Submit your favorite resources for free.
Browse all offensive security tools, platforms, and services in one place.
Autonomous AI agent system for complex penetration testing, integrating security tools, long-term memory, and smart task delegation in sandboxed Docker.
Phishing Club is a phishing simulation and man-in-the-middle framework designed for companies and red teams to obtain initial access.
Red team tools: RFID skimmers, decoy readers, and physical exploitation hardware for security professionals and adversarial testing.
Pillar Security: AI security platform to identify, assess, and mitigate security risks across the entire AI lifecycle.
PlexTrac is an AI-powered platform for pentest reporting, vulnerability management, and continuous threat exposure management (CTEM).
BloodHound reporting tool for Blue and Purple Teams to identify Active Directory security vulnerabilities.
A Postman recon/OSINT framework for automated API endpoint discovery and secret exploitation in workspaces, collections, requests, users, and teams.
A high-performance TCP port forwarder for Windows with optional IP whitelisting and verbose logging capabilities.
Postman: The leading API platform for building and using APIs. Streamline collaboration and simplify the API lifecycle.
Praetorian offers continuous threat exposure management solutions, including attack surface management and breach & attack simulation.
Prism is an open-source HTTP mock and proxy server that accelerates API development with realistic mock servers powered by OpenAPI documents.
Probely is an automated web application and API vulnerability scanner designed for agile teams to automate security testing in their SDLC.