last7days tools on offsec.tools

ffufPostprocessing

Golang tool which helps dropping the irrelevant entries from your ffuf result file.

#endpoints #utils

h8mail

Powerful and user-friendly password hunting tool.

#emails #leaks #passwords #usernames

ScareCrow

Payload creation framework designed around EDR bypass.

#api #dll #edr #framework #memory #payloads #permissions #privesc

LDAP Password Hunter

Password Hunter in active directory.

#activedirectory #ldap #passwords #windows

NMapify

Quickly and accurately create a visual representation of their Nmap output.

#images #network #utils

sub404

A fast tool to check subdomain takeover vulnerability.

#subdomains #subto

mimikittenz

A post-exploitation powershell tool for extracting juicy info from memory.

#exploits #memory #secrets #windows

Dumpert

LSASS memory dumper using direct system calls and API unhooking.

#api #lsass #memory

WiFi-Pumpkin

Framework for rogue Wi-Fi access point attack.

#framework #mitm #network #sniffing #spoofing #wifi

FindUncommonShares

Quickly find uncommon shares in vast Windows domains.

#activedirectory #ldap #samba #shares #windows

Invoke-TmpDavFS

Memory Backed Powershell WebDav Server.

#webdav #windows

Invoke-SocksProxy

Socks proxy, and reverse socks server using powershell.

#network #pivot #privesc #proxy

PowerShdll

Run PowerShell with rundll32 in order to bypass software restrictions.

#exploits #payloads #powershell #windows

PSByPassCLM

Bypass for PowerShell Constrained Language Mode.

#exploits #payloads #powershell #windows

CarbonCopy

Creates a spoofed certificate of any online website and signs an executable for AV evasion.

#certificates

DNSTracer

Trace the path of a DNS query.

#dms #utils

Invoke-BSOD

For when you want a computer to be done - without admin!.

#bsod #exploits #windows

Invoke-WCMDump

PowerShell script to dump Windows credentials from the Credential Manager.

#passwords #windows

Invoke-PSImage

Encodes a PowerShell script in the pixels of a PNG file and generates a oneliner to execute.

#exploits #images #payloads

SDBF

Smart DNS Brute Forcer.

#domains #subdomains

Ciphey

Automates decryptions & decodings with encodings, classical ciphers, hashes, or more.

#cryptography #hash #passwords

ScopeHunter

Command-line tool for finding in-scope targets for bug bounty programs.

#bugbounty #bugcrowd #hackerone #intigriti #utils #yeswehack

SSRFPwned

Checks for SSRF using custom payloads after fetching URLs from sources & applying complex patterns.

#payloads #ssrf

TerminatorZ

Scan for top potential vulnerabilities with known CVEs in your web applications.

#csrf #cves #rce #scanner #sqli #xss

SQLMutant

Searches for automated subdomain enumeration and runs SQLi tests.

#sqli #subdomains

A vast collection of security tools for bug bounty, pentest and red teaming

#last7days