offsec.tools - A vast collection of security tools

Promote your tool

Gain the exposure you deserve in the cybersecurity community!

featured

No-root network monitor, firewall and PCAP dumper for Android.

featured

Tool designed for fetching, validating, and storing working proxies.

featured

Unix binaries that can be used to bypass local security restrictions in misconfigured systems.

featured

Samba scanning tool.

featured

Ruby script to bruteforce for AWS s3 buckets using different permutations.

Simple JWT token brute force cracker.

Identifies server-side prototype pollution vulnerabilities.

Prototype Pollution exploits collection.

Exploitation tool which leverages client-side Prototype Pollution to XSS.

Improved version of SayCheese, designed to capture images via social engineering.

Grab target's webcam shots by link.

A self-hosted WAF to protect web applications from cyber attacks.

Broken Link Hijacking Burp Suite extension.

A dead-simple way to recursively look for broken links on a web page.

Find broken links, missing images, etc within your HTML.