offsec.tools - A vast collection of security tools

Promote your tool

Showcase your cybersecurity solutions to a global audience!

featured

Interactive cheat sheet with a curated list of offensive security tools and their commands.

featured

An extension that auto extracts URLs from the current webpage and JS files.

featured

Dowgrade, convert, dissect and shuck authentication token based on Data Encryption Standard.

featured

Public malware techniques used in the wild: virtual machine, emulation, debuggers.

featured

A python script to help red teamers discover KeePass instances and extract secrets.

Navigate and conquer Microsoft SQL Server servers and their linked instances.

A passive browser extension to find secrets, endpoints and XSS sinks in JS and HTML.

A vulnerability scanner for container images and filesystems.

Simple JWT token brute force cracker.

Identifies server-side prototype pollution vulnerabilities.

Prototype Pollution exploits collection.

Exploitation tool which leverages client-side Prototype Pollution to XSS.

Improved version of SayCheese, designed to capture images via social engineering.

Grab target's webcam shots by link.

A self-hosted WAF to protect web applications from cyber attacks.