offsec.tools - A vast collection of security tools

Promote your tool

Put your project on the cybersecurity map, list with us!

featured

Prototype Pollution exploits collection.

featured

SBOM parser that performs cursory vulnerability assessment.

featured

A dependency vulnerability scanner for your python projects, straight from the terminal.

featured

Http(s) server designed to host resources dynamically or act as a receiver for POST data intercepts.

featured

Small tool to capture packets from wlan devices.

Navigate and conquer Microsoft SQL Server servers and their linked instances.

A passive browser extension to find secrets, endpoints and XSS sinks in JS and HTML.

A vulnerability scanner for container images and filesystems.

Simple JWT token brute force cracker.

Identifies server-side prototype pollution vulnerabilities.

Exploitation tool which leverages client-side Prototype Pollution to XSS.

Improved version of SayCheese, designed to capture images via social engineering.

Grab target's webcam shots by link.

A self-hosted WAF to protect web applications from cyber attacks.

Broken Link Hijacking Burp Suite extension.