offsec.tools - A vast collection of security tools

Promote your tool

Boost your visibility among cybersecurity professionals and enthusiasts!

featured

Vulnerable by design AWS deployment tool.

featured

An advanced, yet simple, tunneling/pivoting tool that uses a TUN interface.

featured

Online platform for finding open buckets in cloud storage systems effortlessly.

featured

A modern experience for GDB with advanced debugging capabilities.

featured

Automatic tool for DNS rebinding-based SSRF attacks.

Navigate and conquer Microsoft SQL Server servers and their linked instances.

A passive browser extension to find secrets, endpoints and XSS sinks in JS and HTML.

A vulnerability scanner for container images and filesystems.

Simple JWT token brute force cracker.

Identifies server-side prototype pollution vulnerabilities.

Prototype Pollution exploits collection.

Exploitation tool which leverages client-side Prototype Pollution to XSS.

Improved version of SayCheese, designed to capture images via social engineering.

Grab target's webcam shots by link.

A self-hosted WAF to protect web applications from cyber attacks.