Metasploit framework
Further reading Top 8 penetration testing tools (Snyk Blog)
Security Tools
nmap (Network Mapper)
Further reading Top 8 penetration testing tools (Snyk Blog)
sqlmap
sqlmap is an open-source tool that is designed to detect SQL injection flaws in web applications. Further reading Top 8 penetration testing tools (Snyk Blog) SQLmap Tutorial (Hacker Target)
ZAP (Zed Attack Proxy)
Zed Attack Proxy is a free and open-source web app scanner, originally developed within the OWASP community, with the project now managed by Checkmarx. Further reading Top 8 penetration testing tools (Snyk Blog) ZAP (Wikipedia) Zed Attack Proxy, by CheckMarx Install ZAP on MacOS (Homebrew) Related pages OWASP