As an app bitch, Burp Suite Professional is very nearly my only tool.

Just bought professional yesterday. Dying to get home after work to check it out.

What made you upgrade from the community one?

The thing is that I have the knowledge and skills that I need to build my own Burpsuite (with blackjack and hookers). But why would I waste my time on that when it already exists and is excellent?

Is there any free license key for Burp Suite pro? I found license key for VMWare Workstation Pro on darkweb, soo.. :)

there any free license *Research Use Only

Cant help ya there but best of luck with your search, community edition is free and is honestly more than enough for manual testing...

OWASP has ZAP which is very similar to burp suite professional as it allows you to use professional features like intruder without the rate limiting and active website spidering. Again it's not burp but it's pretty damn close and a decent open source tool.

Oh yeah, there are extensions that will let you integrate with selenium for a really GUI forward experience... but even better the sessions section of project settings has some session rule options which include multiple request sequence macros!

Google it, theres a free version that Portswigger offers called Community edition. EDIT: Also, its an application traffic proxy, lets you interact with HTTP transactions directly!

Deez

Not one person is going to be honest and say nmap?

nmap

Scapy It can do EVERYTHING you would want Tbh it's more used as a lib rather than a tool, but it's still a hell of a great tool Anything from packet sniffing to manipulation and forgery, advanced port scanners and some exploits can be easily written with it, the only boundary is ur imagination

nmap, burp, nuclei, amass, gobuster, grep + cut, vim, cobalt strike, terraform

Cobalt strik?.?we’re not made of money around here…shodan+OSINT-Framework+kali=much better than cobalt…and Free!!! (and I’ll head off the comments, subscription to all the bells and whistles on shodan really helps!)

nmap, metasploit, burp suite, sqlmap, evil-winrm, impacket, hashcat, PEASS-ng among others

Surprised to see impacket mentioned only once so far. These are pretty much what I'm using almost every engagement.

Nmap, burp suite, metasploit, shellter, and wifite. Just a few major ones from my tool kit. However, some of the beat tools are scripts I have made to chain tools together and/or scanners and pokers I have written myself.

BurpSuite, Nmap, Wireshark, CrackMapExec

Nmap is your all purpose tool, but Nikto can dig up some good information about which files to look into.

NMAP Hydra and Metasploit are my trifecta. Can get into just about anything with those 3.

Nice try, FBI

Flipper Zero, Pwnagotchi, Anker battery pack. Key puller. Multipack rfid cards (used hotel key cards) Canned Air. Raspberry pi, Zima board. Wera screwdriver set

Nmap, responder, ntlmrelayx, crackmapexec, kerbrute, a cracking rig, bloodhound, aquatone.

linux. i work with offshore devs and the amount of peeps that work on windows physically hurts me. I have a dev right now completely ignoring the spec and telling me his work runs on windows server and im like ??

Google

There's a distinct lack of crackmapexec in here.Such a handy tool.

python3. I often work in fresh env and have no access to other tools so py in the terminal allows me to pip the modules I need or work with them in virtualenv. Some of my most used python3 modules are: selenium, web automation holehe, finds social media with given email ignorant, finds social media with given number maigret, username finder and social extractor photon, web crawler fierce, dns mapper osrframework, email, username and phone osint socialscan, similar to holehe twint, non-API Twitter osint arjun, HTTP parameter discovery vulnx, CMS exploitation snscrape, URL scraper

At this point I can do full assessments with Crack Map Exec and a Windows box. Other enumeration tools like Bloodhound are great, but I can get by writing the searches myself if needed.

Chrome dev tools

Nmap, just by itself it's powerful but with plug-ins is super useful