Firefox add-on that lets you change headers and request parameters before they're sent to the server. Unlike proxy request modifiers, it's integrated into the browser, so it has no problem with HTTPS connections, client authentication certificates, or other features that...
Cost / License
- Free
- Open Source
Application type
Alerts
- Discontinued
Platforms
- Mac
- Windows
- Linux
- Firefox


Medusa is intended to be a speedy, massively parallel, modular, login brute-forcer. The goal is to support as many services which allow remote authentication as possible.
Online platform to:
- manage penetration testing,
- generate reports, and
- enable direct collaboration between every one involved in penetration testing process.
Client-facing solution with integrated issue library + high-quality automated reports.


+1
We facilitate quick discovery and reporting of vulnerabilities in websites and network infrastructures, providing a set of powerful and tightly integrated pentesting tools that enable you to perform easier, faster, and more effective pentests.
Cost / License
- Freemium
- Proprietary
Application types
Platforms
- Online
- Software as a Service (SaaS)


+9
Put yourself in the shoes of a hacker! Without technical expertise, launch an audit to detect security flaws on your website or web application. Online website vulnerability scanner. No installation required. ISO & RGPD compliant. How to avoid hackers?

Designed to be fast, easy to use and provide a minimal yet complete desktop environment. BlackBuntu Linux it's also a software repositories that are constantly updated to the latest stable version of the most popular ethical hacking tools.


+4
Pentoo is a security-focused livecd based on Gentoo. It's basically a Gentoo install with lots of customized tools, a customized kernel, and much more.



L0phtCrack is a password auditing and recovery application (now called L0phtCrack 7) originally produced by Mudge from L0pht Heavy Industries. It is used to test password strength and sometimes to recover lost Microsoft Windows passwords, by using dictionary, brute-force, hybrid...
Cost / License
- Free
- Open Source
Alerts
- Discontinued
Platforms
- Windows

Offensive Security, creators of Kali Linux, offers hands-on, practical online penetration testing training and certification for InfoSec professionals.



Human-in-the-loop penetration testing enhanced with AI. Identify vulnerabilities faster, reduce risk, and stay audit-ready with actionable reports and real-time visibility.



Barrion helps developers and tech teams secure their web applications by automating security checks. It scans websites and web apps for common vulnerabilities, evaluates SSL/TLS and email security (SPF, DKIM, DMARC), and checks security headers and outdated software.
Cost / License
- Freemium
- Proprietary
Application type
Platforms
- Online
- Software as a Service (SaaS)

We host only the best cyber security tools for you to use at your disposal; we simplify the scripts to make it quicker and easier to use. Simply point our service towards your website or network and see the information roll in.
Cost / License
- Freemium
- Proprietary
Application types
Platforms
- Mac
- Windows
- Linux
- Online
- Android
- iPhone
- Android Tablet
- Windows Phone
- iPad

Damn Vulnerable Web App (DVWA) is a PHP/MySQL web application that is damn vulnerable. Its main goals are to be an aid for security professionals to test their skills and tools in a legal environment, help web developers better understand the processes of securing web...

Bugtraq system offers the most comprehensive distribution, optimal, and stable with automated services manager in real time.


+2
In today's digital landscape, your online presence is constantly at risk. Cybercriminals are becoming increasingly sophisticated, and the stakes have never been higher. Your sensitive information, client data, and even your reputation are on the line.
Cost / License
- Freemium
- Proprietary
Platforms
- Online

DorkPlus is a all in one solution with more than 10 modules including a Web Scraper (Google, Bing, Ask...), a Vulnerability Scanner (SQL, XSS, ENV..), a Database Dumper, and more unique built-in tools dedicated to pentesting.


+1
This open-source project aims to provide a user-friendly tool to learn about keystroke injection attacks and 'BadUSBs'.


WHID Injector was born from the need for cheap and dedicated hardware that could be remotely controlled in order to conduct HID attacks. WHID stands for WiFi HID Injector. It is a cheap but reliable piece of hardware designed to fulfill pentesters needs related to HID Attacks...



Pentester Academy offers comprehensive, hands-on, practical and affordable infosec training through extensive online courses and web application labs.



PentesterLab offers a massive series of online courses covering everything from the basics of web hacking to advanced vulnerabilities. Courses are mostly available through subscriptions with various free courses available publicly.

Hexway Apiary is a self-hosted platform for managing all aspects of IT security audits from planning to retesting in one place.


+2
TEQNIX is a platform with a number of tools and strategies for penetration testers, red teamers and secops. It promotes automation with scanners and utilities and also assist in a real-time attack situation.
Cost / License
- Free
- Proprietary
Application type
Platforms
- Software as a Service (SaaS)



Intruder is a security monitoring platform for internet-facing systems.
Intruder provides an easy to use security solution which continually scans your digital assets, highlighting vulnerabilities and outlining remediation advice in simple terms.
Cost / License
- Paid
- Proprietary
Application types
Platforms
- Online
Beagle Security helps companies to identify vulnerabilities in their web applications & APIs and remediate them with actionable insights before hackers harm them in any manner. While manual penetration testing takes about two to three weeks, with Beagle Security, you can get...
Cost / License
- Paid
- Proprietary
Application types
Platforms
- Software as a Service (SaaS)




































































