offsec.tools

A vast collection of security tools for bug bounty, pentest and red teaming

Go to offsec.tools

Tools featured this week

Utility for information gathering and penetration testing automation.

InsiderPhD Youtube channel.

Burp Suite extension for dynamic payload generation to detect injection flaws.

A lightweight CSRF Toolkit for easy Proof of Concept.

Probe a rendering engine for vulnerabilities and other features.

A burpsuite extension to find security reports published on HackerOne based on the selected host.

Tool to find metadata and hidden information in the documents.

Java application for automatic SQL database injection.

NET Decompiler with support for PDB generation, ReadyToRun, Metadata (&more) - cross-platform!.

A tool to dump a git repository from a website.

	tsunami-security-scanner
	Network security scanner with an extensible plugin system.

	sonarqube
	Continuous inspection.

	objection
	Runtime mobile exploration.

	peda
	Python Exploit Development Assistance for GDB.

	axiom
	Distribute the workload of many different scanning tools with ease.

	wifijammer
	Continuously jam all wifi clients/routers.

	EagleEye
	Stalk your friends on social media using image recognition and reverse image search.

	PhoneSploit-Pro
	Remotely exploit Android devices using ADB and Metasploit.

	nodejsscan
	A static security code scanner for Node.js applications.

	Modlishka
	A powerful and flexible HTTP reverse proxy.

	SocialFish
	Phishing tool & information collector.

Go to offsec.tools