Hands-on guides to the tools security work actually runs on — installation, architecture, real usage, and limits.
Home › Cybersecurity Tools
A tool guide is only useful if it survives contact with the tool. These walkthroughs cover Nmap, Wireshark, Burp Suite, OWASP ZAP, and the Metasploit Framework: how each is installed on the platforms people actually use, how it is structured internally, which features matter for real assessment work, and how to automate it in a pipeline rather than driving it by hand.
They also cover the parts vendor documentation tends to skip — where a scanner produces false positives, which findings need manual confirmation before they go in a report, what the free edition genuinely cannot do, and the legal and scoping boundaries that separate authorized testing from something you should not be doing. Every tool here is documented as something with tradeoffs, not as a product recommendation.
By Himanshu Borikar • 2026-07-24 • 15 min read
The definitive 2026 guide to OWASP ZAP (Zed Attack Proxy): 100% free open-source DAST, passive & active scanning, OpenAPI/GraphQL testing, Docker CI/CD automation, installation, and best practices.
By Himanshu Borikar • 2026-07-24 • 16 min read
The definitive 2026 guide to Metasploit Framework: open-source exploit development and validation, msfconsole, core modules, installation, PostgreSQL msfdb setup, real-world use cases, and best practices.
By Himanshu Borikar • 2026-07-24 • 15 min read
The definitive 2026 guide to Burp Suite: intercepting proxy, HTTP/HTTPS traffic tampering, Repeater & Intruder modules, Community vs Professional vs DAST editions, installation, step-by-step tutorial, and best practices.
By Himanshu Borikar • 2026-07-23 • 16 min read
The definitive 2026 guide to Wireshark: network protocol analyzer, live packet capture, deep packet inspection, BPF capture & display filters, installation across Windows/Linux/macOS, forensic investigations, and troubleshooting.
By Himanshu Borikar • 2026-07-23 • 15 min read
The definitive 2026 guide to Nmap (Network Mapper): network discovery, port scanning, service & OS detection, Nmap Scripting Engine (NSE), installation across Windows/Linux/macOS, basic usage, and security auditing best practices.