- 0D1N
- Wfuzz
- NodeXP
- XXE-Enum
- XXEInjector
- XXETimes
- RapidScan
- CMSeek
- WAScan
- Golismero
- Handy Header Hacker
- WAFNinja
- WAFw00f
- Arjun
- pyFileBuster
- EVILUrl
- MiMTPROXY
- Hamster
- Fiesta
- XSRFprobe
- WhatWeb
- Wapiti
- Recon-NG
- WPScan
- WPSeku
- WPXF
- SiteBroker
- Grabber
- Aron
- Blazy
- Hydra-Form
- FIMAP
- CLUSTERD
- Dirb
- SIEGE
- JShell
- Slowhttptest
- Slowloris
- EVILGINX2
- Modlishka
- PHPSPLOIT
- HTTRACK
- XSSTRIKE
- XANXSS
- Photon
- XSSER
- Commix
- Put2Win
- SQLMAP
- WebSploit
- Payloadmask
- Abernathy-XSS