Tools that scan

Discover hosts, services, vulnerabilities or assets.

150 tools indexed

ffuf

—

Fast web fuzzer written in Go.

FuzzScanWeb apps

GoMIT

fscan

—

Intranet comprehensive scanner.

ScanExploitNetworksActive Directory

GoMIT

garak

—

LLM vulnerability scanner.

ScanFuzzWeb appsSource code

PythonApache-2.0

gori

—

Terminal HTTP intercepting proxy and web pentest toolkit.

InterceptFuzzWeb apps

CrystalApache-2.0

gosec

—

Golang security checker.

ScanAnalyzeSource code

GoApache-2.0

hacksguard

—

Terminal-based malware triage toolkit written in Rust

AnalyzeScanBinaries

RustMIT

hping3

—

TCP/IP packet crafter and analyzer.

ScanInterceptNetworks

CGPL-2.0

httpx

—

Fast HTTP toolkit.

ReconScanWeb apps

GoMIT

kcwarden

—

Audit Keycloak configuration for security misconfigurations

ScanHardenCloudWeb apps

PythonApache-2.0

kube-bench

—

CIS benchmarks for Kubernetes.

ScanHardenCloud

GoApache-2.0

kube-hunter

—

Hunt for vulnerabilities in Kubernetes.

ScanCloud

PythonApache-2.0

linuxprivchecker

—

Linux privesc enumeration script.

ReconScanEndpoints

PythonCustom

malcontent

—

Detect malicious capabilities in code, binaries and containers.

ScanAnalyzeBinariesSource code

GoApache-2.0

mithril

—

Static security scanner for firmware and IoT images.

ScanAnalyzeBinaries

C++MIT

moria

—

Firmware and IoT image identification and extraction.

AnalyzeScanBinaries

C++MIT

openqodex

—

Pre-push AI code review with SAST, secret and dependency scanners.

ScanAutomateSource code

TypeScriptApache-2.0

open·kritt

—

Orchestrate AI agents to find vulnerabilities in code

ScanAnalyzeSource code

JavaScriptAGPL-3.0

promptfoo

—

Red-team prompts, agents and RAGs.

ScanFuzzWeb appsSource code

TypeScriptMIT

ptai

—

AI pentest tool that re-runs every exploit to verify it.

AutomateScanWeb apps

PythonMIT

pwned-deps

—

Lockfile scanner for known-compromised dependencies.

ScanSource code

PythonApache-2.0

reNgine

—

Automated reconnaissance framework for web applications

ReconScanWeb appsNetworks

PythonGPL-3.0

reburp

—

Burp Suite extension exposing the Montoya API as a local REST API.

AutomateScanWeb apps

KotlinMIT

reconFTW

—

Automated recon and web vulnerability-scanning framework.

ReconScanWeb appsNetworks

ShellMIT

snowpick

—

Scan ServiceNow instances for unauthenticated data exposure

ScanReconWeb appsCloud

GoMIT