offsec.tools - A vast collection of security tools

An open-source self-hosted purple team management web application.

Vulnerable by design AWS deployment tool.

403/401 Bypass Methods.

Automated adversary emulation platform.

Bash script which checks and validates for leaked credentials.

PHP Webshell with handy features.

A shiny new copy of Chromium that will bring colors in your hunt.

A permutation generation tool written in golang.

Authentication Token Obtain and Replace Extender.

Burp Suite extension to pull employee names from Google and Bing LinkedIn search results.

Python script implementing the favicon hash trick to find subdomains.

Abusing Certificate Transparency logs for getting HTTPS websites subdomains.

Awesome cloud enumerator.

A tool to dump a git repository from a website.

A drop-in replacement for Nmap powered by shodan.io.

Take it like a gift