OpenVAS

Fast vulnerability scanner driven by YAML templates. Thousands of community-contributed detection templates.

Automatic SQL injection and database takeover tool. Detects and exploits SQL injection flaws.

WordPress security scanner. Enumerates plugins, themes, users, and checks for known vulnerabilities.

Advanced XSS detection suite. Fuzzing engine, context analysis, and WAF detection/bypass capabilities.

Automated OS command injection exploitation tool. Tests web apps for command injection vulnerabilities.

Command-line tool for checking TLS/SSL ciphers, protocols, and cryptographic flaws on any port.