Vulnerability Scanning & Discovery Tools

Nikto

Web server scanner that checks for dangerous files, outdated software, misconfigurations, and known web server vulnerabilities.

Greenbone OpenVAS

Vulnerability assessment platform used to scan systems and identify known vulnerabilities and security weaknesses.

Tenable Nessus

Vulnerability scanner used to identify vulnerabilities, misconfigurations, missing patches, and compliance issues.

TruffleHog

Secret-scanning tool used to identify exposed credentials, API keys, tokens, and other secrets in repositories and files.

Grype

Vulnerability scanner for container images and software packages.

Trivy

Security scanner commonly used for containers, filesystems, repositories, Kubernetes, and infrastructure configurations.

Kube-hunter

Tool designed to identify security weaknesses and attack surfaces in Kubernetes environments.

PowerSploit

PowerShell-based collection of penetration-testing and post-exploitation scripts.

BloodHound

Active Directory attack-path analysis tool that maps relationships and permissions to identify potential attack paths.