offsec.tools

A vast collection of security tools for bug bounty, pentest and red teaming

Go to offsec.tools

Tools featured this week

A TCP port redirection utility that allows inbound traffic redirection.

A wrapper script which uses PuTTY to perform SSH login bruteforce attacks.

Lists CVEs that are currently being discussed on the social network Mastodon.

Check egress filtering and identify if ports are allowed to automatically spawn a shell.

Automatic framework to detect, exploit and report XSS vulnerabilities in web-based applications.

A fast, simple, recursive content discovery tool written in Rust.

Generate Google dorks with AI.

Scripting engine to interact with a graphql endpoint for pentesting purposes.

A tool to generate various ways to do a reverse shell.

List of awesome CobaltStrike resources.

	Semgrep
	Lightweight static analysis for many languages.

	mvt
	Helps with conducting forensics of mobile devices in order to find signs of a potential compromise.

	Havoc
	Modern and malleable post-exploitation command and control framework.

	metasploitable
	VM that is built from the ground up with a large amount of security vulnerabilities.

	GOAD
	Game of Active Directory.

	CMSScan
	Scan Wordpress, Drupal, Joomla, vBulletin websites for security issues.

	vbscan
	A black box vBulletin vulnerability scanner.

	merlin
	Cross-platform post-exploitation HTTP/2 Command & Control server and agent.

	Zphisher
	An automated phishing tool with 30+ templates.

Go to offsec.tools