Web Scanners

nikto

GitHub - sullo/nikto: Nikto web server scannerGitHub

Usage

# Default
nikto -h http://0.0.0.0

# scan domain with ssl enabled
nikto -h https://0.0.0.0 -ssl

Whatweb

GitHub - urbanadventurer/WhatWeb: Next generation web scannerGitHub

hatWeb identifies websites. It recognizes web technologies including content management systems (CMS), blogging platforms, statistic/analytics packages, JavaScript libraries, web servers, and embedded devices.

# install
git clone https://github.com/urbanadventurer/WhatWeb.git
cd WhatWeb
make install

# usage
# Default scan
whatweb $ip

# Scan the local network quickly and suppress errors
whatweb --no-errors $network

whatweb --aggression=Stealthy/Aggressive/Heavy --verbose 

# Scan reddit.com slashdot.org with verbose plugin descriptions
whatweb -v reddit.com slashdot.org

# An aggressive scan of wired.com detects the exact version of WordPress.
whatweb -a 3 www.wired.com

# Scan the local network for https websites
whatweb --no-errors --url-prefix https:// $network

PortSwigger's Burp Suite

https://github.com/rng70/Hacking-Resources/blob/master/Burp%20Suite/Burp%20Suite%20Cookbook.pdfgithub.com

BurpSuite Cookbook

OWASP ZAP

https://owasp.org/www-project-zapowasp.org

Meh...