Category

GraphQLmap is a scripting engine for GraphQL endpoint pentesting, automating queries and fuzzing for vulnerabilities.

Grep is a code search tool by Vercel that allows users to search code, files, and paths across a million public GitHub repositories.

Next‑gen autonomous penetration testing with NodeZero®—Horizon3.ai uncovers real‑world attack paths across cloud, on‑prem, and hybrid environments without human intervention.

Interactsh is a tool and service for capturing and handling out-of-band interactions during security testing.

JWT Debugger is a web application to create, encode, decode, and debug JWT (JSON Web Tokens).

Mobile Security Framework (MobSF) is a mobile application security assessment framework for static and dynamic analysis.

Moxy is an open-source DAST tool with agentic AI for modern web application security testing and automated pentesting workflows.

Nessus Essentials is a free vulnerability scanner by Tenable, offering high-speed, in-depth scanning for up to 16 IP addresses.

Nikto is an open-source web server scanner that performs comprehensive tests against web servers for multiple vulnerabilities.

Nuclei is a fast, customizable vulnerability scanner using YAML templates to detect vulnerabilities in applications, networks, and cloud.

Community-curated templates for the Nuclei scanner to find security vulnerabilities in applications. Enhance your security testing.

A comprehensive guide to testing the security of web applications and web services, providing a framework of best practices.