offsec.tools

A vast collection of security tools for bug bounty, pentest and red teaming

Go to offsec.tools

Tools featured this week

Like nmap for mapping wifi networks you're not connected to, plus device tracking.

Generates JNDI links can start several servers to exploit JNDI Injection vulnerabilities.

Discover, browse and monitor database/source code leaks.

This Burp Suite provides additional Scanner checks for AWS security issues.

A tool you can use to scan for devices on your network.

Remotely exploit Android devices using ADB and Metasploit.

PowerShell Cmdlets to interact with BloodHound Data via Neo4j HTTP API.

Burp Suite extension which injects non-invasive headers to reveal backend systems.

Infect an existing Android application with a Meterpreter payload.

Find trick/technique/whatever learnt from CTFs, real life apps, reading researches, and news.

	ScrapedIn
	Scrape LinkedIn without API restrictions for data reconnaissance.

	Template INJection Analyzer
	CLI tool for testing web pages for template injection vulnerabilities.

	Watson
	Enumerate missing KBs and suggest exploits for useful privilege escalation vulnerabilities.

	linux-smart-enumeration
	Linux enumeration tool for pentesting and CTFs with verbosity levels.

	Ligolo-ng
	An advanced, yet simple, tunneling/pivoting tool that uses a TUN interface.

	Donut
	Generates x86, x64, or AMD64+x86 position-independent shellcode that loads .NET Assemblies, PE files.

	spoofcheck
	Simple script that checks a domain for email protection.

	SmuggleFuzz
	A rapid HTTP downgrade smuggling scanner written in Go.

	Damn Vulnerable RESTaurant
	An intentionally vulnerable web API game for learning and training purposes.

Go to offsec.tools