use Burp Suite or Kali Linux against systems you do not own or have explicit written permission to test. Unauthorized scanning is illegal in most jurisdictions and violates ethical hacking principles.