Army-Knife/BURP |
BurpSuite |
It's Awesome |
it's not |
github:dog: |
Army-Knife/ZAP |
zaproxy |
The OWASP ZAP core project |
![](https://camo.githubusercontent.com/4ee02d8abf2226a879da0ae15ef2eb0a6cc65b67ebce8ded0ad5dee1edf0caa6/68747470733a2f2f696d672e736869656c64732e696f2f6769746875622f73746172732f7a6170726f78792f7a6170726f7879) |
![](https://camo.githubusercontent.com/b29378b3c94bf7d57dd7c50bd718a88c3d6d3b5bfc4798b48223bda28598c732/68747470733a2f2f696d672e736869656c64732e696f2f6769746875622f6c616e6775616765732f746f702f7a6170726f78792f7a6170726f7879) |
Discovery/CRAWL |
Photon |
Incredibly fast crawler designed for OSINT. |
![](https://camo.githubusercontent.com/cf14d81d7feadc7d7909685bf6e527a9f4647f67093deb3f0ea86a25a6f65549/68747470733a2f2f696d672e736869656c64732e696f2f6769746875622f73746172732f73306d6433762f50686f746f6e) |
![](https://camo.githubusercontent.com/01f19917ce2d82be9d4555a512ce4d05da894d1319cca78f0523b15a59b597c7/68747470733a2f2f696d672e736869656c64732e696f2f6769746875622f6c616e6775616765732f746f702f73306d6433762f50686f746f6e) |
Discovery/CRAWL |
gospider |
Gospider - Fast web spider written in Go |
![](https://camo.githubusercontent.com/ff3a190f4f456244f05280c3018c5972c2f75778a4a555b5e93deaa160634d7b/68747470733a2f2f696d672e736869656c64732e696f2f6769746875622f73746172732f6a61656c65732d70726f6a6563742f676f737069646572) |
![](https://camo.githubusercontent.com/45d4ef8428d4a78d57be93a51334c2e37dedf134ad173d2b7f73447addb639dd/68747470733a2f2f696d672e736869656c64732e696f2f6769746875622f6c616e6775616765732f746f702f6a61656c65732d70726f6a6563742f676f737069646572) |
Discovery/DNS |
dnsprobe |
DNSProb (beta) is a tool built on top of retryabledns that allows you to perform multiple dns queries of your choice with a list of user supplied resolvers. |
![](https://camo.githubusercontent.com/4dedf1c3f4017c55edb614052615417d07bb71129353b11f6625590f5b9b8b75/68747470733a2f2f696d672e736869656c64732e696f2f6769746875622f73746172732f70726f6a656374646973636f766572792f646e7370726f6265) |
![](https://camo.githubusercontent.com/945ca487f0cda8e480dd2da87cd707754bd197f92b0ad40520f7adc87aa500a1/68747470733a2f2f696d672e736869656c64732e696f2f6769746875622f6c616e6775616765732f746f702f70726f6a656374646973636f766572792f646e7370726f6265) |
Discovery/DNS |
shuffledns |
shuffleDNS is a wrapper around massdns written in go that allows you to enumerate valid subdomains using active bruteforce as well as resolve subdomains with wildcard handling and easy input-output support. |
![](https://camo.githubusercontent.com/1428433bf8fc80362de24534da2edd48b31c3c53b91b18aa29379e8cd00a05a8/68747470733a2f2f696d672e736869656c64732e696f2f6769746875622f73746172732f70726f6a656374646973636f766572792f73687566666c65646e73) |
![](https://camo.githubusercontent.com/691127ad4befa246db99927045f8220d5a102323228f8f708db5be04b10747d2/68747470733a2f2f696d672e736869656c64732e696f2f6769746875622f6c616e6775616765732f746f702f70726f6a656374646973636f766572792f73687566666c65646e73) |
Discovery/DOMAIN |
Amass |
In-depth Attack Surface Mapping and Asset Discovery |
![](https://camo.githubusercontent.com/9291a17f7381c40b52449245e33413b3dcabb90d0a84f01158f5e353acea8b52/68747470733a2f2f696d672e736869656c64732e696f2f6769746875622f73746172732f4f574153502f416d617373) |
![](https://camo.githubusercontent.com/46bba3ac80103a2d5c493fea626556f0eb79e893ba9b18bb4eb09693146fbb7b/68747470733a2f2f696d672e736869656c64732e696f2f6769746875622f6c616e6775616765732f746f702f4f574153502f416d617373) |
Discovery/DOMAIN |
assetfinder |
Find domains and subdomains related to a given domain |
![](https://camo.githubusercontent.com/46dd1de32d5abe841057e99db0d4ffc2898458c56bdacee53e4b780ac23e2fbe/68747470733a2f2f696d672e736869656c64732e696f2f6769746875622f73746172732f746f6d6e6f6d6e6f6d2f617373657466696e646572) |
![](https://camo.githubusercontent.com/9ca61f1fc48f1ef4898a0b704406e74a14f0d2ff9918434d4469ff46435256b5/68747470733a2f2f696d672e736869656c64732e696f2f6769746875622f6c616e6775616765732f746f702f746f6d6e6f6d6e6f6d2f617373657466696e646572) |
Discovery/DOMAIN |
findomain |
The fastest and cross-platform subdomain enumerator, do not waste your time. |
![](https://camo.githubusercontent.com/637d3f3a09506c78e98ca23838269c0f8e9fa8b3cd8354bb29fe69553cfd1ffd/68747470733a2f2f696d672e736869656c64732e696f2f6769746875622f73746172732f45647534726453484c2f66696e646f6d61696e) |
![](https://camo.githubusercontent.com/14ecc73f0a16b522f4af8c74c8d210454ba7a80bd9901adeb32a790b1d13555c/68747470733a2f2f696d672e736869656c64732e696f2f6769746875622f6c616e6775616765732f746f702f45647534726453484c2f66696e646f6d61696e) |
Discovery/DOMAIN |
knock |
Knock Subdomain Scan |
![](https://camo.githubusercontent.com/7a822ed45b3ad57d51c6cabf7043c6718f2ac82f4e546da2574e30c4509b434c/68747470733a2f2f696d672e736869656c64732e696f2f6769746875622f73746172732f6775656c666f7765622f6b6e6f636b) |
![](https://camo.githubusercontent.com/cade08a3d66500c8e709b5d3dc19c4404918558e3c9a7fa92757843da6b341ba/68747470733a2f2f696d672e736869656c64732e696f2f6769746875622f6c616e6775616765732f746f702f6775656c666f7765622f6b6e6f636b) |
Discovery/DOMAIN |
subfinder |
Subfinder is a subdomain discovery tool that discovers valid subdomains for websites. Designed as a passive framework to be useful for bug bounties and safe for penetration testing. |
![](https://camo.githubusercontent.com/ba5318dff77d426b911df5281f3eb952ff0746569d7e2de49bb5dbe8b3e9884b/68747470733a2f2f696d672e736869656c64732e696f2f6769746875622f73746172732f70726f6a656374646973636f766572792f73756266696e646572) |
![](https://camo.githubusercontent.com/fe5a4cd5c0bfabff3a6e2b1e72b0950327f54ec0700ec377709f40abdb1504a8/68747470733a2f2f696d672e736869656c64732e696f2f6769746875622f6c616e6775616765732f746f702f70726f6a656374646973636f766572792f73756266696e646572) |
Discovery/FUZZ |
dirsearch |
Web path scanner |
![](https://camo.githubusercontent.com/57569ac49b495016a0e648c970ec4b1aac342b69bce465277f0f8fbc42002ae1/68747470733a2f2f696d672e736869656c64732e696f2f6769746875622f73746172732f6d6175726f736f7269612f646972736561726368) |
![](https://camo.githubusercontent.com/229552395b61287b1b329fef5e9612260c84bfd3e14c7caa580100c9dfd5b4c9/68747470733a2f2f696d672e736869656c64732e696f2f6769746875622f6c616e6775616765732f746f702f6d6175726f736f7269612f646972736561726368) |
Discovery/FUZZ |
gobuster |
Directory/File, DNS and VHost busting tool written in Go |
![](https://camo.githubusercontent.com/e3afcffa2278f97427861d751fb3cf24a0a7b96e130936d5bfe4b2c5f309656f/68747470733a2f2f696d672e736869656c64732e696f2f6769746875622f73746172732f4f4a2f676f627573746572) |
![](https://camo.githubusercontent.com/8cce7a8965acff2b809fb05fe8be96e22dd0a1b3fa9b7e39c4478db23180ba66/68747470733a2f2f696d672e736869656c64732e696f2f6769746875622f6c616e6775616765732f746f702f4f4a2f676f627573746572) |
Discovery/GIT |
GitMiner |
Tool for advanced mining for content on Github |
![](https://camo.githubusercontent.com/7a0df7c676bd2314792d920ff5a9d50a0a45258d9d6acc0a621ba3e70eb09866/68747470733a2f2f696d672e736869656c64732e696f2f6769746875622f73746172732f556e6b4c34622f4769744d696e6572) |
![](https://camo.githubusercontent.com/31ced3686d6fd19e94aeb1886075d20dcf16694ae3b929c658d9bf6784353082/68747470733a2f2f696d672e736869656c64732e696f2f6769746875622f6c616e6775616765732f746f702f556e6b4c34622f4769744d696e6572) |
Discovery/GIT |
gitGraber |
gitGraber |
![](https://camo.githubusercontent.com/12bcaf61321867be34889df629ea1d2f55524983d27daea8d904d9ba13febe23/68747470733a2f2f696d672e736869656c64732e696f2f6769746875622f73746172732f686973786f2f676974477261626572) |
![](https://camo.githubusercontent.com/9d1fa220f23666c62f07c8c831dfbfb4f211c665b6c04e6d7514563464d44015/68747470733a2f2f696d672e736869656c64732e696f2f6769746875622f6c616e6775616765732f746f702f686973786f2f676974477261626572) |
Discovery/GIT |
gitrob |
Reconnaissance tool for GitHub organizations |
![](https://camo.githubusercontent.com/29e4353b55d9e4e4a0a796fd0f161edb2ef00d8296460f407635d99f4942d85a/68747470733a2f2f696d672e736869656c64732e696f2f6769746875622f73746172732f6d696368656e72696b73656e2f676974726f62) |
![](https://camo.githubusercontent.com/5bbd4ae2f41a8d3388410d68e7dce5c0f6cae6a7e6163d510df89e5b27917950/68747470733a2f2f696d672e736869656c64732e696f2f6769746875622f6c616e6775616765732f746f702f6d696368656e72696b73656e2f676974726f62) |
Discovery/HTTP |
Arjun |
HTTP parameter discovery suite. |
![](https://camo.githubusercontent.com/51d312f9ec05547f7b39c42e5f0695d23749c8272b33eb3c800bc4a8fc92e3d8/68747470733a2f2f696d672e736869656c64732e696f2f6769746875622f73746172732f73306d6433762f41726a756e) |
![](https://camo.githubusercontent.com/a1b0950e0a56692effe41401e291047817bfc769c2646e696162c09358b96bd9/68747470733a2f2f696d672e736869656c64732e696f2f6769746875622f6c616e6775616765732f746f702f73306d6433762f41726a756e) |
Discovery/PORT |
masscan |
TCP port scanner, spews SYN packets asynchronously, scanning entire Internet in under 5 minutes. |
![](https://camo.githubusercontent.com/632e1e63cd29e54aa274f938f8731635d73c261fd791d6f9c1576984d0797c2a/68747470733a2f2f696d672e736869656c64732e696f2f6769746875622f73746172732f726f62657274646176696467726168616d2f6d61737363616e) |
![](https://camo.githubusercontent.com/903487a4ec94ffe1bf995a460595e75d07dd67eca8cd8b95de2ad0569dd507be/68747470733a2f2f696d672e736869656c64732e696f2f6769746875622f6c616e6775616765732f746f702f726f62657274646176696467726168616d2f6d61737363616e) |
Discovery/PORT |
naabu |
A fast port scanner written in go with focus on reliability and simplicity. Designed to be used in combination with other tools for attack surface discovery in bug bounties and pentests |
![](https://camo.githubusercontent.com/3705be9b3c04cbc45ee80b1148603959e0804b110205b34aaf31554ee09792fb/68747470733a2f2f696d672e736869656c64732e696f2f6769746875622f73746172732f70726f6a656374646973636f766572792f6e61616275) |
![](https://camo.githubusercontent.com/c43aca1afcd9b2c474bbcc467a3d4d435117ee65a1c54f5a46fcb673b26cee5d/68747470733a2f2f696d672e736869656c64732e696f2f6769746875622f6c616e6775616765732f746f702f70726f6a656374646973636f766572792f6e61616275) |
Discovery/PORT |
nmap |
Nmap - the Network Mapper. Github mirror of official SVN repository. |
![](https://camo.githubusercontent.com/56dcafb86c87713133c3fda026dadfa71b4899bd1a8d460c8a66bf49a7ec39d4/68747470733a2f2f696d672e736869656c64732e696f2f6769746875622f73746172732f6e6d61702f6e6d6170) |
![](https://camo.githubusercontent.com/c5d7ee30f6b122a2db3840dd855fc28b4c309feb2eb989c221e19a495c5da5d5/68747470733a2f2f696d672e736869656c64732e696f2f6769746875622f6c616e6775616765732f746f702f6e6d61702f6e6d6170) |
Discovery/TKOV |
subjack |
Subdomain Takeover tool written in Go |
![](https://camo.githubusercontent.com/47c63b0b12ac6330249ad82cd9b4217c903fcba27d1f6d9b1cfcd57d1ef952fd/68747470733a2f2f696d672e736869656c64732e696f2f6769746875622f73746172732f6861636365722f7375626a61636b) |
![](https://camo.githubusercontent.com/d0140097efda6e7e647c34bac9a0650d5e741ff0370f21392f633933d0c33f7d/68747470733a2f2f696d672e736869656c64732e696f2f6769746875622f6c616e6775616765732f746f702f6861636365722f7375626a61636b) |
Discovery/URL |
waybackurls |
Fetch all the URLs that the Wayback Machine knows about for a domain |
![](https://camo.githubusercontent.com/0cb5a3f56ed569bb1c465a3db9fe5e7e9b15d8069e1acb81a3994f65c5c88c5f/68747470733a2f2f696d672e736869656c64732e696f2f6769746875622f73746172732f746f6d6e6f6d6e6f6d2f7761796261636b75726c73) |
![](https://camo.githubusercontent.com/da75b26249a9cdcd48133b25121d7e7f2b852024e3abb75df28348120d4bc0af/68747470733a2f2f696d672e736869656c64732e696f2f6769746875622f6c616e6775616765732f746f702f746f6d6e6f6d6e6f6d2f7761796261636b75726c73) |
Discovery/VULN |
Silver |
Mass scan IPs for vulnerable services |
![](https://camo.githubusercontent.com/287b43510a0af10785d334e1e1c7539a7214f6176882d88df63f8640e2aeb81c/68747470733a2f2f696d672e736869656c64732e696f2f6769746875622f73746172732f73306d6433762f53696c766572) |
![](https://camo.githubusercontent.com/7045b5a6ddbd3b39b6743680409db3a6df5b6c039627e3fda09f8755c0ce329a/68747470733a2f2f696d672e736869656c64732e696f2f6769746875622f6c616e6775616765732f746f702f73306d6433762f53696c766572) |
Fetch/TOM |
httprobe |
Take a list of domains and probe for working HTTP and HTTPS servers |
![](https://camo.githubusercontent.com/3b20ef2ad10c052c0416a37a63e7008c176dfbc71cbfbea6dfe5b369f65c402f/68747470733a2f2f696d672e736869656c64732e696f2f6769746875622f73746172732f746f6d6e6f6d6e6f6d2f68747470726f6265) |
![](https://camo.githubusercontent.com/15009d77e9d78dedd55e569bc92737eafcd26227eb2d2d933aa1804948985b21/68747470733a2f2f696d672e736869656c64732e696f2f6769746875622f6c616e6775616765732f746f702f746f6d6e6f6d6e6f6d2f68747470726f6265) |
Fetch/TOM |
meg |
Fetch many paths for many hosts - without killing the hosts |
![](https://camo.githubusercontent.com/6c0c32c045a33881660a115d188741d7c11e64d81edb8c00c48290ba1f9bf057/68747470733a2f2f696d672e736869656c64732e696f2f6769746875622f73746172732f746f6d6e6f6d6e6f6d2f6d6567) |
![](https://camo.githubusercontent.com/543c689625fe3bbcf20c1283da1e8218cef785c95771564d04c6fa8e8b879491/68747470733a2f2f696d672e736869656c64732e696f2f6769746875622f6c616e6775616765732f746f702f746f6d6e6f6d6e6f6d2f6d6567) |
Fetch/WSOCK |
websocket-connection-smuggler |
websocket-connection-smuggler |
![](https://camo.githubusercontent.com/7f982eb2cccd9b3cc5879c385cec9eadf9ba2bf3fe0397fc1552d56bedef5d2c/68747470733a2f2f696d672e736869656c64732e696f2f6769746875622f73746172732f68616877756c2f776562736f636b65742d636f6e6e656374696f6e2d736d7567676c6572) |
![](https://camo.githubusercontent.com/121a147b6581bfd3b984dd674c3f7fe3a246f6362e203b2ed22daaca17268e7c/68747470733a2f2f696d672e736869656c64732e696f2f6769746875622f6c616e6775616765732f746f702f68616877756c2f776562736f636b65742d636f6e6e656374696f6e2d736d7567676c6572) |
Scanner/CORS |
Corsy |
CORS Misconfiguration Scanner |
![](https://camo.githubusercontent.com/7267b2e328c00b21e2295c10d0db7746e0d996c21e012aa55cedf9860202cc39/68747470733a2f2f696d672e736869656c64732e696f2f6769746875622f73746172732f73306d6433762f436f727379) |
![](https://camo.githubusercontent.com/a518f4ca84201a305a3fb9d751cc3e2bef3fdd91f434289b0d1b98e13f8bd3b8/68747470733a2f2f696d672e736869656c64732e696f2f6769746875622f6c616e6775616765732f746f702f73306d6433762f436f727379) |
Scanner/FUZZ |
Medusa |
Automatic Video Library Manager for TV Shows. It watches for new episodes of your favorite shows, and when they are posted it does its magic. |
![](https://camo.githubusercontent.com/7fbc27ec378e70baa3c67ac62f8379b6b627ce9b73f8df5a963c2f848647b9e2/68747470733a2f2f696d672e736869656c64732e696f2f6769746875622f73746172732f70796d65647573612f4d6564757361) |
![](https://camo.githubusercontent.com/3717dc1ca6f43cac2b864fc3807bdfaf1f6d27f4b834a1ac27037c5fed779c58/68747470733a2f2f696d672e736869656c64732e696f2f6769746875622f6c616e6775616765732f746f702f70796d65647573612f4d6564757361) |
Scanner/FUZZ |
thc-hydra |
hydra |
![](https://camo.githubusercontent.com/851ca720f4edd2ebef0a12497b6e03045f1e232b26036b4d6fa0d921b455f4a9/68747470733a2f2f696d672e736869656c64732e696f2f6769746875622f73746172732f76616e6861757365722d7468632f7468632d6879647261) |
![](https://camo.githubusercontent.com/e5771f745ec3e42cb9e4f3f800b7622419e0210d27b4f1547278e3f93b05efcb/68747470733a2f2f696d672e736869656c64732e696f2f6769746875622f6c616e6775616765732f746f702f76616e6861757365722d7468632f7468632d6879647261) |
Scanner/FUZZ |
wfuzz |
Web application fuzzer |
![](https://camo.githubusercontent.com/0abef11127e6fea42ef997e0280553f36fec024c4b7d4b376476f2381967ce3b/68747470733a2f2f696d672e736869656c64732e696f2f6769746875622f73746172732f786d656e64657a2f7766757a7a) |
![](https://camo.githubusercontent.com/f224c21e7d855ed754308f87d04713bad4305d28150b56d1831cbe7c3dc9ccb6/68747470733a2f2f696d672e736869656c64732e696f2f6769746875622f6c616e6775616765732f746f702f786d656e64657a2f7766757a7a) |
Scanner/LFI |
LFISuite |
Totally Automatic LFI Exploiter (+ Reverse Shell) and Scanner |
![](https://camo.githubusercontent.com/431f36b462a302d7f56fd539c9ed93d86bf97e465cab30815b995e7ea5f68c68/68747470733a2f2f696d672e736869656c64732e696f2f6769746875622f73746172732f4433356d306e643134322f4c46495375697465) |
![](https://camo.githubusercontent.com/10a4d8ec9a7381d94a6361937e896019525809b9001099264f4cc56e36617d38/68747470733a2f2f696d672e736869656c64732e696f2f6769746875622f6c616e6775616765732f746f702f4433356d306e643134322f4c46495375697465) |
Scanner/LFI |
dotdotpwn |
DotDotPwn - The Directory Traversal Fuzzer |
![](https://camo.githubusercontent.com/6e94ad7df6c7a58c36bc142c41385e56e72f2fa4eb3d12be6cf5452628d7a4d7/68747470733a2f2f696d672e736869656c64732e696f2f6769746875622f73746172732f7769726567686f756c2f646f74646f7470776e) |
![](https://camo.githubusercontent.com/d986bf23af237e7a3379edc86d713b402c2aa99d10c1496c52339ac3099c43ac/68747470733a2f2f696d672e736869656c64732e696f2f6769746875622f6c616e6775616765732f746f702f7769726567686f756c2f646f74646f7470776e) |
Scanner/NOSQL |
NoSQLMap |
Automated NoSQL database enumeration and web application exploitation tool. |
![](https://camo.githubusercontent.com/120ad1c62cc9a2878a2eb6f9908faed4caa11fc6c32b6fb1f9846ac59c1db0a9/68747470733a2f2f696d672e736869656c64732e696f2f6769746875622f73746172732f636f64696e676f2f4e6f53514c4d6170) |
![](https://camo.githubusercontent.com/61b3ce7ca0174c20bab108e5ee672a0b6e9c67abf967f9b887407210501f7549/68747470733a2f2f696d672e736869656c64732e696f2f6769746875622f6c616e6775616765732f746f702f636f64696e676f2f4e6f53514c4d6170) |
Scanner/SQL |
sqlmap |
Automatic SQL injection and database takeover tool |
![](https://camo.githubusercontent.com/90b5089153617306389ee218fe8bb7f706cae0f253c48e1d51c90f0d882522d6/68747470733a2f2f696d672e736869656c64732e696f2f6769746875622f73746172732f73716c6d617070726f6a6563742f73716c6d6170) |
![](https://camo.githubusercontent.com/46a20c48863abd0238f5255940347aefd4ceea38371f9d394d9e6322592be406/68747470733a2f2f696d672e736869656c64732e696f2f6769746875622f6c616e6775616765732f746f702f73716c6d617070726f6a6563742f73716c6d6170) |
Scanner/SQL |
sqlninja |
SQL Injection Tool |
![](https://camo.githubusercontent.com/c4496dd9bce3525f5ec3cdc233a75c54f1de47dd8a37afbff493610e416f2855/68747470733a2f2f696d672e736869656c64732e696f2f6769746875622f73746172732f78786772756e67652f73716c6e696e6a61) |
![](https://camo.githubusercontent.com/e5ff67b31d2ba6cea337e46275b9dc0865e6e28d30ae474edbd8275fc9c88b3c/68747470733a2f2f696d672e736869656c64732e696f2f6769746875622f6c616e6775616765732f746f702f78786772756e67652f73716c6e696e6a61) |
Scanner/SSL |
a2sv |
Auto Scanning to SSL Vulnerability |
![](https://camo.githubusercontent.com/41f779c314a77e3f353c270603b30a5637d057791b25b61bdca16874a5d346fa/68747470733a2f2f696d672e736869656c64732e696f2f6769746875622f73746172732f68616877756c2f61327376) |
![](https://camo.githubusercontent.com/dbf69a8f9e6cb26363a92872d9b9ab7f1d24adfd55fc600111f2a50144f8b23c/68747470733a2f2f696d672e736869656c64732e696f2f6769746875622f6c616e6775616765732f746f702f68616877756c2f61327376) |
Scanner/SSL |
testssl.sh |
Testing TLS/SSL encryption anywhere on any port |
![](https://camo.githubusercontent.com/72f18d15ed64b98d37e74590319dbcfa4fd169d2ea4427693cdd12926ac9b44c/68747470733a2f2f696d672e736869656c64732e696f2f6769746875622f73746172732f64727765747465722f7465737473736c2e7368) |
![](https://camo.githubusercontent.com/a6d61f9f3a662baa8a502862400d6b23e62afbb5f3de8abf481c506ddd9d6586/68747470733a2f2f696d672e736869656c64732e696f2f6769746875622f6c616e6775616765732f746f702f64727765747465722f7465737473736c2e7368) |
Scanner/WP |
wpscan |
WPScan is a free, for non-commercial use, black box WordPress Vulnerability Scanner written for security professionals and blog maintainers to test the security of their WordPress websites. |
![](https://camo.githubusercontent.com/c6351f3780c37f517f0ca39e349c139e67f4eaaf0b8a89b07ee2f8eb8c04833c/68747470733a2f2f696d672e736869656c64732e696f2f6769746875622f73746172732f77707363616e7465616d2f77707363616e) |
![](https://camo.githubusercontent.com/38cd1d88cfbadf4aef98f273f850e24fbe3c7270e0fb58cec44af0e160669cc7/68747470733a2f2f696d672e736869656c64732e696f2f6769746875622f6c616e6775616765732f746f702f77707363616e7465616d2f77707363616e) |
Scanner/WVS |
Striker |
Striker is an offensive information and vulnerability scanner. |
![](https://camo.githubusercontent.com/738af1f0660fc26db01c55155fc165429e03258e4f1b4a75cc9073893fdb40bf/68747470733a2f2f696d672e736869656c64732e696f2f6769746875622f73746172732f73306d6433762f537472696b6572) |
![](https://camo.githubusercontent.com/93ab6eed7f3df2c2ab1f472571d9fd6d34321d49544ef80e2857c7115204ce28/68747470733a2f2f696d672e736869656c64732e696f2f6769746875622f6c616e6775616765732f746f702f73306d6433762f537472696b6572) |
Scanner/WVS |
arachni |
Web Application Security Scanner Framework |
![](https://camo.githubusercontent.com/69912314cdf6568a2c92f2b5aadb953deeb472c270ea9cace2a028481002cf40/68747470733a2f2f696d672e736869656c64732e696f2f6769746875622f73746172732f41726163686e692f61726163686e69) |
![](https://camo.githubusercontent.com/b5c7bfe7213f5837d6ded04716ebdf65146309f03227bc40b704cc734500350a/68747470733a2f2f696d672e736869656c64732e696f2f6769746875622f6c616e6775616765732f746f702f41726163686e692f61726163686e69) |
Scanner/WVS |
nikto |
Nikto web server scanner |
![](https://camo.githubusercontent.com/a458bbf96f253bad79a720f102cf5fe2d4719ff88b4e54e13a9a974e9d68c1b1/68747470733a2f2f696d672e736869656c64732e696f2f6769746875622f73746172732f73756c6c6f2f6e696b746f) |
![](https://camo.githubusercontent.com/0c2edef1c00d8c3d374199df30f23011d12412334e5dfe6ac7b85163fb9ca4fd/68747470733a2f2f696d672e736869656c64732e696f2f6769746875622f6c616e6775616765732f746f702f73756c6c6f2f6e696b746f) |
Scanner/WVS |
zap-cli |
A simple tool for interacting with OWASP ZAP from the commandline. |
![](https://camo.githubusercontent.com/53b29be1ed7365cc62f253a5edf687e7165f94ec8ebe6e6c6b71127a697c8cdc/68747470733a2f2f696d672e736869656c64732e696f2f6769746875622f73746172732f4772756e6e792f7a61702d636c69) |
![](https://camo.githubusercontent.com/8c8650db903972ac62c5bf17fd13062b1563213d5b89d954383309cc3710f382/68747470733a2f2f696d672e736869656c64732e696f2f6769746875622f6c616e6775616765732f746f702f4772756e6e792f7a61702d636c69) |
Scanner/XSS |
XSStrike |
Most advanced XSS scanner. |
![](https://camo.githubusercontent.com/cadacfd3cfc213b2885ea8c76e7b46ea08974281be52301c96d64fe7ae9ea0fe/68747470733a2f2f696d672e736869656c64732e696f2f6769746875622f73746172732f73306d6433762f5853537472696b65) |
![](https://camo.githubusercontent.com/1ca22fabb05de27610bcc1b7f3c5c12894118a009a569b4b99276cae746d76d0/68747470733a2f2f696d672e736869656c64732e696f2f6769746875622f6c616e6775616765732f746f702f73306d6433762f5853537472696b65) |
Scanner/XSS |
xspear |
Powerfull XSS Scanning and Parameter analysis tool&gem |
![](https://camo.githubusercontent.com/4ccf6684fac8f7c6e3631795d3cecd5669dfeff60aa9c6aa39599f82f4994ecb/68747470733a2f2f696d672e736869656c64732e696f2f6769746875622f73746172732f68616877756c2f787370656172) |
![](https://camo.githubusercontent.com/dd0bd6e200a45528734585c910b602bea1518829c5c9de3ca85b53130b6ee2c9/68747470733a2f2f696d672e736869656c64732e696f2f6769746875622f6c616e6775616765732f746f702f68616877756c2f787370656172) |
Utility/CLIP |
ftc |
simple copy to file to clipboard |
![](https://camo.githubusercontent.com/eeb883085f728568fbf88316d1cf8d18e279e62d1f1f38e0722111ad902b808b/68747470733a2f2f696d672e736869656c64732e696f2f6769746875622f73746172732f68616877756c2f667463) |
![](https://camo.githubusercontent.com/16984ea89ee840e7a5eef9fd04506a791358f0e8b8604549c396563a021efffc/68747470733a2f2f696d672e736869656c64732e696f2f6769746875622f6c616e6775616765732f746f702f68616877756c2f667463) |
Utility/FIND |
fzf |
A command-line fuzzy finder |
![](https://camo.githubusercontent.com/1751f42f71641bd450a775f756afacfdfa8a622632a4ddc9af56a5a8dcbe1837/68747470733a2f2f696d672e736869656c64732e696f2f6769746875622f73746172732f6a756e6567756e6e2f667a66) |
![](https://camo.githubusercontent.com/03f691759cecd291f6783c8210d6b2cb72436d2acf47ca537265a3cae3249610/68747470733a2f2f696d672e736869656c64732e696f2f6769746875622f6c616e6775616765732f746f702f6a756e6567756e6e2f667a66) |
Utility/GREP |
gf |
A wrapper around grep, to help you grep for things |
![](https://camo.githubusercontent.com/9a5c39f7f456f8cf13f1b9966cf54f16455b36ffe3f097856fd5b977d31c106c/68747470733a2f2f696d672e736869656c64732e696f2f6769746875622f73746172732f746f6d6e6f6d6e6f6d2f6766) |
![](https://camo.githubusercontent.com/37ee4653260a3c2f1e6e2e3888daafbcb0123ac2b57f18f76d72d7058e636563/68747470733a2f2f696d672e736869656c64732e696f2f6769746875622f6c616e6775616765732f746f702f746f6d6e6f6d6e6f6d2f6766) |
Utility/JSON |
gron |
Make JSON greppable! |
![](https://camo.githubusercontent.com/2f269946b2314b4f12f5b82eb840a711f114455cbf7c212ea18f369d43054fcb/68747470733a2f2f696d672e736869656c64732e696f2f6769746875622f73746172732f746f6d6e6f6d6e6f6d2f67726f6e) |
![](https://camo.githubusercontent.com/95ec9a231d1d00a6a9cb8b25b21cec9fe8c32a790b40ae894ec84b236fd93bee/68747470733a2f2f696d672e736869656c64732e696f2f6769746875622f6c616e6775616765732f746f702f746f6d6e6f6d6e6f6d2f67726f6e) |
Utility/S3 |
s3reverse |
The format of various s3 buckets is convert in one format. for bugbounty and security testing. |
![](https://camo.githubusercontent.com/14cd1f616b5be31c7e965f598c5b6bf21a713b3e144f3e12c6d493c974a93de7/68747470733a2f2f696d672e736869656c64732e696f2f6769746875622f73746172732f68616877756c2f733372657665727365) |
![](https://camo.githubusercontent.com/d0d1db813f4eebec9bff6b030b0a18b813b5af7a968ba8e27a87fbde96f17a3a/68747470733a2f2f696d672e736869656c64732e696f2f6769746875622f6c616e6775616765732f746f702f68616877756c2f733372657665727365) |
Utility/VULN |
oxml_xxe |
A tool for embedding XXE/XML exploits into different filetypes |
![](https://camo.githubusercontent.com/f1b8fa8ba84053c99ff5b968548cf79a0e9b3740c6138f38f000e1bdce8c752f/68747470733a2f2f696d672e736869656c64732e696f2f6769746875622f73746172732f42756666616c6f57696c6c2f6f786d6c5f787865) |
![](https://camo.githubusercontent.com/48fb6b12a204fd619faf6c4ad9c02d817954b908b82740b899640d33b3315778/68747470733a2f2f696d672e736869656c64732e696f2f6769746875622f6c616e6775616765732f746f702f42756666616c6f57696c6c2f6f786d6c5f787865) |
Utility/VULN |
ysoserial |
A proof-of-concept tool for generating payloads that exploit unsafe Java object deserialization. |
![](https://camo.githubusercontent.com/6f454e9c331a534d0a910d296b0dbded8a3947095dfe8f53f2cd70cbb30abba8/68747470733a2f2f696d672e736869656c64732e696f2f6769746875622f73746172732f66726f686f66662f79736f73657269616c) |
![](https://camo.githubusercontent.com/c19281d34856b7b3a641150e74af3e7e121056cecad172c64f5b872732f605cc/68747470733a2f2f696d672e736869656c64732e696f2f6769746875622f6c616e6775616765732f746f702f66726f686f66662f79736f73657269616c) |