Skipfish
Kali Linux Web Tool
Skipfish is an open-source web application security reconnaissance tool pre-installed in Kali Linux, designed for automated penetration testing and vulnerability scanning. Developed by Google and maintained on GitHub, it performs recursive crawls and dictionary-based probes to create an interactive sitemap of a target website, annotating it with results from non-disruptive security checks. With a lightweight 559 KB footprint, Skipfish achieves high performance (500+ requests/second on internet targets, 2000+ on LAN), detecting vulnerabilities like XSS, SQL injection, and directory traversal in CMS platforms like WordPress and Joomla. Its 15+ modules, including metagoofil and wananga, support comprehensive scans, while features like form authentication, custom headers, and heuristic wordlist generation enhance flexibility. Skipfish generates detailed HTML reports for professional security assessments, making it ideal for ethical hackers, penetration testers, and webmasters.
About Skipfish
Skipfish pricing
Pricing details haven't been added for this tool yet. Check the tool's website for current pricing.
Best Skipfish alternatives
Nikto is an open-source web server and CGI scanner written in Perl, included in Kali Linux, designed...
Fern-Wifi-Cracker is a powerful open-source wireless network auditing tool for ethical hacking, integrated...
Wifite is a powerful open-source wireless network auditing tool for ethical hacking, seamlessly integrated...
Bettercap is a powerful, open-source, and modular network security tool designed for penetration testers,...
Select up to 4 alternatives with + Compare to build a side-by-side table against Skipfish.
Reviews & ratings
No reviews yet — be the first to share your experience.
Frequently asked questions
No FAQs have been added for this tool yet.