ONIONBIN.SPACE

1. Nmap (Network Mapper)

What it is:

An open-source tool used for network discovery and security auditing.

How to use it (Basic Service Scan):

nmap -sV -sC 192.168.1.100

Pro-tip: -sC runs default scripts, -sV grabs service versions.

2. Burp Suite

What it is:

The industry-standard graphical tool for testing web application security. Acts as an intercepting proxy.

How to use it (Intercepting Traffic):

• Navigate to the Proxy > Intercept tab and ensure Intercept is on.
• Use Burp's built-in browser to navigate to a target website.
• Modify parameters in the raw request, then click Forward.

3. SQLmap

What it is:

Automates the process of detecting and exploiting SQL injection flaws.

How to use it (Basic Injection Test):

sqlmap -u "http://target.com/page.php?id=1" --dbs

• Once databases are found, dump tables: sqlmap -u "..." -D db_name --tables.