Web Application Pentesting Tools

• Proxy-Tools: Burp Suite, OWASP ZAP.

• Directory & File Fuzzing: DirBuster, Gobuster.

• CSRF/XSS Testing: XSStrike, XSSer.