offsec.tools - A vast collection of security tools

sponsor

Collect and maintain internet-wide assets data for public Bug Bounty programs.

Obtain GraphQL API Schema even if the introspection is not enabled.

Power security researchers around the world as well as code scanning.

Probe endpoints consuming Java serialized objects for fingerprinting.

Generates combination of domain names from the provided input.

Active Directory Certificate Services enumeration and abuse.

Trace the path of a DNS query.

An enterprise friendly way of detecting and preventing secrets in code.

Utilize misconfigured DNS and old database records to find hidden IPs behind CloudFlare network.

Utility that detects publicly disclosed vulnerabilities in application dependencies.

Collaboration and reporting for infosec teams made simple.

A static security code scanner for Node.js applications.

Plugin-based tool to scan public version control systems for sensitive information.

A self-hosted fuzzing-as-a-service platform.

The industry standard for mobile application security.

Take it like a gift