offsec.tools

A vast collection of security tools for bug bounty, pentest and red teaming

Go to offsec.tools

Tools featured this week

A post-exploitation powershell tool for extracting juicy info from memory.

Standalone script to enumerate SUID binaries, separate default binaries from customs.

Pop shells like a master.

Multi threaded application designed to brute force paths on web servers.

Server-Side Template Injection and Code Injection Detection and Exploitation Tool.

Focuses DNS MX records and detects misconfigured MX records.

The class-leading vulnerability scanning, penetration testing, and web app security platform.

Contextual content discovery tool.

Burp Suite extension to help make Graphql request more readable.

Cli tool for Exploit-DB that also allows you to take a copy of Exploit Database with you.

	Pyrit
	The famous WPA precomputed cracker.

	zarp
	Network attack tool.

	git-secrets
	Prevents you from committing secrets and credentials into git repositories.

	talisman
	Validate the outgoing changeset for things that look suspicious such as tokens, passwords and keys.

	repo-supervisor
	Scan your code for security misconfiguration, search for passwords and secrets.

	appmon
	Framework for monitoring and tampering system API calls of native macOS, iOS and android apps.

	hcxdumptool
	Small tool to capture packets from wlan devices.

	JNDI-Injection-Exploit
	Generates JNDI links can start several servers to exploit JNDI Injection vulnerabilities.

	morphHTA
	Morphing Cobalt Strike's evil.HTA.

	murphysec
	An open source tool focused on software supply chain security.

Go to offsec.tools