Favorite tools for web app penetration testing

Hey, new forum! What are your favorite tools for web app penetration testing? If I was limited to one tool, I'd choose Burp.

Find more posts tagged with

Save $250 on 2025 certification boot camps from Infosec!

Book now with code EOY2025

Button

Comments

[Deleted User]

Depends on what i'm trying to do. For manipulating requests, Burp For SQL Injection sqlmap For deserialization ysoserial

tedjames

Thanks for the tip! I'll check out ysoserial.

Infosec_Sam

OpenVAS is something you might want to check out as well! I've used it a couple of times on small-scope projects and it had most of the tools I was looking for.

SteveLavoie

you could try Nikto too

Severine

Metasploit is also a good option for web application penetration testing.

Quick Links

All Categories
Recent Posts
Activity
Unanswered
Groups
Best Of