# Open source tools for security assessment/pentesting?

**URL:** <https://ask.cyberinfrastructure.org/t/open-source-tools-for-security-assessment-pentesting/1338>\
**Category:** ResearchSOC Cybersecurity\
**Created:** [April 14, 2020, 2:28am UTC](https://ask.cyberinfrastructure.org/t/open-source-tools-for-security-assessment-pentesting/1338 "2020-04-14T02:28:24Z")\
**Posts on this page:** 2\
**Page:** 1

<div class="post-metadata">

**Author:** ![zalak](https://ask.cyberinfrastructure.org/letter_avatar_proxy/v4/letter/z/b9bd4f/32.png) [@zalak](https://ask.cyberinfrastructure.org/u/zalak)\
**Post date:** [April 14, 2020, 2:28am UTC](https://ask.cyberinfrastructure.org/t/open-source-tools-for-security-assessment-pentesting/1338/1 "2020-04-14T02:28:24Z")

</div>

What are some open source tools (preferably CLI) that you use for security assessment, pentesting or reconnaissance?

I will start: Nmap, Nikto, Dirb, WhatWeb.

---

<div class="post-metadata">

**Author:** ![JoshD](https://ask.cyberinfrastructure.org/user_avatar/ask.cyberinfrastructure.org/joshd/32/338_2.png) [@JoshD](https://ask.cyberinfrastructure.org/u/JoshD)\
**Post date:** [April 14, 2020, 6:46pm UTC](https://ask.cyberinfrastructure.org/t/open-source-tools-for-security-assessment-pentesting/1338/2 "2020-04-14T18:46:24Z")

</div>

I like sqlmap for sql injection testing and Wireshark for packet analysis, though it is not a CLI tool