Vulnerability Analysis
Scanners that surface known weaknesses, CVEs and misconfigurations. · 14 commands
Nikto
highClassic web server vulnerability scanner.
Nuclei
highTemplate-based vulnerability scanner.
WPScan
highWordPress vulnerability scanner.
Lynis
passiveHost security auditing & hardening tool.
searchsploit
passiveOffline search of the Exploit-DB archive.
sslscan
lowQuickly enumerate SSL/TLS ciphers and protocols.
SSLyze
lowFast, programmatic TLS configuration analyzer.
testssl.sh
lowThorough TLS/SSL testing shell script.
OpenVAS / GVM
highFull-featured network vulnerability scanner.
Wapiti
highBlack-box web vulnerability scanner.
Skipfish
highHigh-speed active web recon scanner.
Legion
highGUI network pentest framework (SPARTA successor).
LinPEAS
lowLinux privilege-escalation auditing script.
WinPEAS
lowWindows privilege-escalation auditing tool.