offsec.tools - A vast collection of security tools

Promote your tool

Gain the exposure you deserve in the cybersecurity community!

featured

Modular cross-platform Microsoft Graph API enumeration and exploitation toolkit.

featured

Cloud resources manager designed to analyze and manage cloud cost, usage, security, and more!.

featured

All-in-one OSINT tool for analysing any website.

featured

Online port scan scraper.

featured

Security testing and exploitation toolkit.

Navigate and conquer Microsoft SQL Server servers and their linked instances.

A passive browser extension to find secrets, endpoints and XSS sinks in JS and HTML.

A vulnerability scanner for container images and filesystems.

Simple JWT token brute force cracker.

Identifies server-side prototype pollution vulnerabilities.

Prototype Pollution exploits collection.

Exploitation tool which leverages client-side Prototype Pollution to XSS.

Improved version of SayCheese, designed to capture images via social engineering.

Grab target's webcam shots by link.

A self-hosted WAF to protect web applications from cyber attacks.