Powershell-Empire | starkiller (GUI)

Nessus

Rustscan + ping (ls -al /usr/share/nmap/scripts/ | grep vuln)

Metasploit (searchsploit [])

tcpdump

Wireshark

Armitage (visiual msf)

fuff

Ligolo-ng

Autorecon

Burp suite (crawling)

owasp zap (spidering)