Best Tools For Security Testing

Protect your user data and ensure your app is protocted against bad actors with these powerful tools & resources for security testing.

MalwareBazaarFree
Security Testing

The purpose of the project is to collect and share malware samples.

TrufflehogFree
Security Testing

Sniffing out credentials.

XSSHunterFree
Security Testing

Use Docker and Dockery Compose to test and find blind cross-site scripting vulnerabilities.

GradeJSFree
Security Testing

Analyze webpack production bundle

CherrybombFree
Security Testing

A CLI tool that helps you avoid undefined user behaviour by validating your API specifications.

BITBFree
Security Testing

Browser templates for Browser In The Browser (BITB) attack.

Lockfile LintFree
Security Testing

Lint an npm or Yarn lockfile to analyze and detect security issues via predefined security policies.

RapiDASTFree
Security Testing

A framework for continuous, proactive and fully automated dynamic scanning against web apps/API.

NogotofailFree
Security Testing

An on-path blackbox network traffic security testing tool

WfuzzFree
Security Testing

Automate web applications security assessments

beefFree
Security Testing

It is a penetration testing tool that focuses on the web browser.

ArachniFree
Security Testing

Web Application Security Scanner Framework

WapitiFree
Security Testing

Web vulnerability scanner written in Python3

Security ListFree
Security Testing

Curated lists of tools, tips and resources for protecting digital security and privacy

Violating GDPR?Free
Security Testing

Enter a URL and this tool will tell you if the website is violating GDPR laws.

Static Code AnalysisFree
Security Testing

List of Static Code Analyzers

DenyHostsFree
Security Testing

DenyHosts is a script intended to be run by Linux system administrators to help thwart SSH server attacks (also known as dictionary based attacks and brute force attacks).

Fail2banFree
Security Testing

It scans log files (e.g. /var/log/apache/error_log) and bans IPs that show the malicious signs -- too many password failures, seeking for exploits, etc

Mozilla ObservatoryFree
Security Testing

online tool that you can use to check any website’s header status.

PrivacyTestsFree
Security Testing

Open-source tests of web browser privacy.

SemgrepFree
Security Testing

Static analysis at ludicrous speed.

TerrascanFree
Security Testing

Static code analyzer for Infrastructure as Code

gitleaksFree
Security Testing

Scan git repos (or files) for secrets using regex and entropy 🔑

Deepfence ThreatMapperFree
Security Testing

Identify vulnerabilities in running containers, images, hosts and repositories

Awesome Penetration TestingFree
Security Testing

A collection of awesome penetration testing and offensive cybersecurity resources.

Mariana TrenchFree
Security Testing

Mariana Trench is a security focused static analysis platform targeting Android.

SonarLintFree
Security Testing

Clean Code starts in your IDE

Nuclei TemplatesFree
Security Testing

Community curated list of templates for the nuclei engine to find security vulnerabilities in applications.

Pentest BookmarkzFree
Security Testing

A collection of useful links for Pentesters

Mobile Security FrameworkFree
Security Testing

Mobile Security Framework (MobSF) is an automated, all-in-one mobile application (Android/iOS/Windows) pen-testing, malware analysis and security assessment framework capable of performing static and dynamic analysis.

Nmap Security ScannerFree
Security Testing

Security Testing

security.txtFree
Security Testing

Security standard

sqlmapFree
Security Testing

Automatic SQL injection and database takeover tool

TailsFree
Security Testing

Operating System

Kali LinuxFree
Security Testing

Operatng System

ZapFree
Security Testing

Scanning tool for security vulnerabilities