# Tools & Scripts **URL:** https://onehack.st/c/tools-scripts/27.md?page=44 [Latest](https://onehack.st/latest.md) · [Categories](https://onehack.st/categories.md) · [Tags](https://onehack.st/tags.md) **Page:** 45 --- ## [CLZero | A Project For Fuzzing HTTP/1.1 CL.0 Request Smuggling Attack Vectors](https://onehack.st/t/clzero-a-project-for-fuzzing-http-1-1-cl-0-request-smuggling-attack-vectors/270402)
**Author:** [@PlayBoy83](https://onehack.st/u/PlayBoy83)\ **Replies:** 0\ **Last updated:** [December 30, 2023, 7:12pm UTC](https://onehack.st/t/clzero-a-project-for-fuzzing-http-1-1-cl-0-request-smuggling-attack-vectors/270402 "2023-12-30T19:12:08Z")
CLZero A project for fuzzing HTTP/1.1 CL.0 Request Smuggling Attack Vectors. About Thank you to @albinowax, @defparam and @d3d else this tool would not exist. Inspired by the tool Smuggler all attack gadgets adapted … --- ## [ProcessStomping | A Variation Of ProcessOverwriting To Execute Shellcode On An Executable'S Section](https://onehack.st/t/processstomping-a-variation-of-processoverwriting-to-execute-shellcode-on-an-executables-section/270278)
**Author:** [@WhiteHat](https://onehack.st/u/WhiteHat)\ **Replies:** 0\ **Last updated:** [December 29, 2023, 7:50pm UTC](https://onehack.st/t/processstomping-a-variation-of-processoverwriting-to-execute-shellcode-on-an-executables-section/270278 "2023-12-29T19:50:12Z")
ProcessStomping A variation of ProcessOverwriting to execute shellcode on an executable’s section What is it For a more detailed explanation you can read my blog post Process Stomping, is a variation of hasherezad… --- ## [Linpmem | A Physical Memory Acquisition Tool For Linux](https://onehack.st/t/linpmem-a-physical-memory-acquisition-tool-for-linux/270245)
**Author:** [@Prometheus](https://onehack.st/u/Prometheus)\ **Replies:** 0\ **Last updated:** [December 29, 2023, 1:42pm UTC](https://onehack.st/t/linpmem-a-physical-memory-acquisition-tool-for-linux/270245 "2023-12-29T13:42:02Z")
Linpmem – a physical memory acquisition tool for Linux Linpmem is a Linux x64-only tool for reading physical memory. Like its Windows counterpart, Winpmem, this is not a traditional memory dumper. Linpmem offers an … --- ## [The Most Popular Hacking Tools Of 2023](https://onehack.st/t/the-most-popular-hacking-tools-of-2023/270243)
**Author:** [@Prometheus](https://onehack.st/u/Prometheus)\ **Replies:** 0\ **Last updated:** [December 29, 2023, 1:41pm UTC](https://onehack.st/t/the-most-popular-hacking-tools-of-2023/270243 "2023-12-29T13:41:48Z")
As last year, this year we made a ranking with the most popular tools between January and December 2023. The tools of this year encompass a diverse range of cybersecurity disciplines, including AI-Enhanced Penetration T… --- ## [PipeViewer | A Tool That Shows Detailed Information About Named Pipes In Windows](https://onehack.st/t/pipeviewer-a-tool-that-shows-detailed-information-about-named-pipes-in-windows/270035)
**Author:** [@TheStrength](https://onehack.st/u/TheStrength)\ **Replies:** 0\ **Last updated:** [December 27, 2023, 8:46pm UTC](https://onehack.st/t/pipeviewer-a-tool-that-shows-detailed-information-about-named-pipes-in-windows/270035 "2023-12-27T20:46:45Z")
A GUI tool for viewing Windows Named Pipes and searching for insecure permissions. The tool was published as part of a research about Docker named pipes: “Breaking Docker Named Pipes SYSTEMatically: Docker Deskt… --- ## [PySQLRecon | Offensive MSSQL Toolkit Written In Python, Based Off SQLRecon](https://onehack.st/t/pysqlrecon-offensive-mssql-toolkit-written-in-python-based-off-sqlrecon/269904)
**Author:** [@TheStrength](https://onehack.st/u/TheStrength)\ **Replies:** 0\ **Last updated:** [December 26, 2023, 9:33pm UTC](https://onehack.st/t/pysqlrecon-offensive-mssql-toolkit-written-in-python-based-off-sqlrecon/269904 "2023-12-26T21:33:56Z")
PySQLRecon PySQLRecon is a Python port of the awesome SQLRecon project by @sanjivkawa. See the commands section for a list of capabilities. Install PySQLRecon can be installed with pip3 install pysqlrecon or by clo… --- ## [MacMaster | MAC Address Changer](https://onehack.st/t/macmaster-mac-address-changer/269791)
**Author:** [@PlayBoy83](https://onehack.st/u/PlayBoy83)\ **Replies:** 0\ **Last updated:** [December 25, 2023, 8:38pm UTC](https://onehack.st/t/macmaster-mac-address-changer/269791 "2023-12-25T20:38:11Z")
MacMaster: Advanced Network Interface Management and Monitoring MacMaster is a comprehensive command-line tool crafted for network professionals and enthusiasts alike. It stands out as a powerful utility for manipulat… --- ## [NetworkSherlock | Powerful And Flexible Port Scanning Tool With Shodan](https://onehack.st/t/networksherlock-powerful-and-flexible-port-scanning-tool-with-shodan/269660)
**Author:** [@Prometheus](https://onehack.st/u/Prometheus)\ **Replies:** 0\ **Last updated:** [December 24, 2023, 7:52pm UTC](https://onehack.st/t/networksherlock-powerful-and-flexible-port-scanning-tool-with-shodan/269660 "2023-12-24T19:52:37Z")
NetworkSherlock: Porwerfull Port Scanning With Shodan NetworkSherlock is a powerful and flexible port scanning tool designed for network security professionals and penetration testers. With its advanced capabilities, N… --- ## [Nim-Shell | Reverse Shell That Can Bypass Windows Defender Detection](https://onehack.st/t/nim-shell-reverse-shell-that-can-bypass-windows-defender-detection/269554)
**Author:** [@NoBody](https://onehack.st/u/NoBody)\ **Replies:** 0\ **Last updated:** [December 23, 2023, 7:15pm UTC](https://onehack.st/t/nim-shell-reverse-shell-that-can-bypass-windows-defender-detection/269554 "2023-12-23T19:15:46Z")
Nim-Shell Reverse shell that can bypass windows defender detection Please do not upload to VirusTotal 𝗜𝗡𝗦𝗧𝗔𝗟𝗟𝗔𝗧𝗜𝗢𝗡 𝗜𝗡𝗦𝗧𝗥𝗨𝗖𝗧𝗜𝗢𝗡𝗦 $ apt install nim Compilation nim c -d:mingw --app:gui nimshell.nim Change the IP … --- ## [PacketSpy | Powerful Network Packet Sniffing Tool Designed To Capture And Analyze Network Traffic](https://onehack.st/t/packetspy-powerful-network-packet-sniffing-tool-designed-to-capture-and-analyze-network-traffic/269416)
**Author:** [@NoBody](https://onehack.st/u/NoBody)\ **Replies:** 0\ **Last updated:** [December 22, 2023, 12:04pm UTC](https://onehack.st/t/packetspy-powerful-network-packet-sniffing-tool-designed-to-capture-and-analyze-network-traffic/269416 "2023-12-22T12:04:12Z")
PacketSpy Description PacketSpy is a powerful network packet sniffing tool designed to capture and analyze network traffic. It provides a comprehensive set of features for inspecting HTTP requests and responses, viewin… --- ## [Telegram Nearby Map | Discover The Location Of Nearby Telegram Users](https://onehack.st/t/telegram-nearby-map-discover-the-location-of-nearby-telegram-users/269259)
**Author:** [@TheStrength](https://onehack.st/u/TheStrength)\ **Replies:** 0\ **Last updated:** [December 20, 2023, 10:04pm UTC](https://onehack.st/t/telegram-nearby-map-discover-the-location-of-nearby-telegram-users/269259 "2023-12-20T22:04:33Z")
Telegram Nearby Map Telegram Nearby Map uses OpenStreetMap and the official Telegram library to find the position of nearby users. Please note: Telegram’s API was updated a while ago to make nearby user distances les… --- ## [APIDetector | Efficiently Scan For Exposed Swagger Endpoints Across Web Domains And Subdomains](https://onehack.st/t/apidetector-efficiently-scan-for-exposed-swagger-endpoints-across-web-domains-and-subdomains/269191)
**Author:** [@TheStrength](https://onehack.st/u/TheStrength)\ **Replies:** 0\ **Last updated:** [December 20, 2023, 12:08pm UTC](https://onehack.st/t/apidetector-efficiently-scan-for-exposed-swagger-endpoints-across-web-domains-and-subdomains/269191 "2023-12-20T12:08:54Z")
APIDetector APIDetector is a powerful and efficient tool designed for testing exposed Swagger endpoints in various subdomains with unique smart capabilities to detect false-positives. It’s particularly useful for secu… --- ## [Osx-Password-Dumper | A Tool To Dump Users'S .Plist On A Mac OS System And To Convert Them Into A Crackable Hash](https://onehack.st/t/osx-password-dumper-a-tool-to-dump-userss-plist-on-a-mac-os-system-and-to-convert-them-into-a-crackable-hash/269124)
**Author:** [@WhiteHat](https://onehack.st/u/WhiteHat)\ **Replies:** 0\ **Last updated:** [December 19, 2023, 5:30pm UTC](https://onehack.st/t/osx-password-dumper-a-tool-to-dump-userss-plist-on-a-mac-os-system-and-to-convert-them-into-a-crackable-hash/269124 "2023-12-19T17:30:58Z")
:red\_apple: :unlocked: OSX Password Dumper Script Overview A bash script to retrieve user’s .plist files on a macOS system and to convert the data inside it to a crackable hash format. (to use with John The Ripper or … --- ## [NetProbe | Network Probe](https://onehack.st/t/netprobe-network-probe/269009)
**Author:** [@Prometheus](https://onehack.st/u/Prometheus)\ **Replies:** 0\ **Last updated:** [December 18, 2023, 12:33pm UTC](https://onehack.st/t/netprobe-network-probe/269009 "2023-12-18T12:33:44Z")
NetProbe: Network Probe NetProbe is a tool you can use to scan for devices on your network. The program sends ARP requests to any IP address on your network and lists the IP addresses, MAC addresses, manufacturers, an… --- ## [Douglas-042 | Powershell Script To Help Speed ​​Up Threat Hunting Incident Response Processes](https://onehack.st/t/douglas-042-powershell-script-to-help-speed-up-threat-hunting-incident-response-processes/269005)
**Author:** [@Prometheus](https://onehack.st/u/Prometheus)\ **Replies:** 0\ **Last updated:** [December 18, 2023, 12:33pm UTC](https://onehack.st/t/douglas-042-powershell-script-to-help-speed-up-threat-hunting-incident-response-processes/269005 "2023-12-18T12:33:15Z")
Douglas-042 - Threat Hunting Incident Response - PowerShell Hunting \[ Video https://www.youtube.com/watch?v=8KVeNvA6M0s DOUGLAS-042 stands as an ingenious embodiment of a PowerShell script meticulously designed t… --- ## [Py-Amsi | Scan Strings Or Files For Malware Using The Windows Antimalware Scan Interface](https://onehack.st/t/py-amsi-scan-strings-or-files-for-malware-using-the-windows-antimalware-scan-interface/268831)
**Author:** [@Prometheus](https://onehack.st/u/Prometheus)\ **Replies:** 0\ **Last updated:** [December 17, 2023, 12:11am UTC](https://onehack.st/t/py-amsi-scan-strings-or-files-for-malware-using-the-windows-antimalware-scan-interface/268831 "2023-12-17T00:11:18Z")
Py-amsi Py-amsi is a library that scans strings or files for malware using the Windows Antimalware Scan Interface (AMSI) API. AMSI is an interface native to Windows that allows applications to ask the antivirus instal… --- ## [AcuAutomate | Unofficial Acunetix CLI Tool For Automated Pentesting And Bug Hunting Across Large Scopes](https://onehack.st/t/acuautomate-unofficial-acunetix-cli-tool-for-automated-pentesting-and-bug-hunting-across-large-scopes/268678)
**Author:** [@Prometheus](https://onehack.st/u/Prometheus)\ **Replies:** 0\ **Last updated:** [December 15, 2023, 9:07pm UTC](https://onehack.st/t/acuautomate-unofficial-acunetix-cli-tool-for-automated-pentesting-and-bug-hunting-across-large-scopes/268678 "2023-12-15T21:07:08Z")
AcuAutomate AcuAutomate is an unofficial Acunetix CLI tool that simplifies automated pentesting and bug hunting across extensive targets. It’s a valuable aid during large-scale pentests, enabling the easy launch or stopp… --- ## [AI Text Generators | The Best Free No Sign-Up Generator For Better Writing ⭐](https://onehack.st/t/ai-text-generators-the-best-free-no-sign-up-generator-for-better-writing/268565)
**Author:** [@Prometheus](https://onehack.st/u/Prometheus)\ **Replies:** 4\ **Last updated:** [January 2, 2024, 6:21am UTC](https://onehack.st/t/ai-text-generators-the-best-free-no-sign-up-generator-for-better-writing/268565 "2024-01-02T06:21:12Z")
In this post, we will explore the top free AI content generators that don’t require you to login. You will also discover their best features and how they can fit your specific needs. What is an AI content generator? AI… --- ## [Firefox User.js | The Best Anti-Fingerprinting And Hardening For Firefox Browser](https://onehack.st/t/firefox-user-js-the-best-anti-fingerprinting-and-hardening-for-firefox-browser/268557)
**Author:** [@Prometheus](https://onehack.st/u/Prometheus)\ **Replies:** 0\ **Last updated:** [December 14, 2023, 7:54pm UTC](https://onehack.st/t/firefox-user-js-the-best-anti-fingerprinting-and-hardening-for-firefox-browser/268557 "2023-12-14T19:54:51Z")
Great for your OPSEC. This custom user.js will give you the most privacy possible while using firefox on the desktop. It’s safe and updated frequently on github. Feel free to look through the source code and read the wik… --- ## [CloakQuest3r | Uncover The True IP Address Of Websites Safeguarded By Cloudflare](https://onehack.st/t/cloakquest3r-uncover-the-true-ip-address-of-websites-safeguarded-by-cloudflare/268554)
**Author:** [@WhiteHat](https://onehack.st/u/WhiteHat)\ **Replies:** 0\ **Last updated:** [December 14, 2023, 7:47pm UTC](https://onehack.st/t/cloakquest3r-uncover-the-true-ip-address-of-websites-safeguarded-by-cloudflare/268554 "2023-12-14T19:47:56Z")
CloakQuest3r is a powerful Python tool meticulously crafted to uncover the true IP address of websites safeguarded by Cloudflare, a widely adopted web security and performance enhancement service. Its core m… --- ## [Kali Linux 2023.4 | Penetration Testing and Ethical Hacking Linux Distribution](https://onehack.st/t/kali-linux-2023-4-penetration-testing-and-ethical-hacking-linux-distribution/268429)
**Author:** [@Aina](https://onehack.st/u/Aina)\ **Replies:** 0\ **Last updated:** [December 13, 2023, 11:41pm UTC](https://onehack.st/t/kali-linux-2023-4-penetration-testing-and-ethical-hacking-linux-distribution/268429 "2023-12-13T23:41:42Z")
Time for another Kali Linux release! – Kali Linux 2023.4. This release has various impressive updates. The summary of the changelog since the 2023.3 release from August is: Cloud ARM64 - Now marketplaces on Amazon… --- ## [BlueBunny | BLE Based C2 For Hak5's Bash Bunny](https://onehack.st/t/bluebunny-ble-based-c2-for-hak5s-bash-bunny/268427)
**Author:** [@BlueHacker](https://onehack.st/u/BlueHacker)\ **Replies:** 0\ **Last updated:** [December 13, 2023, 11:30pm UTC](https://onehack.st/t/bluebunny-ble-based-c2-for-hak5s-bash-bunny/268427 "2023-12-13T23:30:05Z")
C2 solution that communicates directly over Bluetooth-Low-Energy with your Bash Bunny Mark II. Send your Bash Bunny all the instructions it needs just over the air. Table of contents Overview Installation & S… --- ## [PassBreaker | Command-line Password Cracking Tool Developed In Python](https://onehack.st/t/passbreaker-command-line-password-cracking-tool-developed-in-python/268305)
**Author:** [@BlueHacker](https://onehack.st/u/BlueHacker)\ **Replies:** 0\ **Last updated:** [December 12, 2023, 10:44pm UTC](https://onehack.st/t/passbreaker-command-line-password-cracking-tool-developed-in-python/268305 "2023-12-12T22:44:11Z")
PassBreaker PassBreaker is a command-line password cracking tool developed in Python. It allows you to perform various password cracking techniques such as wordlist-based attacks and brute force attacks. Features W… --- ## [Porch Pirate | The Most Comprehensive Postman Recon / OSINT Client And Framework](https://onehack.st/t/porch-pirate-the-most-comprehensive-postman-recon-osint-client-and-framework/268181)
**Author:** [@BlueHacker](https://onehack.st/u/BlueHacker)\ **Replies:** 0\ **Last updated:** [December 11, 2023, 11:23pm UTC](https://onehack.st/t/porch-pirate-the-most-comprehensive-postman-recon-osint-client-and-framework/268181 "2023-12-11T23:23:09Z")
Porch Pirate started as a tool to quickly uncover Postman secrets, and has slowly begun to evolve into a multi-purpose reconaissance / OSINT framework for Postman. While existing tools are great proof of concepts, the… --- ## [NetAtlas C2 Server Search | Search For C2 Servers Based On Netlas](https://onehack.st/t/netatlas-c2-server-search-search-for-c2-servers-based-on-netlas/268043)
**Author:** [@PlayBoy83](https://onehack.st/u/PlayBoy83)\ **Replies:** 0\ **Last updated:** [December 10, 2023, 9:06pm UTC](https://onehack.st/t/netatlas-c2-server-search-search-for-c2-servers-based-on-netlas/268043 "2023-12-10T21:06:49Z")
NetAtlas C2 Server Search C2 Search Netlas is a Java utility designed to detect Command and Control (C2) servers using the Netlas API. It provides a straightforward and user-friendly CLI interface for searchin… --- ## [NimExec | Fileless Command Execution For Lateral Movement In Nim](https://onehack.st/t/nimexec-fileless-command-execution-for-lateral-movement-in-nim/267881)
**Author:** [@PlayBoy83](https://onehack.st/u/PlayBoy83)\ **Replies:** 0\ **Last updated:** [December 9, 2023, 9:28pm UTC](https://onehack.st/t/nimexec-fileless-command-execution-for-lateral-movement-in-nim/267881 "2023-12-09T21:28:18Z")
NimExec Basically, NimExec is a fileless remote command execution tool that uses The Service Control Manager Remote Protocol (MS-SCMR). It changes the binary path of a random or given service run by LocalSystem to exe… --- ## [T3SF | Technical Tabletop Exercises Simulation Framework](https://onehack.st/t/t3sf-technical-tabletop-exercises-simulation-framework/267740)
**Author:** [@TheStrength](https://onehack.st/u/TheStrength)\ **Replies:** 0\ **Last updated:** [December 8, 2023, 9:14pm UTC](https://onehack.st/t/t3sf-technical-tabletop-exercises-simulation-framework/267740 "2023-12-08T21:14:32Z")
T3SF Technical Tabletop Exercises Simulation Framework Table of Contents About Getting Things Ready TODO CHANGELOG Contributing About T3SF is a framework that offers a modular structure for the orchestratio… --- ## [Aladdin | Payload Generation Technique That Allows The Deseriallization Of A .NET Payload](https://onehack.st/t/aladdin-payload-generation-technique-that-allows-the-deseriallization-of-a-net-payload/267617)
**Author:** [@NoBody](https://onehack.st/u/NoBody)\ **Replies:** 1\ **Last updated:** [December 8, 2023, 10:23am UTC](https://onehack.st/t/aladdin-payload-generation-technique-that-allows-the-deseriallization-of-a-net-payload/267617 "2023-12-08T10:23:06Z")
Aladdin .-. \[.-''-., | //\`~\\) (\<| 0\\0|\>\_ ";\\ \_"/ \\\\\_ \_, \_\_\\|'.\_/\_ \\ '='-, /\\ \\ || )\_///\_\\\>\> ( '.\_ T |\\ | \_/),-' '. '.\_.-' /'/… --- ## [The Best Phishing Tools To Use Of 2024](https://onehack.st/t/the-best-phishing-tools-to-use-of-2024/267614)
**Author:** [@TheStrength](https://onehack.st/u/TheStrength)\ **Replies:** 1\ **Last updated:** [December 8, 2023, 10:11am UTC](https://onehack.st/t/the-best-phishing-tools-to-use-of-2024/267614 "2023-12-08T10:11:49Z")
Use any of these: Setoolkit - https://github.com/t…ngineer-toolkit SocialFish - https://github.com/U…dSec/SocialFish HiddenEye - https://github.com/D…iddenEye-Legacy Evilginx2 - https://github.com/kgretzky/evilginx2 … --- ## [Windiff | Web-based Tool That Allows Comparing Symbol, Type And Syscall Information](https://onehack.st/t/windiff-web-based-tool-that-allows-comparing-symbol-type-and-syscall-information/267476)
**Author:** [@WhiteHat](https://onehack.st/u/WhiteHat)\ **Replies:** 0\ **Last updated:** [December 6, 2023, 9:36pm UTC](https://onehack.st/t/windiff-web-based-tool-that-allows-comparing-symbol-type-and-syscall-information/267476 "2023-12-06T21:36:44Z")
WinDiff About WinDiff is an open-source web-based tool that allows browsing and comparing symbol, type and syscall information of Microsoft Windows binaries across different versions of the operating system. The binar… [Previous page](https://onehack.st/c/tools-scripts/27.md?page=43) [Next page](https://onehack.st/c/tools-scripts/27.md?page=45)