Industry-standard web application security testing toolkit.

Open-source web application security scanner.

Modern web security testing toolkit and proxy.

Interactive HTTPS proxy for penetration testing.

Web application attack and audit framework.

Web application vulnerability scanner.

Advanced XSS detection and exploitation suite.

Automatic SQL injection and database takeover tool.

Automated OS command injection and exploitation tool.

Automated NoSQL database enumeration and exploitation.

Search engine for Internet-connected devices and services.

Internet-wide asset discovery and attack surface management.

Cyberspace search engine for security assessment.

Searchable archive of exposed panels and misconfigurations found across domains by continuous internet-wide scanning.

Find domains and subdomains related to a given domain.

Fast subdomains enumeration tool.

Python tool to enumerate subdomains.

Wrapper around massdns for subdomain bruteforcing.

DNS enumeration and scanning tool.

High-performance DNS stub resolver.

DNS reconnaissance tool for locating non-contiguous IP space.

Project Discovery's internet-wide asset dataset.

Open-source vulnerability scanner and management solution.

Web server scanner for dangerous files and outdated software.

Comprehensive vulnerability assessment solution.

Automated web application security scanner.

Cloud-based security and compliance solutions.

Network discovery and security auditing tool.

WordPress security scanner.

Scanner detecting use of JavaScript libraries with known vulnerabilities.

Developer security platform for finding and fixing vulnerabilities.

CVE vulnerability database and integration platform.

Search public GitHub proof-of-concept repositories by CVE identifier.

Web path scanner and directory brute-forcing tool.

OWASP multi-threaded directory and file brute-forcing application.

Web application fuzzer for brute-forcing.

Collection of multiple types of lists for security assessments.

API platform for building and testing APIs.

API client for REST, GraphQL, and gRPC.

API endpoint and content discovery tool.

API security risks documentation and guidelines.

Penetration testing framework for exploit development.

Database of exploits and vulnerable software.

Command-line search tool for Exploit Database.

Browser Exploitation Framework for testing web browser security.

Automated mobile application security testing framework.

Dynamic instrumentation toolkit for reverse engineering.

Runtime mobile exploration toolkit powered by Frida.