offsec.tools - A vast collection of security tools

Promote your tool

Drive traffic, build credibility, list your cybersecurity tool today!

featured

Tool to scan for secret files on HTTP servers.

featured

An SSL enabled basic auth credential harvester with a Word document template URL injector.

featured

Rapidly search through troves of public data on GitHub for sensitive secrets.

featured

Enumerates DNS information of a domain and to discover non-contiguous ip blocks.

featured

A Fuzzer for OpenRedirect issues.

Simple JWT token brute force cracker.

Identifies server-side prototype pollution vulnerabilities.

Prototype Pollution exploits collection.

Exploitation tool which leverages client-side Prototype Pollution to XSS.

Improved version of SayCheese, designed to capture images via social engineering.

Grab target's webcam shots by link.

A self-hosted WAF to protect web applications from cyber attacks.

Broken Link Hijacking Burp Suite extension.

A dead-simple way to recursively look for broken links on a web page.

Find broken links, missing images, etc within your HTML.