Web Scanning

httpx

Go

Fast multi-purpose HTTP toolkit. Probes for running HTTP servers with retries and fallbacks.

Nikto

Perl

Classic web server scanner. Tests for dangerous files, outdated server software, and version-specific problems.

Gobuster

Go

Directory/file, DNS, and vhost busting tool. Brute-forces URIs, DNS subdomains, virtual host names, and S3 buckets.

Feroxbuster

Rust

Featured

Fast, recursive content discovery tool written in Rust. Like gobuster on steroids with auto-recursion.

Burp Suite Community

Java

Featured

Web vulnerability scanner and proxy. Intercept, modify, and replay HTTP/S traffic for web app testing.

ffuf

Go

Featured

Fast web fuzzer written in Go. Fuzz anything - URLs, headers, POST data - with blazing speed.

Katana

Go

Next-gen crawling and spidering framework. Headless browser and standard mode with automatic form fill.

waybackurls

Go

Fetch all URLs that the Wayback Machine knows about for a domain. Gold mine for hidden endpoints.

gau

Go

Get All URLs. Fetches known URLs from AlienVault OTX, Wayback Machine, Common Crawl, and URLScan.

Arjun

Python

HTTP parameter discovery suite. Finds hidden query parameters in web applications using smart heuristics.

Wfuzz

Python

Web application fuzzer. Brute force parameters, directories, headers, and authentication credentials.

WhatWeb

Ruby

Web technology fingerprinter. Identifies CMS, frameworks, JS libraries, servers, and analytics from HTTP responses.

ParamSpider

Python

Mine parameters from web archives for any domain to find hidden attack surfaces.

GoSpider

Go

Fast web spider written in Go for crawling and collecting URLs, subdomains, and endpoints.

Hakrawler

Go

Simple Go web crawler for quick discovery of endpoints and assets within a web application.

LinkFinder

Python

Python script to discover endpoints and their parameters in JavaScript files.

SecretFinder

Python

Discover sensitive data like API keys, tokens, and credentials in JavaScript files.

JSFScan

Shell

Automation framework combining multiple JS analysis tools for comprehensive JavaScript recon.

dirsearch

Python

Mature web path discovery tool with recursive scanning, wordlist-based bruteforcing, and extensive extension support.

meg

Go

Fetch many paths for many hosts concurrently without overloading servers - ideal for large-scale recon on bug bounties.

Caido

Rust

Lightweight and modern web security testing toolkit built in Rust, designed as a fast alternative to Burp Suite.

SilverBullet

C#

Multi-purpose automation suite for web testing with configurable request sequences, scraping, and credential testing.

Interactsh

Go

Out-of-band interaction server. Detect blind vulnerabilities with DNS, HTTP, SMTP, and LDAP callback listeners.

Aquatone

Go

Visual web discovery tool. Takes screenshots of web pages across large target lists and generates browsable HTML reports.

EyeWitness

Python

Web screenshot and categorization tool. Captures screenshots of web pages, RDP, and VNC services with auto-categorization.

CRLFuzz

Go

CRLF injection scanner. Fast detection of HTTP response splitting vulnerabilities across multiple URLs.

Smuggler

Python

HTTP request smuggling tester. Detects CL.TE, TE.CL, and TE.TE desync vulnerabilities in web servers and proxies.

reNgine

Python

Automated reconnaissance framework with correlated scan engines, continuous monitoring, and vulnerability reporting.

reconftw

Shell

Automated recon pipeline orchestrating subdomain enum, vulnerability scanning, and OSINT via best-of-breed tools.

wafw00f

Python

Identify and fingerprint Web Application Firewall products protecting a site.

SSLyze

Python

Fast TLS/SSL configuration analyzer for identifying misconfigurations.

Wapiti

Python

Black-box web application vulnerability scanner with built-in fuzzer modules.

Bearer

Go

SAST tool scanning code for security risks, sensitive data flows, and vulnerabilities.

Bandit

Python

Python static analysis security linter to find common code vulnerabilities.

OWASP ZAP

Java

Full-featured intercepting proxy for web application security testing. Automated scanners, fuzzing, scripting, and API testing built in.

Kiterunner

Go

API-aware content discovery tool that brute-forces routes using contextual wordlists derived from real API schemas.

Tplmap

Python

Automated server-side template injection detection and exploitation tool supporting 15+ template engines.

Brakeman

Ruby

Static analysis security scanner for Ruby on Rails applications. Finds SQL injection, XSS, and dozens of Rails-specific vulnerabilities.

BunkerWeb

Python

Open-source Web Application Firewall with built-in security hardening, bot detection, and DDoS protection.

Shannon

TypeScript

Featured

Autonomous AI pentester for web apps and APIs. Analyzes source code, identifies attack vectors, and executes real exploits to prove vulnerabilities.

Lonkero

Rust

Professional web app scanner with 126+ checks, ML-powered false positive reduction, proof-based XSS detection, and blind SQLi engine.