offsec.tools - A vast collection of security tools

Promote your tool

Your cybersecurity solution deserves to be seen, feature it on our site!

featured

Broken Link Hijacking Burp Suite extension.

featured

A (partial) Python rewriting of PowerSploit's PowerView.

featured

The analyst console for network security monitoring.

featured

Export Nessus results to a relational database for use in reports, analysis, or whatever else.

featured

Generate tens of thousands of subdomain combinations in a matter of seconds.

Simple JWT token brute force cracker.

Identifies server-side prototype pollution vulnerabilities.

Prototype Pollution exploits collection.

Exploitation tool which leverages client-side Prototype Pollution to XSS.

Improved version of SayCheese, designed to capture images via social engineering.

Grab target's webcam shots by link.

A self-hosted WAF to protect web applications from cyber attacks.

A dead-simple way to recursively look for broken links on a web page.

Find broken links, missing images, etc within your HTML.

Check CSP serves as a strong mitigation against cross-site scripting attacks.