Nmap

Information Gatheringkali · parrot

Industry-standard network scanner for port discovery, service detection, and OS fingerprinting. Core recon tool for every engagement.

Install

sudo apt install nmap

nmap -sV -sC target.com
nmap -p- --min-rate 10000 target.com
nmap --script vuln target.com

Use only on systems you are authorized to test. Follow program scope.

Amass

OWASP Amass for in-depth subdomain enumeration and attack surface mapping.

Subfinder

Passive subdomain discovery tool. Fast and reliable for bug bounty recon.

dnsenum

DNS enumeration script for zone transfers, subdomain brute force, and record discovery.

Enum4linux

Enumerate Windows/Samba information: users, shares, policies.