Análise de Vulnerabilidades
Arsenal de ferramentas para hacking ético e pentesting
TruffleHog
Análise de VulnerabilidadesFinds and verifies leaked secrets (API keys, tokens) in Git repos, S3, Docker and more.
garak
Análise de VulnerabilidadesNVIDIA's LLM vulnerability scanner: prompt injection, jailbreaks, data leakage.
SecLists
Análise de VulnerabilidadesThe reference wordlist collection: usernames, passwords, URLs, fuzzing payloads and more.
Caido
Análise de VulnerabilidadesLightweight, modern web auditing proxy and Burp Suite alternative. Free plan available.
Nmap
Análise de VulnerabilidadesThe worlds most famous network scanner. Discovers hosts, services and vulnerabilities with NSE scripts.
Trivy
Análise de VulnerabilidadesVulnerability scanner for containers, filesystems and cloud configurations.
Semgrep
Análise de VulnerabilidadesLightweight and fast static code analyzer. Finds bugs and security vulnerabilities.
OWASP ZAP
Análise de VulnerabilidadesFree and open source web security scanner. Alternative to Burp Suite with CI/CD integration.
Nessus
Análise de VulnerabilidadesThe worlds most used vulnerability scanner. Detects outdated software and missing patches.
OpenVAS
Análise de VulnerabilidadesOpen source vulnerability scanner. Free alternative to Nessus with frequent updates.
WPScan
Análise de VulnerabilidadesWordPress vulnerability scanner. Detects vulnerable plugins and insecure configurations.
Burp Suite
Análise de VulnerabilidadesThe standard toolkit for web application security testing. Intercepting proxy and automated scanner.
Nuclei Scanner
Análise de VulnerabilidadesTemplate-based vulnerability scanner. Fast and highly customizable for bug bounty.
Gitleaks
Análise de VulnerabilidadesDetects credentials and secrets in Git history. Ideal for CI/CD and pre-commit hooks.
feroxbuster
Análise de VulnerabilidadesFast, recursive web content discovery tool written in Rust.
Arjun
Análise de VulnerabilidadesFinds hidden HTTP parameters on web endpoints. Great for expanding attack surface.
Masscan
Análise de VulnerabilidadesThe worlds fastest port scanner. Can scan the entire Internet in under 6 minutes.
RustScan
Análise de VulnerabilidadesModern port scanner written in Rust. Extremely fast with Nmap integration.
Nikto
Análise de VulnerabilidadesWeb server scanner that looks for dangerous files, outdated versions and specific problems.