Spicy kitchen

Offensive security, served hot in your browser.

Red-team builders, encoders, cheat sheets and references β€” the kind of thing you run yourself against your own authorized targets. Client-side first. No accounts, no tracking, no ads.

Recon & OSINT

Footprinting and open-source intelligence.

View all tools →

Initial Access

Payloads, encoders and first-foothold helpers.

View all tools →

Password & Auth Attacks

Rule/mask crafting and credential tooling.

View all tools →

References & Cheat Sheets

246 offensive command references, one page each.

View all 246 →

Also on the kill chain β€” still cooking

Payloads & Encoding SOONShellcode formatting and encoder chains. Web & API Attacks SOONInjection, SSRF and auth-bypass references. Active Directory SOONKerberos, ACL abuse and lateral movement. Post-Exploitation SOONPriv-esc, persistence and exfil references.

House rules

For network administrators

This domain is deliberately separate from cyberramen.com so you can set policy per site: allow cyberramen.com for your SOC and GRC teams, and restrict offensiveramen.com to your pentest team. Everything here is dual-use security tooling in the “Hacking / Computer Security” category. Questions: security@offensiveramen.com.

May be blocked by corporate proxies β€” that is by design.

Authorized security testing only. You are responsible for compliance with applicable laws.