Offensive Security

AI automated exploit framework with target analysis

The de-facto exploitation framework — a massive library of payloads and exploit modules with a consistent console

The standard, automatic SQL injection exploitation tool — detect, fingerprint and dump databases through a vulnerable parameter

Template-driven vulnerability scanner that fires thousands of community-maintained checks against live hosts in minutes

The free edition of the industry-standard web pentest proxy — manual intercept, repeater and intruder (throttled) for hands-on testing

Python network protocol classes

Maps Active Directory attack paths so you can see — and prove — how a low-priv user becomes Domain Admin

Social engineering framework

Phishing simulation platform

Web path brute-forcer

Network Swiss army knife

Post-exploitation AD tool

Library of 2000+ ATT&CK tests

Fast web fuzzer

Directory/DNS brute-forcer

HTTP prober

Rust directory brute-forcer

Automated reconnaissance pipeline

MITM phishing framework

Adversary emulation platform

Automated recon scanner

Offensive security framework

Automated command injection

Automated XSS detection

PHP web shell

Cross-platform RAT

HTTP/2 C2 agent

Multi-user implant framework

Modern post-exploitation framework

Collaborative red team framework

PowerShell credential extraction

Reverse proxy phishing

Phishing campaign tool

Browser exploitation framework

Kerberos abuse toolkit

BloodHound data collector

AD CS exploitation tool

Kerberos brute-forcing

LLMNR/NBT-NS poisoner

Man-in-the-middle suite

Metasploit GUI

Collaborative pentest platform

Fast port scanner

Web crawling framework

URL fetcher from Wayback Machine

Wayback Machine URL fetcher

Subdomain finder

Subdomain finder

MassDNS wrapper

DNS toolkit

Subdomain permutation generator

Parameter mining tool

Greppable patterns

CORS misconfiguration scanner

HTTP request smuggling tester

High-speed HTTP fuzzer

Authorization testing Burp ext

Unhidden parameter discovery Burp ext

Secret finder in JavaScript

JS endpoint extractor

Vulnerable JS library scanner

Endpoint visibility and DFIR at scale using VQL — query live hosts and hunt across a fleet in one language

Static analysis for 30+ languages

The open-source web app security scanner (DAST) — proxy, spider, active/passive scanning and a baseline you can CI

Code quality and security

Python security linter

JS security analysis

Java security audit plugin

Web server scanner

Digital forensics platform

File system analysis tools

The open-source memory forensics framework — analyze a RAM dump to reveal what was actually running

Windows registry analysis

Extract emails, URLs, CCs from disk images

Super timeline creation

Collaborative timeline analysis

Free IR endpoint triage

NSA reverse engineering tool

Framework for reverse engineering

Pattern matching for malware researchers

Automated capability detection for malware

Share and search malware samples

Automated malware analysis sandbox

Command-line interface to VirusTotal

Black-box web app scanner

Web app security scanner

Community-driven vulnerability templates

Community Metasploit modules

Wordlist and payload database for fuzzing