Nikto

Nikto is an Open Source (GPL) web server scanner which performs comprehensive tests against web servers for multiple items, including over 6400 potentially dangerous files/CGIs, checks for outdated versions of over 1000 servers, and...

Free Open Source Mac OS X Windows Linux

Zed Attack Proxy

The Zed Attack Proxy (ZAP) is an easy to use integrated penetration testing tool for finding vulnerabilities in web applications.

Free Open Source Mac OS X Windows Linux

skipfish

A fully automated, active web application security reconnaissance tool. Key features: High speed: pure C code, highly optimized HTTP handling, minimal CPU footprint - easily achieving 2000 requests per second with responsive targets.

Free Open Source Mac OS X Windows Linux BSD

SHODAN

SHODAN is a search engine that lets you find specific computers (routers, servers, etc.) using a variety of filters. Some have also described it as a public port scan directory or a search engine of banners.

Free Web

w3af

w3af is a Web Application Attack and Audit Framework

Free Open Source Windows Linux

Acunetix

Audit your website security and web applications for SQL injection, Cross site scripting and other web vulnerabilities with Acunetix Web Security Scanner. Download Free...

Commercial Windows Web Wordpress

Intruder

Intruder is a security monitoring platform for internet-facing systems.

Commercial Web

Websecurify

Websecurify is a powerful web application security testing environment designed from the ground up to provide the best combination of automatic and manual vulnerability testing technologies.

Commercial Mac OS X Windows Linux

wapiti

Wapiti allows you to audit the security of your web applications. Wapiti is a command line tool.

Free Open Source Windows Linux