Compiled list of free tools and software that can be used to practice your Cybersecurity knowledge There are hyperlinks in the deck for quick access to useful information, you will have to download it to have links available to you.

1. Haris Chughtai (dc.expert123@gmail.com)
CYBERSECURITY FREE TOOLS &
SOFTWARES TO USE AS PRACTICE PROJECT
Either you can pick a project from this youtube video or there are several free and open-source
cybersecurity tools that students can use for hands-on learning and labs. Here's a list of some
popular ones:
1. Wireshark: A network protocol analyzer that allows students to capture and analyze the
data traveling back and forth on a network.
2. Metasploit: A penetration testing framework that helps students develop and execute
exploit code against a remote target.
3. Kali Linux: A Debian-based Linux distribution specifically designed for digital forensics and
penetration testing. It comes pre-installed with various cybersecurity tools.
a. One of the best is Kali OS. Inside Kali lot of software are natively available in there
b. Download its VM from https://www.kali.org/ and run and use there softwares
4. OWASP ZAP (Zed Attack Proxy): An open-source security tool for finding vulnerabilities in
web applications during the development and testing phase.
5. Nmap (Network Mapper): A powerful open-source tool for network exploration and
security auditing.
6. Burp Suite Community Edition: A set of tools for testing web security. The Community
Edition is free and includes various features for web application security testing.
7. Ghidra: A software reverse engineering (SRE) framework developed by the National Security
Agency (NSA). It helps students analyze malicious code and understand software internals.
8. Snort: An open-source intrusion detection and prevention system (IDS/IPS) that can be used
to detect and prevent network attacks.
9. OpenVAS: The Open Vulnerability Assessment System is a powerful open-source
vulnerability scanner.
10. Hashcat: A password recovery tool that supports various hashing algorithms and can be
used for password cracking.

2. Haris Chughtai (dc.expert123@gmail.com)
11. Cuckoo Sandbox: An open-source automated malware analysis system that can be used to
analyze suspicious files and behavior.
12. OSINT Framework: A collection of various tools and resources for open-source intelligence
(OSINT) gathering.
13. Volatility: An open-source memory forensics framework that allows students to analyze
volatile memory dumps.
14. Security Onion: A Linux distribution for intrusion detection, network security monitoring,
and log management.
15. YARA: A pattern-matching tool for identifying and classifying malware.