Additional Information

Recommended Operating Systems

Choosing the right penetration testing or security-focused OS significantly affects productivity. Each distro has different strengths, tool availability, and learning curves.

Kali Linux

Industry-standard penetration testing distribution. Pre-installed with 600+ security tools. Based on Debian.

Offensive security, pentesting, CTFs, forensics

Parrot OS

Security-focused distro with strong privacy features. Lighter than Kali, includes AnonSurf for anonymity.

Privacy-conscious pen-testing, lightweight environments

Black Arch Linux

Arch Linux-based penetration testing distro with the largest repository of security tools (3000+).

Advanced Linux users, bleeding-edge tools, customization

Security Onion

Linux distro for intrusion detection, network security monitoring, and log management. Includes Suricata, Zeek.

Defensive security, SOC, network monitoring

CAINE (Computer Aided INvestigative Environment)

Italian digital forensics distribution focused on incident response and forensic analysis.

Digital forensics, incident response, malware analysis

BackBox Linux

Ubuntu-based pen-testing distro with a fast, lightweight XFCE desktop and rapid release cycle.

Beginners, fast setup, web app testing

Core Security Tools Covered

Throughout this documentation you'll master these foundational security tools. Each module provides concepts, interactive builders, quizzes, and hands-on labs.

Ports & Protocols Reference

Ports are numeric identifiers (0–65535) that distinguish services on a host. The first 1024 are "well-known" and reserved by IANA. This table lists the most common ports you'll encounter in security assessments.

Essential Terminology

Key security terms every practitioner should know. These concepts appear throughout tool documentation, pentest reports, and security discussions.

Networking Quick Reference

Fundamental networking concepts and address ranges you'll reference constantly during security assessments.

110.0.0.0    - 10.255.255.255    (10/8) — Large corporate networks
2172.16.0.0  - 172.31.255.255    (172.16/12) — Medium organizations
3192.168.0.0 - 192.168.255.255   (192.168/16) — Home/Small office

1127.0.0.0/8   — Loopback (localhost)
2169.254.0.0/16 — Link-local (APIPA, zero-config)
30.0.0.0        — Unspecified/Default route
4255.255.255.255 — Broadcast

1/32  = 1 host         (single IP)
2/31  = 2 hosts        (point-to-point)
3/30  = 4 hosts        (small links)
4/29  = 8 hosts
5/28  = 16 hosts
6/27  = 32 hosts
7/26  = 64 hosts
8/24  = 256 hosts      (class C)
9/16  = 65,536 hosts   (class B)
10/8   = 16,777,216     (class A)

Certifications & Career Path

Industry-recognized certifications that validate your skills and advance your cybersecurity career.

Learning & Practice Best Practices

Everyday CLI Commands

These commands are useful regardless of which security tool you're using.

1ping 10.0.0.1                 # Test connectivity
2traceroute 8.8.8.8           # Trace network path
3nslookup example.com         # DNS lookup (Windows)
4dig example.com              # DNS lookup (Linux/macOS)
5whois example.com            # Domain registration info
6netstat -an                  # Active connections (all)
7ss -tuln                     # Modern replacement for netstat
8arp -a                       # ARP table (local network)
9ip addr show                 # Show IP configuration (Linux)

1file suspicious.exe          # Determine file type
2sha256sum file.iso            # Calculate SHA-256 hash
3md5sum file.bin               # Calculate MD5 hash (less secure)
4strings malware.bin           # Extract human-readable strings
5hexdump -C file.bin           # Hex dump with ASCII
6exiftool image.jpg            # Extract metadata
7find / -perm -4000 2>/dev/null # Find SUID binaries
8history                      # Show command history
9sudo -l                      # List sudo privileges