offsec.tools

A vast collection of security tools for bug bounty, pentest and red teaming

Go to offsec.tools

Tools featured this week

PowerShell script to dump Windows credentials from the Credential Manager.

A default credential scanner.

Anonymously bruteforce Active Directory usernames by abusing LDAP Ping requests.

Medusa is a speedy, parallel, and modular, login brute-forcer.

Probe endpoints consuming Java serialized objects for fingerprinting.

Perform subdomain enumeration using the certificate transparency logs from Censys.

Rapid content discovery tool for recursively querying webservers.

Fetch many paths for many hosts, without killing the hosts.

Hijacking forgotten & misconfigured subdomains.

GUI Burp Plugin to ease discovering of security holes in web applications.

	ppfuzz
	A fast tool to scan client-side prototype pollution vulnerability written in Rust.

	graphql-voyager
	Represent any GraphQL API as an interactive graph.

	XnlReveal
	A Chrome browser extension to show alerts for several hidden elements.

	IPFuscator
	A tool to automatically generate alternative IP representations.

	sourcemapper
	Extract JavaScript source trees from source map files.

	DNSWatch
	DNS traffic sniffer and analyzer.

	TrafficWatch
	A packet sniffer tool, allows you to monitor and analyze network traffic from PCAP files.

	HackingHub
	Join the front line of the internet, learn applicable cyber security skills.

	certs.io
	Search the entire internet by data in TLS certificates.

	cvecrowd.com
	Lists CVEs that are currently being discussed on the social network Mastodon.

Go to offsec.tools