DorkPlus
DorkPlus is a all in one solution with more than 10 modules including a Web Scraper (Google, Bing, Ask...), a Vulnerability Scanner (SQL, XSS, ENV..), a Database Dumper, and more unique built-in tools dedicated to pentesting.
Sorting
Havij
It can take advantage of a vulnerable web application. By using this software user can perform back-end database fingerprint, retrieve DBMS users and password hashes, dump tables and columns, fetching data from the database, running SQL statements and even accessing the...
OWASP Zed Attack Proxy (ZAP)
The Zed Attack Proxy (ZAP) is an easy to use integrated penetration testing tool for finding vulnerabilities in web applications.
SafeLine
SafeLine is a docker-based, easy to use, self-hosted free web application firewall (WAF) that protects web apps by filtering and monitoring HTTP traffic between a web application and the Internet.