offsec.tools - A vast collection of security tools

Promote your tool

Boost your visibility among cybersecurity professionals and enthusiasts!

featured

Custom bash scripts used to automate various penetration testing tasks.

featured

Command execution exploiter with an auto connection handling.

featured

Bruteforce and enumerate Active Directory accounts through Kerberos pre-authentication.

featured

Active Directory Certificate Services enumeration and abuse.

featured

Crossplatform tool which help to perform static code analysis on mobile applications.

Navigate and conquer Microsoft SQL Server servers and their linked instances.

A passive browser extension to find secrets, endpoints and XSS sinks in JS and HTML.

A vulnerability scanner for container images and filesystems.

Simple JWT token brute force cracker.

Identifies server-side prototype pollution vulnerabilities.

Prototype Pollution exploits collection.

Exploitation tool which leverages client-side Prototype Pollution to XSS.

Improved version of SayCheese, designed to capture images via social engineering.

Grab target's webcam shots by link.

A self-hosted WAF to protect web applications from cyber attacks.