Awesome Bug Bounty Tools
Section: Vulnerability Scanners · Metasploit Framework
FreshScore 89
Entry
Metasploit
Appears in 7 awesome lists
A tool for developing and executing exploit code against a remote target machine. Other important sub-projects include the Opcode Database, shellcode archive and related research.
Open github.comrapid7/metasploit-framework
Found in these lists
Awesome CTF
Section: Web
StaleScore 58
Awesome Pentest Cheat Sheets
Section: Windows Privilege Escalation · post/multi/recon/local_exploit_suggester - suggests local meterpreter exploits that can be used; post/windows/gather/enum_patches - helps to identify any missing patches
ArchivedScore 50
Awesome Ruby
Section: Security · World's most used penetration testing software.
FreshScore 88
Awesome Security
Section: Scanning / Pentesting · A tool for developing and executing exploit code against a remote target machine. Other important sub-projects include the Opcode Database, shellcode archive and related research.
SlowScore 70
Awesome Hacking -An Amazing Project
Section: Tools · A computer security project that provides information about security vulnerabilities and aids in penetration testing and IDS signature development.
StaleScore 59
Welcome to Awesome Fuzzing
Section: Network Protocol Fuzzers · A framework which contains some fuzzing capabilities via Auxiliary modules.
StaleScore 55
Often listed next to it
Uglify
A JavaScript minifier. Removes everything that makes the code readable and pretty to make it smaller.
In 8 listsDetails
nuclei
Nuclei is a fast, customizable vulnerability scanner powered by the global security community and built on a simple YAML-based DSL, enabling collaboration to tackle trending vulnerabilities on the internet. It helps you find vulnerabilities in your applications, APIs, networks, DNS, and cloud…
In 8 listsDetails
PowerSploit
PowerSploit is a collection of Microsoft PowerShell modules that can be used to aid penetration testers during all phases of an assessment.
In 7 listsDetails
Lonkero
Enterprise-grade web vulnerability scanner with 60+ attack modules, built in Rust for penetration testing and security assessments.
In 4 listsDetails
nikto
Noisy but fast black box web server and web application vulnerability scanner.
In 4 listsDetails
Osmedeus
Osmedeus is a Workflow Engine for Offensive Security. It was designed to build a foundation with the capability and flexibility that allows you to build your own reconnaissance system and run it on a large number of targets.
In 4 listsDetails
OWASP ZAP
World’s most popular free web security tools and is actively maintained by a dedicated international team of volunteers
In 4 listsDetails
retire.js
scanner detecting the use of JavaScript libraries with known vulnerabilities. Can also generate an SBOM of the libraries it finds.
In 3 lists