Automated catalog of security testing utilities, attack rigs, and verification commands utilized across CCY4202 labs.
All offensive scans, exploits, and proxies must be bound to your isolated VirtualBox/VMware Host-Only network adapter (vboxnet0 / vmnet1).
Debian-derived distribution pre-configured with 600+ offensive penetration testing tools.
cat /etc/os-release && uname -r
ip a show eth0
Industry-standard network exploration, host discovery, port scanner, and OS detection engine.
sudo apt update && sudo apt install -y nmap
nmap --version
Interactive deep packet inspection, TCP 3-way handshake dissector, and credential sniffer.
sudo apt install -y wireshark tshark
tshark -v
HTTP/HTTPS interception proxy for capturing, inspecting, and modifying web traffic in real time.
127.0.0.1:8080 (Loopback Proxy)
burpsuite &
curl -x http://127.0.0.1:8080 http://example.com
Deliberately vulnerable Angular/Node SPA — the classroom's primary attack target. Runs offline after first Docker pull.
docker run --rm -d --name juice -p 3000:3000 bkimminich/juice-shop
http://localhost:3000
docker ps --filter name=juice
docker stop juice
Free hosted micro-labs from Burp's makers. Enrichment / at-home reinforcement path — every core exercise still runs on Juice Shop first (wifi unreliable).
https://portswigger.net/users/register
Web Security Academy → pick topic → "Access the lab"
labs/offline-cache/portswigger-labXX.pdf
Container runtime — hard prerequisite from Lab 02 onward. Every classroom target ships as a Docker image so wifi isn't in the critical path.
curl -fsSL https://get.docker.com | sh
Docker Desktop — https://docker.com/products/docker-desktop
docker ps
Automated SQL injection detection and database dumping. In Lab 03 you learn it last, after doing UNION by hand, so it stays a tool you understand instead of a magic button.
sudo apt install -y sqlmap
sqlmap --version
sqlmap -u "http://localhost:3000/rest/products/search?q=apple" --batch --dbs
sqlmap -u "<url>" --batch -T Users --dump
Paste a raw HTTP request or response and it colorizes it: method, path, headers, status codes. A font slider and line-wrap toggle make it readable on a projector when Burp's panes are too small. Single mode or request+response side by side. Runs entirely in your browser, nothing leaves the page.
Copy a request from DevTools or Burp → paste → set the font size
Comprehensive offensive framework for vulnerability verification, payload delivery, and reverse shells.
sudo apt install -y metasploit-framework
msfconsole -v
TCP/UDP socket handler for port connectivity checks, raw banners, and reverse shell listener catching.
sudo apt install -y netcat-traditional
nc -h