A web application security testing platform that combines manual and automated testing tools for conducting comprehensive security assessments and penetration testing.
Best Offensive Security Tools — page 2
Compare 291 Offensive Security tools — 289 free, 0 freemium and 2 paid options, ranked by the security community. Find the right offensive security tool for your team.
291 tools
A collection of tests for Local File Inclusion (LFI) vulnerabilities using Burp Suite.
Generates randomized C2 profiles for Cobalt Strike to evade detection.
C3 is a framework for creating custom C2 channels, integrating with existing offensive toolkits.
Caldera is a cybersecurity framework by MITRE for automated security assessments and adversary emulation.
A tool for security researchers and penetration testers to automate the process of finding sensitive information on a target domain.
Chameleon aids in evading proxy categorization to bypass internet filters.
A Go client to communicate with Chaos DB API
Charlotte is an undetected C++ shellcode launcher for executing shellcode with stealth.
A technique for social engineering and untrusted command execution using ClickOnce technology
Data exfiltration & infiltration tool using text-based steganography to evade security controls.
Adversary simulation and red team operations
Using Apache mod_rewrite as a redirector to filter C2 traffic for Cobalt Strike servers.
A comprehensive guide for customizing Cobalt Strike's C2 profiles to enhance stealth and operational security.
A specification/framework for extending default C2 communication channels in Cobalt Strike
CobaltBus enables Cobalt Strike C2 traffic via Azure Servicebus for enhanced covert operations.
Using Apache mod_rewrite rules to rewrite incident responder or security appliance requests to an innocuous website or the target's real website.
Open source penetration testing tool for detecting and exploiting command injection vulnerabilities.
Covenant is a .NET C2 framework for red teamers, facilitating collaborative and efficient management of red team operations.
Back-end component for red team operations with crucial design considerations.
A post-exploitation tool for pentesting Active Directory
CrackMapExec (CME) - A tool for querying internal database for host and credential information in cybersecurity.
CredMaster enhances password spraying tactics with IP rotation to maintain anonymity and efficiency.
CrossC2 enables generation of cross-platform payloads for CobaltStrike, enhancing operational flexibility.
Load more tools
Showing 48 of 291