# Tools & Scripts **URL:** https://onehack.st/c/tools-scripts/27.md?page=105 [Latest](https://onehack.st/latest.md) · [Categories](https://onehack.st/categories.md) · [Tags](https://onehack.st/tags.md) **Page:** 106 --- ## [Xeca | PowerShell Payload Generator](https://onehack.st/t/xeca-powershell-payload-generator/99844)
**Author:** [@Prometheus](https://onehack.st/u/Prometheus)\ **Replies:** 0\ **Last updated:** [August 7, 2020, 12:45pm UTC](https://onehack.st/t/xeca-powershell-payload-generator/99844 "2020-08-07T12:45:52Z")
xeca is a project that creates encrypted PowerShell payloads for offensive purposes. Creating position independent shellcode from DLL files is also possible. Install Firstly ensure that rust is installed, then buil… --- ## [Cnitch | Container Snitch Checks Running Processes Under The Docker Engine](https://onehack.st/t/cnitch-container-snitch-checks-running-processes-under-the-docker-engine/99843)
**Author:** [@Prometheus](https://onehack.st/u/Prometheus)\ **Replies:** 0\ **Last updated:** [August 7, 2020, 12:44pm UTC](https://onehack.st/t/cnitch-container-snitch-checks-running-processes-under-the-docker-engine/99843 "2020-08-07T12:44:25Z")
cnitch (snitch or container snitch) is a simple framework and command line tool for monitoring Docker containers to identify any processes which are running as root. Why is this a bad thing? If you have not already b… --- ## [DLInjector-GUI | DLL Injector Graphical User Interface](https://onehack.st/t/dlinjector-gui-dll-injector-graphical-user-interface/99714)
**Author:** [@BlueHacker](https://onehack.st/u/BlueHacker)\ **Replies:** 0\ **Last updated:** [August 6, 2020, 12:38pm UTC](https://onehack.st/t/dlinjector-gui-dll-injector-graphical-user-interface/99714 "2020-08-06T12:38:26Z")
DLInjector for Graphical User Interface. Faster DLL Injector for processes. It targets the process name to identify the target. The process does not need to be open to define the target. DLInjector waits until the pr… --- ## [EternalBlueC | Vulnerability Detector, DoublePulsar Detector And DoublePulsar Shellcode & DLL Uploader](https://onehack.st/t/eternalbluec-vulnerability-detector-doublepulsar-detector-and-doublepulsar-shellcode-dll-uploader/99713)
**Author:** [@BlueHacker](https://onehack.st/u/BlueHacker)\ **Replies:** 0\ **Last updated:** [August 6, 2020, 12:38pm UTC](https://onehack.st/t/eternalbluec-vulnerability-detector-doublepulsar-detector-and-doublepulsar-shellcode-dll-uploader/99713 "2020-08-06T12:38:24Z")
\[\]EternalBlue suite remade in C which includes: MS17-010 Exploit, EternalBlue/MS17-010 vulnerability detector, DoublePulsar detector and DoublePulsar UploadDLL & Shellcode \[\] ms17\_vuln\_status.cpp – This program sends… --- ## [DeimosC2 | A Golang Command And Control Framework For Post-Exploitation](https://onehack.st/t/deimosc2-a-golang-command-and-control-framework-for-post-exploitation/99565)
**Author:** [@Prometheus](https://onehack.st/u/Prometheus)\ **Replies:** 0\ **Last updated:** [August 5, 2020, 11:43am UTC](https://onehack.st/t/deimosc2-a-golang-command-and-control-framework-for-post-exploitation/99565 "2020-08-05T11:43:21Z")
DeimosC2 is a post-exploitation Command & Control (C2) tool that leverages multiple communication methods in order to control machines that have been compromised. DeimosC2 server and agents works on, and has been test… --- ## [dazzleUP | A Tool That Detects The Privilege Escalation Vulnerabilities](https://onehack.st/t/dazzleup-a-tool-that-detects-the-privilege-escalation-vulnerabilities/99557)
**Author:** [@BlueHacker](https://onehack.st/u/BlueHacker)\ **Replies:** 0\ **Last updated:** [August 5, 2020, 11:18am UTC](https://onehack.st/t/dazzleup-a-tool-that-detects-the-privilege-escalation-vulnerabilities/99557 "2020-08-05T11:18:26Z")
A tool that detects the privilege escalation vulnerabilities caused by misconfigurations and missing updates in the Windows operating systems. dazzleUP detects the following vulnerabilities. Exploit Checks The first… --- ## [Cloudsplaining | An AWS IAM Security Assessment Tool](https://onehack.st/t/cloudsplaining-an-aws-iam-security-assessment-tool/99556)
**Author:** [@BlueHacker](https://onehack.st/u/BlueHacker)\ **Replies:** 0\ **Last updated:** [August 5, 2020, 11:15am UTC](https://onehack.st/t/cloudsplaining-an-aws-iam-security-assessment-tool/99556 "2020-08-05T11:15:01Z")
Cloudsplaining is an AWS IAM Security Assessment tool that identifies violations of least privilege and generates a risk-prioritized HTML report. Example report Documentation For full documentation, please visit th… --- ## [Uninstall pre-installed Bloatware from Windows 10](https://onehack.st/t/uninstall-pre-installed-bloatware-from-windows-10/99428)
**Author:** [@cetipabo](https://onehack.st/u/cetipabo)\ **Replies:** 1\ **Last updated:** [August 4, 2020, 3:31pm UTC](https://onehack.st/t/uninstall-pre-installed-bloatware-from-windows-10/99428 "2020-08-04T15:31:37Z")
Here is BloatBox a free opensource tool to uninstall all unwanted apps from windows 10. get it from here : https://github.com/builtbybel/bloatbox --- ## [Kubei | A Flexible Kubernetes Runtime Scanner](https://onehack.st/t/kubei-a-flexible-kubernetes-runtime-scanner/99319)
**Author:** [@BlueHacker](https://onehack.st/u/BlueHacker)\ **Replies:** 0\ **Last updated:** [August 3, 2020, 2:18pm UTC](https://onehack.st/t/kubei-a-flexible-kubernetes-runtime-scanner/99319 "2020-08-03T14:18:08Z")
Kubei is a vulnerabilities scanning tool that allows users to get an accurate and immediate risk assessment of their kubernetes clusters. Kubei scans all images that are being used in a Kubernetes cluster, including i… --- ## [uDork | Tool That Uses Advanced Google Search Techniques](https://onehack.st/t/udork-tool-that-uses-advanced-google-search-techniques/99318)
**Author:** [@BlueHacker](https://onehack.st/u/BlueHacker)\ **Replies:** 0\ **Last updated:** [August 3, 2020, 2:14pm UTC](https://onehack.st/t/udork-tool-that-uses-advanced-google-search-techniques/99318 "2020-08-03T14:14:10Z")
uDork is a script written in Bash Scripting that uses advanced Google search techniques to obtain sensitive information in files or directories, find IoT devices, detect versions of web applications, and so on. uDork… --- ## [CWFF | Create Your Custom Wordlist For Fuzzing](https://onehack.st/t/cwff-create-your-custom-wordlist-for-fuzzing/99156)
**Author:** [@Prometheus](https://onehack.st/u/Prometheus)\ **Replies:** 0\ **Last updated:** [August 2, 2020, 10:17am UTC](https://onehack.st/t/cwff-create-your-custom-wordlist-for-fuzzing/99156 "2020-08-02T10:17:26Z")
CWFF is a tool that creates a special High quality fuzzing/content discovery wordlist for you at the highest speed possible using concurrency and it’s heavily inspired by @tomnomnom‘s Who, What, Where, When, Wordlist … --- ## [Intelspy | Perform Automated Network Reconnaissance Scans](https://onehack.st/t/intelspy-perform-automated-network-reconnaissance-scans/99152)
**Author:** [@NoBody](https://onehack.st/u/NoBody)\ **Replies:** 0\ **Last updated:** [August 2, 2020, 9:46am UTC](https://onehack.st/t/intelspy-perform-automated-network-reconnaissance-scans/99152 "2020-08-02T09:46:22Z")
Perform automated network reconnaissance scans to gather network intelligence. IntelSpy is a multi-threaded network intelligence spy tool which performs automated enumeration of network services. It performs live hos… --- ## [Android/iOS Emulator In Browser | Free | Easy To Use!](https://onehack.st/t/android-ios-emulator-in-browser-free-easy-to-use/99006)
**Author:** [@BlueHacker](https://onehack.st/u/BlueHacker)\ **Replies:** 7\ **Last updated:** [August 2, 2020, 1:40pm UTC](https://onehack.st/t/android-ios-emulator-in-browser-free-easy-to-use/99006 "2020-08-02T13:40:36Z")
Included two Android + iOS emulators in this thread You could use these to test an app or anything you would need a real device for otherwise. No download Can run on any device (mobile, tablet, etc.) Totally free Just… --- ## [Commit Stream | OSINT Tool For Finding Github Repositories By Extracting Commit Logs](https://onehack.st/t/commit-stream-osint-tool-for-finding-github-repositories-by-extracting-commit-logs/98998)
**Author:** [@BlueHacker](https://onehack.st/u/BlueHacker)\ **Replies:** 1\ **Last updated:** [August 1, 2020, 10:50am UTC](https://onehack.st/t/commit-stream-osint-tool-for-finding-github-repositories-by-extracting-commit-logs/98998 "2020-08-01T10:50:38Z")
OSINT Tool For Finding Github Repositories By Extracting Commit Logs In Real Time From The Github Event API commit-stream drinks commit logs from the Github event firehose exposing the author details (name and email… --- ## [Oralyzer | Tool To Identify Open Redirection](https://onehack.st/t/oralyzer-tool-to-identify-open-redirection/98888)
**Author:** [@Prometheus](https://onehack.st/u/Prometheus)\ **Replies:** 0\ **Last updated:** [July 31, 2020, 11:00am UTC](https://onehack.st/t/oralyzer-tool-to-identify-open-redirection/98888 "2020-07-31T11:00:11Z")
Oralyzer, a simple python script, capable of identifying the open redirection vulnerability in a website. It does that by fuzzing the url i.e. provided as the input. Features Oralyzer can identify different types of… --- ## [Kubebox | Terminal And Web Console For Kubernetes](https://onehack.st/t/kubebox-terminal-and-web-console-for-kubernetes/98886)
**Author:** [@Prometheus](https://onehack.st/u/Prometheus)\ **Replies:** 1\ **Last updated:** [July 31, 2020, 5:39pm UTC](https://onehack.st/t/kubebox-terminal-and-web-console-for-kubernetes/98886 "2020-07-31T17:39:48Z")
Kubebox ⎈❏ Terminal and Web console for Kubernetes Features ✓ Configuration from kubeconfig files ( KUBECONFIG environment variable or $HOME/.kube ) ✓ Switch contexts interactively ✓ Authentication support (beare… --- ## [SNOWCRASH | A Polyglot Payload Generator](https://onehack.st/t/snowcrash-a-polyglot-payload-generator/98645)
**Author:** [@BlueHacker](https://onehack.st/u/BlueHacker)\ **Replies:** 0\ **Last updated:** [July 30, 2020, 11:49am UTC](https://onehack.st/t/snowcrash-a-polyglot-payload-generator/98645 "2020-07-30T11:49:35Z")
A polyglot payload generator Introduction SNOWCRASH creates a script that can be launched on both Linux and Windows machines. Payload selected by the user (in this case combined Bash and Powershell code) is embedded… --- ## [HawkScan | Security Tool For Reconnaissance And Information Gathering On A Website](https://onehack.st/t/hawkscan-security-tool-for-reconnaissance-and-information-gathering-on-a-website/98644)
**Author:** [@BlueHacker](https://onehack.st/u/BlueHacker)\ **Replies:** 0\ **Last updated:** [July 30, 2020, 11:49am UTC](https://onehack.st/t/hawkscan-security-tool-for-reconnaissance-and-information-gathering-on-a-website/98644 "2020-07-30T11:49:32Z")
Security Tool for Reconnaissance and Information Gathering on a website. (python 2.x & 3.x) This script use “WafW00f” to detect the WAF in the first step (https://github.com/EnableSecurity/wafw00f) This script use “… --- ## [TrustJack | Yet Another PoC For Hijacking DLLs in Windows](https://onehack.st/t/trustjack-yet-another-poc-for-hijacking-dlls-in-windows/98433)
**Author:** [@Prometheus](https://onehack.st/u/Prometheus)\ **Replies:** 0\ **Last updated:** [July 29, 2020, 11:13am UTC](https://onehack.st/t/trustjack-yet-another-poc-for-hijacking-dlls-in-windows/98433 "2020-07-29T11:13:14Z")
Yet another PoC for https://www.wietzebeukema.nl/blog/hijacking-dlls-in-windows Blogpost: https://redteamer.tips/?p=108 To be used with a cmd that does whatever the F you want, for … --- ## [How To Hack Yahoo Password | 10 Effective Tools To Hack Yahoo Password](https://onehack.st/t/how-to-hack-yahoo-password-10-effective-tools-to-hack-yahoo-password/98263)
**Author:** [@TheStrength](https://onehack.st/u/TheStrength)\ **Replies:** 0\ **Last updated:** [July 28, 2020, 11:23am UTC](https://onehack.st/t/how-to-hack-yahoo-password-10-effective-tools-to-hack-yahoo-password/98263 "2020-07-28T11:23:36Z")
Do people still use Yahoo? Yes, otherwise, it wouldn’t be operational. Organizations use it to conduct formal business. Professionals who also think that Yahoo is the best place for their email communication will also s… --- ## [ReNgine | An Automated Reconnaissance Framework Meant For Gathering Information](https://onehack.st/t/rengine-an-automated-reconnaissance-framework-meant-for-gathering-information/98258)
**Author:** [@BlueHacker](https://onehack.st/u/BlueHacker)\ **Replies:** 0\ **Last updated:** [July 28, 2020, 11:09am UTC](https://onehack.st/t/rengine-an-automated-reconnaissance-framework-meant-for-gathering-information/98258 "2020-07-28T11:09:59Z")
reNgine is an automated reconnaissance framework meant for gathering information during penetration testing of web applications. reNgine has customizable scan engines, which can be used to scan the websites, endpoints… --- ## [Pirate Dork Maker | Advanced Dork Generator](https://onehack.st/t/pirate-dork-maker-advanced-dork-generator/98256)
**Author:** [@BlueHacker](https://onehack.st/u/BlueHacker)\ **Replies:** 0\ **Last updated:** [July 28, 2020, 10:55am UTC](https://onehack.st/t/pirate-dork-maker-advanced-dork-generator/98256 "2020-07-28T10:55:31Z")
Dork generator, scripted in python, with the ability to generate dorks according to given pattern/s. You just have to edit presets and you are good to go. Read readme.txt for steps for use. Hope You guys will enjoy it… --- ## [Download Premium HTML Tempates and PHP Scripts](https://onehack.st/t/download-premium-html-tempates-and-php-scripts/98113)
**Author:** [@Sajjad\_Khan](https://onehack.st/u/Sajjad_Khan)\ **Replies:** 13\ **Last updated:** [August 13, 2020, 12:40am UTC](https://onehack.st/t/download-premium-html-tempates-and-php-scripts/98113 "2020-08-13T00:40:39Z")
As i am frontend developer and you making a website from scratch is time consuming. So i was searching for premium html templates which i can use in my project. I found some useful websites which you can use to download … --- ## [Advanced Phishing | Bypass Two Factor Authentication | Modlishka](https://onehack.st/t/advanced-phishing-bypass-two-factor-authentication-modlishka/98089)
**Author:** [@BlueHacker](https://onehack.st/u/BlueHacker)\ **Replies:** 2\ **Last updated:** [July 31, 2020, 10:35pm UTC](https://onehack.st/t/advanced-phishing-bypass-two-factor-authentication-modlishka/98089 "2020-07-31T22:35:04Z")
..Modlishka.. Modlishka is a powerful and flexible HTTP reverse proxy. It implements an entirely new and interesting approach of handling browser-based HTTP traffic flow, which allows to transparently proxy multi-domain … --- ## [Autoenum | Automatic Service Enumeration Script](https://onehack.st/t/autoenum-automatic-service-enumeration-script/98019)
**Author:** [@BlueHacker](https://onehack.st/u/BlueHacker)\ **Replies:** 0\ **Last updated:** [July 27, 2020, 6:01am UTC](https://onehack.st/t/autoenum-automatic-service-enumeration-script/98019 "2020-07-27T06:01:48Z")
Autoenum is a recon tool which performs automatic enumeration of services discovered. I built this to save some time during CTFs and pen testing environments (i.e. HTB, VulnHub, OSCP) and draws a bit from a number of … --- ## [Sitedorks | Search Google/Bing/DuckDuckGo/Yandex/Yahoo For A Search Term With Different Websites](https://onehack.st/t/sitedorks-search-google-bing-duckduckgo-yandex-yahoo-for-a-search-term-with-different-websites/97976)
**Author:** [@Prometheus](https://onehack.st/u/Prometheus)\ **Replies:** 0\ **Last updated:** [July 27, 2020, 5:15am UTC](https://onehack.st/t/sitedorks-search-google-bing-duckduckgo-yandex-yahoo-for-a-search-term-with-different-websites/97976 "2020-07-27T05:15:19Z")
Search Google, Bing, Yahoo or Yandex for a search term with different websites. A default list is already provided, which contains Github, Gitlab, Surveymonkey, Trello etc etc. Currently, a default list of 231 dorkabl… --- ## [AuthMatrix | A Burp Suite Extension That Provides A Simple Way To Test Authorization](https://onehack.st/t/authmatrix-a-burp-suite-extension-that-provides-a-simple-way-to-test-authorization/97890)
**Author:** [@BlueHacker](https://onehack.st/u/BlueHacker)\ **Replies:** 0\ **Last updated:** [July 26, 2020, 9:59pm UTC](https://onehack.st/t/authmatrix-a-burp-suite-extension-that-provides-a-simple-way-to-test-authorization/97890 "2020-07-26T21:59:46Z")
AuthMatrix is an extension to Burp Suite that provides a simple way to test authorization in web applications and web services. With AuthMatrix, testers focus on thoroughly defining tables of users, roles, and request… --- ## [Permission Manager | A Project That Brings Sanity To Kubernetes RBAC And Users Management, Web UI FTW](https://onehack.st/t/permission-manager-a-project-that-brings-sanity-to-kubernetes-rbac-and-users-management-web-ui-ftw/97719)
**Author:** [@BlueHacker](https://onehack.st/u/BlueHacker)\ **Replies:** 0\ **Last updated:** [July 25, 2020, 5:26pm UTC](https://onehack.st/t/permission-manager-a-project-that-brings-sanity-to-kubernetes-rbac-and-users-management-web-ui-ftw/97719 "2020-07-25T17:26:02Z")
Permission manager Welcome to the Permission Manager! :tada: :tada: Permission Manager is an application developed by SIGHUP that enables a super-easy and user-friendly RBAC management for Kubernetes . If you are loo… --- ## [Lazybee | Wordlist Generator Tool for Termux](https://onehack.st/t/lazybee-wordlist-generator-tool-for-termux/97714)
**Author:** [@TheStrength](https://onehack.st/u/TheStrength)\ **Replies:** 0\ **Last updated:** [July 25, 2020, 5:08pm UTC](https://onehack.st/t/lazybee-wordlist-generator-tool-for-termux/97714 "2020-07-25T17:08:05Z")
Lazybee tool is a python based script from which you can generate random wordlist for brutefocre attacks. This tool has a unique features like wordlist generating time calculation and direct .txt saving in current dir… --- ## [Kali-Linux-Tools-Interface | Graphical Web Interface Developed To Facilitate The Use Of Security Information Tools](https://onehack.st/t/kali-linux-tools-interface-graphical-web-interface-developed-to-facilitate-the-use-of-security-information-tools/97546)
**Author:** [@BlueHacker](https://onehack.st/u/BlueHacker)\ **Replies:** 0\ **Last updated:** [July 24, 2020, 2:07pm UTC](https://onehack.st/t/kali-linux-tools-interface-graphical-web-interface-developed-to-facilitate-the-use-of-security-information-tools/97546 "2020-07-24T14:07:28Z")
A graphical interface to use information security tools by the browser. Getting Started Kali Linux Tools Interface is a graphical interface to use information security tools by the browser. The project uses the Kali… [Previous page](https://onehack.st/c/tools-scripts/27.md?page=104) [Next page](https://onehack.st/c/tools-scripts/27.md?page=106)