offsec.tools - A vast collection of security tools

Lightweight static analysis for many languages.

A simple script just made for self use for bypassing 403.

Dump remote files through a local file read or Local File Inclusion web vulnerability.

Filter and enrich a list of subdomains by level.

Auto Scanning to SSL Vulnerability.

A fast, simple, recursive content discovery tool written in Rust.

Request the public disclosures on a specific HackerOne program.

Post-exploitation and adversary emulation framework that is used to aid Red Teams and pentesters.

Just a quick inventory, reminder and launcher for pentest commands.

Fetch known URLs from several sources and Filter Urls With OpenRedirection or SSRF Parameters.

Full-fledged phishing framework to manage all phishing engagements.

Performs passive scan to identify buckets and test them for publicly accessible vulnerabilities.

Enumerates DNS information of a domain and to discover non-contiguous ip blocks.

A comprehensive scanner for Google Cloud.

Burp Suite extension that allows request/response modification using a GUI.

Take it like a gift