not a comprehensive list. just the stuff i actually open every day.

terminal

everything lives in the terminal. i use a heavily configured zsh setup with a minimal prompt. the goal is signal, not noise.

reconnaissance

nmap    — port scanning and service detection
amass   — subdomain enumeration
fpippo  — passive dns recon
whatweb — web tech fingerprinting

scripting

python for almost everything. rust when i care about performance or safety guarantees. bash when i just need something to run quickly.

writing

notes in plain text files. synced with git. no apps, no cloud subscriptions, no lock-in.

the best tool is the one you actually understand.