[darkninja1980]

my favorite tool is wireshark!

[Cr3aTor]

I think tools are made for different purposes and needs, so basically I can't have a favorite tool since you need to use them for specific tasks.

[mothered]

I seldom use tools during my exploitation, but In terms of vulnerability assessment, Acunetix does the job well.

[darkninja1980]

I think tools are made for different purposes and needs, so basically  I can't have a favorite tool since you need to use them for specific tasks.

I seldom use tools during my exploitation, but In terms of vulnerability assessment, Acunetix does the job well.

thank you for both of your input.

[Bish0pQ]

I seldom use tools during my exploitation, but In terms of vulnerability assessment, Acunetix does the job well.

Have you ever heard of OWASP ZAP? It is open-source and I have personally used it a lot for pentesting websites and web applications. These are just very main scanners that don't do any exploitation and are simply for information gathering though.

@OP, like stated above, there aren't really a "fixed" amount of tools that you need to use to 'hack' or pentest something. It all depends on a shit load of variables. First step would always be information gathering, check what possible vulnerabilities there are, or finding the weakest link of the chain and go from there.

And I'm not sure if you're talking about hacking tools for web related things or also things like reverse engineering?

[mothered]

Have you ever heard of OWASP ZAP? It is open-source and I have personally used it a lot for pentesting websites and web applications.

Yes I've used It and although It's a somewhat basic form of analysis, I do find It of benefit.

It's simplistic GUI makes It a pleasure to use.

or also things like reverse engineering?

My favorite reverse engineering tools are OllyDbg (who doesn't have this) and all It's plugins, Import REC, PEiD (to detect packers and compilers) and of course the Win32dasm disassembler.

[tschaikowsky]

SQLMap in Combination with some priv8 Tools

[darkninja1980]

I seldom use tools during my exploitation, but In terms of vulnerability assessment, Acunetix does the job well.

Have you ever heard of OWASP ZAP? It is open-source and I have personally used it a lot for pentesting websites and web applications. These are just very main scanners that don't do any exploitation and are simply for information gathering though.

@OP, like stated above, there aren't really a "fixed" amount of tools that you need to use to 'hack' or pentest something. It all depends on a shit load of variables. First step would always be information gathering, check what possible vulnerabilities there are, or finding the weakest link of the chain and go from there.

And I'm not sure if you're talking about hacking tools for web related things or also things like reverse engineering?

Have you ever heard of OWASP ZAP? It is open-source and I have personally used it a lot for pentesting websites and web applications.

Yes I've used It and although It's a somewhat basic form of analysis, I do find It of benefit.

It's simplistic GUI makes It a pleasure to use.

or also things like reverse engineering?

My favorite reverse engineering tools are OllyDbg (who doesn't have this) and all It's plugins, Import REC, PEiD (to detect packers and compilers) and of course the Win32dasm disassembler.

SQLMap in Combination with some priv8 Tools

what is priv8 tools?

[mothered]

what is priv8 tools?

I assume It's referring to personally-coded, or tools that have not been distributed online.

[darkninja1980]

what is priv8 tools?

I assume It's referring to personally-coded, or tools that have not been distributed online.

oh okay understand now.