offsec.tools - A vast collection of security tools

Patch-level verification for Bundler.

Convolutional neural network for analyzing pentest screenshots.

Open-source penetration testing tool that automates the process of exploiting XSS.

DS_Store file parser/viewer.

Search across 20 million exposed secrets in public GitHub repositories, gists, issues and comments.

Add headers to all Burp requests to bypass some WAF products.

Uses data from SSL Certificates to find potential host names.

Black box fuzzer for web applications.

Realtime map that integrates Firebase, Google Maps and Shodan.

Payload toolkit for bypassing EDRs using suspended processes, direct syscalls written.

CLI tool for open source and threat intelligence.

Extract subdomains/emails for a given domain using SSL/TLS certificate dataset on Censys.

Assessment tool that allows penetration testing and hostile attack simulations.

Escalate a Cross-Site Scripting vulnerability to Remote Code Execution in WordPress.

Tool for automating customized attacks against web applications.

Take it like a gift