offsec.tools - A vast collection of security tools

Promote your tool

Boost your visibility among cybersecurity professionals and enthusiasts!

featured

Dump users's .plist on a Mac OS system and to convert them into a crackable hash.

featured

The most advance set of Content Security Policy tools.

featured

ScriptSentry finds misconfigured and dangerous logon scripts.

featured

It crack hashes with rainbow tables.

featured

Online XSS tool with demonstration of vulnerability.

Simple JWT token brute force cracker.

Identifies server-side prototype pollution vulnerabilities.

Prototype Pollution exploits collection.

Exploitation tool which leverages client-side Prototype Pollution to XSS.

Improved version of SayCheese, designed to capture images via social engineering.

Grab target's webcam shots by link.

A self-hosted WAF to protect web applications from cyber attacks.

Broken Link Hijacking Burp Suite extension.

A dead-simple way to recursively look for broken links on a web page.

Find broken links, missing images, etc within your HTML.