offsec.tools - A vast collection of security tools

Promote your tool

Boost your visibility among cybersecurity professionals and enthusiasts!

featured

Exploitation tool which leverages client-side Prototype Pollution to XSS.

featured

HackerSploit YouTube channel.

featured

A semi-automated largely passive web application security audit tool.

featured

Server-side request forgery detector.

featured

Cross-platform very advanced and fast web fuzzer written in nim.

Simple JWT token brute force cracker.

Identifies server-side prototype pollution vulnerabilities.

Prototype Pollution exploits collection.

Improved version of SayCheese, designed to capture images via social engineering.

Grab target's webcam shots by link.

A self-hosted WAF to protect web applications from cyber attacks.

Broken Link Hijacking Burp Suite extension.

A dead-simple way to recursively look for broken links on a web page.

Find broken links, missing images, etc within your HTML.

Check CSP serves as a strong mitigation against cross-site scripting attacks.