FIELD KIT · EARTH

Equipment

Linux, Vim, Brave and the terminal stay close. Purpose-built instruments map the stranger edges.

Links go to official project documentation. Use testing tools only in an isolated lab or within explicit written scope.

Earth kit

Linux

Home ground: open systems, sharp tools and many rabbit holes.

Vim

A quiet room for words, code and configuration.

Brave

The window through which most of the web appears.

Terminal

Where the surface gives way to the system.

Controlled instruments

Kali Linux

A security testing distribution. Keep tools within written scope and authorized targets.

Nmap

Open-source network discovery and security auditing for systems in scope.

Burp Suite Community Edition

A web security testing toolkit for labs and explicitly authorized applications.

Metasploit Framework

A framework for controlled security validation in isolated or authorized environments.

Under the machine

Ghidra

A software reverse engineering framework maintained by the US National Security Agency.

GDB

The GNU Project debugger for inspecting program behavior.

radare2

An open-source framework for binary analysis and reverse engineering.

CyberChef

GCHQ’s browser-based toolkit for analyzing and transforming data.

Orientation

OWASP

Open guidance for understanding and improving web application security.

PortSwigger Web Security Academy

Interactive web security material and deliberately vulnerable labs.

MITRE ATT&CK

A knowledge base for understanding adversary tactics and techniques.

Safe ground

OWASP Juice Shop

An intentionally insecure application for local, authorized practice.

OWASP WebGoat

A deliberately insecure application maintained for web security training.

OWASP Security Shepherd

A security training platform with intentionally vulnerable exercises.

A few terminal traces live in the archive of traces.

Questions

Which tools are in the Earth kit?

Linux, Vim, Brave, Terminal.

Which references are linked here?

OWASP, PortSwigger Web Security Academy, MITRE ATT&CK.