Kali ships 600+ tools and beginners drown in them. You'll open the same four first.
nmap — the scout (what's alive, what's listening). Burp Suite — the interpreter (edit everything the app hears). gobuster — the inventory clerk (pages the site didn't link). A hash cracker — offline, lab-only, owned files with permission. Tools don't make a hacker; order does — then permission earns the blast radius.
