Toolkit & Your Path · 4.1
🧰 The Ethical Hacker's Toolkit
The standard tools — what they do and why they exist⏱ ~2 min
Ethical hackers use specialized tools, most of them free and open-source. You don't need to master all of them — but knowing what each is for orients you in the field. Every one of these is legal to use on systems you own or are authorized to test.
Kali Linux — The Pentester's Operating System
Kali Linux is a free, Debian-based operating system that comes pre-loaded with hundreds of security tools. Instead of installing tools one by one, testers run Kali (often in a VM) and have a ready-made workbench. It's the industry-standard learning and working environment.
🔗Kali Linux
The free, open-source penetration testing distribution with hundreds of pre-installed security tools. Run it in a VM to learn safely.
https://www.kali.org/
Tools You'll Hear About
| Tool | Category | What It Does |
|---|---|---|
| Nmap | Scanning | Discovers hosts, open ports, and running services |
| Burp Suite | Web | Intercepts and analyzes web traffic — the web tester's main tool |
| Wireshark | Network | Captures and inspects network packets in detail |
| Metasploit | Exploitation | A framework of known exploits for authorized testing |
| John the Ripper / Hashcat | Passwords | Test password strength by attempting to crack hashes |
| OWASP ZAP | Web | Free web-app scanner, a great open-source alternative to Burp |
⚠ WarningThese tools are legal to own and use — but using them against systems without authorization is not. The same Nmap scan is professional practice on an authorized target and a potential crime on someone else's network. The tool is neutral; the authorization is everything.
Set Up a Safe Lab
💡 TipBuild a home lab entirely on your own computer: run Kali Linux in a VM (using VirtualBox or VMware, covered in the CyberPatriot module) alongside intentionally-vulnerable target VMs, on an isolated virtual network with no internet access. Now you can practice everything freely, legally, and safely — nothing you do can reach the outside world.
🧠Quick Checkfirst try = +5 XP
Is it legal to own and use tools like Nmap and Kali Linux?
🎮 Practice what you learned
⭐ 0 XP🔥 0 days