Your Cyber Security Student Toolkit
A-Level / College • Windows
Networking, security labs, forensics and programming tools for cyber security students.
Who this toolkit is for
For cyber security students. Everything here is for education, authorised labs and defensive security. You don't need Kali Linux as your main operating system: running it in a virtual machine is common for practicals.
Choose any modules to see the tools for them. Without a module, module tools appear under Specialist / Optional.
Use security tools only in authorised labs and on systems you own or have permission to test. You don't need Kali Linux as your main operating system: many courses run it in a virtual machine for practicals.
Essential (4)
Core tools that are broadly useful.
Network Analysis
Security starts with understanding normal traffic. These tools let you see and map what is on a network in your lab.
WiresharkOpen Source
Why you may need this: Useful for learning how network traffic and protocols work and for analysing traffic in authorised lab environments.
Winget (verified)winget install --id WiresharkFoundation.Wireshark --exact --source winget
Linux / Virtualisation
Most security modules expect you to run Linux and several machines at once. Virtual machines make that possible on one computer and let you reset after every exercise.
VirtualBoxOpen Source
Why you may need this: Run a safe, isolated lab of virtual machines, such as Kali Linux, for practicals.
Winget (verified)winget install --id Oracle.VirtualBox --exact --source winget
Programming
Scripting turns repetitive tasks into tools. Python is the language most security courses use.
Office / Documents
Coursework, lab write-ups and reports.
LibreOfficeOpen Source
Why you may need this: A free office suite for essays, spreadsheets and presentations.
Winget (verified)winget install --id TheDocumentFoundation.LibreOffice --exact --source winget
Recommended (3)
Useful for particular parts of the work or course.
Network Analysis
Security starts with understanding normal traffic. These tools let you see and map what is on a network in your lab.
NmapOpen Source
Why you may need this: Learn network discovery on lab networks you're authorised to scan.
Winget (verified)winget install --id Insecure.Nmap --exact --source winget
Programming
Scripting turns repetitive tasks into tools. Python is the language most security courses use.
Why you may need this: Edit scripts and code for coursework.
Winget (verified)winget install --id Microsoft.VisualStudioCode --exact --source winget
Research / Citation
Reports and dissertations need properly referenced sources; a reference manager saves hours.
ZoteroOpen SourceAlso on iPhone/iPad
Why you may need this: Organise sources and create a bibliography for coursework.
Visit Official Website
Specialist / Optional · Show specialist tools (10)
Consider these for particular modules, tasks or environments.
Linux / Virtualisation
Most security modules expect you to run Linux and several machines at once. Virtual machines make that possible on one computer and let you reset after every exercise.
- WSL (wsl command)Built into Windows
Why you may need this: Run Linux tools on Windows.
wsl --installMicrosoft documentation
Networking
Simulate networks to understand routing, switching and how attacks move between segments.
Why you may need this: Practise networking fundamentals in simulation.
For the Networking module
Visit Official Website
Web Security Labs
Intercepting proxies show every request a browser sends to a web application. Use them only against applications you are authorised to test, such as practice targets in your lab.
ZAPOpen Source
Why you may need this: Test deliberately vulnerable lab applications.
For the Web Security module
Winget (verified)winget install --id ZAP.ZAP --exact --source winget- Burp Suite Community Edition
Freemium
Why you may need this: Intercept and inspect web traffic in authorised labs.
For the Web Security module
Winget (verified)winget install --id PortSwigger.BurpSuite.Community --exact --source winget
Digital Forensics
Examine disk images to find out what happened on a system, as covered in forensics modules.
- Autopsy
Open Source
Why you may need this: Analyse disk images in forensics practicals.
For the Digital Forensics module
Visit Official Website - The Sleuth Kit
Open Source
Why you may need this: Command-line forensic tools.
For the Digital Forensics module
Visit Official Website
Security Monitoring
Defenders detect attacks from logs and network alerts; these are the kinds of tools used in security operations work.
- Velociraptor
Open Source
Why you may need this: Collect endpoint evidence in lab exercises.
For the Incident Response module
Visit Official Website - Sysmon
Free
Why you may need this: Log Windows activity for detection exercises.
For the Incident Response module
Winget (verified)winget install --id Microsoft.Sysinternals.Sysmon --exact --source winget
Cloud
Many modules now include cloud security; the command-line tools let you inspect and configure cloud accounts used for coursework.
- AWS CLI
Open Source
Why you may need this: Work with AWS in cloud security labs.
For the Cloud Security module
Winget (verified)winget install --id Amazon.AWSCLI --exact --source winget - Azure CLI
Open Source
Why you may need this: Work with Azure in cloud security labs.
For the Cloud Security module
Winget (verified)winget install --id Microsoft.AzureCLI --exact --source winget
Notes for Cyber Security students
At college level, the focus is usually on understanding networks and safe computing practice, so packet analysis, virtualisation and a programming language are the priorities. At undergraduate level, modules typically add web application security, digital forensics and security monitoring, which is where the lab tools above come in. Postgraduate and professional-certification study often assumes you already run your own lab; the home lab guide on Aptorise walks through setting one up.
Platform matters more on this course than most. Many security tools are built for Linux first, so most students run Linux in a virtual machine whatever their main computer is. Windows and Intel Macs can run VirtualBox; on Apple Silicon Macs, virtual machines need Arm versions of operating systems, so check that the images your course uses are available for Arm. Some universities provide hosted lab environments, which avoids the problem entirely.
Every tool here is for learning on systems you own or are authorised to test. Scanning, capturing or attacking anything outside your own lab or a course-provided environment can break the law and university rules.
Course requirements vary. Software requirements differ between schools, colleges, universities and modules. Check your course materials before purchasing software.
Build your student setup
Build My Setup lets you add or remove apps, see why each is included and, where verified packages exist, get one install command. Nothing is installed automatically.