Analyse de Vulnérabilités
Arsenal d'outils pour le hacking éthique et le pentesting
TruffleHog
Analyse de VulnérabilitésFinds and verifies leaked secrets (API keys, tokens) in Git repos, S3, Docker and more.
garak
Analyse de VulnérabilitésNVIDIA's LLM vulnerability scanner: prompt injection, jailbreaks, data leakage.
SecLists
Analyse de VulnérabilitésThe reference wordlist collection: usernames, passwords, URLs, fuzzing payloads and more.
Caido
Analyse de VulnérabilitésLightweight, modern web auditing proxy and Burp Suite alternative. Free plan available.
Nmap
Analyse de VulnérabilitésThe worlds most famous network scanner. Discovers hosts, services and vulnerabilities with NSE scripts.
Trivy
Analyse de VulnérabilitésVulnerability scanner for containers, filesystems and cloud configurations.
Semgrep
Analyse de VulnérabilitésLightweight and fast static code analyzer. Finds bugs and security vulnerabilities.
OWASP ZAP
Analyse de VulnérabilitésFree and open source web security scanner. Alternative to Burp Suite with CI/CD integration.
Nessus
Analyse de VulnérabilitésThe worlds most used vulnerability scanner. Detects outdated software and missing patches.
OpenVAS
Analyse de VulnérabilitésOpen source vulnerability scanner. Free alternative to Nessus with frequent updates.
WPScan
Analyse de VulnérabilitésWordPress vulnerability scanner. Detects vulnerable plugins and insecure configurations.
Burp Suite
Analyse de VulnérabilitésThe standard toolkit for web application security testing. Intercepting proxy and automated scanner.
Nuclei Scanner
Analyse de VulnérabilitésTemplate-based vulnerability scanner. Fast and highly customizable for bug bounty.
Gitleaks
Analyse de VulnérabilitésDetects credentials and secrets in Git history. Ideal for CI/CD and pre-commit hooks.
feroxbuster
Analyse de VulnérabilitésFast, recursive web content discovery tool written in Rust.
Arjun
Analyse de VulnérabilitésFinds hidden HTTP parameters on web endpoints. Great for expanding attack surface.
Masscan
Analyse de VulnérabilitésThe worlds fastest port scanner. Can scan the entire Internet in under 6 minutes.
RustScan
Analyse de VulnérabilitésModern port scanner written in Rust. Extremely fast with Nmap integration.
Nikto
Analyse de VulnérabilitésWeb server scanner that looks for dangerous files, outdated versions and specific problems.