offsec.tools

A vast collection of security tools for bug bounty, pentest and red teaming

Go to offsec.tools

Tools featured this week

Fetches javascript file from a list of URLS or subdomains.

Check if the mail is used on different sites and retrieve informations on sites.

Leak git repositories from misconfigured websites.

E-mails, subdomains and names Harvester.

Lists of resources: cdn ranges, ips ranges, sni ip ranges...

Open-source penetration testing framework designed for social engineering.

Rust-based high performance domain permutation generator.

A really fast HTTP prober.

Enumerate information from NTLM authentication enabled web endpoints.

LDAP enumeration tool implemented in Python3.

	sulley
	A pure-python fully automated and unattended fuzzing framework.

	boofuzz
	Network protocol fuzzing for humans.

	RedEye
	RedEye is a visual analytic tool supporting Red & Blue Team operations.

	ThreatMapper
	Open source cloud native security observability platform. Linux, K8s, AWS Fargate and more.

	OSINT-Framework
	OSINT Framework.

	atomic-red-team
	Small and highly portable detection tests based on MITRE's ATT&CK.

	MITRE ATT&CK
	Knowledge base of adversary tactics and techniques based on real-world observations.

	kerbrute
	Bruteforce and enumerate Active Directory accounts through Kerberos pre-authentication.

	RedELK
	Tool for Red Teams used for tracking and alarming about Blue Team activities.

	DSStoreView
	DS_Store file parser/viewer.

Go to offsec.tools