Find CVEs and vulnerabilities from a domain

Shodan

Search exposed internet-connected services

Burp Suite

a commercial web security testing platform for proxying, scanning, and analyz

CVE Details

a searchable vulnerability database for CVEs, vendors, products, versions, an

Can I Take Over XYZ

a community-maintained reference for identifying services vulnerable to subdo

Detectify

EASM scanner with crowdsourced signatures

Exploit-DB

a public exploit archive maintained by Offensive Security for vulnerability r

FullHunt

Attack-surface platform mapping a domain's exposed subdomains, IPs and services

Greenbone Community Edition

an open-source vulnerability scanning stack for identifying known issues acro

Grype

a vulnerability scanner for container images, filesystems, and software bills

Interactsh

an out-of-band interaction server used to verify blind vulnerabilities and ca

Jaeles

a signature-based web application scanner for detecting security issues and e

Metasploit Framework

Penetration testing and exploit framework

NVD

the U.S. National Vulnerability Database for CVEs, CPEs, CVSS scores, and ref

Nikto

a web server scanner for dangerous files, outdated software, and common misco

Nuclei

a template-based vulnerability scanner used to detect misconfigurations and e

Nuclei Templates

a community template library used by Nuclei to identify vulnerabilities and m

OSV-Scanner

a vulnerability scanner that checks dependencies against the Open Source Vuln

OWASP ZAP

an open-source web application security scanner and intercepting proxy for au

Packet Storm Security

a long-running archive of exploits, advisories, tools, and security research

Pentest-Tools.com

Hosted pentest scanner SaaS

Project Discovery Nuclei Cloud

Hosted SaaS for ProjectDiscovery scanners

Qualys SSL Labs

a web service for analyzing public TLS configuration and certificate deployme

Recorded Future

Recorded Future TI graph and risk platform

Retire.js

a JavaScript dependency scanner that identifies vulnerable client-side librar

SSLyze

a Python scanner that analyzes SSL and TLS services for protocol and certific

Sn1per

Automated recon and pentest framework

Snyk

a developer security platform for scanning dependencies, containers, code, an

Subjack

a subdomain takeover scanner that checks dangling DNS records against known s

Syft

an SBOM generation tool for cataloging packages in containers, filesystems, a

Trivy

a security scanner for containers, dependencies, IaC, secrets, licenses, and

VulnCheck

a vulnerability intelligence platform focused on exploitability, weaponizatio

Vulners

a vulnerability intelligence database and API for CVEs, exploits, advisories,

WPScan

a WordPress security scanner for vulnerable plugins, themes, users, and confi

XSStrike

an XSS detection suite that analyzes parameters and application responses for

reNgine

Automated recon framework with web UI

reconFTW

Automated domain recon: subdomains, web probing, OSINT and vuln scan

sqlmap

an automated SQL injection and database takeover testing tool for authorized

testssl.sh

a command-line scanner for testing TLS and SSL configuration weaknesses