Burp - https://portswigger.net/burp/
- Author's Guide: http://pastebin.com/nNHYP9Jd
- Hunt for Vulns - https://github.com/bugcrowd/HUNT
Enumerate Application Endpoints - https://github.com/aur3lius-dev/SpyDir/
Wapiti http://wapiti.sourceforge.net/
w3af - http://w3af.org/
Nikto - https://cirt.net/Nikto2
- Nikto Inside Browser - http://blog.websecurify.com/2017/05/nikto-in-your-browser.html
Nginx scanner - https://github.com/yandex/gixy
pyfiscan - https://github.com/fgeek/pyfiscan