offsec.tools - A vast collection of security tools

Promote your tool

Put your project on the cybersecurity map, list with us!

featured

A Burp Suite extension that brings taint analysis to web applications, by tracking all parameters.

featured

Create malicious MS Office documents to hide VBA macros, stomp VBA code.

featured

Combine your rewards from platforms giving you insights about your bug hunting progress.

featured

Web service that allows for detection Blind XSS vulnerabilities within web applications.

featured

Identify usage of pre-shared Machine Keys in a application for encryption and decryption.

Navigate and conquer Microsoft SQL Server servers and their linked instances.

A passive browser extension to find secrets, endpoints and XSS sinks in JS and HTML.

A vulnerability scanner for container images and filesystems.

Simple JWT token brute force cracker.

Identifies server-side prototype pollution vulnerabilities.

Prototype Pollution exploits collection.

Exploitation tool which leverages client-side Prototype Pollution to XSS.

Improved version of SayCheese, designed to capture images via social engineering.

Grab target's webcam shots by link.

A self-hosted WAF to protect web applications from cyber attacks.