> For the complete documentation index, see [llms.txt](https://burmat.gitbook.io/security/llms.txt). Markdown versions of documentation pages are available by appending `.md` to page URLs; this page is available as [Markdown](https://burmat.gitbook.io/security/hacking/tools-and-services.md).

# Tools and Services

This section contains practical guides for offensive security tools and service exploitation techniques commonly used during penetration testing and red team operations.

## Reconnaissance

Tools for information gathering and target enumeration:

* [**amass**](/security/hacking/tools-and-services/amass.md) - Subdomain enumeration and OSINT collection
* [**Shodan**](/security/hacking/tools-and-services/shodan.md) - Internet-connected device search engine for asset discovery

## Network Analysis

Tools for protocol analysis and credential extraction:

* [**tshark**](/security/hacking/tools-and-services/tshark.md) - Command-line packet analyzer for traffic inspection and credential harvesting
* [**VoIP**](/security/hacking/tools-and-services/voice-over-ip-voip.md) - Voice over IP exploitation techniques including SIP enumeration and call interception

## SMB/File Share Enumeration

* [**smbmap**](/security/hacking/tools-and-services/smbmap.md) - SMB share enumeration, credential testing, and file searching

## Service-Specific Exploitation

* [**Adobe Experience Manager (AEM)**](/security/hacking/tools-and-services/adobe-experience-manager-aem.md) - Enterprise CMS vulnerability scanning and exploitation
* [**ike-scan**](/security/hacking/tools-and-services/ike-scan.md) - IPSec VPN enumeration and pre-shared key extraction

## Data Processing

* [**jq**](/security/hacking/tools-and-services/jq.md) - JSON parsing for processing BloodHound and other tool outputs

## Productivity

* [**tmux**](/security/hacking/tools-and-services/tmux.md) - Terminal multiplexer setup with logging and automation