Tools:

Nikto

https://www.ssllabs.com/ssltest/

https://www.greenbone.net/en/openvas-free/

https://www.zaproxy.org/

Sqlmap