offsec.tools

A vast collection of security tools for bug bounty, pentest and red teaming

Go to offsec.tools

Tools featured this week

A toolkit for testing, tweaking and cracking JSON Web Tokens.

A simple program to query nmap XML files in the terminal.

A library for detecting known secrets across many web frameworks.

A simple script to screenshot a list of websites.

This tool extracts secrets from a pcap file or from a live interface.

Trace the path of a DNS query.

Convolutional neural network for analyzing pentest screenshots.

Specify targets and run sets of tools against them.

Web Application Attack and Audit Framework.

Security assessment tool that supports common web security issue scanning and custom PoC.

	karma v2
	Passive open source intelligence automated reconnaissance.

	shosubgo
	Small tool to grab subdomains using Shodan API.

	bbot
	OSINT automation for hackers.

	resolvers
	The most exhaustive list of reliable DNS resolvers.

	FavFreak
	Making favicon.ico based recon great again.

	Kaeferjaeger
	.

	caido
	A lightweight web security auditing toolkit.

	BurpGPT
	A Burp Suite extension that integrates OpenAI's GPT to perform an additional passive scan.

	ripgen
	Rust-based high performance domain permutation generator.

	go-stare
	A fast & light web screenshot without headless browser but Chrome DevTools protocol.

	evilgophish
	Combination of evilginx3 and GoPhish.

	GoPhish
	Open-source phishing toolkit.

Go to offsec.tools