Free pentesting tools you can use right now
Free to use Reconnaissance tools
Try out the tools our team of penetration testers use to gather information about targets and map their attack surface. Understand the tech stack behind web apps and networks, along with specific characteristics such as subdomains, virtual hosts, open ports, and lots more.
Whether you're doing asset inventory or a full vulnerability assessment, these penetration testing tools help you go through reconnaissance faster and more comprehensively. They come pre-configured and are ready to use without any additional manual work.
You can use them individually for their specific functionality (e.g. for running port scans or website recon) in the free version or in automated sequences (pentest robots) and access to full features with paid plans.
Web recon
- Try for free
Google Hacking
Find juicy information indexed by Google about a target website (e.g. directory listing, sensitive files, error messages, login pages etc.).
- Try for free
Website Recon
Find useful information about the technologies used by a target web application - server-side and client-side. It can also scan multiple virtual hosts on the same IP.
- Try for free
URL Fuzzer
Discover hidden files and directories that aren’t linked in the HTML pages: .conf, .bak, .bkp, .zip, .xls, etc. Find hidden content hosted on your target web server fast. Fuzz the target with your custom wordlist in a specific location.
- Try for free
Network & Cloud recon
- Try for free
Domain Finder
Identify all the domains and associated domains of a target and map your network’s attack surface. Quickly detect vulnerable systems and reduce your target’s exposure to cyberattacks!
- Try for free
Subdomain Finder
Discover all the subdomains of a target and map your network’s attack surface. Quickly check for vulnerable systems and reduce security risks for your organization.
- Try for free
Port Scanner
Find open TCP and UDP ports, exposed network services, and operating systems on a target IP address or hostname. Easily map your network attack surface and discover open ports and services.
- Try for free
Find Virtual Hosts
Attempts to discover virtual hosts that are configured on a given IP address. This is helpful to find multiple websites hosted on the same server.
- Try for free
Run Web Vulnerability Scanners at zero cost
See what it's like to run a professional web application pentest from home, with cloud-based security tools that perform in-depth, comprehensive scans
Detect a wide range of critical CVEs and high-risk security issues with powerful vulnerability scanning tools that identify OWASP Top 10 vulnerabilities, misconfigurations, and other problems malicious hackers routinely exploit.
Try out our free scanners that identify SQL injection and cross-site scripting (XSS) security vulnerabilities to see how they might fit into your security audit workflow. And don't forget to test the powerful Website Scanner thousands of ethical hackers rely on! All without spending a dime.
- Try for free
Website Vulnerability Scanner
Uncover known vulnerabilities that impact web applications: SQL Injection, XSS, OS Command Injection, Directory Traversal, and more. The scanner also discovers specific web server configuration issues.
- Try for free
API Scanner
Find and report API vulnerabilities ranging from XSS and SQLi to SSRF, Client-Side Prototype Pollution, and Request URL override.
- Try for free
WordPress Scanner
This tool helps you discover security issues and vulnerabilities in the target WordPress website using the most advanced WordPress scanner: WPScan.
See what our Network Vulnerability Scanner can do for free
Run a free scan on an IP address or hostname to find outdated network services, operating systems, and misconfigurations on your network perimeter. No account, no setup, nothing to pay.
Use the results to see what your network exposes to the internet and decide what to fix first. The scanner detects high-risk vulnerabilities such as NGINX Rift, the cPanel & WHM authentication bypass, Log4Shell, ProxyShell, and ProxyLogon, so a quick check can tell you whether a well-known, exploited flaw still sits on one of your servers.
Make the most of these Utilities – on the house
Uncover information about a domain name or IP address and detect if a server responds to ICMP requests with the click of a button. No costs involved!
Being able to quickly extract information about your targets for free is very helpful when you have limited time for a security assessment. Plus, the free toolkit on Pentest-Tools.com is cloud-based, so you don't have to worry about specific compatibility requirements with operating systems. Just add your target and scan away for free!
- Try for free
ICMP Ping
Check if a server is live and responds to ICMP Echo requests. Use this online scanner to find the IP address of a hostname.
- Try for free
Whois Lookup
Perform Whois lookups to find data about an Internet resource such as domain name or IP address. Try our scanner to quickly extract information about your targets.
Emergency CVE scanners
Check if your servers are affected by a critical, newly disclosed vulnerability. Add your target and start the scan in your browser - no account needed.
When a critical CVE goes public, you need to know fast if you run the affected software and if it’s exposed. Each scanner below checks for one vulnerability and gives you a PDF report with the severity rating and remediation steps. Can’t patch yet? Each scanner page also lists the temporary mitigations published so far.
- Try for free
PHP2Shell scanner
Check if your target is affected by CVE-2026-109618 and CVE-2026-109619, the critical remote code execution flaws in the PHP core known as PHP2Shell. PHP also runs inside CMSs, hosting control panels, and vendor software, so check more than your main web servers.
- Try for free
Node2Shell scanner
Check if your target is affected by CVE-2026-111497, the critical remote code execution flaw in the Brotli decoder that Node.js, Bun, and Envoy compile into the runtime, known as Node2Shell. Container images and Istio sidecars carry their own copy of the decoder, so check more than your application servers.
- Try for free
HTTP2Shell scanner
Check if your target is affected by CVE-2026-111497, the same Brotli decoder flaw known as HTTP2Shell, which also reaches Python packages and outbound HTTP clients. The scanner tests endpoints that decode Brotli request bodies, and the page includes a self-check for the clients no external scan can reach.
- Try for free
NGINX Rift scanner
Check if your NGINX server runs a version affected by CVE-2026-42945, a critical heap buffer overflow in the rewrite module with confirmed exploitation in the wild. The scan identifies the NGINX version and flags it if it falls in the vulnerable range.
- Try for free
cPanel authentication bypass scanner
Check if your cPanel & WHM server is vulnerable to CVE-2026-41940, a critical flaw that lets unauthenticated attackers gain full administrative access. The scanner sends crafted requests to the login endpoint and reports how the server responds.
Single-vulnerability scanners
Some questions come up in almost every assessment. Does this form or parameter let someone inject code? Which services answer on UDP that nobody remembers turning on?
These scanners answer one of those questions at a time, so you can check a single app or host after a code change, before a release, or while you scope a larger test. Each one runs a light scan for free and gives you results you can review and act on right away.
- Try for free
XSS Scanner
Find cross-site scripting flaws in your web app. The scanner crawls pages, forms, and parameters, injects test payloads, and checks if they come back without sanitization. Because it submits forms, run it against a staging environment when you can.
- Try for free
SQL Injection Scanner
Find parameters in your web app that let attackers tamper with database queries. The scanner crawls your target, sends SQL payloads to each input it discovers, and looks for error-based, blind, and time-based injection.
- Try for free
UDP Port Scanner
Find open UDP ports on a host, along with the services and versions behind them, such as DNS, SNMP, and NTP. The free scan checks the 100 most common UDP ports, which helps you spot services you didn’t mean to expose.
Free pentest tools FAQs
Why are you offering these tools for free?
We founded Pentest-Tools.com to solve the need for a reliable online resource that offensive security specialists can use to run security tests from anywhere in the world.
Giving free access to the light versions of our pentesting tools is our way of supporting those who seek to develop their cybersecurity skills. As a team, we're big believers in contributing to the information security community that grows and improves through shared knowledge and shared access to technology.
It's also a way to help those interested in the full-fledged tools and the entire Pentest-Tools.com platform to get a taste of what they can do with them.
Do I have to sign up to use them?
You don't have to create an account or pay for anything to use these security testing tools for free.
The free to use versions of these tools have limited capabilities which is our way of responsibly helping other people who run security tests while also making sure no one can take advantage of them to inflict damage.
What is a good pentesting tool?
A good penetration testing tool has a few key characteristics that most security specialists resonate with.
To deserve this quality, a pentesting tool must be reliable, transparent in the tests it runs, capable of producing a high-quality report that is easy to understand, consistent in how it works to create rich findings, and it must also be regularly updated to keep up with the pentester's needs.
What's more, a good pentesting tool must never take more time to manage than the time it saves the pentester by automating tasks to a certain degree.
What is the most popular free pentesting tool on the platform?
The Network Vulnerability Scanner is the pentest tool that both people using the free version and paying customers use most frequently. That is why we devote a large part of our efforts to improving it with new modules through each monthly platform update.
Besides the power of the tool itself (which includes internal network scanning), the features of Pentest-Tools.com amplify its capabilities by connecting it to automation options and other tools. Together, create incredibly useful aggregates such as Attack Surface mapping and advanced pentest reports.
What can I do with your free pentest tools?
What makes your free penetration testing tools different from other options?
Do you offer free online penetration testing without setup or installation?
What types of scans can I run with your free penetration test tools?
Can I test web applications using advanced web testing free tools?
Are the free pentesting tools suitable for beginners?
How accurate are the results from your free pen testing tools?
Can I use your free hacking tools in my security workflow?
What's the difference between the free pen test tools and paid plans?
Is it legal to use free penetration testing software on any target?
Need to keep free scan results indefinitely?
Create a free account and get unlimited history for all your light scans and their results. You also get unlimited scans with any of our free tools!