Top 20 products relevant to Web Application Security and Attack Surface Management

AI-Enabled Attack Surface Management, Dark Web Monitoring, and Application Penetration Testing solutions tailored to reduce complexity and costs of Application Security Testing, Protection and Compliance.

paid Free Trial

Censys helps organizations, individuals, and researchers find and monitor every server on the Internet to reduce exposure and improve security.

freemium

Network mapping service.

Advanced threat tactics for penetration testers.

The Social-Engineer Toolkit is an open source penetration testing framework designed for social...

Exploit Pack is an open source project security that will help you adapt exploit codes on-the-fly.

Core Impact Pro is the most comprehensive software solution assessing and testing security...

Network recon framework, including a web interface to browse Nmap scan results.

Open Source

Armitage makes penetration testing easy by adding a GUI to the Metasploit framework.

Discover hidden assets and vulnerabilities in your environment with our all-in-one Attack Surface Management platform.

Open Source freemium $984.0 / Annually (Sn1per Professional v10.0)

A search engine which collects, processes, and provides structured information about network...

Search Engine and Data Provider showing the exposure of what is connected to the Internet.

Search engine for the Internet of Things.

SearchDiggity is the primary attack tool of the Google Hacking Diggity Project.

It's well known to extract plaintexts passwords, hash, PIN code and kerberos tickets from memory. mimikatz can also perform pass-the-hash, pass-the-ticket, build Golden tickets, play with certificates or private keys, vault... maybe make coffee?

Beginner Pentesting Toolkit/Framework Written in Python.

An all-in-one hacking tool to remotely exploit Android devices using ADB and Metasploit-Framework to get a Meterpreter session.

Subgraph Vega | Free and Open Source Web Application Vulnerability and Security Scanner.

Grabber is a web application scanner. It detects vulnerabilities in your website.

ImmuniWeb® Discovery leverages OSINT & award-winning AI technology to illuminate attack surface & Dark Web exposure. The non-intrusive and production-safe discovery is perfect for self-assessment & vendor risk scoring to prevent supply chain attacks.

paid Free Trial