Tools
Nettacker
OWASP/Nettacker
OWASP Nettacker is an open-source automated penetration-testing and reconnaissance framework. Its modular design covers port scanning, subdomain enumeration, vulnerability checks, and credential brute-forcing, exposed through a CLI, REST API, and web UI.
Topics
Related projects
django-DefectDojo5.2kDefectDojo is an open-source vulnerability management and ASPM platform. It ingests findings from many security scanners, then handles deduplication, tracking, remediation and reporting through a self-hosted web interface.
airecon1.1kAIRecon is an autonomous penetration-testing agent that combines an OpenAI-compatible LLM, a Kali Linux Docker sandbox, Caido integration, and a recon-to-report pipeline.
dirsearch15.1kdirsearch is an advanced web path brute-forcer that enumerates directories and files using wordlists. It supports recursion, filtering, proxies, resumable sessions and a Python API, making it a common tool for penetration testers performing web reconnaissance.
fsociety12.4kA penetration testing toolkit bundling many classic hacking tools for information gathering, exploitation, and post-exploitation.
bbot11.1kBBOT is a recursive internet scanner for security recon, bug bounties and attack-surface management, with modules for subdomain enumeration, web spidering, email harvesting and graph output.
WhatWeb7kWhatWeb is a next-generation web scanner that fingerprints websites, identifying CMSs, frameworks, servers, and version details using more than 1,800 plugins.