Schwachstellenanalyse
Arsenal an Tools für ethisches Hacking und Pentesting
TruffleHog
SchwachstellenanalyseFinds and verifies leaked secrets (API keys, tokens) in Git repos, S3, Docker and more.
garak
SchwachstellenanalyseNVIDIA's LLM vulnerability scanner: prompt injection, jailbreaks, data leakage.
SecLists
SchwachstellenanalyseThe reference wordlist collection: usernames, passwords, URLs, fuzzing payloads and more.
Caido
SchwachstellenanalyseLightweight, modern web auditing proxy and Burp Suite alternative. Free plan available.
Nmap
SchwachstellenanalyseThe worlds most famous network scanner. Discovers hosts, services and vulnerabilities with NSE scripts.
Trivy
SchwachstellenanalyseVulnerability scanner for containers, filesystems and cloud configurations.
Semgrep
SchwachstellenanalyseLightweight and fast static code analyzer. Finds bugs and security vulnerabilities.
OWASP ZAP
SchwachstellenanalyseFree and open source web security scanner. Alternative to Burp Suite with CI/CD integration.
Nessus
SchwachstellenanalyseThe worlds most used vulnerability scanner. Detects outdated software and missing patches.
OpenVAS
SchwachstellenanalyseOpen source vulnerability scanner. Free alternative to Nessus with frequent updates.
WPScan
SchwachstellenanalyseWordPress vulnerability scanner. Detects vulnerable plugins and insecure configurations.
Burp Suite
SchwachstellenanalyseThe standard toolkit for web application security testing. Intercepting proxy and automated scanner.
Nuclei Scanner
SchwachstellenanalyseTemplate-based vulnerability scanner. Fast and highly customizable for bug bounty.
Gitleaks
SchwachstellenanalyseDetects credentials and secrets in Git history. Ideal for CI/CD and pre-commit hooks.
feroxbuster
SchwachstellenanalyseFast, recursive web content discovery tool written in Rust.
Arjun
SchwachstellenanalyseFinds hidden HTTP parameters on web endpoints. Great for expanding attack surface.
Masscan
SchwachstellenanalyseThe worlds fastest port scanner. Can scan the entire Internet in under 6 minutes.
RustScan
SchwachstellenanalyseModern port scanner written in Rust. Extremely fast with Nmap integration.
Nikto
SchwachstellenanalyseWeb server scanner that looks for dangerous files, outdated versions and specific problems.