Tools that scan

Discover hosts, services, vulnerabilities or assets.

131 tools indexed

ptai

—

AI pentest tool that re-runs every exploit to verify it.

AutomateScanWeb apps

PythonMIT

pwned-deps

—

Lockfile scanner for known-compromised dependencies.

ScanSource code

PythonApache-2.0

reNgine

—

Automated reconnaissance framework for web applications

ReconScanWeb appsNetworks

PythonGPL-3.0

reconFTW

—

Automated recon and web vulnerability-scanning framework.

ReconScanWeb appsNetworks

ShellMIT

snowpick

—

Scan ServiceNow instances for unauthenticated data exposure

ScanReconWeb appsCloud

GoMIT

sqlmap

—

Automatic SQL injection and database takeover.

ExploitScanWeb apps

PythonGPL-2.0

ssh-audit

—

SSH server and client config auditor.

ScanHardenNetworksEndpoints

PythonMIT

testssl.sh

—

Test TLS/SSL on any port.

ScanAnalyzeWeb appsNetworks

ShellGPL-2.0

tfsec

—

Terraform static analysis.

ScanHardenIaCCloud

GoMIT

w3af

—

Web application attack and audit framework.

ScanExploitWeb apps

PythonGPL-2.0

wafw00f

—

WAF fingerprinting.

ReconScanWeb apps

PythonBSD-3-Clause