A wargaming network for penetration testers to practice their skills in a realistic environment.
Best Offensive Security Tools — page 11
Compare 291 Offensive Security tools — 289 free, 0 freemium and 2 paid options, ranked by the security community. Find the right offensive security tool for your team.
291 tools
Modular framework for pentesting Modbus protocol with diagnostic and offensive features.
A reminder that technology alone is not enough to stay secure against social engineering tactics.
An open-source penetration testing framework for social engineering with custom attack vectors.
A C2 profile generator for Cobalt Strike designed to enhance evasion.
Open-source project for building instrumented environments to simulate attacks and test detections.
A collection of Python scripts for password spraying attacks against Lync/S4B & OWA, featuring Atomizer, Vaporizer, Aerosol, and Spindrift tools.
A penetration testing tool for intercepting SSH connections and logging plaintext passwords.
A simple SSRF-testing sheriff written in Go
Automatic SSRF fuzzer and exploitation tool
A tool for detecting and exploiting Server-Side Template Injection (SSTI) vulnerabilities
A tool that scans for accessibility tools backdoors via RDP
Emulate offensive attack techniques in the cloud with a self-contained Go binary.
A guide on using Apache mod_rewrite to strengthen phishing attacks and bypass mobile device restrictions
Sublist3r is a python tool for enumerating subdomains using OSINT and various search engines.
A subdomain enumeration tool for bug hunting and pentesting
A login cracker that can be used to crack many types of authentication protocols.
A blog post discussing the often overlooked dangers of CSV injection in applications.
A standard for conducting penetration tests, covering seven main sections from planning to reporting.
A powerful OSINT tool that gathers emails, subdomains, hosts, employee names, open ports, and banners from different public sources. It's completely free and open-source.
A comprehensive malware-analysis tool that utilizes external AV scanners to identify malicious elements in binary files.
TikiTorch offers advanced process injection capabilities to execute code stealthily in another process's space.
A tool for detecting and taking over subdomains with dead DNS records
A C++ staged shellcode loader with evasion capabilities, compatible with Sliver and other shellcode sources, designed for offensive security testing.
Load more tools
Showing 264 of 291