36. More Essential Kali Tools
Chala mitrano, Part 10 madhe aapan Nmap, Burp, Metasploit, Hydra sarkhe mothe tools shiklo. Pan professional pentester chya toolkit madhe ajun kahi chote pan khup kaamache tools astat: FFUF (vegvaan fuzzing), Amass (subdomain shodh), WhatWeb (website kuthlya technology var chalte), Netcat/Socat (network cha "Swiss army knife") ani Bettercap (network MITM lab). Pratyek tool aapan fakt aaplya lab var vaparu ani tyacha bachav pan shiku. Samjla ka? Chala!
What you will learn in this chapter
- FFUF for fast directory, parameter and virtual host fuzzing
- Amass for subdomain discovery (passive and active)
- WhatWeb and Wappalyzer for technology fingerprinting
- Netcat and Socat for connections, file transfer, listeners and relays
- Bettercap for network reconnaissance and MITM in a lab
- How defenders detect and stop each of these
Lab scope
Run every command only against your host-only lab (Kali 192.168.56.10, Metasploitable/DVWA 192.168.56.20, Chapter 18) or domains you own. Fuzzing, subdomain brute force and MITM against others' systems is illegal.
Concepts in this chapter
- 36.1FFUF: Fast Web Fuzzing
- 36.2Amass: Subdomain Discovery
- 36.3WhatWeb and Wappalyzer: Technology Fingerprinting
- 36.4Netcat and Socat: The Network Swiss Army Knife
- 36.5Bettercap: Network Recon and MITM (Lab)
- 36.6Defence Checklist for These Tools
- 36.7Red vs Blue, Project and Real Incidents
The chapter recap is at the end of the last concept page.