Offensive tools. Zero-day Edge.
Offensive security courses, resources, tools and field references for people who break things for a living. Authorized testing only.
Courses, tools and references for authorized testing ofcourse ;)
Everything here is built for engagements you're authorized to run. Pick a course, grab a toolkit, get to work.
No card, wallet, or PayPal details are ever collected on this site — you'll pay on each provider's own secure page.
By placing an order you agree to the and .
30-day refund window on every product. See the refund policy for details.
Download your files now. Each link works for 48 hours. If you're signed in, they never expire on your end — find them anytime under Account → My orders. Checked out as a guest? Create a free account with the same email to unlock that permanently, or make sure you download everything before closing this page.
Every paid order and its download links, in one place.
Courses, toolkits and references for pentesters and security researchers.
CyberMoon Shop is a marketplace for offensive security learning material and tooling: video courses, pentest toolkits, wordlists, report templates, and quick-reference guides.
Every listing states what it does, what it needs to run, and what license you get, so you know what you're buying before you pay.
Everything sold here is meant for systems you own or have written permission to test. That's a condition of sale, not a suggestion.
No vague promises. Each product lists its platform, format, license and requirements.
One price per product, with lifetime updates unless a listing says otherwise.
Questions about a product, an order, or a refund.
Quick answers on orders, downloads and licensing.
No. You can check out as a guest and your download link is emailed to you. An account lets you keep a coupon and see your details in one place.
Each individual download link works for 48 hours. Your purchase itself never expires: if you're signed in, open Account → My orders anytime to generate a brand new link. Checked out as a guest, save your files right after paying, or sign up with the same email so your order is tied to an account you can return to.
Every product has a 30-day refund window. See the for the exceptions.
Using security tools against systems you own, or have written permission to test, is standard professional practice. Using them against anyone else's systems without permission is illegal in most places, and it breaks our terms. You're responsible for how you use what you buy.
Yes. Products include lifetime updates unless the listing says otherwise. When a new version is released, you'll get an email with the updated link.
New accounts get a coupon by email confirmation. Enter the code at checkout and it's taken off your order total. Each coupon works once and expires after 30 days.
No. Licenses are personal and non-transferable. Please don't resell or redistribute what you buy.
Still stuck?
Last updated: 2026
If a product isn't what you expected, you can ask for your money back within 30 days of purchase.
Approved refunds go back to your original payment method.
Last updated: 2026
These terms govern your use of CyberMoon Shop. By using the site or buying from it, you agree to them.
You must be at least 18 years old and able to enter a binding contract where you live.
Our products are security testing and education material. You may use them only on systems you own or have explicit written permission to test. You must not use them to gain unauthorized access to systems or data, to disrupt services, or to break any law. We can refuse a sale, revoke a license, and close an account if we believe a product is being misused.
Keep your login details private. Coupons are single-use, have no cash value, expire on the date shown, and may be cancelled if we detect abuse.
Refunds are covered in our .
Products are provided as-is. You are solely responsible for how you use them and for any consequences. To the extent the law allows, our liability is limited to the amount you paid for the product in question.
We may suspend or terminate accounts that break these terms, involve fraud, or abuse the refund policy.
[Add governing law and jurisdiction before launch.]
Last updated: 2026
We collect only what we need to run the shop. This page explains what that is and how it's used.
We do not collect or store card numbers. Payments are handled by a third-party payment provider.
Accounts and product data are stored with Supabase. Payment processing is done by the payment provider we connect at checkout. Each has its own privacy policy.
The site uses your browser's local storage to keep your cart and sign-in session. We don't use advertising or cross-site tracking.
We do not sell, rent or trade your personal information.
You can ask us for a copy of your data, ask us to correct it, or ask us to delete your account. Email .
The shop is not for anyone under 18, and we don't knowingly collect data from minors.
If we make significant changes to this policy, we'll post a notice on the site.