offsec.tools - A vast collection of security tools

Promote your tool

Unlock new opportunities, get your cybersecurity tool discovered!

featured

Find secrets and passwords in container images and file systems.

featured

The leading security assessment framework for Android.

featured

An intentionally vulnerable web API game for learning and training purposes.

featured

A static analyzer for Java, C, C++, and Objective-C.

featured

Find way more from the Wayback Machine!

Simple JWT token brute force cracker.

Identifies server-side prototype pollution vulnerabilities.

Prototype Pollution exploits collection.

Exploitation tool which leverages client-side Prototype Pollution to XSS.

Improved version of SayCheese, designed to capture images via social engineering.

Grab target's webcam shots by link.

A self-hosted WAF to protect web applications from cyber attacks.

Broken Link Hijacking Burp Suite extension.

A dead-simple way to recursively look for broken links on a web page.

Find broken links, missing images, etc within your HTML.