offsec.tools - A vast collection of security tools

Promote your tool

Connect with potential users and investors, showcase your tool here!

featured

A place to learn and improve penetration testing/ethical hacking skills for FREE.

featured

Automate building wordlists for AppSec directory/resource bruting.

featured

Evaluate user privileges in web applications across a list of URLs.

featured

Bypass Windows and Linux user passwords from a bootable USB based on Linux.

featured

The Burp extension helps you to find authorization bugs.

Navigate and conquer Microsoft SQL Server servers and their linked instances.

A passive browser extension to find secrets, endpoints and XSS sinks in JS and HTML.

A vulnerability scanner for container images and filesystems.

Simple JWT token brute force cracker.

Identifies server-side prototype pollution vulnerabilities.

Prototype Pollution exploits collection.

Exploitation tool which leverages client-side Prototype Pollution to XSS.

Improved version of SayCheese, designed to capture images via social engineering.

Grab target's webcam shots by link.

A self-hosted WAF to protect web applications from cyber attacks.