Pentesting

Tools for authorized security assessment: content discovery, web application testing, vulnerability validation, credential auditing and reporting. Everything here assumes written scope.

9 of 9 tools5 subtopics

Refine with filters Request a tool

Subtopics

The branches this category is organised into. Counts reflect documented entries, not the number of tools that exist.

Web Application Testing
3
Proxying, fuzzing, and application-layer assessment workflows.
Open subtopic
Content Discovery
2
Directory, file and subdomain enumeration against authorized targets.
Open subtopic
Vulnerability Assessment
1
Detection logic, scanners and validation of reported findings.
Open subtopic
Credential & Hash Auditing
3
Password policy auditing and hash cracking in controlled labs.
Open subtopic
Reporting
0
Turning findings into notes, evidence and client-ready reports.
Unfilled — contribute

Pentesting tools

Sorted alphabetically; use the directory filters for platform or difficulty narrowing.

Filter within Pentesting

Pentesting

Subtopics

Web Application Testing

Content Discovery

Vulnerability Assessment

Credential & Hash Auditing

Reporting

Pentesting tools

Burp Suite

ffuf

Gobuster

Hashcat

httpx

Hydra

John the Ripper

Nuclei

SQLMap