Tools

Tools support the offensive security workflow by automating scanning, testing, exploitation, brute forcing, proxying, and post-exploitation tasks.

Topics

• Burp Suite — Web proxying, request interception, repeater workflows, and testing web applications.
• Web Proxies — Proxy concepts, response modification, client-side bypasses, and traffic inspection.
• Metasploit — Exploit modules, payloads, handlers, sessions, jobs, and msfvenom.
• Shells — Reverse shells, bind shells, web shells, shell upgrades, and stabilization.
• Hydra — Online password attacks against network services.
• SQLMap — SQL injection automation and database enumeration.
• Gobuster — Directory, file, DNS, and virtual host brute forcing.