Wireshark

I use Wireshark for security by capturing network traffic on my interface, then applying filters (like protocol, IP, or port) to spot suspicious patterns such as unusual connections, cleartext credentials, or unexpected data transfers. 

​

​

​

Burp Suite

I use Burp Suite by routing my browser traffic through it so I can intercept, inspect, and modify HTTP requests and responses while testing web applications for vulnerabilities like XSS or SQL injection.

​

​

​

Kali Linux

I use Kali Linux to scan my own systems and networks for vulnerabilities with tools like Nmap and Metasploit, then safely test potential weaknesses so I can patch them before attackers do. I also harden my Kali setup itself by keeping it updated, running a firewall, and only performing ethical hacking in controlled lab environments that I own.

Nmap

I use Nmap to perform security scans on my own networks, running commands like SYN scans (-sS) or version detection (-sV) to identify open ports, services, and potential vulnerabilities on hosts I control. After reviewing the results, I close unnecessary ports, update services, or apply firewall rules to mitigate risks before any real threats can exploit them

Zenmap

I use Zenmap’s graphical interface to run Nmap scans on my own networks, helping me quickly see what hosts are online and which ports and services are exposed. I then review the scan results and topology maps to spot unnecessary open services or unknown devices so I can lock them down or remove them.

Hashcat

I use Hashcat to audit the strength of password hashes from systems I manage, running controlled attacks like dictionary or brute-force to identify weak credentials that need to be changed.