SECURITY TOOLING STACK

• OWASP Web Security Testing Guide

  The OWASP Web Security Testing Guide provides a comprehensive framework for testing web application security, covering authentication, authorization, input validation, session management, and common vulnerabilities.

• OWASP Juice Shop

  An intentionally insecure web application designed for security training, demonstrations, and CTF exercises covering modern web vulnerabilities.

• Wazuh

  Open source security platform for threat detection, incident response, compliance monitoring, vulnerability detection, and security analytics.

• Suricata

  High performance Network Threat Detection Engine providing IDS, IPS, and network security monitoring capabilities.

• Zeek

  Powerful open source network security monitor that provides deep visibility into network traffic and generates security logs.

• Nmap

  Network exploration and security auditing tool used for host discovery, port scanning, service detection, and network analysis.

• Metasploit Framework

  Penetration testing framework containing exploit modules, payloads, auxiliary tools, and security testing capabilities.

• Falco

  Cloud native runtime security tool that detects suspicious behavior using Linux system calls and security rules.

• TheHive

  Open source incident response platform designed for security operations teams to manage investigations, alerts, and cases.

• Sigma

  Generic and open signature format for describing suspicious log events and detecting threats across SIEM platforms.

• YARA

  Pattern matching tool designed for malware researchers to identify and classify malicious files and suspicious artifacts.