| Acunetix | https://twitter.com/acunetix |
| Amap | https://www.thc.org/thc-amap/ |
| Arachni | https://twitter.com/ArachniScanner |
| arp-scan | http://linux.die.net/man/1/arp-scan |
| BeEF | https://twitter.com/beefproject |
| Brutexss | https://github.com/rajeshmajumdar/BruteXSS |
| Burp, BurpPro | https://twitter.com/Burp_Suite |
| Core Impact, Core Impact | https://twitter.com/CoreSecurity |
| Dig | |
| Dirb | http://tools.kali.org/web-applications/dirb |
| Dirsearch | |
| Dnsenum | https://github.com/fwaeytens/dnsenum |
| Dnsmap | https://github.com/makefu/dnsmap |
| Dnsrecon | https://github.com/darkoperator/dnsrecon |
| Dnswalk | https://github.com/leebaird/discover |
| evilgrade | http://twitter.com/infobytesec |
| Fierce | http://tools.kali.org/information-gathering/fierce |
| Fruitywifi | http://www.fruitywifi.com/index_eng.html |
| ftp | |
| Goohost | http://www.aldeid.com/wiki/Goohost |
| hping3 | http://tools.kali.org/information-gathering/hping3 |
| Hydra | https://www.thc.org/thc-hydra |
| Immunity Canvas | http://www.immunityinc.com/products/canvas/ |
| Ip360 | |
| Lynis | https://cisofy.com/lynis/ |
| Listurls | |
| Maltego | https://www.paterva.com/web6/products/maltego.php |
| masscan | https://twitter.com/ErrataRob |
| Medusa | http://h.foofus.net/?page_id=51 |
| Metagoofil | https://code.google.com/p/metagoofil/downloads/list |
| Metasploit | https://twitter.com/metasploit |
| Ndiff | https://nmap.org/ndiff/ |
| Nessus | https://twitter.com/tenablesecurity |
| Netcat | http://netcat.sourceforge.net/ |
| Netdiscover | |
| Netsparker | https://twitter.com/Netsparker |
| Netsparker Cloud | |
| Nexpose, Nexpose Enterprise | https://twitter.com/rapid7 |
| Nikto | https://cirt.net/Nikto2 |
| Nmap | https://twitter.com/nmap |
| Openvas | https://twitter.com/openvas |
| PasteAnalyzer | https://github.com/Ezequieltbh/pasteAnalyzer |
| Peeping Tom | https://bitbucket.org/LaNMaSteR53/peepingtom/ |
| ping | |
| propecia | http://packetstormsecurity.com/files/14232/propecia.c.html |
| Qualysguard | https://www.qualys.com/ |
| Recon-NG | https://hackertarget.com/recon-ng-tutorial/ |
| Retina | http://www.beyondtrust.com/Products/RetinaNetworkSecurityScanner/ |
| Reverseraider | http://sourceforge.net/projects/complemento/files/ |
| Sentinel | |
| Shodan | https://twitter.com/shodanhq |
| Skipfish | https://code.google.com/p/skipfish/ |
| Sqlmap | https://twitter.com/sqlmap |
| SSHdefaultscan | https://github.com/atarantini/sshdefaultscan |
| SSLcheck | |
| SSLyze | https://github.com/nabla-c0d3/sslyze |
| Sublist3r | https://github.com/aboul3la/Sublist3r |
| Telnet | |
| Theharvester | https://github.com/laramies/theHarvester |
| Traceroute | |
| W3af | https://twitter.com/w3af |
| Wapiti | http://wapiti.sourceforge.net/ |
| Wcscan | |
| Webfuzzer | http://gunzip.altervista.org/g.php?f=projects#webfuzzer |
| WebInspect | https://resources.infosecinstitute.com/webinspect/#gref |
| Wfuzz | https://wfuzz.readthedocs.io/en/latest/index.html |
| whois | |
| WPScan | https://wpscan.org/ |
| Xsssniper | https://github.com/gbrindisi/xsssniper |
| X1, Onapsis | https://twitter.com/onapsis |
| Zap | https://twitter.com/zaproxy |