ZAP is an open-source web application security scanner. It helps identify vulnerabilities in web applications during development and testing. ZAP can perform automated scans for common security issues like SQL injection, cross-site scripting (XSS), and more. It also has features for manual testing and analysis of application security.
Wapiti is another open-source web application vulnerability scanner. It performs a wide range of security tests, including SQL injection, XSS, command injection, and more. It generates detailed reports of vulnerabilities found during the scan.
Nikto is a web server scanner that focuses on finding security issues on web servers. It can detect various vulnerabilities and misconfigurations, such as outdated software versions, common CGI vulnerabilities, and more. Nikto is often used for reconnaissance in ethical hacking and security testing.
SQLMap is an open-source penetration testing tool specializes in detecting and exploiting SQL injection vulnerabilities in web applications. It automates the process of identifying SQL injection vulnerabilities and can extract data from databases through these vulnerabilities. NMAP (Network Mapper) network scanning tool used for network discovery and vulnerability assessment. NMAP can identify open ports, services, and hosts on a network, helping to discover potential security risks or misconfigurations.