offsec.tools - A vast collection of security tools

Promote your tool

Your cybersecurity solution deserves to be seen, feature it on our site!

featured

Prevent cloud misconfigurations and find vulnerabilities during build-time.

featured

Helps to identify IoT related dashboards and scan them for default passwords.

featured

Helps you to detect SQL injection "Error based" by sending multiple requests.

featured

Modify version of impacket wmiexec.py, get output from registry.

featured

Encodes a PowerShell script in the pixels of a PNG file and generates a oneliner to execute.

Simple JWT token brute force cracker.

Identifies server-side prototype pollution vulnerabilities.

Prototype Pollution exploits collection.

Exploitation tool which leverages client-side Prototype Pollution to XSS.

Improved version of SayCheese, designed to capture images via social engineering.

Grab target's webcam shots by link.

A self-hosted WAF to protect web applications from cyber attacks.

Broken Link Hijacking Burp Suite extension.

A dead-simple way to recursively look for broken links on a web page.

Find broken links, missing images, etc within your HTML.