A blog post about bypassing AppLocker using PowerShell diagnostic scripts
Best Offensive Security Tools — page 4
Compare 291 Offensive Security tools — 289 free, 0 freemium and 2 paid options, ranked by the security community. Find the right offensive security tool for your team.
291 tools
Collection of vulnerable ARM binaries for beginner vulnerability researchers & exploit developers.
A CVE compliant archive of public exploits and corresponding vulnerable software, and a categorized index of Internet search engine queries designed to uncover sensitive information.
Very vulnerable ARM/ARM64[AARCH64] application with various levels of vulnerabilities for exploitation training.
Python framework for building and utilizing interfaces to transfer data between frameworks with a focus on Command and Control frameworks.
A tool for testing Cross Site Scripting vulnerabilities
A Python-based tool for identifying and exploiting file inclusion and directory traversal vulnerabilities in web applications.
High-performant, coroutines-driven, and fully customisable Low & Slow load generator for real-world pentesting with undetectability through Tor.
FOCA is a tool used to find metadata and hidden information in scanned documents, with capabilities to analyze various file types and extract EXIF information.
A tool for generating .NET serialized gadgets for triggering .NET assembly load/execution.
A tool for enumerating and attacking GitHub Actions pipelines
A script to enumerate Google Storage buckets and determine access and privilege escalation
A set of commands for exploit developers and reverse-engineers to enhance GDB functionality.
A visual guide illustrating attack paths and techniques for exploiting vulnerabilities in GitHub Actions configurations.
Pentest active directory LAB project for practicing attack techniques.
Fast web spider written in Go
A scripting engine for interacting with GraphQL endpoints for pentesting purposes.
GraphSpy is a token management tool that allows users to store and manage access and refresh tokens for multiple users and scopes in one location.
A tool for automated security scanning of web applications and manual penetration testing.
Python-based toolkit for network hacking with various implemented techniques and supported by Securetia SRL.
A free, safe, and legal training ground for ethical hackers to test and expand their skills
A simple, fast web crawler for discovering endpoints and assets in a web application
A collection of tips and tricks for container and container orchestration hacking
A tool for performing hash length extension attacks against multiple hashing algorithms.
Load more tools
Showing 96 of 291