offsec.tools - A vast collection of security tools

Promote your tool

Boost your visibility among cybersecurity professionals and enthusiasts!

featured

JavaScript payload and supporting software to be used as XSS payload or post exploitation implant.

featured

A QoL tool to obfuscate shellcode.

featured

Exploitation framework for embedded devices.

featured

Find known vulnerabilities in WordPress plugins and themes, WPScan like plugin for Burp.

featured

A collection of scripts mainly for debugging SSRF, blind XSS, and XXE vulnerabilities.

Simple JWT token brute force cracker.

Identifies server-side prototype pollution vulnerabilities.

Prototype Pollution exploits collection.

Exploitation tool which leverages client-side Prototype Pollution to XSS.

Improved version of SayCheese, designed to capture images via social engineering.

Grab target's webcam shots by link.

A self-hosted WAF to protect web applications from cyber attacks.

Broken Link Hijacking Burp Suite extension.

A dead-simple way to recursively look for broken links on a web page.

Find broken links, missing images, etc within your HTML.