Top Tools This Month
|
sqlmap
Automate the process of detecting and exploiting SQL injection flaws and taking over of database servers.
🕸️ Web / API
-
🪟 Windows
🐧 Linux
-
🤑 Free
nuclei
Fast and customizable vulnerability scanner based on simple YAML based DSL.
🖥️ Infrastructure
🕸️ Web / API
-
🪟 Windows
🍎 MacOS
🐧 Linux
-
🤑 Free
feroxbuster
A fast, simple, recursive content discovery tool written in Rust.
🕸️ Web / API
-
🪟 Windows
🍎 MacOS
🐧 Linux
-
🤑 Free
kiterunner
Kiterunner is a tool that is capable of performing traditional content discovery and bruteforcing of routes/endpoints in modern applications.
🕸️ Web / API
-
🍎 MacOS
🐧 Linux
-
🤑 Free
dalfox
Dalfox is a powerful open-source XSS scanner and utility focused on automation.
🕸️ Web / API
-
🪟 Windows
🍎 MacOS
🐧 Linux
-
🤑 Free
crlfuzz
A fast tool to scan CRLF vulnerability written in Go
🕸️ Web / API
-
🪟 Windows
🍎 MacOS
🐧 Linux
-
🤑 Free
headi
Customisable and automated HTTP header injection
🕸️ Web / API
-
🐧 Linux
-
🤑 Free
byp4xx
40X/HTTP bypasser in Go. Features: Verb tampering, headers, #bugbountytips, User-Agents, extensions, default credentials...
🕸️ Web / API
-
🤑 Free
LEAKEY
A bash script which checks and validates leaked credentials.
🕸️ Web / API
-
🤑 Free
CloakQuest3r
Uncover the true IP address of websites safeguarded by Cloudflare & Others
🕸️ Web / API
-
🪟 Windows
🍎 MacOS
🐧 Linux
-
🤑 Free
clairvoyance
Obtain GraphQL API schema even if the introspection is disabled
🕸️ Web / API
-
🐧 Linux
-
🤑 Free
graphqlMaker
Finds graphql queries in javascript files
🕸️ Web / API
-
🐧 Linux
-
🤑 Free
No results found
Looks like there's nothing that matches your filters.
Check back in later!
Tools by category
🕸️ Web / API
🟦 Blue Team
🟥 Red Team
🟪 Purple Team
☁️ Cloud
📱 Mobile
📑 Compiled Application
🧑💻 Code Review
🔍️ OSINT
🖥️ Infrastructure
🤔 Other
Upvote to start earning kudos!
Pentest List is a curation of the latest top-rated tools and content in penetration testing and security defense. Discover cutting-edge tools, blogs, and more, covering port scanning, SQL injection, and a wide range of other vulnerability exploits.
2024 Pentest List, All Rights Reserved.