offsec.tools - A vast collection of security tools

Promote your tool

Drive traffic, build credibility, list your cybersecurity tool today!

featured

A passive browser extension to find secrets, endpoints and XSS sinks in JS and HTML.

featured

SQLI labs to test error based, blind boolean based, time based.

featured

Just a quick inventory, reminder and launcher for pentest commands.

featured

A Burp Suite extension to find potential endpoints and parameters.

featured

Automation framework for running multiple open sourced subdomain bruteforcing tools in parallel.

Navigate and conquer Microsoft SQL Server servers and their linked instances.

A vulnerability scanner for container images and filesystems.

Simple JWT token brute force cracker.

Identifies server-side prototype pollution vulnerabilities.

Prototype Pollution exploits collection.

Exploitation tool which leverages client-side Prototype Pollution to XSS.

Improved version of SayCheese, designed to capture images via social engineering.

Grab target's webcam shots by link.

A self-hosted WAF to protect web applications from cyber attacks.

Broken Link Hijacking Burp Suite extension.