subfinder
Subdomain discovery tool for passive reconnaissance
amass
Network mapping and subdomain enumeration tool
nmap
Network discovery and security scanning tool
masscan
Massive IP port scanner for high-speed reconnaissance
ffuf
Fuzzing tool for web directory and parameter discovery
bbot
Automated reconnaissance tool for attack surface mapping
httpx
HTTP probing tool for web service discovery
katana
Web crawling and endpoint extraction tool
gau
Get all URLs tool for gathering historical URLs
arjun
HTTP parameter discovery tool
wafw00f
Web application firewall fingerprinting tool
kiterunner
REST API and route discovery tool
codeql
Semantic code analysis engine for vulnerability detection
psalm
Static analysis tool for PHP code
gosec
Golang security checker for static analysis
bandit
Security linter for Python code
semgrep
Static analysis tool for multi-language code scanning
brakeman
Static analysis security scanner for Ruby on Rails
pmd
Static analysis tool for Java and other languages
nodejsscan
Static security scanner for Node.js applications
joern
Code analysis platform for vulnerability discovery
yasa
Yet another static analysis tool for security