offsec.tools

A vast collection of security tools for bug bounty, pentest and red teaming

Go to offsec.tools

Tools featured this week

Multi threaded application designed to brute force paths on web servers.

Enumerates users based off RDP Screenshots.

A post-exploitation tool designed to leverage Microsoft Endpoint Configuration Manager.

Web application scanner to gather OSINT and fuzz for OWASP vulnerabilities on a target website.

Lists the different ways of reaching a given type in a GraphQL schema.

Allows you to intercept and edit HTTP/HTTPS requests and responses.

Attack patterns and primitives for black-box application fault injection and resource discovery.

Burp Suite extension for sending large numbers of HTTP requests and analyzing the results.

The class-leading vulnerability scanning, penetration testing, and web app security platform.

Esoteric sub-domain enumeration techniques - Bugcrowd LevelUp

	Tool capa
	The FLARE team's open-source tool to identify capabilities in executable files.

	TEx
	Telegram Explorer created to help researchers, investigators and law enforcement agent.

	PersistenceSniper
	Hunt persistences implanted in Windows machines.

	Inspeckage
	Android package inspector.

	DivideAndScan
	Divide full port scan results and use it for targeted Nmap runs.

	HAITI
	Hash type identifier.

	Locksmith
	Detect and fix common misconfigurations in Active Directory Certificate Services.

	RustHound
	Active Directory data collector for BloodHound written in Rust.

	Redacted Request
	Enhance the security and confidentiality of HTTP request handling within the Burp Suite.

	ScriptSentry
	ScriptSentry finds misconfigured and dangerous logon scripts.

	Burp-Encode-IP
	Burp Suite extension to encode an IP address focused to bypass application IP/domain blacklist.

	SBOMb
	SBOM parser that performs cursory vulnerability assessment.

	SynapsInt
	Consulting different intelligence services, search engines and datasets for OSINT.

	bbradar.io
	Fetches latest bug bounty programs from many platforms and consolidates them in one place.

	certmitm
	A tool for testing for certificate validation vulnerabilities of TLS connections.

Go to offsec.tools