Curated coverage of the tools every red and blue teamer should master. Each entry covers installation, configuration, real-world workflows, and pitfalls to avoid.
Burp Suite Professional is the web pentest workhorse. Once you’ve moved past clicking “Intercept On”, the difference between an average tester and a great one is Burp fluency — how quickly you can pivot between Repeater, Intruder, and Collaborator without losing context. ...
Nmap is the single most important tool in any network security professional’s toolkit. This tutorial covers everything from basic discovery to the Nmap Scripting Engine (NSE) and firewall evasion. Why Nmap Still Matters in 2026 Despite an explosion of newer scanners (Masscan, Naabu, Rustscan), Nmap remains canonical because of three things: accurate service detection, the NSE library, and decades of edge-case handling. Most production “fast scanners” pipe their output back into Nmap for verification. ...
Wireshark is the most powerful free network tool ever made — and arguably the most underused. Most users live in the first 20% of its features. This tutorial pushes you into the productive middle 60%. Capture Setup Choose the Right Interface On Linux/macOS: tcpdump -D lists interfaces. On Windows: the Npcap install adds them to Wireshark’s UI. ...