Metasploit is the world’s most used penetration testing framework. Lynis is open-source and flexible, and used for several different purposes.

Lynis performs an extensive health scan of your systems to support system hardening and compliance testing. Besides several crypt(3) password hash types most commonly found on various Unix flavors, supported out of the box are Kerberos/AFS and Windows LM hashes, as well as DES-based tripcodes, plus hundreds of additional hashes and ciphers in “-jumbo” versions. Its primary purpose is to detect weak Unix passwords.

John the Ripper is an open-source password security auditing and password recovery tool.

Cracking: WEP and WPA PSK (WPA 1 and 2).

Testing: Checking WiFi cards and driver capabilities (capture and injection).

Attacking: Replay attacks, deauthentication, fake access points and others via packet injection.

Monitoring: Packet capture and export of data to text files for further processing by third-party tools.

Here are 5 you should learn how to use.Īircrack-ng is a complete suite of tools to assess Wi-Fi network security, focusing on:

Kali Linux also comes with several hundred specialized tools for carrying out penetration testing, security research, computer forensics, reverse engineering, vulnerability management, and red team testing. Kali Linux is a specialized Linux distribution developed by Offensive Security, designed for experienced Linux users who need a customized platform for penetration testing.

Kali linux ip stresser