Equipment
Uses
The tools behind the writeups. Nothing exotic, just what I actually reach for in the lab and while building things.
Offensive Security
[OFF]- Burp Suite
- Web proxy for intercept, Repeater, Intruder
- Nmap
- Host discovery and service enumeration
- Metasploit
- Exploitation practice against lab targets
- ffuf
- Directory and content discovery
Analysis
[ANL]- Wireshark
- Packet capture and protocol analysis
- MobSF
- Automated static analysis for Android APKs
- JADX
- Decompiling APKs for manual source review
- OpenSSL
- Certificates and crypto inspection
Lab Environment
[LAB]- Kali Linux
- Primary attacker VM
- VirtualBox
- Bridged VMs for network labs
- Ubuntu Server
- Target and service host, e.g. Asterisk
- Docker
- Disposable vulnerable apps and services
Build & Write
[DEV]- VS Code
- Editor for code and writeups
- Next.js + TypeScript
- This site and other projects
- Tailwind CSS
- Styling, CSS-first configuration
- Git + GitHub
- Version control and CI
NOTEDISCLAIMER
Lab use only
Everything above is used against systems I own or on platforms that authorize testing, such as OverTheWire and PortSwigger Web Security Academy. Tools are neutral; permission is what makes the work legitimate.