offsec.tools - A vast collection of security tools

sponsor

An OOB interaction gathering server and client library

All in one tool for Information Gathering.

Distribution for pentesting IoT devices.

Automated adversary emulation platform.

Designed to streamline the extraction and sanitization of HARTokens from HTTP archives.

In-depth Attack Surface Mapping and Asset Discovery.

Auto Scanning to SSL Vulnerability.

Solve Google reCAPTCHA in less than 5 seconds!

Identify routers on the local LAN and paths to the Internet.

Check for backup artifacts that may disclose the web-application's source code.

Extract endpoints from APK files.

A Git source leak exploit tool that restores the entire Git repository, including data from stash.

A fast & light web screenshot without headless browser but Chrome DevTools protocol.

An automated S3-compatible bucket inspector.

An easy way for penetration testers and bug bounty hunters to test (blind) XSS.

Take it like a gift