# Tools & Scripts **URL:** https://onehack.st/c/tools-scripts/27.md?page=47 [Latest](https://onehack.st/latest.md) · [Categories](https://onehack.st/categories.md) · [Tags](https://onehack.st/tags.md) **Page:** 48 --- ## [JSpector | A Simple Burp Suite Extension To Crawl JavaScript (JS) Files](https://onehack.st/t/jspector-a-simple-burp-suite-extension-to-crawl-javascript-js-files/260364)
**Author:** [@PlayBoy83](https://onehack.st/u/PlayBoy83)\ **Replies:** 0\ **Last updated:** [October 22, 2023, 11:17pm UTC](https://onehack.st/t/jspector-a-simple-burp-suite-extension-to-crawl-javascript-js-files/260364 "2023-10-22T23:17:06Z")
JSpector JSpector is a Burp Suite extension that passively crawls JavaScript files and automatically creates issues with URLs, endpoints and dangerous methods found on the JS files. Prerequisites Before installing JS… --- ## [Osintgram | Get All The Information Of Any Instagram Account | Hacking Accounts](https://onehack.st/t/osintgram-get-all-the-information-of-any-instagram-account-hacking-accounts/260363)
**Author:** [@PlayBoy83](https://onehack.st/u/PlayBoy83)\ **Replies:** 0\ **Last updated:** [October 22, 2023, 11:17pm UTC](https://onehack.st/t/osintgram-get-all-the-information-of-any-instagram-account-hacking-accounts/260363 "2023-10-22T23:17:00Z")
Osintgram :magnifying\_glass\_tilted\_right::camera\_with\_flash: Osintgram is a OSINT tool on Instagram to collect, analyze, and run reconnaissance. Disclaimer: FOR EDUCATIONAL PURPOSE ONLY! The contributors do not … --- ## [HBSQLI | Automated Tool For Testing Header Based Blind SQL Injection](https://onehack.st/t/hbsqli-automated-tool-for-testing-header-based-blind-sql-injection/260193)
**Author:** [@TheStrength](https://onehack.st/u/TheStrength)\ **Replies:** 0\ **Last updated:** [October 21, 2023, 11:32pm UTC](https://onehack.st/t/hbsqli-automated-tool-for-testing-header-based-blind-sql-injection/260193 "2023-10-21T23:32:52Z")
HBSQLI is an automated command-line tool for performing Header Based Blind SQL injection attacks on web applications. It automates the process of detecting Header Based Blind SQL injection vulnerabilities, making it ea… --- ## [Pyxamstore | Python Utility For Parsing Xamarin AssemblyStore Blob Files](https://onehack.st/t/pyxamstore-python-utility-for-parsing-xamarin-assemblystore-blob-files/259923)
**Author:** [@Astrid](https://onehack.st/u/Astrid)\ **Replies:** 0\ **Last updated:** [October 20, 2023, 9:54pm UTC](https://onehack.st/t/pyxamstore-python-utility-for-parsing-xamarin-assemblystore-blob-files/259923 "2023-10-20T21:54:49Z")
Xamarin AssemblyStore Explorer (pyxamstore) This is an alpha release of an assemblies.blob AssemblyStore parser written in Python. The tool is capable of unpack and repackaging assemblies.blob and assemblies.manifest … --- ## [RecycledInjector | Native Syscalls Shellcode Injector](https://onehack.st/t/recycledinjector-native-syscalls-shellcode-injector/259700)
**Author:** [@NoBody](https://onehack.st/u/NoBody)\ **Replies:** 0\ **Last updated:** [October 19, 2023, 8:45pm UTC](https://onehack.st/t/recycledinjector-native-syscalls-shellcode-injector/259700 "2023-10-19T20:45:36Z")
RecycledInjector Description (Currently) Fully Undetected same-process native/.NET assembly shellcode injector based on RecycledGate by thefLink, which is also based on HellsGate + HalosGate + TartarusGate to ensure u… --- ## [Spoofy | Program That Checks If A List Of Domains Can Be Spoofed Based On SPF And DMARC Records](https://onehack.st/t/spoofy-program-that-checks-if-a-list-of-domains-can-be-spoofed-based-on-spf-and-dmarc-records/259489)
**Author:** [@WhiteHat](https://onehack.st/u/WhiteHat)\ **Replies:** 0\ **Last updated:** [October 18, 2023, 7:15pm UTC](https://onehack.st/t/spoofy-program-that-checks-if-a-list-of-domains-can-be-spoofed-based-on-spf-and-dmarc-records/259489 "2023-10-18T19:15:42Z")
Spoofy WHAT Spoofy is a program that checks if a list of domains can be spoofed based on SPF and DMARC records. You may be asking, “Why do we need another tool that can check if a domain can be spoofed?” Well, Sp… --- ## [Sirius | First Truly Open-Source General Purpose Vulnerability Scanner](https://onehack.st/t/sirius-first-truly-open-source-general-purpose-vulnerability-scanner/259193)
**Author:** [@WhiteHat](https://onehack.st/u/WhiteHat)\ **Replies:** 1\ **Last updated:** [October 17, 2023, 7:26am UTC](https://onehack.st/t/sirius-first-truly-open-source-general-purpose-vulnerability-scanner/259193 "2023-10-17T07:26:10Z")
Sirius Scan Sirius is the first truly open-source general purpose vulnerability scanner. Today, the information security community remains the best and most expedient source for cybersecurity intelligence. The communi… --- ## [DakshSCRA | Source Code Review Assist](https://onehack.st/t/dakshscra-source-code-review-assist/259130)
**Author:** [@Prometheus](https://onehack.st/u/Prometheus)\ **Replies:** 0\ **Last updated:** [October 16, 2023, 7:00am UTC](https://onehack.st/t/dakshscra-source-code-review-assist/259130 "2023-10-16T07:00:19Z")
Daksh SCRA (Source Code Review Assist) Author: - Debasis Mohanty (d3basis.m0hanty@gmail.com) - Twitter: @coffeensecurity - www.coffeeandsecurity.com About Daksh SCRA Daksh SCRA (Source Code Review Assist) tool is b… --- ## [Chromecookiestealer | Steal/Inject Chrome Cookies Over The DevTools Protocol](https://onehack.st/t/chromecookiestealer-steal-inject-chrome-cookies-over-the-devtools-protocol/259002)
**Author:** [@NoBody](https://onehack.st/u/NoBody)\ **Replies:** 1\ **Last updated:** [October 15, 2023, 6:52am UTC](https://onehack.st/t/chromecookiestealer-steal-inject-chrome-cookies-over-the-devtools-protocol/259002 "2023-10-15T06:52:41Z")
Chrome Cookie Stealer (and injector) Attaches to Chrome using its Remote DevTools protocol and steals/injects/clears/deletes cookies. Heavily inspired by WhiteChocolateMacademiaNut. Cookies are dumped as JSON object… --- ## [The Best Tools Every Project Manager Should Know](https://onehack.st/t/the-best-tools-every-project-manager-should-know/258999)
**Author:** [@Prometheus](https://onehack.st/u/Prometheus)\ **Replies:** 0\ **Last updated:** [October 14, 2023, 9:39pm UTC](https://onehack.st/t/the-best-tools-every-project-manager-should-know/258999 "2023-10-14T21:39:55Z")
These tools centralize your projects and team, ensuring everyone is aligned as the project progresses. Features of some of these tools include time-tracking and invoicing capabilities, commenting systems, version control… --- ## [Project Planning Tools For Every Freelancer](https://onehack.st/t/project-planning-tools-for-every-freelancer/240721)
**Author:** [@WhiteHat](https://onehack.st/u/WhiteHat)\ **Replies:** 0\ **Last updated:** [October 14, 2023, 9:30pm UTC](https://onehack.st/t/project-planning-tools-for-every-freelancer/240721 "2023-10-14T21:30:00Z")
If you’re a freelancer or a small business owner, understanding how to successfully manage a client’s project is crucial. Luckily, you don’t need to tackle this task alone, thanks to numerous online resources. There’s a… --- ## [S4UTomato | Escalate Service Account To LocalSystem Via Kerberos](https://onehack.st/t/s4utomato-escalate-service-account-to-localsystem-via-kerberos/258910)
**Author:** [@NoBody](https://onehack.st/u/NoBody)\ **Replies:** 0\ **Last updated:** [October 13, 2023, 9:43pm UTC](https://onehack.st/t/s4utomato-escalate-service-account-to-localsystem-via-kerberos/258910 "2023-10-13T21:43:56Z")
S4UTomato Escalate Service Account To LocalSystem via Kerberos. Traditional Potatoes Friends familiar with the “Potato” series of privilege escalation should know that it can elevate service account privileges to loc… --- ## [Caracal | Static Analyzer For Starknet Smart Contracts](https://onehack.st/t/caracal-static-analyzer-for-starknet-smart-contracts/258905)
**Author:** [@Prometheus](https://onehack.st/u/Prometheus)\ **Replies:** 0\ **Last updated:** [October 13, 2023, 9:38pm UTC](https://onehack.st/t/caracal-static-analyzer-for-starknet-smart-contracts/258905 "2023-10-13T21:38:24Z")
Caracal Caracal is a static analyzer tool over the SIERRA representation for Starknet smart contracts. Features Detectors to detect vulnerable Cairo code Printers to report information Taint analysis Data flow analy… --- ## [Dissect | Digital Forensics, Incident Response Framework And Toolset](https://onehack.st/t/dissect-digital-forensics-incident-response-framework-and-toolset/258813)
**Author:** [@WhiteHat](https://onehack.st/u/WhiteHat)\ **Replies:** 0\ **Last updated:** [October 11, 2023, 11:56pm UTC](https://onehack.st/t/dissect-digital-forensics-incident-response-framework-and-toolset/258813 "2023-10-11T23:56:10Z")
Dissect Dissect is a digital forensics & incident response framework and toolset that allows you to quickly access and analyse forensic artefacts from various disk and file formats, developed by Fox-IT (part of NCC Gr… --- ## [ ModuleShifting | Stealthier Variation Of Module Stomping And Module Overloading Injection Techniques That Reduces Memory IoCs](https://onehack.st/t/moduleshifting-stealthier-variation-of-module-stomping-and-module-overloading-injection-techniques-that-reduces-memory-iocs/258769)
**Author:** [@Astrid](https://onehack.st/u/Astrid)\ **Replies:** 0\ **Last updated:** [October 11, 2023, 1:01am UTC](https://onehack.st/t/moduleshifting-stealthier-variation-of-module-stomping-and-module-overloading-injection-techniques-that-reduces-memory-iocs/258769 "2023-10-11T01:01:53Z")
ModuleShifting This tool has been presented at the 2023 x33fcon talk: “Improving the stealthiness of Memory Injection Techniques” \[Video\] \[Blogpost\] What is it ModuleShifting is stealthier variation of Module Stom… --- ## [The Best Video Tools For Novice Users (2023)](https://onehack.st/t/the-best-video-tools-for-novice-users-2023/258766)
**Author:** [@Astrid](https://onehack.st/u/Astrid)\ **Replies:** 0\ **Last updated:** [October 11, 2023, 1:01am UTC](https://onehack.st/t/the-best-video-tools-for-novice-users-2023/258766 "2023-10-11T01:01:36Z")
A picture may speak louder than words, but what speaks even louder is a compelling video. Whether you need to create animated videos to pitch your business or want to compile a video montage for your friend’s wedding, th… --- ## [Nodesub | Command-Line Tool For Finding Subdomains In Bug Bounty Programs](https://onehack.st/t/nodesub-command-line-tool-for-finding-subdomains-in-bug-bounty-programs/258720)
**Author:** [@WhiteHat](https://onehack.st/u/WhiteHat)\ **Replies:** 0\ **Last updated:** [October 9, 2023, 8:57pm UTC](https://onehack.st/t/nodesub-command-line-tool-for-finding-subdomains-in-bug-bounty-programs/258720 "2023-10-09T20:57:06Z")
\[NODESUB \](https://github.com/pikpikcu/nodesub#--nodesub--) Nodesub is a command-line tool for finding subdomains in bug bounty programs. It supports various subdomain enumeration techniques and provides flexible opt… --- ## [The Best Essential Tools For Professional Designers](https://onehack.st/t/the-best-essential-tools-for-professional-designers/258716)
**Author:** [@TheStrength](https://onehack.st/u/TheStrength)\ **Replies:** 2\ **Last updated:** [June 27, 2024, 4:46pm UTC](https://onehack.st/t/the-best-essential-tools-for-professional-designers/258716 "2024-06-27T16:46:44Z")
Designers often face a multitude of challenges, ranging from project management to intricate design work. With the demands of overlapping deadlines and efficient time management, it becomes imperative for them to utilize… --- ## [Mellon | OSDP Attack Tool](https://onehack.st/t/mellon-osdp-attack-tool/258632)
**Author:** [@WhiteHat](https://onehack.st/u/WhiteHat)\ **Replies:** 0\ **Last updated:** [October 8, 2023, 9:35pm UTC](https://onehack.st/t/mellon-osdp-attack-tool/258632 "2023-10-08T21:35:54Z")
OSDP Vulnerabilities this Exploits OSDP attack tool (and the Elvish word for friend) Attack #1: Encryption is Optional OSDP supports, but doesn’t strictly require, encryption. So your connection might not even be enc… --- ## [Apepe | Enumerate Information From An App Based On The APK File](https://onehack.st/t/apepe-enumerate-information-from-an-app-based-on-the-apk-file/258629)
**Author:** [@BlueHacker](https://onehack.st/u/BlueHacker)\ **Replies:** 0\ **Last updated:** [October 8, 2023, 9:35pm UTC](https://onehack.st/t/apepe-enumerate-information-from-an-app-based-on-the-apk-file/258629 "2023-10-08T21:35:36Z")
:mobile\_phone\_with\_arrow: Apepe :mobile\_phone\_with\_arrow: Enumerate information from an app based on the APK file :detective: What is Apepe? :detective: Apepe is a Python tool developed to help pentesters and… --- ## [Free Online Image Editor](https://onehack.st/t/free-online-image-editor/255603)
**Author:** [@BlueHacker](https://onehack.st/u/BlueHacker)\ **Replies:** 0\ **Last updated:** [October 8, 2023, 7:00pm UTC](https://onehack.st/t/free-online-image-editor/255603 "2023-10-08T19:00:00Z")
Go To https://toolxox.com/ Add images And edit as you want! Enjoy! --- ## [Electron Shell | Developing A More Covert Remote Access Trojan (RAT) Tool](https://onehack.st/t/electron-shell-developing-a-more-covert-remote-access-trojan-rat-tool/258409)
**Author:** [@NoBody](https://onehack.st/u/NoBody)\ **Replies:** 1\ **Last updated:** [October 8, 2023, 1:18am UTC](https://onehack.st/t/electron-shell-developing-a-more-covert-remote-access-trojan-rat-tool/258409 "2023-10-08T01:18:47Z")
Electron\_shell Developing a more covert Remote Access Trojan (RAT) tool by leveraging Electron’s features for command injection and combining it with remote control methods. 利用Electron桌面程序的白特征执行黑命令，一种隐蔽的远程访问特洛伊木马（RAT… --- ## [Skyhook | A Round-Trip Obfuscated HTTP File Transfer Setup Built To Bypass IDS Detections](https://onehack.st/t/skyhook-a-round-trip-obfuscated-http-file-transfer-setup-built-to-bypass-ids-detections/257885)
**Author:** [@TheStrength](https://onehack.st/u/TheStrength)\ **Replies:** 0\ **Last updated:** [October 6, 2023, 8:23pm UTC](https://onehack.st/t/skyhook-a-round-trip-obfuscated-http-file-transfer-setup-built-to-bypass-ids-detections/257885 "2023-10-06T20:23:38Z")
Skyhook Skyhook is a REST-driven utility used to smuggle files into and out of networks defended by IDS implementations. It comes with a pre-packaged web client that uses a blend of React, vanilla JS, and web assembly… --- ## [Pinkerton | An JavaScript File Crawler And Secret Finder Developed In Python](https://onehack.st/t/pinkerton-an-javascript-file-crawler-and-secret-finder-developed-in-python/257632)
**Author:** [@PlayBoy83](https://onehack.st/u/PlayBoy83)\ **Replies:** 0\ **Last updated:** [October 5, 2023, 9:40pm UTC](https://onehack.st/t/pinkerton-an-javascript-file-crawler-and-secret-finder-developed-in-python/257632 "2023-10-05T21:40:35Z")
:detective: Pinkerton Investigating JavaScripts files since 1850 :detective: Pinkerton is an JavaScript file crawler and secret finder tool developed in Python :high\_voltage: Installing / Getting starte… --- ## [Plugins To Manage Your Multi-Author WordPress Blog Easily](https://onehack.st/t/plugins-to-manage-your-multi-author-wordpress-blog-easily/257629)
**Author:** [@PlayBoy83](https://onehack.st/u/PlayBoy83)\ **Replies:** 0\ **Last updated:** [October 5, 2023, 9:40pm UTC](https://onehack.st/t/plugins-to-manage-your-multi-author-wordpress-blog-easily/257629 "2023-10-05T21:40:14Z")
Plugins To Manage Your Multi-Author WordPress Blog Easily As you should know, WordPress offers a wide array of plugins specifically designed to facilitate the management of multiple authors. Below is a curated list of … --- ## [WOMBO Dream | AI Art Generator](https://onehack.st/t/wombo-dream-ai-art-generator/256823)
**Author:** [@BlueHacker](https://onehack.st/u/BlueHacker)\ **Replies:** 0\ **Last updated:** [October 5, 2023, 9:09pm UTC](https://onehack.st/t/wombo-dream-ai-art-generator/256823 "2023-10-05T21:09:00Z")
WOMBO Dream is another app that enables you to create art using AI, and it functions directly on your iPad. It’s important to clarify that this app, which appears as “Dream” on your iPad once installed, is not the same a… --- ## [WMIExec | Set Of Python Scripts Which Perform Different Ways Of Command Execution](https://onehack.st/t/wmiexec-set-of-python-scripts-which-perform-different-ways-of-command-execution/257591)
**Author:** [@WhiteHat](https://onehack.st/u/WhiteHat)\ **Replies:** 0\ **Last updated:** [October 4, 2023, 9:26pm UTC](https://onehack.st/t/wmiexec-set-of-python-scripts-which-perform-different-ways-of-command-execution/257591 "2023-10-04T21:26:47Z")
WMIexec Set of python scripts which perform different ways of command execution via WMI protocol. Blog Post Usage wmiexec\_scheduledjob.py Is a python script which authenticates to a remote WMI instance and execute … --- ## [AtlasReaper | A Command-Line Tool For Reconnaissance And Targeted Write Operations](https://onehack.st/t/atlasreaper-a-command-line-tool-for-reconnaissance-and-targeted-write-operations/257459)
**Author:** [@TheStrength](https://onehack.st/u/TheStrength)\ **Replies:** 0\ **Last updated:** [October 3, 2023, 8:32pm UTC](https://onehack.st/t/atlasreaper-a-command-line-tool-for-reconnaissance-and-targeted-write-operations/257459 "2023-10-03T20:32:29Z")
AtlasReaper AtlasReaper is a command-line tool developed for offensive security purposes, primarily focused on reconnaissance of Confluence and Jira. It also provides various features that can be helpful for tasks suc… --- ## [KnockKnock | Enumerate Valid Users Within Microsoft Teams And OneDrive With Clean Output](https://onehack.st/t/knockknock-enumerate-valid-users-within-microsoft-teams-and-onedrive-with-clean-output/257381)
**Author:** [@BlueHacker](https://onehack.st/u/BlueHacker)\ **Replies:** 0\ **Last updated:** [October 2, 2023, 9:41pm UTC](https://onehack.st/t/knockknock-enumerate-valid-users-within-microsoft-teams-and-onedrive-with-clean-output/257381 "2023-10-02T21:41:02Z")
Please make sure to actually utilize the README. Designed to validate potential usernames by querying OneDrive and/or Microsoft Teams, which are passive methods. Additionally, it can output/create a list of legacy Sk… --- ## [🚀 Boost Your PC with Process Lasso Pro & ParkControl Pro!](https://onehack.st/t/boost-your-pc-with-process-lasso-pro-parkcontrol-pro/257374)
**Author:** [@Sarah](https://onehack.st/u/Sarah)\ **Replies:** 0\ **Last updated:** [October 2, 2023, 8:36pm UTC](https://onehack.st/t/boost-your-pc-with-process-lasso-pro-parkcontrol-pro/257374 "2023-10-02T20:36:13Z")
Maximize Your PC’s Performance with Process Lasso Pro & ParkControl Pro! Discover the magic of seamless computing! Boost speed, prioritize apps, and enhance multitasking capabilities with just a few clicks. … [Previous page](https://onehack.st/c/tools-scripts/27.md?page=46) [Next page](https://onehack.st/c/tools-scripts/27.md?page=48)