offsec.tools - A vast collection of security tools

Promote your tool

Unlock new opportunities, get your cybersecurity tool discovered!

featured

Advanced Google searches using dorks to locate specific files on the internet.

featured

Stalk your friends on social media using image recognition and reverse image search.

featured

Automated firmware analysis tool for composition analysis and vulnerability scanning.

featured

Code Scanning/SAST/static analysis/linting using many tools/scanners with one report.

featured

Monitor new subdomains deployed by specific organizations and issued TLS/SSL certificate.

Navigate and conquer Microsoft SQL Server servers and their linked instances.

A passive browser extension to find secrets, endpoints and XSS sinks in JS and HTML.

A vulnerability scanner for container images and filesystems.

Simple JWT token brute force cracker.

Identifies server-side prototype pollution vulnerabilities.

Prototype Pollution exploits collection.

Exploitation tool which leverages client-side Prototype Pollution to XSS.

Improved version of SayCheese, designed to capture images via social engineering.

Grab target's webcam shots by link.

A self-hosted WAF to protect web applications from cyber attacks.