Darkarmour is a Windows AV evasion tool that helps bypass antivirus software, allowing for the creation of undetectable malware.
Best Offensive Security Tools — page 3
Compare 291 Offensive Security tools — 289 free, 0 freemium and 2 paid options, ranked by the security community. Find the right offensive security tool for your team.
291 tools
Weaponize Word documents with PowerShell Empire using the Microsoft DDE exploit.
A managed code hooking template for .NET assemblies, enabling API hooking, code injection, and runtime manipulation.
DET (extensible) Data Exfiltration Toolkit is a proof of concept tool for performing Data Exfiltration using multiple channels simultaneously.
A multi-threaded Java application designed to brute force directories and filenames on web servers, helping identify hidden content and potential attack vectors. Free and included in Kali L…
Utilizes dirtyc0w kernel exploit for privilege escalation in a Docker container.
A tool that exposes the functionality of the Volume Shadow Copy Service (VSS) for creation, enumeration, and manipulation of volume shadow copies, with features for persistence and evasion.
A front-end JavaScript toolkit for creating DNS rebinding attacks
Emulates Docker HTTP API with event logging and AWS deployment script.
Setup script for Regon-ng
A tool that checks expired domains for categorization/reputation and Archive.org history to determine good candidates for phishing and C2 domain names.
Python utility for testing the existence of domain names under different TLDs to find malicious subdomains.
Generates shellcode that loads Windows payloads from memory and runs them with parameters.
A DNS rebinding exploitation framework
DueDLLigence is an open-source tool for identifying and analyzing DLL hijacking vulnerabilities in Windows applications, providing automated analysis and remediation guidance.
A modular, menu-driven tool for building repeatable, time-delayed, distributed security events.
Rip web accessible (distributed) version control systems: SVN, GIT, Mercurial/hg, bzr, ...
Ebowla is a tool for generating payloads in Python, GO, and PowerShell with support for Reflective DLLs.
Post-exploitation framework that enables you to run PowerShell agents without powershell.exe
Customize Empire's GET request URIs, user agent, and headers for evading detection and masquerading as other applications.
A next generation version of enum4linux with enhanced features for enumerating information from Windows and Samba systems.
Generate a variety of suspect actions detected by Falco rulesets.
A cross-platform tool for creating malicious MS Office documents with hidden VBA macros and anti-analysis features.
A standalone man-in-the-middle attack framework used for phishing login credentials and bypassing 2-factor authentication.
Load more tools
Showing 72 of 291