offsec.tools - A vast collection of security tools

Promote your tool

Stand out in the cybersecurity market, join our exclusive listings!

featured

Find broken links, missing images, etc within your HTML.

featured

Custom word list generator redefined, based on the Scrapy framework.

featured

Find interesting Amazon S3 Buckets by watching certificate transparency logs.

featured

HTTP file upload scanner for Burp Proxy.

featured

A centralized dashboard for running and scheduling WordPress scans powered by WPScan utility.

Simple JWT token brute force cracker.

Identifies server-side prototype pollution vulnerabilities.

Prototype Pollution exploits collection.

Exploitation tool which leverages client-side Prototype Pollution to XSS.

Improved version of SayCheese, designed to capture images via social engineering.

Grab target's webcam shots by link.

A self-hosted WAF to protect web applications from cyber attacks.

Broken Link Hijacking Burp Suite extension.

A dead-simple way to recursively look for broken links on a web page.

Check CSP serves as a strong mitigation against cross-site scripting attacks.