Medusa is intended to be a speedy, massively parallel, modular, login brute-forcer. The goal is to support as many services which allow remote authentication as possible.
BreachDirectory allows you to search through all public data breaches to make sure your emails, usernames, passwords, and domains haven't been compromised.


+2
Firefox add-on that lets you change headers and request parameters before they're sent to the server. Unlike proxy request modifiers, it's integrated into the browser, so it has no problem with HTTPS connections, client authentication certificates, or other features that...
Cost / License
- Free
- Open Source
Application type
Alerts
- Discontinued
Platforms
- Mac
- Windows
- Linux
- Firefox


We facilitate quick discovery and reporting of vulnerabilities in websites and network infrastructures, providing a set of powerful and tightly integrated pentesting tools that enable you to perform easier, faster, and more effective pentests.
Cost / License
- Freemium
- Proprietary
Application types
Platforms
- Online
- Software as a Service (SaaS)


+9
Put yourself in the shoes of a hacker! Without technical expertise, launch an audit to detect security flaws on your website or web application. Online website vulnerability scanner. No installation required. ISO & RGPD compliant. How to avoid hackers?
Cost / License
- Paid
- Proprietary
Platforms
- Online

Online platform to:
- manage penetration testing,
- generate reports, and
- enable direct collaboration between every one involved in penetration testing process.
Client-facing solution with integrated issue library + high-quality automated reports.


+1
Designed to be fast, easy to use and provide a minimal yet complete desktop environment. BlackBuntu Linux it's also a software repositories that are constantly updated to the latest stable version of the most popular ethical hacking tools.


+4
L0phtCrack is a password auditing and recovery application (now called L0phtCrack 7) originally produced by Mudge from L0pht Heavy Industries. It is used to test password strength and sometimes to recover lost Microsoft Windows passwords, by using dictionary, brute-force, hybrid...
Cost / License
- Free
- Open Source
Alerts
- Discontinued
Platforms
- Windows

Pentoo is a security-focused livecd based on Gentoo. It's basically a Gentoo install with lots of customized tools, a customized kernel, and much more.



Offensive Security, creators of Kali Linux, offers hands-on, practical online penetration testing training and certification for InfoSec professionals.



We host only the best cyber security tools for you to use at your disposal; we simplify the scripts to make it quicker and easier to use. Simply point our service towards your website or network and see the information roll in.
Cost / License
- Freemium
- Proprietary
Application types
Platforms
- Mac
- Windows
- Linux
- Online
- Android
- iPhone
- Android Tablet
- Windows Phone
- iPad

Bugtraq system offers the most comprehensive distribution, optimal, and stable with automated services manager in real time.


+2
TEQNIX is a platform with a number of tools and strategies for penetration testers, red teamers and secops. It promotes automation with scanners and utilities and also assist in a real-time attack situation.
Cost / License
- Free
- Proprietary
Application type
Platforms
- Software as a Service (SaaS)



Hexway Apiary is a self-hosted platform for managing all aspects of IT security audits from planning to retesting in one place.


+2
Pentester Academy offers comprehensive, hands-on, practical and affordable infosec training through extensive online courses and web application labs.



PentesterLab offers a massive series of online courses covering everything from the basics of web hacking to advanced vulnerabilities. Courses are mostly available through subscriptions with various free courses available publicly.

Intruder is a security monitoring platform for internet-facing systems.
Intruder provides an easy to use security solution which continually scans your digital assets, highlighting vulnerabilities and outlining remediation advice in simple terms.
Cost / License
- Paid
- Proprietary
Application types
Platforms
- Online
SmartScanner is an AI-powered web vulnerability scanner for testing security of web sites and applications.
Cost / License
- Freemium
- Proprietary
Application types
Platforms
- Windows


Sphinx.bot is a platform for collecting data leaks. It is being implemented on several platforms such as Discord and Telegram. Any malicious use of this information is strictly prohibited. - rf-peixoto/Sphinx.
Cost / License
- Free Personal
- Open Source (CC0-1.0)
Platforms
- Online
- Telegram
- Self-Hosted
- Discord
Beagle Security helps companies to identify vulnerabilities in their web applications & APIs and remediate them with actionable insights before hackers harm them in any manner. While manual penetration testing takes about two to three weeks, with Beagle Security, you can get...
Cost / License
- Paid
- Proprietary
Application types
Platforms
- Software as a Service (SaaS)


Hackbox is an open-source, container-based platform that makes it easy to launch vulnerable systems to test your hacking skill!.


+2
Zimperium's zANTI is a mobile penetration testing toolkit that lets security managers assess the risk level of a network with the push of a button.
Cost / License
- Free
- Proprietary
Application types
Platforms
- Android
ArchStrike is a penetration testing and security layer on top of Arch Linux done the Arch Way and optimized for i686, x86_64, ARMv6, ARMv7 and ARMv8. We follow the Arch Linux standards very closely in order to keep our packages clean, proper and easy to maintain.
Cost / License
- Free
- Open Source
Application types
Platforms
- Linux
- VirtualBox
- VMware Workstation



Cyver Core is a Pentest Management platform delivering report automation, client engagement, and findings management.

















































