Browse all offensive security tools, platforms, and services in one place.
Akto is an API security platform providing API discovery, security posture assessment, and testing throughout the DevSecOps pipeline.
BloodHound CE maps attack paths in Active Directory, Entra ID, and Azure, using graph theory to reveal hidden relationships and vulnerabilities.
CALDERA is an automated adversary emulation system that leverages the MITRE ATT&CK framework to assess security posture and detect gaps.
Censys provides attack surface management and threat hunting solutions powered by comprehensive internet intelligence data.
Evilginx Pro is a phishing framework designed for red teams, enabling advanced phishing attacks with features like session hijacking and credential harvesting.
Guided Hacking is the #1 source for learning game hacking since 2011 producing high quality educational content on game hacking & reverse engineering.
AI-powered cybersecurity automation platform with 150+ tools and autonomous AI agents for pentesting, vulnerability discovery, and bug bounty automation.
Metasploit is a penetration testing framework that helps security teams verify vulnerabilities, manage assessments, and improve security awareness.
The NVD is the U.S. government repository of standards-based vulnerability management data, enabling red teams to analyze CVEs and assess security risks.
OWASP Foundation: Open source application security, providing resources, tools, and community for secure software development.
OffSec delivers cyber workforce resilience through skills development, hands-on learning platform, and a comprehensive library.
PortSwigger offers web application security tools, testing resources, and training to identify the latest vulnerabilities.