Offensive Security
Best XSS'OR alternatives and competitors
62 active tools in the same primary category, including Proxmark III, xargs, Brute Ratel C4, and 59 more. Open any row for the full SecurityListing profile, pricing context, and integrations.
Top 60 of 62 alternatives
Proxmark III
Proxmark III on SecurityListing: A tool for testing and analyzing RFID and NFC tags, allowing users to read and write data, and perform various attacks and tests.
Offensive Security
xargs
xargs on SecurityListing: A command that builds and executes command lines from standard input, allowing for the execution of commands with multiple arguments.
Offensive Security
Brute Ratel C4
Brute Ratel C4 on SecurityListing: Advanced command and control tool for red teaming and adversary simulation with extensive features and evasion capabilities.
Offensive Security
Yogosha Pentest as a Service
Yogosha Pentest as a Service on SecurityListing: Platform for on-demand pentests & bug bounties via vetted security researchers
Offensive Security
TechTarget
TechTarget on SecurityListing: Sysreptor provides a customizable security reporting solution for penetration testers and red teamers.
Offensive Security
Using a SCF file to Gather Hashes
Using a SCF file to Gather Hashes on SecurityListing: Abusing SCF files to gather user hashes from an unauthenticated writable Windows-based file share.
Offensive Security
ParrotSec
ParrotSec on SecurityListing: Parrot Security OS is a comprehensive, secure, and customizable operating system for cybersecurity professionals, offering over 600+ tools and utilities for red and blue team operations.
Offensive Security
UPX
UPX on SecurityListing: UPX is a high-performance executable packer for various executable formats.
Offensive SecurityCobalt: Offensive Security Services
Cobalt infuses pentesting with speed, simplicity, and transparency. Our award-winning Pentest as a Service (PtaaS) model empowers organizations to keep pace with modern software development lifecycles in an agile worl…
Offensive Security
Aircrack-ng
Aircrack-ng on SecurityListing: A complete suite of tools for assessing WiFi network security with capabilities for monitoring, attacking, testing, and cracking.
Offensive Security
Cobalt Strike HTTP C2 Redirectors with Apache mod_rewrite
Cobalt Strike HTTP C2 Redirectors with Apache mod_rewrite on SecurityListing: Using Apache mod_rewrite as a redirector to filter C2 traffic for Cobalt Strike servers.
Offensive Security
Ophcrack
Ophcrack on SecurityListing: Ophcrack is a free Windows password cracker based on rainbow tables with various features for password recovery.
Offensive Security
Tao Security
Tao Security on SecurityListing: Sysreptor provides a customizable reporting platform for pentesters and red teamers to efficiently document security assessments.
Offensive Security
Abusing the COM Registry Structure: CLSID, LocalServer32, & InprocServer32
Abusing the COM Registry Structure: CLSID, LocalServer32, & InprocServer32 on SecurityListing: Abusing the COM Registry Structure: CLSID, LocalServer32, & InprocServer32
Offensive Security
Covert Red Team Attack Infrastructure
Covert Red Team Attack Infrastructure on SecurityListing: Back-end component for red team operations with crucial design considerations.
Offensive Security
The State of Security by Tripwire
The State of Security by Tripwire on SecurityListing: Sysreptor offers a customizable reporting solution for penetration testing and red teaming activities.
Offensive Security
WebDAV Covert Channel
WebDAV Covert Channel on SecurityListing: A covert channel technique that uses WebDAV protocol features to deliver malicious payloads and establish C2 communication while bypassing security controls.
Offensive Security
DorkSearch
DorkSearch on SecurityListing: An AI-powered Google Dorking tool that helps create effective search queries to uncover sensitive information on the internet.
Offensive Security
Abusing DCOM For Yet Another Lateral Movement Technique
Abusing DCOM For Yet Another Lateral Movement Technique on SecurityListing: An exploration of a new method to abuse DCOM for remote payload execution and lateral movement.
Offensive Security
Bleeping Computer
Bleeping Computer on SecurityListing: A customizable offensive security reporting solution for pentesters and red teamers to generate detailed reports of their findings and vulnerabilities.
Offensive Security
PTJunior
PTJunior on SecurityListing: AI agent that autonomously discovers, exploits, and documents vulnerabilities.
Offensive Security
Troy Hunt
Troy Hunt on SecurityListing: Sysreptor offers a customizable security reporting solution for penetration testers and red teamers.
Offensive Security
Guide to Ethical Hacking
Guide to Ethical Hacking on SecurityListing: A comprehensive educational resource that provides structured guidance on penetration testing methodology, tools, and techniques organized around the penetration testing attack chain.
Offensive Security
Reverse Engineering HID iClass Master Keys
Reverse Engineering HID iClass Master Keys on SecurityListing: Exploiting a vulnerability in HID iClass system to retrieve master authentication key for cloning cards and changing reader settings.
Offensive Security
Combatting Incident Responders with Apache mod_rewrite
Combatting Incident Responders with Apache mod_rewrite on SecurityListing: Using Apache mod_rewrite rules to rewrite incident responder or security appliance requests to an innocuous website or the target's real website.
Offensive Security
LeakIX
LeakIX on SecurityListing: LeakIX is a red-team search engine that indexes mis-configurations and vulnerabilities online.
Offensive Security
Proxmark 3
Proxmark 3 on SecurityListing: The Proxmark III is a versatile device for sniffing, reading, and cloning RFID tags with strong community support.
Offensive Security
Theos Red Teaming
Theos Red Teaming on SecurityListing: Red teaming service simulating real-world adversary attacks on organizations.
Offensive Security
Threatpost
Threatpost on SecurityListing: Sysreptor offers a customizable reporting solution for penetration testing and red teaming.
Offensive SecurityEscape: AI-Powered Offensive Security Platform
Offensive security engineering platform that replaces legacy scanners and manual offensive security processes with AI agents that discover, test, and remediate directly in engineering workflows.
Offensive Security
Lab of a Penetration Tester: Abusing DNSAdmins privilege for escalation in Active Directory
Lab of a Penetration Tester: Abusing DNSAdmins privilege for escalation in Active Directory on SecurityListing: Abusing DNSAdmins privilege for escalation in Active Directory
Offensive Security
Pentesting Payloads
Pentesting Payloads on SecurityListing: A web-based payload repository that generates and encodes ready-to-use exploits for SQL injection, XSS, file inclusion, and command injection vulnerabilities.
Offensive Security
Lab of a Penetration Tester: Week of Evading Microsoft ATA
Lab of a Penetration Tester: Week of Evading Microsoft ATA on SecurityListing: A week-long series of articles and talks on evading Microsoft Advanced Threat Analytics (ATA) detection
Offensive Security
LockBoxx
LockBoxx on SecurityListing: Introduction to using GScript for Red Teams
Offensive Security
Security Intelligence
Security Intelligence on SecurityListing: Sysreptor offers a customizable security reporting solution for penetration testers and red teamers.
Offensive Security
The Hacker News
The Hacker News on SecurityListing: The Hacker News is a leading cybersecurity news platform providing updates, insights, and information to professionals and enthusiasts in the field.
Offensive Security
ARM Assembly and Shellcode
ARM Assembly and Shellcode on SecurityListing: A comprehensive collection of resources for learning ARM assembly language and shellcode development.
Offensive Security
Daniel Miessler/Unsupervised Learning
Daniel Miessler/Unsupervised Learning on SecurityListing: Sysreptor offers a customizable reporting solution for offensive security assessments.
Offensive Security
GNU Netcat
GNU Netcat on SecurityListing: A featured networking utility for reading and writing data across network connections with advanced capabilities.
Offensive Security
State of Security
State of Security on SecurityListing: Sysreptor offers a customizable security reporting solution for penetration testers and red teamers.
Offensive Security
Vshadow
Vshadow on SecurityListing: A command line utility for managing volume shadow copies with capabilities for evasion, persistence, and file extraction.
Offensive Security
Abusing Exported Functions and Exposed DCOM Interfaces for Pass-Thru Command Execution and Lateral Movement
Abusing Exported Functions and Exposed DCOM Interfaces for Pass-Thru Command Execution and Lateral Movement on SecurityListing: A blog post about abusing exported functions and exposed DCOM interfaces for pass-thru command execution and lateral movement
Offensive Security
Sn1per Enterprise
Sn1per Enterprise on SecurityListing: All-in-one offensive security platform for attack surface mgmt & risk scoring
Offensive Security
Windows Oneliners for Remote Code Execution
Windows Oneliners for Remote Code Execution on SecurityListing: Collection of Windows oneliners for executing arbitrary code and downloading remote payloads.
Offensive Security
snmpcheck
snmpcheck on SecurityListing: A tool for enumerating information via SNMP protocol.
Offensive Security
DDE attack with PowerShell Empire
DDE attack with PowerShell Empire on SecurityListing: Weaponize Word documents with PowerShell Empire using the Microsoft DDE exploit.
Offensive Security
Empire Communication Profiles
Empire Communication Profiles on SecurityListing: Customize Empire's GET request URIs, user agent, and headers for evading detection and masquerading as other applications.
Offensive Security
Workshop Hacking Bluetooth Smart locks
Workshop Hacking Bluetooth Smart locks on SecurityListing: A workshop on hacking Bluetooth Smart locks, covering architecture, vulnerabilities, and exploitation techniques.
Offensive Security
checkra1n
checkra1n on SecurityListing: Semi-tethered jailbreak for iPhone 5s to iPhone X, running iOS 12.0 and up, using the 'checkm8' bootrom exploit.
Offensive Security
Bastille-Linux
Bastille-Linux on SecurityListing: Bastille-Linux is a system hardening program that proactively configures the system for increased security and educates users about security settings.
Offensive Security
Caldera
Caldera on SecurityListing: Caldera is a cybersecurity framework by MITRE for automated security assessments and adversary emulation.
Offensive SecurityCyberPilot
At CyberPilot we help you strengthen your team to make sure that you have a strong cyber security culture. Your employees are your strongest defence.
Offensive Security
DiskShadow
DiskShadow on SecurityListing: A tool that exposes the functionality of the Volume Shadow Copy Service (VSS) for creation, enumeration, and manipulation of volume shadow copies, with features for persistence and evasion.
Offensive Security
Java Decompiler Online
Java Decompiler Online on SecurityListing: Online Java decompiler tool with support for modern Java features.
Offensive Security
Paving The Way to DA - Complete Post (Pt 1,2 & 3)
Paving The Way to DA - Complete Post (Pt 1,2 & 3) on SecurityListing: A three-part educational series documenting techniques for achieving domain administrator privileges in Windows environments, covering attack methods, defenses, and remediation strategies.
Offensive Security
DVWA - Brute Force (High Level) - Anti-CSRF Tokens
DVWA - Brute Force (High Level) - Anti-CSRF Tokens on SecurityListing: A guide to brute forcing DVWA on the high security level with anti-CSRF tokens
Offensive Security
Sn1per Professional
Sn1per Professional on SecurityListing: Offensive security platform for attack surface discovery and risk management
Offensive Security
DNS Tunnelling
DNS Tunnelling on SecurityListing: A technique to encode data within DNS queries for covert communication channels.
Offensive Security
The Security Ledger
The Security Ledger on SecurityListing: Sysreptor offers a customizable reporting solution for pentesters and red teamers to enhance security documentation.
Offensive Security
tcpreplay
tcpreplay on SecurityListing: Tcpreplay is a suite of Open Source utilities for editing and replaying captured network traffic.
Offensive Security
FAQ
- Are these “official” vendor pairings?
- No. Alternatives are category peers for discovery, not paid placements. Vendors can still claim profiles and keep their product pages up to date.
- Why is my favorite tool missing?
- Only active listings in the same primary category appear. Multi-category products may move when their primary category is updated.