Cybersecurity Marketplace

Start your web security testing journey for free. Burp Suite enables its users to accelerate application security testing, no matter what their use case.

sqlmap is an open source penetration testing tool that automates the process of detecting and exploiting SQL injection flaws and taking over of database servers. It comes with a powerful detection engine, many niche features for the ultimate penetration tester and a broad range of switches lasting from database fingerprinting, over data fetching from the database, to accessing the underlying file system and executing commands on the operating system via out-of-band connections.

Knowledge is power, especially when it’s shared. A collaboration between the open source community and Rapid7, Metasploit helps security teams do more than just verify vulnerabilities, manage security assessments, and improve security awareness; it empowers and arms defenders to always stay one step (or two) ahead of the game.

Nmap or "Network Mapper" is an open source tool for network mapping, asset discovery and security auditing. Using IP packets, Nmap reviews your entire network to determine what devices are on your network, what services are running, and what operating systems are running. Originally created to map and scan large networks, this tool can be used on networks of any size.

OWASP® Zed Attack Proxy (ZAP) is the world’s most widely used web app scanner. Free and open source. Actively maintained by a dedicated international team of volunteers. If you are new to security testing, then ZAP has you very much in mind. Check out our ZAP in Ten video series to learn more. ZAP provides range of options for security automation. Check out the automation docs to start automating. ZAP marketplace contains add-ons that have been contributed by the community.

Parrot Linux is a platform used for security testing, software development and privacy defense. The platform includes tools for security and forensics analysis, and resources to help you securely build and launch software online.

Kali Linux is a penetration testing platform. The tool was built for many popular hardware platforms and stays up to date with the newest versions of penetration tests without needing to re-download the software. Kali Linux provides documentation and resources to help users create custom complex images with ease.

Fedora Security Spin provides a suite of online tools for safe test-environments, security auditing, forensics, and penetration testing. Fedora Security Spin acts as a stable platform for teaching security and running proper security tests.

BlackArch Linux is a penetration testing platform with many tools to help penetration testers.