offsec.tools - A vast collection of security tools

Scripts to execute enumeration via LFI

Execute full pentesting processes combining multiple hacking tools automatically.

Customisable and automated HTTP header injection.

A vulnerability scanner for container images and filesystems.

Detects JWT algorithm and provides options to generate a new JWT based on another algorithm.

HTTP Request Smuggling over HTTP/2 Cleartext.

Command and Control Framework written in C#.

Privilege escalation tool for Windows.

Reverse engineering tool for linux games.

A .js scanner, built in PHP, designed to scrape urls and other info.

Pentest report generator.

Lists the different ways of reaching a given type in a GraphQL schema.

An OSINT tool to investigate GitHub profiles.

OSINT tool allowing you to find various information via a phone number.

Login hunter of default credentials for administrative web interfaces.

Take it like a gift