Find CVEs and vulnerabilities from an IP address

Shodan

Search exposed internet-connected services

Burp Suite

a commercial web security testing platform for proxying, scanning, and analyz

CVE Details

a searchable vulnerability database for CVEs, vendors, products, versions, an

Can I Take Over XYZ

a community-maintained reference for identifying services vulnerable to subdo

Exploit-DB

a public exploit archive maintained by Offensive Security for vulnerability r

Greenbone Community Edition

an open-source vulnerability scanning stack for identifying known issues acro

Grype

a vulnerability scanner for container images, filesystems, and software bills

Interactsh

an out-of-band interaction server used to verify blind vulnerabilities and ca

InternetDB by Shodan

Free per-IP Shodan banner lookup

Jaeles

a signature-based web application scanner for detecting security issues and e

Metasploit Framework

Penetration testing and exploit framework

NVD

the U.S. National Vulnerability Database for CVEs, CPEs, CVSS scores, and ref

Nikto

a web server scanner for dangerous files, outdated software, and common misco

Nuclei

a template-based vulnerability scanner used to detect misconfigurations and e

Nuclei Templates

a community template library used by Nuclei to identify vulnerabilities and m

OSV-Scanner

a vulnerability scanner that checks dependencies against the Open Source Vuln

OWASP ZAP

an open-source web application security scanner and intercepting proxy for au

Packet Storm Security

a long-running archive of exploits, advisories, tools, and security research

Pentest-Tools.com

Hosted pentest scanner SaaS

Qualys SSL Labs

a web service for analyzing public TLS configuration and certificate deployme

Recorded Future

Recorded Future TI graph and risk platform

Retire.js

a JavaScript dependency scanner that identifies vulnerable client-side librar

SSLyze

a Python scanner that analyzes SSL and TLS services for protocol and certific

Sn1per

Automated recon and pentest framework

Snyk

a developer security platform for scanning dependencies, containers, code, an

Subjack

a subdomain takeover scanner that checks dangling DNS records against known s

Syft

an SBOM generation tool for cataloging packages in containers, filesystems, a

Trivy

a security scanner for containers, dependencies, IaC, secrets, licenses, and

VulnCheck

a vulnerability intelligence platform focused on exploitability, weaponizatio

Vulners

a vulnerability intelligence database and API for CVEs, exploits, advisories,

WPScan

a WordPress security scanner for vulnerable plugins, themes, users, and confi

XSStrike

an XSS detection suite that analyzes parameters and application responses for

sqlmap

an automated SQL injection and database takeover testing tool for authorized

testssl.sh

a command-line scanner for testing TLS and SSL configuration weaknesses