Outflank Security Tooling (OST) is a broad set of tools explicitly developed for red teamers to bypass defensive measures and detection tools. For years the red teaming specialists at Outflank have researched and developed powerful tools -- some that can be shared with the public, and others are too powerful for public release.
OST brings together these internal tools, making them available to others who provide high-end offensive security services such as red teaming, adversary simulation or advanced penetration testing.
These tools allow testing teams to simulate similar techniques to what some APTs and Organized Crime Groups apply but are not available in public tools. They also help team members easily perform deep-technical and difficult tasks without hassle, with a guaranteed level and OPSEC safe.
Using OST has several benefits for your offensive team, including:
OST is continuously updated with new offensive techniques and procedures by a team of hackers and developers. This saves you significant time developing and maintaining a full internal toolkit.
The toolkit is developed and used by Outflank specialists. We hire some of the smartest people in the industry. They spend much time on research & development. We put this into a readily available toolkit built for performing in mature and sensitive target environments. This means your team can quickly upgrade their knowledge, technology and operations. Supported with extensive documentation, your team will know exactly what the tools do.
Smaller teams can punch above their weight by leveraging external development power. Our toolkit provides your team with shortcuts for hard stages like initial access, EDR evasion and OPSEC-safe lateral movement. OST includes techniques that have not yet been published or weaponized by other red teams.
OST was developed to work in tandem to work with Fortra’s advanced adversary simulation tool, Cobalt Strike. Those with both Cobalt Strike and OST can take advantage of features that extend the reach of these two tools to further enhance testing efforts.
Create advanced payloads that enhance antivirus evasion and detection strategies using anti-forensic features.
An extensive collection of over 30 tools ranging from lightweight scripts to full frameworks. These tools are brought to you by a highly skilled red team committed to knowledge sharing and constantly enhancing the toolset to exceed the latest offensive security standards.
Run OPSEC focused engagements with a custom C2 framework with support for implants on Windows, macOS, and Linux.
Create evasive payloads with tailored or pre-configured settings to bypass specific EDRs.
Facilitate lateral movement in a target environment.
Get enhanced stealth with a purpose-built .NET obfuscator.
Covertly conduct operations on a target laptop.
Simplify phishing for Entra ID device codes.
Red teams can now take full advantage of OST's interoperability with Cobalt Strike and Core Impact through our suite offerings, which package these security assessment solutions together at a reduced price.
Suite subscribers gain exclusive access to Cobalt Strike Research Labs' specialized tooling and operator training programs are also included to sharpen your team's skills.
Cobalt Strike's mature, adaptable C2 framework allows a red teamer to simulate the tactics and techniques of an advanced, embedded attacker. OST integrates directly with Cobalt Strike through BOFs and reflective DLL loading techniques, providing an OPSEC-safe way to efficiently perform highly technical and difficult post-exploitation tasks.
View Suite
Fortra's Offensive Security Suite is comprised of three distinct enterprise-grade tools: Core Impact tests exploitation paths and lateral movement, Cobalt Strike enables advanced adversary tactics for Red Team operations, and OST provides a broad arsenal for evasive attack simulation.
View SuiteExplore other configurations and models that might suit your needs.
Recommended
#Cobalt-Strike
Recommended
#Core-Impact
Our team of experts is ready to help you find the perfect solution for your business needs. Get personalized advice and competitive quotes.
We're here to help with any questions