Offensive Security
273 tools and resources
FEATURED
Feature Your Cybersecurity Product
Showcase your innovative cybersecurity solution to our dedicated audience of security professionals.
Boost Your VisibilityNEW
A C++ staged shellcode loader with evasion capabilities, compatible with Sliver and other shellcode sources, designed for offensive security testing.
A visual guide illustrating attack paths and techniques for exploiting vulnerabilities in GitHub Actions configurations.
A lightweight and portable Docker container for penetration testers and CTF players
A penetration testing framework for identifying and exploiting vulnerabilities.
A Python-based tool for identifying and exploiting file inclusion and directory traversal vulnerabilities in web applications.
A scripting engine for interacting with GraphQL endpoints for pentesting purposes.
A collection of payloads and methodologies for web pentesting.
A tool for recursively querying webservers
A powerful XSS scanning and parameter analysis tool
A collection of tests for Local File Inclusion (LFI) vulnerabilities using Burp Suite.
A login cracker that can be used to crack many types of authentication protocols.
Automatic tool for DNS rebinding-based SSRF attacks
A tool for security researchers and penetration testers to automate the process of finding sensitive information on a target domain.
A tool for Local File Inclusion (LFI) exploitation and scanning
A tool for detecting and taking over subdomains with dead DNS records
A front-end JavaScript toolkit for creating DNS rebinding attacks
Automatic SSRF fuzzer and exploitation tool
A cross-platform web fuzzer written in Nim