hi! I'm interested in such project. I used to work with Kali Linux and sometimes I try to hack some websites when I have a bad mood :) . I use such tools as: sqlmap (finds SQL injections and dumps the databases), WPscan (finds vulnerabilities in Wordpress sites), Nikto (I seldom use it, but sometimes it can get some interesting information), Tor (for masking my IP, but it decreases the speed). so, if You are interested to work with me, let's start.