Análise de Vulnerabilidades

Arsenal de ferramentas para hacking ético e pentesting

Destaque

TruffleHog

Análise de Vulnerabilidades
Grátis

Finds and verifies leaked secrets (API keys, tokens) in Git repos, S3, Docker and more.

secretsgitdevsecops
18,000
Ver
Destaque

garak

Análise de Vulnerabilidades
Grátis

NVIDIA's LLM vulnerability scanner: prompt injection, jailbreaks, data leakage.

aillmprompt-injection
4,000
Ver
Destaque

SecLists

Análise de Vulnerabilidades
Grátis

The reference wordlist collection: usernames, passwords, URLs, fuzzing payloads and more.

wordlistsfuzzingpasswords
60,000
Ver
Destaque

Caido

Análise de Vulnerabilidades
Grátis

Lightweight, modern web auditing proxy and Burp Suite alternative. Free plan available.

proxywebbug-bounty
Ver
Destaque

Nmap

Análise de Vulnerabilidades
Grátis

The worlds most famous network scanner. Discovers hosts, services and vulnerabilities with NSE scripts.

networkscannerport
Ver
Destaque

Trivy

Análise de Vulnerabilidades
Grátis

Vulnerability scanner for containers, filesystems and cloud configurations.

containerdockerkubernetes
23,800
Ver
Destaque

Semgrep

Análise de Vulnerabilidades
Grátis

Lightweight and fast static code analyzer. Finds bugs and security vulnerabilities.

sastcode-analysispython
10,500
Ver
Destaque

OWASP ZAP

Análise de Vulnerabilidades
Grátis

Free and open source web security scanner. Alternative to Burp Suite with CI/CD integration.

webscannerowasp
12,500
Ver
Destaque

Nessus

Análise de Vulnerabilidades
Pago

The worlds most used vulnerability scanner. Detects outdated software and missing patches.

scannerenterprisevulnerabilities
Ver
Destaque

OpenVAS

Análise de Vulnerabilidades
Grátis

Open source vulnerability scanner. Free alternative to Nessus with frequent updates.

scanneropen-sourcevulnerabilities
Ver
Destaque

WPScan

Análise de Vulnerabilidades
Grátis

WordPress vulnerability scanner. Detects vulnerable plugins and insecure configurations.

wordpresscmsscanner
8,600
Ver
Destaque

Burp Suite

Análise de Vulnerabilidades
Pago

The standard toolkit for web application security testing. Intercepting proxy and automated scanner.

webproxyscanner
Ver
Destaque

Nuclei Scanner

Análise de Vulnerabilidades
Grátis

Template-based vulnerability scanner. Fast and highly customizable for bug bounty.

scannervulnerabilitiesyaml
Ver

Gitleaks

Análise de Vulnerabilidades
Grátis

Detects credentials and secrets in Git history. Ideal for CI/CD and pre-commit hooks.

secretsgitdevsecops
18,000
Ver

feroxbuster

Análise de Vulnerabilidades
Grátis

Fast, recursive web content discovery tool written in Rust.

fuzzingdirectoriesweb
6,500
Ver

Arjun

Análise de Vulnerabilidades
Grátis

Finds hidden HTTP parameters on web endpoints. Great for expanding attack surface.

parameterswebbug-bounty
5,500
Ver

Masscan

Análise de Vulnerabilidades
Grátis

The worlds fastest port scanner. Can scan the entire Internet in under 6 minutes.

portscannerfast
23,500
Ver

RustScan

Análise de Vulnerabilidades
Grátis

Modern port scanner written in Rust. Extremely fast with Nmap integration.

portscannerrust
14,200
Ver

Nikto

Análise de Vulnerabilidades
Grátis

Web server scanner that looks for dangerous files, outdated versions and specific problems.

webscannerperl
8,200
Ver