Offensive Security Tools Hub
Change the repository type filter
All
Repositories list
15 repositories
socialrecon
PublicSocialRecon is a high-performance, open-source social media reconnaissance and OSINT security scanner. It identifies social media presence, abandoned profiles, impersonation risks, and brand abuse from domains or usernames.domainguardian
PublicDomainGuardian is a high-performance, accurate subdomain takeover detection platform. Designed for security researchers, bug bounty hunters, and red teams, it focuses on minimizing false positives through multi-layer validation.linksleuth
PublicLinkSleuth is a fast, reliable, and extendable URL discovery and analysis tool written in Go. It allows security researchers and developers to discover endpoints, analyze HTTP responses, and detect sensitive exposure through a modular and multi-threaded approach.offsec-toolkit
Publicsmbseeker
PublicProactive SMB scanning, discovery, and content analysis tool.text-encoder
PublicA powerful, developer-focused text encoding and security utility library and web application. Zero-dependency core library (suitable for Node.js/Browser) + Premium modern Web Interface.mvctrace
PublicA production-grade CLI tool for detecting ASP.NET MVC applications and inferring their versions. Designed for security reconnaissance, penetration testing, and web application analysis. MVCTrace helps identify MVC frameworks with high accuracy while minimizing false positives.headersentinel
PublicHeaderSentinel is a high-performance, professional HTTP security analyzer written in Go. It performs deep inspection of HTTP response headers and status behavior to identify security misconfigurations, calculate risk scores, and provide actionable remediation advice.jwtscout
PublicJWTScout is an offensive security CLI tool designed to analyze, audit, and exploit JSON Web Token (JWT) vulnerabilities including alg:none, weak secrets, key confusion, and claim manipulation.teensy-redops
PublicAdvanced Red Team & Adversary Simulation Research with Teensy Microcontrollersssrfforge
PublicSSRFForge is a high-performance, asynchronous security framework designed for the automated discovery and advanced exploitation of Server-Side Request Forgery (SSRF) vulnerabilities. It serves as a more powerful and modular alternative to legacy tools like SSRFmap.keyforge
PublicKeyForge is a secure password generator focusing on high entropy, customizable policies, and developer-friendly usage.hackertarget
PublicModern command-line interface for HackerTarget network reconnaissance and security testing toolkit. Use open source tools and network intelligence to help organizations with attack surface discovery and identification of security vulnerabilities.pingscope
Publicshodansploit
Publicshodansploit is a powerful CLI tool for interacting with the Shodan API. It provides both an interactive menu-driven interface and robust command-line capabilities for security researchers, penetration testers, and DevOps professionals.