offsec.tools - A vast collection of security tools

Promote your tool

Put your project on the cybersecurity map, list with us!

featured

A lightweight incoming webhook server to run shell commands.

featured

A port scanner written purely in PowerShell.

featured

Automate the process of enumeration & recon that is run every time.

featured

OSINT tool used to discover environments, directories, and subdomains of a particular domain.

featured

A Burp Suite extension to bypass WAFs or test their effectiveness using a number of techniques.

Simple JWT token brute force cracker.

Identifies server-side prototype pollution vulnerabilities.

Prototype Pollution exploits collection.

Exploitation tool which leverages client-side Prototype Pollution to XSS.

Improved version of SayCheese, designed to capture images via social engineering.

Grab target's webcam shots by link.

A self-hosted WAF to protect web applications from cyber attacks.

Broken Link Hijacking Burp Suite extension.

A dead-simple way to recursively look for broken links on a web page.

Find broken links, missing images, etc within your HTML.