offsec.tools - A vast collection of security tools

Promote your tool

Drive traffic, build credibility, list your cybersecurity tool today!

featured

A self-hosted WAF to protect web applications from cyber attacks.

featured

Learn how OWASP Top 10 security risks apply to web applications developed using Node.js.

featured

Navigate the CVE jungle with ease using CLI tool designed to provide a structured interface.

featured

The world’s most prominent and well-known computer security conferences.

featured

A small library of powershell scripts for post exploitation that you may need or use!

Simple JWT token brute force cracker.

Identifies server-side prototype pollution vulnerabilities.

Prototype Pollution exploits collection.

Exploitation tool which leverages client-side Prototype Pollution to XSS.

Improved version of SayCheese, designed to capture images via social engineering.

Grab target's webcam shots by link.

Broken Link Hijacking Burp Suite extension.

A dead-simple way to recursively look for broken links on a web page.

Find broken links, missing images, etc within your HTML.

Check CSP serves as a strong mitigation against cross-site scripting attacks.