offsec.tools

A vast collection of security tools for bug bounty, pentest and red teaming

Go to offsec.tools

Tools featured this week

Image metadata library and tools.

Collect HTTP or webhook requests and inspect them in a human-friendly way.

Stealth redirector for your red team operation security.

AWS Attack Library.

Smart SSRF scanner using different methods like parameter brute forcing in POST and GET.

Prevents you from committing secrets and credentials into git repositories.

A Burp Suite extension made to automate the process of bypassing 403 pages.

Open-source penetration testing tool that automates the process of exploiting XSS.

Offensive PowerShell for red team, penetration testing and offensive security.

Blazing-fast tool to grab screenshots of your domain list right from terminal.

	Yara
	The pattern matching swiss knife for malware researchers.

	HackTools
	The all-in-one browser extension for offensive security professionals.

	Decompilers online
	Free, accessible, and platform-independent decompilation service.

	wordlistctl
	Fetch, install and search wordlist archives from websites and torrent peers.

	lazyegg
	Powerful tool for extracting various types of data from a target URL.

	clair
	Vulnerability static analysis for containers.

	docker-bench-security
	Check for dozens of common best-practices around deploying Docker containers in production.

	js-beautify
	Beautifier for JavaScript.

	PcapXray
	Visualize a packet capture offline as a network diagram including device identification.

	crowdsec
	Offers crowdsourced protection against malicious IPs and access to the most advanced real-world CTI.

Go to offsec.tools