Burp Suite is an intercepting proxy server for security testing of web applications. It operates as a man-in-the-middle...

Mobile Security Framework (MobSF) is an automated, all-in-one mobile application (Android/iOS/Windows) pen-testing,...

sqlmap is an open source penetration testing tool that automates the process of detecting and exploiting SQL injection...

Acunetix is a dynamic web vulnerability scanner that automates web application security testing. The tool has an...

Arachni is a high performance web application security scanner built on the Ruby framework, aimed towards helping...

GoLismero is an open source framework for security testing. It's currently geared towards web security, but...

Sn1per works by automating a bunch of processes that collect basic recon on a target domain, (for example executing...

CRXcavator automatically scans the entire Chrome Web Store every 3 hours and produces a quantified risk score for...

PingCastle is a free, Windows-based utility to audit the risk level of your AD infrastructure and check for vulnerable...

WPScan is an open source WordPress security scanner. You can use it to scan your WordPress website for known vulnerabilities...