 
subset of C). Also, John is available for several different platforms 
which enables you to use the same cracker everywhere (you can even 
continue a cracking session which you started on another platform).</div>
<div style="text-align: justify;">
 </div>

Out of the box, John supports (and autodetects) the following Unix 
crypt(3) hash types: traditional DES-based, “bigcrypt”, BSDI extended 
DES-based, FreeBSD MD5-based (also used on Linux and in Cisco IOS), and 
OpenBSD Blowfish-based (now also used on some Linux distributions and 
supported by recent versions of Solaris). Also supported out of the box 
are Kerberos/AFS and Windows LM (DES-based) hashes, as well as DES-based
 tripcodes. 

 
<div class="separator" style="clear: both; text-align: center;">
<a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgX6OmREUylHygpKHv2BHrFvwJGp4pqpUbLOEEzl1xRj6XmMrzJaUhyphenhyphenyoR4mwjTju3eglf38lMAHggzzXAh3G4QVFYD99P1tYKQaOMNMb8Gdj_f-9oJ7P7To7h1nltjRY0ilZOCwFmElDDJ/s1600/johntheripper.png" imageanchor="1" style="clear: left; float: left; margin-bottom: 1em; margin-right: 1em;"><img alt="John the Ripper is designed to be both feature-rich and fast. It combines several cracking modes in one program and is fully configurable for your particular needs (you can even define a custom cracking mode using the built-in compiler supporting a subset of C). Also, John is available for several different platforms which enables you to use the same cracker everywhere (you can even continue a cracking session which you started on another platform)." border="0" height="216" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgX6OmREUylHygpKHv2BHrFvwJGp4pqpUbLOEEzl1xRj6XmMrzJaUhyphenhyphenyoR4mwjTju3eglf38lMAHggzzXAh3G4QVFYD99P1tYKQaOMNMb8Gdj_f-9oJ7P7To7h1nltjRY0ilZOCwFmElDDJ/s320/johntheripper.png" title="johntheripper" width="320" /></a></div>
 
When running on Linux distributions with glibc 2.7+, John 1.7.6+ 
additionally supports (and autodetects) SHA-crypt hashes (which are 
actually used by recent versions of Fedora and Ubuntu), with optional 
OpenMP parallelization (requires GCC 4.2+, needs to be explicitly 
enabled at compile-time by uncommenting the proper OMPFLAGS line near 
the beginning of the Makefile). 

 
Similarly, when running on recent versions of Solaris, John 1.7.6+ 
supports and autodetects SHA-crypt and SunMD5 hashes, also with optional
 OpenMP parallelization (requires GCC 4.2+ or recent Sun Studio, needs 
to be explicitly enabled at compile-time by uncommenting the proper 
OMPFLAGS line near the beginning of the Makefile and at runtime by 
setting the OMP_NUM_THREADS environment variable to the desired number 
of threads). 

 
John the Ripper Pro adds support for Windows NTLM (MD4-based) and Mac OS X 10.4+ salted SHA-1 hashes. 
 
 
Maltego  
 
Maltego is a unique platform developed to deliver a clear threat picture
 to the environment that an organization owns and operates. Maltego's 
unique advantage is to demonstrate the complexity and severity of single
 points of failure as well as trust relationships that exist currently 
within the scope of your infrastructure.   
 
<div class="separator" style="clear: both; text-align: center;">
<a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEhA0DY9SJJ8skqhD2CBdqtwiMkHaJWJU6vaNowIibKkv86CassdGjI63OTj91Mqiv04iCzPvKqvTHpi-YIzRE8EoENu5JHAxrELo14_o-yp1pWGc3_XqBu9_cORu5c0ogzo6uRPIu6-N0Xw/s1600/maltego.png" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img alt="Maltego is a unique platform developed to deliver a clear threat picture to the environment that an organization owns and operates. Maltego's unique advantage is to demonstrate the complexity and severity of single points of failure as well as trust relationships that exist currently within the scope of your infrastructure. " border="0" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEhA0DY9SJJ8skqhD2CBdqtwiMkHaJWJU6vaNowIibKkv86CassdGjI63OTj91Mqiv04iCzPvKqvTHpi-YIzRE8EoENu5JHAxrELo14_o-yp1pWGc3_XqBu9_cORu5c0ogzo6uRPIu6-N0Xw/s1600/maltego.png" title="maltego" /></a></div>
 
 With the continued growth of your organization, the people and hardware 
deployed to ensure that it remains in working order is essential, yet 
the threat picture of your "environment" is not always clear or 
complete. In fact, most often it's not what we know that is harmful - 
it's what we don't know that causes the most damage. This being stated, 
how do you develop a clear profile of what the current deployment of 
your infrastructure resembles? What are the cutting edge tool platforms
 designed to offer the granularity essential to understand the 
complexity of your network, both physical and resource based?  
 
 
Maltego offers the user with unprecedented information. Information is leverage. Information is power. Information is Maltego. 
 
 
 
 Metasploit framework 
 
<a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEg1vORmB_pV3C9J6JdOfs_P9a5xxMofdJxMXaUjuhma4Mu_kpXMNZOEU4H-zgoTvpbQF5bwIPkolS4A9Iz3fxVXi0ZIDjfPJdM3Rlmyabl8DuJNa8POgOpR44Lgp3NEPrTyYkQJeFUFaNdc/s1600/metasploit+framework.png" imageanchor="1" style="clear: left; float: left; margin-bottom: 1em; margin-right: 1em;"><img alt="Metasploit has become over the years the best framework to conduct penetration testing on network systems and IT infrastructure. The Metasploit Project, or better known as simply '' is a hugely popular pentesting or hacking tool that is used by cyber security professionals and ethical hackers. " border="0" height="268" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEg1vORmB_pV3C9J6JdOfs_P9a5xxMofdJxMXaUjuhma4Mu_kpXMNZOEU4H-zgoTvpbQF5bwIPkolS4A9Iz3fxVXi0ZIDjfPJdM3Rlmyabl8DuJNa8POgOpR44Lgp3NEPrTyYkQJeFUFaNdc/s320/metasploit+framework.png" title="metasploit framework" width="320" /></a>Metasploit
 has become over the years the best framework to conduct penetration 
testing on network systems and IT infrastructure. The Metasploit 
Project, or better known as simply '' is a hugely popular pentesting or 
hacking tool that is used by cyber security professionals and ethical 
hackers. Metasploit is essentially a computer security project that 
supplies information about known security vulnerabilities and helps to 
formulate penetration testing and IDS testing 
 
 
  
The basic steps for exploiting a system using the Framework include: 

<ol>
<li>Choosing and configuring an exploit (code that enters a target system by taking advantage of one of its <a href="https://en.wikipedia.org/wiki/Software_bug" title="Software bug">bugs</a>; about 900 different exploits for Windows, Unix/<a href="https://en.wikipedia.org/wiki/Linux" title="Linux">Linux</a> and Mac OS X systems are included);</li>
<li>Optionally checking whether the intended target system is susceptible to the chosen exploit;</li>
<li>Choosing and configuring a <a class="mw-redirect" href="https://en.wikipedia.org/wiki/Payload_%28software%29" title="Payload (software)">payload</a> (code that will be executed on the target system upon successful entry; for instance, a remote shell or a VNC server);</li>
<li>Choosing the encoding technique so that the intrusion-prevention system (IPS) ignores the encoded payload;</li>
<li>Executing the exploit.</li>
</ol>
 
Metasploit runs on Unix (including Linux and Mac OS X) and on Windows. 
The Metasploit Framework can be extended to use add-ons in multiple 
languages. 
 
 NMAP 
 
<a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEi9mCXjf8V5r8VLt-PG87p_Qt-ljcgB7K44_sTuYw8KR-_v5wUtXqLx23cXI97qUWzl8X5nEjUTepsk676SUutdLbtH8NoInRYJNeSgkj_xBWVxvTEx3hY_2OyFn4Hd3ci7XzX_7IP5p0I-/s1600/nmap.png" imageanchor="1" style="clear: left; float: left; margin-bottom: 1em; margin-right: 1em;"><img alt="Nmap ("Network Mapper") is a free and open source (license) utility for network discovery and security auditing." border="0" height="276" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEi9mCXjf8V5r8VLt-PG87p_Qt-ljcgB7K44_sTuYw8KR-_v5wUtXqLx23cXI97qUWzl8X5nEjUTepsk676SUutdLbtH8NoInRYJNeSgkj_xBWVxvTEx3hY_2OyFn4Hd3ci7XzX_7IP5p0I-/s320/nmap.png" title="nmap" width="320" /></a>Nmap ("Network Mapper") is a free and open source
(<a href="https://nmap.org/data/COPYING">license</a>) utility for
network discovery and security auditing. Many systems and network
administrators also find it useful for tasks such as network
inventory, managing service upgrade schedules, and monitoring host or
service uptime. Nmap uses raw IP packets in novel ways to determine
what hosts are available on the network, what services (application
name and version) those hosts are offering, what operating systems
(and OS versions) they are running, what type of packet
filters/firewalls are in use, and dozens of other characteristics. It
was designed to rapidly scan large networks, but works fine against
single hosts. Nmap runs on all major computer operating systems, and
official binary packages are available for Linux, Windows,and Mac OS
X 
 
 OWASP-ZAP  
 
The Zed Attack Proxy (ZAP) is an easy to use integrated penetration 
testing tool for finding vulnerabilities in web applications.  
 
<div class="separator" style="clear: both; text-align: center;">
<a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEivCNpiSaPx2azxlfChyphenhyphenb1_H6lGrrY6JDmqLJk3RM97boPeExZm1l5WWEiu20dqopIQdAxthhL123gqH2IMFFEu6rHJ_yr41HFgFZIvyKqA8gRkn_oYwfOCFr8UnsI5k_Mj6c7eX-BJjdpz/s1600/owasp-zap.png" imageanchor="1" style="clear: left; float: left; margin-bottom: 1em; margin-right: 1em;"><img alt="The Zed Attack Proxy (ZAP) is an easy to use integrated penetration testing tool for finding vulnerabilities in web applications. " border="0" height="238" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEivCNpiSaPx2azxlfChyphenhyphenb1_H6lGrrY6JDmqLJk3RM97boPeExZm1l5WWEiu20dqopIQdAxthhL123gqH2IMFFEu6rHJ_yr41HFgFZIvyKqA8gRkn_oYwfOCFr8UnsI5k_Mj6c7eX-BJjdpz/s320/owasp-zap.png" title="Owasp-zap" width="320" /></a></div>
It is designed to be used by people with a wide range of security
 experience and as such is ideal for developers and functional testers 
who are new to penetration testing.
 
ZAP provides automated scanners as well as a set of tools that allow you to find security vulnerabilities manually.
 
 
 
 
 
 
Sqlmap 
  
 sqlmap is an open source penetration testing tool that automates the 
process of detecting and exploiting SQL injection flaws and taking over 
of database servers.  
 
<a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgvIAqsz0xA-WufiyzO9dIx0D0uXRfetQ0DnfIy-k3VXWzLstajgndl6p3hU87P1v3hVqoWOmfNBNnqSH6wz32Yq4fD-3kAhoJ6_BAhvvrKJKmZ65aRH43u1I-50eY_yPgSmaedylqQfmUO/s1600/sqlmap.png" imageanchor="1" style="clear: left; float: left; margin-bottom: 1em; margin-right: 1em;"><img alt="sqlmap is an open source penetration testing tool that automates the process of detecting and exploiting SQL injection flaws and taking over of database servers. " border="0" height="272" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgvIAqsz0xA-WufiyzO9dIx0D0uXRfetQ0DnfIy-k3VXWzLstajgndl6p3hU87P1v3hVqoWOmfNBNnqSH6wz32Yq4fD-3kAhoJ6_BAhvvrKJKmZ65aRH43u1I-50eY_yPgSmaedylqQfmUO/s320/sqlmap.png" title="sqlmap" width="320" /></a>It comes with a powerful detection engine, many 
niche features for the ultimate penetration tester and a broad range of 
switches lasting from database fingerprinting, over data fetching from 
the database, to accessing the underlying file system and executing 
commands on the operating system via out-of-band connections. 
 
 
 
 
 
 
 
Wireshark 
 
Wireshark is a free and open-source packet analyzer. It is used for network troubleshooting, analysis, software and communications protocol development, and education. Originally named Ethereal 
 
<a href="https://en.wikipedia.org/wiki/Wireshark#cite_note-4"></a> 

<div class="separator" style="clear: both; text-align: center;">
<a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEhP5xDMp3cl4WsLVP35AisvL6VoVGCZm8LWbUEzYMEcbvEMoavQ53TY5oMqsq5b15nPtkiufMWbsvcWCzVKS61FDDUrAE0oZAEYyDsdacVjbbu7w96jEJKP9gfeQkciKc6f-JU6WPTeEYGZ/s1600/wireshark.png" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img alt="Wireshark is a free and open-source packet analyzer. It is used for network troubleshooting, analysis, software and communications protocol development, and education" border="0" height="215" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEhP5xDMp3cl4WsLVP35AisvL6VoVGCZm8LWbUEzYMEcbvEMoavQ53TY5oMqsq5b15nPtkiufMWbsvcWCzVKS61FDDUrAE0oZAEYyDsdacVjbbu7w96jEJKP9gfeQkciKc6f-JU6WPTeEYGZ/s400/wireshark.png" title="Wireshark" width="400" /> </a></div>
<div class="separator" style="clear: both; text-align: center;">
  </div>
Wireshark is cross-platform, using the GTK+ widget toolkit in current releases, and Qt in the development version, to implement its user interface, and using pcap to capture packets; it runs on Linux, OS X, BSD, Solaris, some other Unix-like operating systems, and Microsoft Windows.
 There is also a terminal-based (non-GUI) version called TShark. 
Wireshark</div>

Top 10 Security Tools

Kali Linux, It is the most important operating system for the hackers and it is very powerful linux distribution and even it is my favorite...

KALI LINUX | PENETRATION TESTING AND ETHICAL HACKING LINUX

<div dir="ltr" style="text-align: left;" trbidi="on">
THE ULTIMATE PENETRATION TESTING TOOL 
 
An Advanced Penetration Testing Linux distribution used
 for Penetration Testing, Ethical Hacking and network security 
assessments 
 
Kali Linux is a <a href="https://en.wikipedia.org/wiki/Debian" title="Debian">Debian</a>-derived <a href="https://en.wikipedia.org/wiki/Linux_distribution" title="Linux distribution">Linux distribution</a> designed for <a href="https://en.wikipedia.org/wiki/Digital_forensics" title="Digital forensics">digital forensics</a> and <a href="https://en.wikipedia.org/wiki/Penetration_test" title="Penetration test">penetration testing</a>. It is maintained and funded by Offensive Security Ltd. Mati Aharoni, Devon Kearns and Raphaël Hertzog are the core developers. 
 
<div class="separator" style="clear: both; text-align: center;">
<a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgH1XUJ795gV-_KFSkipw50VnhLzcX842AujVm45gvK7NmRRBTmTqA2NUsyDK__qgOCWm085Nl1f6Ap-XCs84seaGRo6fM4Ydki9aS15RWjYFmXSda-N_74zQLCWVL94CBug6mHegSTzVPA/s1600/Kalilinux.png" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img alt="An Advanced Penetration Testing Linux distribution used for Penetration Testing, Ethical Hacking and network security assessments" border="0" height="300" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgH1XUJ795gV-_KFSkipw50VnhLzcX842AujVm45gvK7NmRRBTmTqA2NUsyDK__qgOCWm085Nl1f6Ap-XCs84seaGRo6fM4Ydki9aS15RWjYFmXSda-N_74zQLCWVL94CBug6mHegSTzVPA/s640/Kalilinux.png" title="kalilinux" width="640" /> </a></div>
<div class="separator" style="clear: both; text-align: center;">
 </div>
<div class="separator" style="clear: both; text-align: center;">
 </div>
 
<a href="http://www.kali.org/" target="_blank" title="Kali Linux">Kali Linux</a>
 is a Debian-based Linux distribution aimed at advanced Penetration 
Testing and Security Auditing. Kali contains several hundred tools aimed
 at various information security tasks, such as  Penetration Testing, 
Forensics and Reverse Engineering. Kali Linux is developed, funded and 
maintained by <a href="http://www.offensive-security.com/" target="_blank" title="Offensive Security Training">Offensive Security</a>, a leading information security training company. 
 
<div class="separator" style="clear: both; text-align: center;">
<a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjIkRcCMktIC3mtLdWiF2XkpaWRGDSrJODFVYwRAX7V83gNqWvSTy_w-JuTpAsvprC5ZKwwthZgNg3eVkjW_g3Fi59A_AG3y_qcCt8s-cmxJwYpdGIzfJI8uHc625fjQAvvt_Yil-f3Fv8u/s1600/penetrationtester.png" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img alt="Kali Linux is a Debian-based Linux distribution aimed at advanced Penetration Testing and Security Auditing. Kali contains several hundred tools aimed at various information security tasks" border="0" height="284" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjIkRcCMktIC3mtLdWiF2XkpaWRGDSrJODFVYwRAX7V83gNqWvSTy_w-JuTpAsvprC5ZKwwthZgNg3eVkjW_g3Fi59A_AG3y_qcCt8s-cmxJwYpdGIzfJI8uHc625fjQAvvt_Yil-f3Fv8u/s640/penetrationtester.png" title="Penetration Testers" width="640" /></a></div>
 
 More than 600 penetration testing tools included: After
 reviewing every tool that was included in BackTrack, we eliminated a 
great number of tools that either simply did not work or which 
duplicated other tools that provided the same or similar functionality. 
Details on what’s included are on the <a href="http://tools.kali.org/" target="_blank" title="Kali Linux Tools Documentation">Kali Tools</a> site. 
 
 
Multi-language support: Although penetration tools tend
 to be written in English, we have ensured that Kali includes true 
multilingual support, allowing more users to operate in their native 
language and locate the tools they need for the job. 
 
 
<div class="separator" style="clear: both; text-align: center;">
<a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEj9bfc83Lx1bfV7PcFuS67Oo4uFtm9onFBIo0BZ6P7_HmX2-zfdGy9_BXRMTpQzA5MVZ21ep1Vfbe0EsD13Bhg_rMIW5lwfUee7V0ROu5hUXWnJlw7KuDehqUqGrvSbqlqWUOxoy3FsabJF/s1600/pentestingtools.png" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img alt="penetration tools tend to be written in English, we have ensured that Kali includes true multilingual suppor" border="0" height="288" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEj9bfc83Lx1bfV7PcFuS67Oo4uFtm9onFBIo0BZ6P7_HmX2-zfdGy9_BXRMTpQzA5MVZ21ep1Vfbe0EsD13Bhg_rMIW5lwfUee7V0ROu5hUXWnJlw7KuDehqUqGrvSbqlqWUOxoy3FsabJF/s640/pentestingtools.png" title="penetration testing tools" width="640" /></a></div>
 
 
Developed in a secure environment: The Kali Linux team 
is made up of a small group of individuals who are the only ones trusted
 to commit packages and interact with the repositories, all of which is 
done using multiple secure protocols. 
  
 
Custom kernel, patched for injection: As penetration 
testers, the development team often needs to do wireless assessments, so
 our kernel has the latest injection patches included. 
 
Kali Linux is specifically tailored to the needs of penetration testing 
professionals, and therefore all documentation on this site assumes 
prior knowledge of, and familiarity with, the Linux operating system in 
general.</div>

KALI LINUX | PENETRATION TESTING AND ETHICAL HACKING LINUX

THE ULTIMATE PENETRATION TESTING TOOL An Advanced Penetration Testing Linux distribution used for Penetration Testing, Ethical Hacking a...