View in browser

Weekly newsletter n°23

offsec.tools

A vast collection of security tools for bug bounty, pentest and red teaming

offsec.tools is a vast listing of security tools designed to help pentesters and bug hunters in their daily task. The list is organized by tags and provide a quick search engine. The list is feeded by the author and the community. Anyone can add a tool and be listed as a contributor, feel free to check the GitHub repository.

Hey hackers !

Due to exceptional activity aka DefCon in Vegas, the site may be out of activity for few days, sorry guys I'll fix that as soon as possible !

If you can't wait, you can still check the newsletter history or crawl the website to find great tools :)

Happy hacking !

Go to offsec.tools

Tools featured this week

Automation of tokens/api keys testing.

A friend of SQLmap which will do what you always expected from SQLmap.

Identify technology on websites.

DOM based XSS finder

Chrome extension that finds DOM based XSS vulnerabilities.

Burp Suite extension to create target specific and tailored wordlist from burp history.

Automatic SSRF fuzzer and exploitation tool.

Asynchronous password spraying tool for Windows environments.

The global gold standard in vulnerability assessment built for the modern attack surface.

Multiplatform Python webshell.

Automates a number of Active Directory enumeration and vulnerability.

Tools added last week

	WhoisXMLAPI
	Domain & IP data intelligence for greater enterprise security.

	GatherContacts
	Burp Suite extension to pull employee names from Google and Bing LinkedIn search results.

	Scavenger
	Burp Suite extension to create target specific and tailored wordlist from burp history.

	Trivy
	Find vulnerabilities, misconfigurations, secrets, SBOM in containers, Kubernetes, repositories...

	wordlistgen
	Quickly generate context-specific wordlists for content discovery from lists of URLs or paths.

Want more to see more tools?

Go to offsec.tools

Sponsors