Security Utilities¶ General-purpose recon, brute-force, and web-testing utilities. Nmap / Masscan¶ system Port scanning — thorough (Nmap) or internet-scale fast (Masscan). Gobuster / dirb / ffuf¶ system Directory/vhost/parameter fuzzing for web app recon. SQLMap / Nikto¶ system Automated SQL-injection testing and web-server vuln scanning. John the Ripper / Hashcat¶ system Offline password/hash cracking, CPU (John) and GPU (Hashcat). Hydra¶ system Online credential brute-forcing across dozens of protocols.