offsec.tools - A vast collection of security tools

Promote your tool

Your cybersecurity solution deserves to be seen, feature it on our site!

featured

Fetch, install and search wordlist archives from websites and torrent peers.

featured

Identify Joomla version, scan for vulnerabilities and sensitive files.

featured

Damn vulnerable cloud application.

featured

Threat framework to research security gaps in GraphQL implementations.

featured

An easy way for penetration testers and bug bounty hunters to test (blind) XSS.

Navigate and conquer Microsoft SQL Server servers and their linked instances.

A passive browser extension to find secrets, endpoints and XSS sinks in JS and HTML.

A vulnerability scanner for container images and filesystems.

Simple JWT token brute force cracker.

Identifies server-side prototype pollution vulnerabilities.

Prototype Pollution exploits collection.

Exploitation tool which leverages client-side Prototype Pollution to XSS.

Improved version of SayCheese, designed to capture images via social engineering.

Grab target's webcam shots by link.

A self-hosted WAF to protect web applications from cyber attacks.