WPScan is an open source WordPress security scanner. You can use it to scan your WordPress website for known vulnerabilities...

PingCastle is a free, Windows-based utility to audit the risk level of your AD infrastructure and check for vulnerable...

CRXcavator automatically scans the entire Chrome Web Store every 3 hours and produces a quantified risk score for...

Sn1per works by automating a bunch of processes that collect basic recon on a target domain, (for example executing...

GoLismero is an open source framework for security testing. It's currently geared towards web security, but...

Arachni is a high performance web application security scanner built on the Ruby framework, aimed towards helping...

Acunetix is a dynamic web vulnerability scanner that automates web application security testing. The tool has an...

sqlmap is an open source penetration testing tool that automates the process of detecting and exploiting SQL injection...

Mobile Security Framework (MobSF) is an automated, all-in-one mobile application (Android/iOS/Windows) pen-testing,...

Burp Suite is an intercepting proxy server for security testing of web applications. It operates as a man-in-the-middle...