offsec.tools - A vast collection of security tools

Promote your tool

Your cybersecurity solution deserves to be seen, feature it on our site!

featured

Post-exploitation tool for dumping and extracting LSASS memory discreetly.

featured

Command and Control Framework written in C#.

featured

Point-and-click tool for producing advanced clickjacking and frame-slicing attacks.

featured

RSA multi-attacks tool: uncypher data from a weak public key and try to recover a private key.

featured

A tool used to check if a CNAME resolves to the scope address.

Navigate and conquer Microsoft SQL Server servers and their linked instances.

A passive browser extension to find secrets, endpoints and XSS sinks in JS and HTML.

A vulnerability scanner for container images and filesystems.

Simple JWT token brute force cracker.

Identifies server-side prototype pollution vulnerabilities.

Prototype Pollution exploits collection.

Exploitation tool which leverages client-side Prototype Pollution to XSS.

Improved version of SayCheese, designed to capture images via social engineering.

Grab target's webcam shots by link.

A self-hosted WAF to protect web applications from cyber attacks.