Outflank Security Tooling (OST)

A Powerful Toolbox Made by Red Teamers for Red Teams

Outflank Security Tooling (OST) is a broad set of tools created by the red teaming specialists at Outflank. For years we have researched and developed powerful tools. Some of these tools we have shared with the public. Several others are too powerful for public release.

With OST, we bundle our internal tools and make these available as a service to others providing high-end offensive security services: red teaming, adversary simulation or advanced penetration testing services.

These tools allow you to simulate similar techniques to what some APTs and Organized Crime Groups apply but are not available in public tools. They also help all your team members to easily perform deep-technical and difficult tasks without hassle, with a guaranteed level and OPSEC safe. OST tools are explicitly developed to bypass defensive measures and detection tools.

OST will make your offensive security team perform more efficient.

Read the blog post on the OST release >

OST Benefits for Your Red Team

Using the OST service has several benefits for your offensive team, including:

1. Time Savings and Cost Efficiency: OST is continuously updated with new offensive Techniques and Procedures by a team of hackers and developers. This saves you significant time developing and maintaining a full internal toolkit.
2. Intelligent Tools You Can Trust: The toolkit is developed and used by Outflank specialists. We hire some of the smartest people in the industry. They spend much time on research & development. We put this into a readily available toolkit built for performing in mature and sensitive target environments. This means your team can quickly upgrade their knowledge, technology and operations. Supported with extensive documentation, your team will know exactly what the tools do.
3. Safely Increase Fire Power on Full Kill Chain: Smaller teams can punch above their weight by leveraging external development power. Our toolkit provides your team with shortcuts for hard stages like initial access, EDR evasion and OPSEC-safe lateral movement. OST includes techniques that have not yet been published or weaponized by other red teams.
4. Compatibility with Other Red Team Tools: OST was developed to work in tandem to work with Fortra’s advanced adversary simulation tool, Cobalt Strike. Those with both Cobalt Strike and OST can take advantage of features that extend the reach of these two tools to further enhance testing efforts.

Threat Emulation Bundles

Red teams can maximize OST’s interoperability with Cobalt Strike through the Red Team Suite. Cobalt Strike’s flexible C2 framework enables red teamers to replicate the tactics and techniques of sophisticated, persistent attackers. OST works directly within Cobalt Strike via BOFs and reflective DLL loading techniques, delivering an OPSEC-conscious approach to complex post-exploitation operations. The suite includes access to Cobalt Strike Research Labs‘ latest tooling and Cobalt Strike Operator Training (CSCO) to enhance your team’s capabilities.

Organizations seeking broader assessment coverage can expand their toolkit with Core Impact, an automated penetration testing platform well-suited for exploitation and lateral movement across diverse environments. The Offensive Security Suite brings together OST, Cobalt Strike, and Core Impact—all of which work in concert during assessments through session passing and tunneling features. This suite also provides Cobalt Strike Research Labs access and in-depth operator training for Cobalt Strike and Core Impact.

These suites not only unify your attack strategy at a reduced cost, they provide exclusive tooling and tradecraft unavailable in single product offerings.

Both bundles allow you to combine these security assessment solutions for a discounted price, simplifying security and centralizing your offensive strategy.

About Outflank

Outflank is a team of highly experienced professional security testers specializing in complex security engagements. They offer a range of expert services including advanced red teaming engagements, penetration tests, security training, and consulting. Based in Amsterdam, the team of experts works with prominent financial institutions, multinational firms and other parties. In 2021, they assembled and released Outflank Security Tooling (OST), a broad set of internal tools that have been carefully developed and maintained by members the Outflank team. Outflank has recently joined Fortra and will strongly complement and enhance Fortra’s expansive offensive security portfolio of vulnerability management, penetration testing, and red teaming/adversary simulation solutions, all geared towards helping customers evaluate and prevent risk from many angles.