OSINT Tools

GreyNoise

Internet scanner reputation intelligence

Burp Suite

a commercial web security testing platform for proxying, scanning, and analyz

CVE Details

a searchable vulnerability database for CVEs, vendors, products, versions, an

Can I Take Over XYZ

a community-maintained reference for identifying services vulnerable to subdo

Exploit-DB

a public exploit archive maintained by Offensive Security for vulnerability r

Findsploit

Aggregated exploit search by service banner

Greenbone Community Edition

an open-source vulnerability scanning stack for identifying known issues acro

GreyNoise Visualizer

GreyNoise scan-trend visualisation

Grype

a vulnerability scanner for container images, filesystems, and software bills

Interactsh

an out-of-band interaction server used to verify blind vulnerabilities and ca

Jaeles

a signature-based web application scanner for detecting security issues and e

Metasploit Framework

Penetration testing and exploit framework

NVD

the U.S. National Vulnerability Database for CVEs, CPEs, CVSS scores, and ref

Nikto

a web server scanner for dangerous files, outdated software, and common misco

Nuclei

a template-based vulnerability scanner used to detect misconfigurations and e

Nuclei Templates

a community template library used by Nuclei to identify vulnerabilities and m

OSV-Scanner

a vulnerability scanner that checks dependencies against the Open Source Vuln

OWASP ZAP

an open-source web application security scanner and intercepting proxy for au

Packet Storm Security

a long-running archive of exploits, advisories, tools, and security research

Qualys SSL Labs

a web service for analyzing public TLS configuration and certificate deployme

Retire.js

a JavaScript dependency scanner that identifies vulnerable client-side librar

SSLyze

a Python scanner that analyzes SSL and TLS services for protocol and certific

Snyk

a developer security platform for scanning dependencies, containers, code, an

Subjack

a subdomain takeover scanner that checks dangling DNS records against known s