The OWASP Zed Attack Proxy (ZAP) is an easy to use integrated penetration testing tool for finding vulnerabilities in web applications. It is designed to be used by people with a wide range of security experience and as such is ideal for developers and functional testers who are new to penetration testing as well as being a useful addition to an experienced pen testers toolbox. 
 
Its functionality include Intercepting Proxy, Automated scanner, Forced browsing, Dynamic SSL certificates and lot more.

The OWASP Zed Attack Proxy (ZAP) is an easy to use integrated penetration testing tool for finding vulnerabilities in web applications. It is designed to be used by people with a wide range of security experience and as such is ideal for developers and functional testers who are new to penetration testing as well as being a useful addition to an experienced pen testers toolbox. 

Zaproxy - An easy to use integrated penetration testing tool for finding vulnerabilities

sqlmap is an open source penetration testing tool that automates the process of detecting and exploiting SQL injection flaws and taking over of database servers. It comes with a powerful detection engine, many niche features for the ultimate penetration tester and a broad range of switches lasting from database fingerprinting, over data fetching from the database, to accessing the underlying file system and executing commands on the operating system via out-of-band connections.
 
It has full support for six SQL injection techniques: boolean-based blind, time-based blind, error-based, UNION query, stacked queries and out-of-band.

sqlmap is an open source penetration testing tool that automates the process of detecting and exploiting SQL injection flaws and taking over of database servers. It comes with a powerful detection engine, many niche features for the ultimate penetration tester and a broad range of switches lasting from database fingerprinting, over data fetching from the database, to accessing the underlying file system and executing commands on the operating system via out-of-band connections.

Sqlmap - Automatic SQL injection and database takeover tool

OWASP Juice Shop is an intentionally insecure web application written entirely in JavaScript which encompasses the entire range of OWASP Top Ten and other severe security flaws. Each packaged distribution includes some binaries for SQLite bound to the OS and node.js version which npm install was executed on.

OWASP Juice Shop -  Probably the most modern and sophisticated insecure web application

BeEF is short for The Browser Exploitation Framework. It is a penetration testing tool that focuses on the web browser. BeEF allows the professional penetration tester to assess the actual security posture of a target environment by using client-side attack vectors. Unlike other security frameworks, BeEF looks past the hardened network perimeter and client system, and examines exploitability within the context of the one open door: the web browser. 
 
BeEF will hook one or more web browsers and use them as beachheads for launching directed command modules and further attacks against the system from within the browser context.

BeEF is short for The Browser Exploitation Framework. It is a penetration testing tool that focuses on the web browser. BeEF allows the professional penetration tester to assess the actual security posture of a target environment by using client-side attack vectors. Unlike other security frameworks, BeEF looks past the hardened network perimeter and client system, and examines exploitability within the context of the one open door: the web browser. 

Beef - Browser Exploitation Framework

Nogotofail is a network security testing tool designed to help developers and security researchers spot and fix weak TLS/SSL connections and sensitive cleartext traffic on devices and applications in a flexible, scalable, powerful way. It includes testing for common SSL certificate verification issues, HTTPS and TLS/SSL library bugs, SSL and STARTTLS stripping issues, cleartext issues, and more.

Nogotofail - Network Security Testing Tool

Metasploit, helps verify vulnerabilities and manage security assessments.  It makes it easy to automate all phases of a penetration test, from choosing the right exploits to streamlining evidence collection and reporting. 

Metasploit Framework - World's most used penetration testing software

hackerEnv is an automation tool that quickly and easily sweep IPs and scan ports, vulnerabilities and exploit them. Then, it hands you an interactive shell for further testing. Also, it generates HTML and docx reports. It uses other tools such as nmap, nikto, metasploit and hydra. Works in kali linux and Parrot OS.

hackerEnv - Automation tool that quickly and easily sweep IPs and scan ports, vulnerabilities and exploit them

Discover open source projects across all platforms

Projects

Zaproxy - An easy to use integrated penetration testing tool for finding vulnerabilities

Sqlmap - Automatic SQL injection and database takeover tool

OWASP Juice Shop - Probably the most modern and sophisticated insecure web application

Beef - Browser Exploitation Framework

Nogotofail - Network Security Testing Tool

Metasploit Framework - World's most used penetration testing software

hackerEnv - Automation tool that quickly and easily sweep IPs and scan ports, vulnerabilities and exploit them

TechStack

Tagcloud

License

Suggested keywords:

Projects

Zaproxy - An easy to use integrated penetration testing tool for finding vulnerabilities

Sqlmap - Automatic SQL injection and database takeover tool

OWASP Juice Shop - Probably the most modern and sophisticated insecure web application

Beef - Browser Exploitation Framework

Nogotofail - Network Security Testing Tool

Metasploit Framework - World's most used penetration testing software

hackerEnv - Automation tool that quickly and easily sweep IPs and scan ports, vulnerabilities and exploit them

TechStack

Tagcloud

License