All Security Tools
Browse the full catalog of 53 free online security tools - offensive penetration-testing utilities and defensive audit tools, all in one place.
- 98Total Tools
- 46Offensive Security
- 52Defensive Security
- 21Workflows
Offensive SecurityAdvancedSQLi Payload GeneratorGenerate SQL Injection payloads for various DBMS with tamper scripts.sqli-scannerAPIOffensive SecurityAdvancedXSS Payload GeneratorGenerate context-aware XSS payloads with WAF bypass.xss-scannerAPIOffensive SecurityAdvancedSSRF Map GeneratorGenerate SSRF payloads (IPv4, IPv6, hex, octal, DNS rebinding).ssrf-map-generatorAPIOffensive SecurityAdvancedLFI / RFI Payload GeneratorGenerate Local File Inclusion (LFI), Remote File Inclusion (RFI), and Path Traversal payloads.lfi-payload-generatorAPIOffensive SecurityAdvancedCmd Injection GeneratorGenerate Command Injection payloads (basic, reverse shell, data exfiltration).cmd-injection-generatorAPIOffensive SecurityAdvancedSSTI Payload GeneratorGenerate Server-Side Template Injection payloads for Jinja2, Twig, Freemarker, and more.ssti-payload-generatorAPIOffensive SecurityAdvancedXXE Payload GeneratorGenerate XML External Entity (XXE) payloads for file read, SSRF, OOB, and RCE.xxe-payload-generatorAPIOffensive SecurityIntermediateOpen Redirect GeneratorGenerate Open Redirect payloads for various bypass techniques.open-redirect-generatorAPIOffensive SecurityAdvancedNoSQLi Payload GeneratorGenerate NoSQL Injection payloads for MongoDB, CouchDB, and REST APIs.nosqli-payload-generatorAPIOffensive SecurityAdvancedLDAPi Payload GeneratorGenerate LDAP Injection payloads for authentication bypass and blind extraction.ldapi-payload-generatorAPIOffensive SecurityAdvancedXPathi Payload GeneratorGenerate XPath Injection payloads for XML query manipulation.xpathi-payload-generatorAPIOffensive SecurityAdvancedPrototype Pollution GeneratorGenerate Prototype Pollution payloads for JavaScript object pollution.prototype-pollution-generatorAPIOffensive SecurityIntermediateHPP GeneratorGenerate HTTP Parameter Pollution (HPP) payloads for parameter manipulation.hpp-generatorAPIOffensive SecurityIntermediateWAF Test Payload GeneratorGenerate WAF detection and testing payloads to test WAF security.waf-test-generatorAPIOffensive SecurityIntermediateAPI FuzzerGenerate a bounded set of fuzz test cases (SQLi, XSS, path traversal, command injection, SSRF, header injection, type juggling, method override, GraphQL introspection) for one API endpoint you control.api-fuzzerAPIOffensive SecurityAdvancedFile Upload BypassGenerate file upload bypass: double extensions, MIME spoofing, magic bytes, polyglots, .htaccess.file-upload-bypassAPIDefensive SecurityBasicSecurity Policy GeneratorGenerate a ready-to-adapt security policy document (Access Control, Incident Response, Acceptable Use, Data Classification, or Remote Access) for your organization.policy-generatorAPIDefensive SecurityBasicIR Playbook GeneratorGenerate a phase-by-phase incident response playbook (Preparation through Lessons Learned) for ransomware, data breach, DDoS, or insider threat incidents.ir-playbook-generatorAPI
Showing 18 of 98 tools