A free and open-source deliberately insecure web application for security enthusiasts, developers, and students to discover and prevent web vulnerabilities.
#penetration-testing tools
236 results · page 2
A list of services and how to claim (sub)domains with dangling DNS records.
A technique for social engineering and untrusted command execution using ClickOnce technology
Cloud Security Suite (cs-suite) - Version 3.0 Usage for cloud security audits on AWS, GCP, Azure, and DigitalOcean.
A tool for discovering company infrastructure and apps on major cloud providers, beneficial for bug bounty hunters and penetration testers.
CloudFox helps gain situational awareness in unfamiliar cloud environments for penetration testers and offensive security professionals.
A python open source CMS scanner that automates the process of detecting security flaws of the most popular CMSs.
Adversary simulation and red team operations
Open source penetration testing tool for detecting and exploiting command injection vulnerabilities.
A penetration testing platform that allows security professionals to safely simulate attacks and identify vulnerabilities across network systems, endpoints, web applications, and users.
CrackMapExec (CME) - A tool for querying internal database for host and credential information in cybersecurity.
Command line tool for testing CRLF injection on a list of domains.
A tool to discover new target domains using Content Security Policy
Cybrary is an online learning platform that provides accessible and affordable training in cybersecurity skills.
A docker container with multiple vulnerable applications for cybersecurity training.
A deliberately weak and insecure implementation of GraphQL for testing and practicing GraphQL security
iOS application for testing iOS penetration testing skills in a legal environment.
Linux-based operating system intentionally vulnerable for cybersecurity practice.
A deliberately vulnerable modern day app with lots of DOM related bugs
Sysreptor offers a customizable reporting solution for offensive security assessments.
Darkarmour is a Windows AV evasion tool that helps bypass antivirus software, allowing for the creation of undetectable malware.
A tool that recovers passwords from pixelized screenshots
A multi-threaded Java application designed to brute force directories and filenames on web servers, helping identify hidden content and potential attack vectors. Free and included in Kali L…
An intentionally insecure Android app designed to teach developers and security professionals about common app vulnerabilities.
Load more tools
Showing 48 of 236