offsec.tools - A vast collection of security tools

PowerShell script to dump Windows credentials from the Credential Manager.

403/401 Bypass Methods.

A fast tool to check subdomain takeover vulnerability.

Open source Django offensive webapp which is keeping the best tools used in the redteaming.

The new generation of wmiexec.py with all operations performed on port 135 for antivirus evasion.

Find interesting Amazon S3 Buckets by watching certificate transparency logs.

Automate your application security orchestration and correlation (ASOC).

The Burp extension helps you to find authorization bugs.

Malicious traffic detection system.

Crawls the website and finds broken social media links that can be hijacked

A list of services and how to claim (sub)domains with dangling DNS records.

Enumerate s3 buckets for a specific target.

Knowledge base of adversary tactics and techniques based on real-world observations.

Login hunter of default credentials for administrative web interfaces.

Morphing Cobalt Strike's evil.HTA.

Take it like a gift