All Security Tools
Browse the full catalog of 53 free online security tools - offensive penetration-testing utilities and defensive audit tools, all in one place.
- 98Total Tools
- 46Offensive Security
- 52Defensive Security
- 21Workflows
Offensive SecurityAdvancedWeb Shell FinderDetect web shell uploads on target systems.webshell-finderAPIOffensive SecurityBasicHeader AnalyzerAnalyze HTTP security headers from the target.header-analyzerAPIOffensive SecurityIntermediateOpen Redirect GeneratorGenerate Open Redirect payloads for various bypass techniques.open-redirect-generatorAPIOffensive SecurityIntermediateHPP GeneratorGenerate HTTP Parameter Pollution (HPP) payloads for parameter manipulation.hpp-generatorAPIOffensive SecurityIntermediateAPI FuzzerGenerate a bounded set of fuzz test cases (SQLi, XSS, path traversal, command injection, SSRF, header injection, type juggling, method override, GraphQL introspection) for one API endpoint you control.api-fuzzerAPIOffensive SecurityIntermediateCSRF PoC GeneratorGenerate CSRF Proof-of-Concept HTML forms (GET, POST, JSON, multipart) with auto-submit.csrf-poc-generatorAPIOffensive SecurityIntermediateCORS Misconfig ScannerTest CORS misconfiguration: origin reflection, credentials leak, null origin, wildcard abuse.cors-scannerAPIOffensive SecurityAdvancedGraphQL IntrospectorIntrospect GraphQL endpoints: schema dump, query list, mutation discovery, batching test.graphql-introspectorAPIOffensive SecurityIntermediateHost Header AttackGenerate Host header attacks: password reset poisoning, cache poisoning, SSRF via Host.host-header-attackAPIOffensive SecurityAdvancedWeb Cache PoisoningGenerate cache poisoning payloads: unkeyed headers, fat GET, cache deception, key normalization.cache-poisoningAPIDefensive SecurityIntermediateEmail Header AnalyzerParse and analyze email headers for investigation.email-header-analyzerAPIDefensive SecurityBasicHTTP Status CheckerCheck HTTP status code, headers, and response time.http-statusAPIDefensive SecurityBasicSecurity Headers CheckerAudit security headers with scoring and grading.security-headersAPIDefensive SecurityBasicSecurity Config GeneratorGenerate hardened security-header configuration templates for Nginx, Apache, Cloudflare, IIS, or Node.js/Express.security-config-generatorAPI
Showing 14 of 98 tools