Learn Kali Linux from Scratch: Master 100+ Built-In Tools

Explore dnsenum, a versatile dns enumeration tool for information gathering, analyzing a, ns, and txt records, brute-forcing subdomains, and outputting xml for reporting.

Discover how the DNS map tool in Kali Linux brute-forces subdomains with a built-in wordlist to reveal a target's surface, logging subdomains with IPv4/IPv6 addresses for information gathering.

Explore dns reconnaissance with dns recon in Kali Linux to enumerate A, NS, MX, and TXT records, reveal subdomains and zone transfer risks, and assess infrastructure weaknesses for ethical testing.

Explore fierce, a Kali Linux DNS analysis tool for enumeration and subdomain discovery during reconnaissance. Learn how it analyzes DNS responses, checks wildcard records, and reveals live hosts.

Discover how the load balancer detector identifies load balancing by testing dns responses, http headers, and cookie behavior. Use this information gathering tool to understand how backend distribution affects security.

Learn to use wafw00f to detect and identify web application firewalls in Kali Linux, determine vendors like Cloudflare or AWS, and tailor testing with key flags for thorough reconnaissance.

Master live host identification in Kali Linux using arping to discover active devices on a local network, revealing ARP-based responses and MAC addresses.

Identify live hosts quickly with fping in Kali Linux, using DNS enum to map domains to IPs and perform parallel ICMP sweeps for fast network discovery during information gathering.

Master hping3 for live host identification by crafting tcp, udp, and icmp packets to identify live hosts, test firewalls, and perform port scans with flexible modes.

Learn masscan, a lightning fast port scanner for live host identification, capable of scanning large IP ranges and identifying open ports quickly. The lecture emphasizes ethical permission.

Explore how nmap powers network and port scanning to discover live hosts, open ports, running services, and OS fingerprints, using scripts for vulnerability detection and detailed audits.

Explore unicorn scan as an asynchronous, high-performance network reconnaissance and stealthy port scanner that reveals open ports, banners, and metadata, with flexible flags for TCP, UDP, and ICMP scans.

Discover Zenmap, the GUI front end for Nmap, designed for beginners and seasoned pros, to map networks, identify open ports, services, and OS fingerprints, with traceroute.

Explore osint analysis with Spider Foot in Kali Linux, automating data gathering from 200+ sources to map domains, IP addresses, emails, and infrastructure via a web GUI or CLI.

Discover the harvester for osint analysis in Kali Linux, a tool for passive reconnaissance that gathers emails, subdomains, hosts, and IPs from public sources for early information gathering.

Master route analysis with netdiscover, a lightweight, passive arp reconnaissance tool that identifies live hosts on a local subnet without active probing.

Analyze IP addresses and subnets with the netmask tool in Kali Linux, computing network addresses, broadcast addresses, host counts, and usable ranges using CIDR notation for reconnaissance and network planning.

Master enum4linux for smb analysis by enumerating users, shares, and os details, and leverage -U -S -P -G -R -k to uncover domain groups and password policy.

Learn how to use NBT scan in Kali Linux for SMB analysis to quickly map NetBIOS names, live hosts, and MAC addresses across a local subnet.

Master SMB analysis with SMB map on Kali Linux to discover SMB shares, assess read and write permissions, and authenticate for deeper access while noting firewalls.

Explore smtp analysis with svcs, testing mail server behavior through full, scriptable smtp sessions to detect misconfigurations, authentication issues, and risks like spoofing and open relay.

Explore how ssl dump analyzes ssl and tls traffic by decoding the handshake and cipher negotiations, revealing client hello and server hello details with optional decryption using keys.

Explore sslh in Kali Linux to multiplex SSL traffic on a single port, detect protocols, and forward to the correct backends, boosting information gathering and stealth in restricted networks.

Explore the SSL scan tool to audit SSL and TLS configurations, reveal supported protocols and cipher suites, and verify certificate validity for secure, compliant web servers.

Explore vulnerability analysis with spike generic in Kali Linux, learn to fuzz TCP-based services using SDK files, send crafted payloads, and observe responses to reveal potential flaws.

Master Kali Linux’s 100+ built-in tools, including the voice over IP hopper, to test VLAN hopping, spoof CDP/LLDP, and uncover security risks in VoIP networks.

Explore Nikto, a foundational web server scanner in Kali Linux, to identify dangerous files, outdated server software, misconfigurations, and missing security headers, using targeted options and exportable scan results.

Explore the Unix-privesc-checker tool for automated privilege escalation analysis on Unix/Linux systems, covering world-writable files, sensitive file ownership, kernel vulnerabilities, and its standard and detailed mode options.

Discover how WPScan enables WordPress security analysis by identifying core version, plugins, themes, and misconfigurations, then enumerate users and vulnerabilities to guide ethical testing.

Learn CutyCapt, a command-line tool that captures web page screenshots for automated web crawling, mapping web app structure, and visual inventories during recon and security assessments.

Learn to use dirb, a command-line web content scanner that brute-forces directories with wordlists to discover hidden admin pages and PHP files during reconnaissance.

Explore Dirbuster, a Java-based graphical user interface tool for web application analysis that brute forces directories and files with wordlists, offering recursive scanning and HTTP status insights.

Master web application analysis with Kali Linux built-in tools, focusing on fast directory brute forcing. Learn to use fuff and wordlists to uncover hidden endpoints and resources.

Learn to read, explore, and create SQLite databases with the SQLite browser, using a graphical interface to inspect tables, indices, and relations like primary keys and foreign keys.

Explore sqlmap, an open source tool that automates detection and exploitation of sql injection vulnerabilities, fingerprints database backends, dumps data, and simulates real-world attacks within Kali Linux.

Explore password attacks in Kali Linux with John the Ripper, a fast, flexible hash cracker that uses dictionary and brute-force methods on MD5 and SHA1 hashes.

Master Hashcat in Kali Linux to crack hashes using gpu acceleration, exploring straight, combination, brute-force, and hybrid attacks with wordlists and mutations; practice ethical, authorized password testing and session restore.

Explore Medusa, a fast, modular, multithreaded login bruteforcer for online password attacks across network services such as SSH, FTP, and VNC, enabling rapid discovery of weak credentials.

Hydra, known as THC Hydra, is a fast, flexible network logon cracker in Kali Linux. It brute-forces credentials across multiple protocols with multithreading, supporting dictionary attacks and modular protocol support.

Explore the Aircrack-ng wireless attack suite, from monitor mode and handshake capture with Airodump-ng and Aireplay-ng to cracking WPA/WPA2 keys via a dictionary attack using rockyou.txt.

Learn how Kismet acts as a wireless detector, sniffer, and intrusion detection system for passive reconnaissance in Kali Linux, logging devices, SSIDs, hidden networks, and channel activity.

Discover clang, a fast compiler front end in the LLVM project, transforming C, C++, and Objective-C to machine code or LLVM IR for reverse engineering.

Master clang++ to compile and run cplusplus programs, automatically link the cplusplus standard library, and support reverse engineering and software analysis with clang++.

Master the Metasploit framework as a modular exploitation toolkit for writing exploits, delivering payloads, and post-exploitation tasks, using Nmap for discovery and Meterpreter for control in ethical testing.

Learn to locate known exploits offline with searchsploit, query exploit db by CVE, software, or version, and safely plan ethical testing against vulnerabilities like vsftpd 2.3.4.

Explore the social engineering toolkit in Kali Linux, learning to craft phishing pages, clone websites, and generate payloads for ethical testing.

Master tcpdump in Kali Linux to sniff and analyze real-time network traffic, using interface and filter options to capture, save to pcap, and inspect payloads for forensics and defense.

Explore wireshark in kali linux to capture real-time traffic, dissect packets with a visual interface, and filter or analyze protocols for network troubleshooting and security analysis.