Tools

The standard web application security testing platform — intercepting proxy, repeater, intruder and a huge extension ecosystem (BApp Store). Community edition is free; Pro adds the active scanner.

Generates network diagrams of AWS environments from live account data, helping identify unexpected public exposure across VPCs and security groups.

python3 cloudmapper.py collect --account example

A community-maintained methodology wiki covering pentesting techniques across web, cloud, AD, mobile and binary exploitation — organised as a checklist you actually work through during an engagement.

A widely deployed commercial vulnerability scanner (a free "Essentials" tier exists) — CVE-backed checks across a huge range of software and network devices, with policy-based scanning and reporting.

A full-featured open-source vulnerability scanning and management framework that grew out of the last open Nessus release — a free, self-hosted alternative for network-wide vulnerability assessment.

A free, open-source web application security scanner from OWASP — intercepting proxy, active/passive scanning and automation API, the open-source counterpart to Burp Suite.

AWS (and multi-cloud) security best-practices assessment tool covering CIS benchmarks, GDPR, HIPAA and more, run as a CLI against a live account.

prowler aws

Multi-cloud security auditing tool that pulls configuration data from AWS/Azure/GCP/Alibaba via each provider's API and reports misconfigurations in a readable HTML report.

scout aws