Skipfish
High-speed active reconnaissance and security probe.
What it does
Skipfish rapidly maps your whole site with a recursive crawl and dictionary probes, then runs active security checks across everything it finds, producing an interactive sitemap annotated with issues.
What data you get
A visual sitemap plus a report of discovered resources and flagged issues — misconfigurations, risky content types, injection candidates — grouped by severity.
Why it matters to your site
Its speed makes it well suited to large sites, and the sitemap shows you the full shape of what is exposed, which is often bigger than owners expect.
More in this category
Other general-purpose tools
OWASP ZAP
★ FeaturedThe most widely used open-source web application scanner.
Wapiti
Black-box scanner that audits your site by injecting real payloads.
Vega
GUI-driven scanner and intercepting proxy in one.