Kali(sqlmap nmap fierce etc...)

dirb

burpsuite

dirsearch

Dir-Xcan

githack

htpwdScan

proxy 

sqlmap

subDomainBrute

weakfilescan

wordlist