1. Reconnaissance Tools Recon-ng (Linux, Windows) : Modular OSINT tool for data gathering, APIs. theHarvester (Linux, Windows) : Gathers emails, subdomains from Google & LinkedIn. Nmap (Linux, Windows, macOS) : Network scanner for ports, OS, vulnerabilities. Zenmap (Linux, Windows, macOS) : Nmap’s GUI for visual scanning. DNSRecon (Linux, Windows) : DNS enumeration, domain records retrieval. Netdiscover (Linux) : Identifies live hosts in local networks. Maltego (Linux, Windows, macOS) : Data mining and visualization for OSINT. Unicornscan (Linux) : Asynchronous TCP/UDP scanner for large networks. p0f (Linux, Windows) : Passive OS fingerprinting via network traffic. Masscan (Linux) : Ultra-fast internet-wide port scanner. ZMap (Linux) : High-speed scanner for large IP ranges. 2. Vulnerability Scanning Tools OpenVAS (Linux) : Comprehensive vulnerability scanner for servers and networks. w3af (Linux, Windows) : Web application vulnerability scanner (SQLi, XSS). Nikto ...