Outflank Security Tooling (OST)

Powerful Tools Made by Red Teamers for Red Teams

Outflank Security Tooling (OST) is a broad set of tools explicitly developed for red teamers to bypass defensive measures and detection tools. For years the red teaming specialists at Outflank have researched and developed powerful tools -- some that can be shared with the public, and others are too powerful for public release.

OST brings together these internal tools, making them available to others who provide high-end offensive security services such as red teaming, adversary simulation or advanced penetration testing.

These tools allow testing teams to simulate similar techniques to what some APTs and Organized Crime Groups apply but are not available in public tools. They also help team members easily perform deep-technical and difficult tasks without hassle, with a guaranteed level and OPSEC safe.

OST enables your offensive security team to perform more efficiently. Visit our blog to learn more.

OST Benefits for Your Red Team

Using OST has several benefits for your offensive team, including:

Time Savings and Cost Efficiency

OST is continuously updated with new offensive techniques and procedures by a team of hackers and developers. This saves you significant time developing and maintaining a full internal toolkit.

By using OST, our internal Red Team is able to focus on performing meaningful engagements while at the same time being able to use advanced capabilities that otherwise would take a lot of research and development time. This is time which could not be spent to actually perform Red and Purple teaming engagements."

- Kempen Wealth Management

Intelligent Tools You Can Trust

The toolkit is developed and used by Outflank specialists. We hire some of the smartest people in the industry. They spend much time on research & development. We put this into a readily available toolkit built for performing in mature and sensitive target environments. This means your team can quickly upgrade their knowledge, technology and operations. Supported with extensive documentation, your team will know exactly what the tools do.

To summarise, OST delivers where few others have, by not only providing a single tool or C2 but a complete suite of resources to deliver modern red teams, alongside a vetted and knowledgeable community. I honestly don’t think there is another comparable product on the market that feels this matured and reliable."

- Bulletproof Cybersecurity

Safely Increase Fire Power on Full Kill Chain

Smaller teams can punch above their weight by leveraging external development power. Our toolkit provides your team with shortcuts for hard stages like initial access, EDR evasion and OPSEC-safe lateral movement. OST includes techniques that have not yet been published or weaponized by other red teams.

The Payload Generator alone has saved us countless hours of maintenance and development work. While we maintained our own generator, OST’s solution offers more features and stays continuously updated. Combined with the community knowledge, it’s become an invaluable asset for bypassing even sophisticated security vendors.

- The S-Unit

Compatibility With Other Red Team Tools

OST was developed to work in tandem to work with Fortra’s advanced adversary simulation tool, Cobalt Strike. Those with both Cobalt Strike and OST can take advantage of features that extend the reach of these two tools to further enhance testing efforts.

Enhanced Anti-Virus Evasion and Detection

Create advanced payloads that enhance antivirus evasion and detection strategies using anti-forensic features.

They’ve managed to create a suite of tools that not only addresses the technical demands of evading modern EDR systems but also simplifies these processes. This efficiency gain is invaluable, as it means we can spend our time where it matters most – planning and executing effective security scenarios for our clients.

- Vectra

OST Features

An extensive collection of over 30 tools ranging from lightweight scripts to full frameworks. These tools are brought to you by a highly skilled red team committed to knowledge sharing and constantly enhancing the toolset to exceed the latest offensive security standards.

Outflank C2

Run OPSEC focused engagements with custom C2 framework with support for implants on Windows macOS, and Linux

Payload Generator

Create evasive payloads with tailored or pre-configured settings to bypass specific EDRs

Lateral Pack

Facilitate lateral movements in a target environment

Sharpfuscator

Get enhanced stealth with a purpose built .Net obfuscator

Hidden Desktop

Covertly conduct operations on a target laptop

PhisherPrice

Simplify phishing for EntraID Device Codes

See Our Tool Inventory See Our Tools in Action

Red Team Suites

Red teams can now take full advantage of OST's interoperability with Cobalt Strike and Core Impact through our suite offerings, which package these security assessment solutions together at a reduced price.
Suite subscribers gain exclusive access to Cobalt Strike Research Labs' specialized tooling and operator training programs are also included to sharpen your team's skills.

Red Team Suite:

Cobalt Strike + OST

Cobalt Strike’s mature, adaptable C2 framework allows a red teamer to simulate the tactics and techniques an advanced, embedded attacker. OST integrates directly with Cobalt Strike through BOFs and reflective DLL loading techniques, providing an OPSEC safe way to efficiently perform highly technical and difficult post-exploitation tasks.

View Suite

Offensive Security Suite:

Cobalt Strike + OST + Core Impact

Fortra’s Offensive Security Suite is comprised of three distinct enterprise-grade tools: Core Impact tests exploitation paths and lateral movement, Cobalt Strike enables advanced adversary tactics for Red Team operations, and OST provides a broad arsenal for evasive attack simulation.