All Security Tools
Browse the full catalog of 53 free online security tools - offensive penetration-testing utilities and defensive audit tools, all in one place.
- 98Total Tools
- 46Offensive Security
- 52Defensive Security
- 21Workflows
Offensive SecurityAdvancedSQLi Payload GeneratorGenerate SQL Injection payloads for various DBMS with tamper scripts.sqli-scannerAPIOffensive SecurityAdvancedXSS Payload GeneratorGenerate context-aware XSS payloads with WAF bypass.xss-scannerAPIOffensive SecurityAdvancedLFI / RFI Payload GeneratorGenerate Local File Inclusion (LFI), Remote File Inclusion (RFI), and Path Traversal payloads.lfi-payload-generatorAPIOffensive SecurityAdvancedCmd Injection GeneratorGenerate Command Injection payloads (basic, reverse shell, data exfiltration).cmd-injection-generatorAPIOffensive SecurityAdvancedSSTI Payload GeneratorGenerate Server-Side Template Injection payloads for Jinja2, Twig, Freemarker, and more.ssti-payload-generatorAPIOffensive SecurityAdvancedXXE Payload GeneratorGenerate XML External Entity (XXE) payloads for file read, SSRF, OOB, and RCE.xxe-payload-generatorAPIOffensive SecurityAdvancedNoSQLi Payload GeneratorGenerate NoSQL Injection payloads for MongoDB, CouchDB, and REST APIs.nosqli-payload-generatorAPIOffensive SecurityAdvancedLDAPi Payload GeneratorGenerate LDAP Injection payloads for authentication bypass and blind extraction.ldapi-payload-generatorAPIOffensive SecurityAdvancedXPathi Payload GeneratorGenerate XPath Injection payloads for XML query manipulation.xpathi-payload-generatorAPIOffensive SecurityAdvancedPrototype Pollution GeneratorGenerate Prototype Pollution payloads for JavaScript object pollution.prototype-pollution-generatorAPIOffensive SecurityAdvancedDeserialization PayloadsGenerate deserialization attacks: PHP unserialize, Java ysoserial, Node.js, Python pickle, Ruby YAML.deserialization-payloadsAPIOffensive SecurityAdvancedCRLF Injection TesterGenerate CRLF injection payloads: response splitting, log injection, cookie poisoning, request smuggling.crlf-testerAPI
Showing 12 of 98 tools