Skip to content
SecArsenal
Educational and ethical use only. Only test systems you own or are explicitly authorized to test. Full disclaimer.

Tools: web-scanning (21)

Pentesting tools tagged web-scanning. See all tools or the category key.

Team (best effort)

arjun

HTTP parameter discovery suite

web-scanning Red Team

assetfinder

Find domains and subdomains related to a given domain

web-scanning Red Team

dirb

URL bruteforcing tool

web-scanning reconnaissance Red Team

dirbuster

Web server directory brute-forcer

web-scanning reconnaissance Red Team

dirsearch

Web path scanner

web-scanning Red Team

feroxbuster

Fast, simple, recursive content discovery tool written in Rust

web-scanning Red Team

ffuf

Fast web fuzzer written in Go (program)

web-scanning reconnaissance Red Team

finalrecon

Fast and simple Python script for web reconnaissance

web-scanning Red Team

findomain

Fastest and most complete solution for domain recognition

web-scanning Red Team

gobuster

High-performance discovery tool for directories, DNS and cloud storage

web-scanning reconnaissance Red Team

gospider

Fast web spider written in Go

web-scanning Red Team

lbd

Load balancer detector

web-scanning Red Team

parsero

Robots.txt audit tool

web-scanning Red Team

recon-ng

Web Reconnaissance framework written in Python

web-scanning reconnaissance Red Team

subfinder

Subdomain discovery tool

web-scanning Red Team

sublist3r

Fast subdomains enumeration tool for penetration testers

web-scanning Red Team

uniscan

LFI, RFI, and RCE vulnerability scanner

web-scanning Red Team

urlcrazy

Domain typo generator

web-scanning Red Team

uro

Declutter URLs for crawling/pentesting

web-scanning Red Team

wfuzz

Web application bruteforcer

web-scanning Red Team

wpprobe

Fast WordPress plugin enumeration tool

web-scanning Red Team