Kali Linux – Leading pen-testing OS -
http://www.kali.org/
Ubuntu server – to host our vulnerable we app
Nmap - Security Scanner For Network Exploration -
http://nmap.org/
sqlmap - automatic SQL injection and database takeover tool -
http://sqlmap.org/