Pentesting Tools I Use Everyday

• ZAP

  61 12,116 9.2 Java

  The ZAP core project

  

Learn more about ZAP here: https://www.zaproxy.org/

• ffuf

  17 11,618 5.3 Go

  Fast web fuzzer written in Go

  

Learn more about ffuf here: https://github.com/ffuf/ffuf

• InfluxDB

  www.influxdata.com featured

  Power Real-Time Data Analytics at Scale. Get real-time insights from all types of time series data with InfluxDB. Ingest, query, and analyze billions of data points in real-time with unbounded cardinality.

  

• john

  77 9,428 9.4 C

  John the Ripper jumbo - advanced offline password cracker, which supports hundreds of hash and cipher types, and runs on many operating systems, CPUs, GPUs, and even some FPGAs

  

Learn more about John the Ripper here: https://www.openwall.com/john/

• dirsearch

  12 11,384 7.7 Python

  Web path scanner

Learn more about dirsearch here: https://github.com/maurosoria/dirsearch

• Metasploit

  117 33,018 10.0 Ruby

  Metasploit Framework

  

Learn more about Metasploit here: https://www.metasploit.com/

• gau

  6 3,632 6.4 Go

  Fetch known URLs from AlienVault's Open Threat Exchange, the Wayback Machine, and Common Crawl.

Learn more about gau here: https://github.com/lc/gau

• SQLMap

  40 30,851 8.7 Python

  Automatic SQL injection and database takeover tool

  

Learn more about sqlmap here: https://sqlmap.org/

• SaaSHub

  www.saashub.com featured

  SaaSHub - Software Alternatives and Reviews. SaaSHub helps you find the best software and product alternatives

  

• nuclei

  17 17,611 9.8 Go

  Fast and customizable vulnerability scanner based on simple YAML based DSL.

  

Learn more about nuclei here: https://nuclei.projectdiscovery.io/

Suggest a related project