offsec.tools

A vast collection of security tools for bug bounty, pentest and red teaming

Go to offsec.tools

Tools featured this week

Subdomain Takeover tool written in Go.

A proxy aware C2 framework used to aid with post-exploitation and lateral movement.

Python wordlist-based DNS subdomain scanner.

Information gathering framework for phone numbers.

Take a list of resolved subdomains and output any corresponding CNAMES en masse.

Highly configurable script for dictionary/spray attacks against online web applications.

Publicly open storage viewer.

Obtain GraphQL API Schema even if the introspection is not enabled.

Hidden parameters discovery suite.

A powerful network scanner, DNS recon, subdomain enumeration and IP Geolocator tool powered by GPT.

	Seatbelt
	Performs security oriented safety checks relevant from offensive/defensive security perspectives.

	Valid8Proxy
	Tool designed for fetching, validating, and storing working proxies.

	NetProbe
	A tool you can use to scan for devices on your network.

	SiCat
	Advanced exploit search tool designed to identify and gather information about exploits.

	Powermad
	PowerShell MachineAccountQuota and DNS exploit tools.

	Kekeo
	A little toolbox to play with Microsoft Kerberos in C.

	Invoke-ACLPwn
	Automates the discovery and pwnage of ACLs in Active Directory that are unsafe configure.

	Genzai
	Helps to identify IoT related dashboards and scan them for default passwords.

Go to offsec.tools