# Tools & Scripts

**URL:** https://onehack.st/c/tools-scripts/27.md?page=54

[Latest](https://onehack.st/latest.md) · [Categories](https://onehack.st/categories.md) · [Tags](https://onehack.st/tags.md)

**Page:** 55

---

## [The Best Port Forwarding Software And How To Use Them](https://onehack.st/t/the-best-port-forwarding-software-and-how-to-use-them/240456)

<div class="topic-metadata">

**Author:** [@NoBody](https://onehack.st/u/NoBody)\
**Replies:** 1\
**Last updated:** [May 14, 2023, 12:02pm UTC](https://onehack.st/t/the-best-port-forwarding-software-and-how-to-use-them/240456 "2023-05-14T12:02:01Z")

</div>

Port forwarding redirects external connection attempts to your local network to a specific device on that network. Most people do not need port forwarding, so ports on a home network should generally be kept closed. But,…

---

## [Indicator Intelligence | Finds Related Domains And IPv4 Addresses](https://onehack.st/t/indicator-intelligence-finds-related-domains-and-ipv4-addresses/240426)

<div class="topic-metadata">

**Author:** [@NoBody](https://onehack.st/u/NoBody)\
**Replies:** 0\
**Last updated:** [May 12, 2023, 9:41pm UTC](https://onehack.st/t/indicator-intelligence-finds-related-domains-and-ipv4-addresses/240426 "2023-05-12T21:41:14Z")

</div>

Indicator-Intelligence NOTE : You should definitely use it for legal activities. Please See; USAGE\_POLICY.md LICENSE Description Finds related domains and IPv4 addresses to do threat intelligence after Indicato…

---

## [SpiderSuite | Advance Web Spider/Crawler For Cyber Security Professionals](https://onehack.st/t/spidersuite-advance-web-spider-crawler-for-cyber-security-professionals/240336)

<div class="topic-metadata">

**Author:** [@WhiteHat](https://onehack.st/u/WhiteHat)\
**Replies:** 1\
**Last updated:** [May 12, 2023, 4:00pm UTC](https://onehack.st/t/spidersuite-advance-web-spider-crawler-for-cyber-security-professionals/240336 "2023-05-12T16:00:39Z")

</div>

An advance cross-platform and multi-feature GUI web spider/crawler for cyber security proffesionals. Spider Suite can be used for attack surface mapping and analysis. For more information visit SpiderSuite’s websit…

---

## [Telegram Mass DM Tool](https://onehack.st/t/telegram-mass-dm-tool/240333)

<div class="topic-metadata">

**Author:** [@WhiteHat](https://onehack.st/u/WhiteHat)\
**Replies:** 0\
**Last updated:** [May 11, 2023, 9:55pm UTC](https://onehack.st/t/telegram-mass-dm-tool/240333 "2023-05-11T21:55:27Z")

</div>

Version 1.0 tldr: Messages accounts via phone number and API. If you want to add accounts only via phone, then scroll to the end. If you want more free projects like this, then please support me! Features ADDS IN BU…

---

## [Domain-Protect | OWASP Domain Protect - Prevent Subdomain Takeover](https://onehack.st/t/domain-protect-owasp-domain-protect-prevent-subdomain-takeover/240290)

<div class="topic-metadata">

**Author:** [@Astrid](https://onehack.st/u/Astrid)\
**Replies:** 0\
**Last updated:** [May 11, 2023, 12:16am UTC](https://onehack.st/t/domain-protect-owasp-domain-protect-prevent-subdomain-takeover/240290 "2023-05-11T00:16:42Z")

</div>

OWASP Domain Protect Prevent subdomain takeover … … with serverless cloud infrastructure OWASP Global AppSec Dublin - talk and demo Features scan Amazon Route53 across an AWS Organization for domain record…

---

## [Nimbo-C2 | Yet Another (Simple And Lightweight) C2 Framework](https://onehack.st/t/nimbo-c2-yet-another-simple-and-lightweight-c2-framework/240233)

<div class="topic-metadata">

**Author:** [@WhiteHat](https://onehack.st/u/WhiteHat)\
**Replies:** 0\
**Last updated:** [May 9, 2023, 10:04pm UTC](https://onehack.st/t/nimbo-c2-yet-another-simple-and-lightweight-c2-framework/240233 "2023-05-09T22:04:21Z")

</div>

Nimbo-C2 Nimbo-C2 About Features Installation Easy Way Easier Way Usage Main Window Agent Window Windows agent Linux agent Limitations & Warnings Contribution Credits About Nimbo-C2 is yet another (simple an…

---

## [NTLMRecon | A Tool For Performing Light Brute-Forcing Of HTTP Servers](https://onehack.st/t/ntlmrecon-a-tool-for-performing-light-brute-forcing-of-http-servers/240199)

<div class="topic-metadata">

**Author:** [@NoBody](https://onehack.st/u/NoBody)\
**Replies:** 0\
**Last updated:** [May 8, 2023, 9:39pm UTC](https://onehack.st/t/ntlmrecon-a-tool-for-performing-light-brute-forcing-of-http-servers/240199 "2023-05-08T21:39:32Z")

</div>

Overview NTLMRecon is a Golang version of the original NTLMRecon utility written by Sachin Kamath (AKA pwnfoo). NTLMRecon can be leveraged to perform brute forcing against a targeted webserver to identify common appl…

---

## [Spartacus | DLL Hijacking Discovery Tool](https://onehack.st/t/spartacus-dll-hijacking-discovery-tool/240150)

<div class="topic-metadata">

**Author:** [@BlueHacker](https://onehack.st/u/BlueHacker)\
**Replies:** 0\
**Last updated:** [May 7, 2023, 9:12pm UTC](https://onehack.st/t/spartacus-dll-hijacking-discovery-tool/240150 "2023-05-07T21:12:45Z")

</div>

Spartacus DLL Hijacking Why “Spartacus”? If you have seen the film Spartacus from 1960, you will remember the scene where the Romans are asking for Spartacus to give himself up. The moment the real Spartacus stood up…

---

## [Teler-Waf | A Go HTTP Middleware That Provides Teler IDS Functionality To Protect Against Web-Based Attacks](https://onehack.st/t/teler-waf-a-go-http-middleware-that-provides-teler-ids-functionality-to-protect-against-web-based-attacks/240120)

<div class="topic-metadata">

**Author:** [@WhiteHat](https://onehack.st/u/WhiteHat)\
**Replies:** 0\
**Last updated:** [May 7, 2023, 1:17pm UTC](https://onehack.st/t/teler-waf-a-go-http-middleware-that-provides-teler-ids-functionality-to-protect-against-web-based-attacks/240120 "2023-05-07T13:17:51Z")

</div>

teler-waf is a comprehensive security solution for Go-based web applications. It acts as an HTTP middleware, providing an easy-to-use interface for integrating IDS functionality with teler IDS into existing Go app…

---

## [Bug Bounty Basics | Hacking Challenges Game 🤖](https://onehack.st/t/bug-bounty-basics-hacking-challenges-game/240069)

<div class="topic-metadata">

**Author:** [@YounesWinter](https://onehack.st/u/YounesWinter)\
**Replies:** 3\
**Last updated:** [May 7, 2023, 2:44pm UTC](https://onehack.st/t/bug-bounty-basics-hacking-challenges-game/240069 "2023-05-07T14:44:21Z")

</div>

Hello everyone! I just made this simple webapp to let newbies understand and learn how to exploit some classic bugs and to have fun, there is 9 challenges every challenge demonstrates a famous classic bug, hope you enj…

---

## [GPT 4 No Internet Required](https://onehack.st/t/gpt-4-no-internet-required/240093)

<div class="topic-metadata">

**Author:** [@Dunamisss](https://onehack.st/u/Dunamisss)\
**Replies:** 14\
**Last updated:** [May 8, 2023, 12:22pm UTC](https://onehack.st/t/gpt-4-no-internet-required/240093 "2023-05-08T12:22:25Z")

</div>

GPT4All A free-to-use, locally running, privacy-aware chatbot. No GPU or internet required. Just download from the website install it. Once install, in the settings you can install a model there round about 3gig to a…

---

## [hardCIDR | Linux Bash Script To Discover The Netblocks, Or Ranges, Owned By The Target Organization](https://onehack.st/t/hardcidr-linux-bash-script-to-discover-the-netblocks-or-ranges-owned-by-the-target-organization/239968)

<div class="topic-metadata">

**Author:** [@Prometheus](https://onehack.st/u/Prometheus)\
**Replies:** 0\
**Last updated:** [May 4, 2023, 10:13pm UTC](https://onehack.st/t/hardcidr-linux-bash-script-to-discover-the-netblocks-or-ranges-owned-by-the-target-organization/239968 "2023-05-04T22:13:30Z")

</div>

hardCIDR Background A Linux Bash script to discover the netblocks, or ranges, (in CIDR notation) owned by the target organization during the intelligence gathering phase of a penetration test. This information is main…

---

## [REcollapse | Tool For Black-Box Regex Fuzzing To Bypass Validations And Discover Normalizations In Web Applications](https://onehack.st/t/recollapse-tool-for-black-box-regex-fuzzing-to-bypass-validations-and-discover-normalizations-in-web-applications/239910)

<div class="topic-metadata">

**Author:** [@PlayBoy83](https://onehack.st/u/PlayBoy83)\
**Replies:** 0\
**Last updated:** [May 3, 2023, 7:36pm UTC](https://onehack.st/t/recollapse-tool-for-black-box-regex-fuzzing-to-bypass-validations-and-discover-normalizations-in-web-applications/239910 "2023-05-03T19:36:40Z")

</div>

REcollapse REcollapse is a helper tool for black-box regex fuzzing to bypass validations and discover normalizations in web applications. It can also be helpful to bypass WAFs and weak vulnerability mitigations. For …

---

## [The Best Free Hard Drive Testing And Diagnostic Software](https://onehack.st/t/the-best-free-hard-drive-testing-and-diagnostic-software/239908)

<div class="topic-metadata">

**Author:** [@Prometheus](https://onehack.st/u/Prometheus)\
**Replies:** 1\
**Last updated:** [May 4, 2023, 7:37am UTC](https://onehack.st/t/the-best-free-hard-drive-testing-and-diagnostic-software/239908 "2023-05-04T07:37:55Z")

</div>

In this article, we’re going to check the best free hard drive testing programs. However, before you start using any third-party software, it would be a good idea to use Microsoft’s chkdsk tool. It’s reliable enough for …

---

## [Sh4D0Wup | Signing-key Abuse And Update Exploitation Framework](https://onehack.st/t/sh4d0wup-signing-key-abuse-and-update-exploitation-framework/239824)

<div class="topic-metadata">

**Author:** [@WhiteHat](https://onehack.st/u/WhiteHat)\
**Replies:** 0\
**Last updated:** [May 2, 2023, 9:15pm UTC](https://onehack.st/t/sh4d0wup-signing-key-abuse-and-update-exploitation-framework/239824 "2023-05-02T21:15:20Z")

</div>

sh4d0wup % docker run -it --rm ghcr.io/kpcyrd/sh4d0wup:edge -h Usage: sh4d0wup \[OPTIONS\] \<COMMAND\> Commands: bait Start a malicious update server front Bind a http/https server but forward everythi…

---

## [Token Grabber V2 | Capture Email Of Every Discord Account](https://onehack.st/t/token-grabber-v2-capture-email-of-every-discord-account/239777)

<div class="topic-metadata">

**Author:** [@WhiteHat](https://onehack.st/u/WhiteHat)\
**Replies:** 0\
**Last updated:** [May 1, 2023, 10:27pm UTC](https://onehack.st/t/token-grabber-v2-capture-email-of-every-discord-account/239777 "2023-05-01T22:27:52Z")

</div>

\[Discord\] - Token Grabber V2 \[Discord\] - Token-Grabber collecting the token on any Discord browser written in Python. Disclaimer THIS SCRIPT was made for Educational purposes This project was created only for g…

---

## [Bearer | Code Security Scanning Tool (SAST) That Discover, Filter And Prioritize Security Risks](https://onehack.st/t/bearer-code-security-scanning-tool-sast-that-discover-filter-and-prioritize-security-risks/239702)

<div class="topic-metadata">

**Author:** [@TheStrength](https://onehack.st/u/TheStrength)\
**Replies:** 0\
**Last updated:** [April 30, 2023, 9:23pm UTC](https://onehack.st/t/bearer-code-security-scanning-tool-sast-that-discover-filter-and-prioritize-security-risks/239702 "2023-04-30T21:23:41Z")

</div>

Scan your source code against top security and privacy risks. Bearer is a static application security testing (SAST) tool that scans your source code and analyzes your data flows to discover, filter and prioritize sec…

---

## [Wor is a Powershell script to harden, debloat, optimize, enhance privacy, avoid fingerprinting and improve performance on Windows 10 and 11](https://onehack.st/t/wor-is-a-powershell-script-to-harden-debloat-optimize-enhance-privacy-avoid-fingerprinting-and-improve-performance-on-windows-10-and-11/239683)

<div class="topic-metadata">

**Author:** [@Shayla](https://onehack.st/u/Shayla)\
**Replies:** 1\
**Last updated:** [April 30, 2023, 4:04pm UTC](https://onehack.st/t/wor-is-a-powershell-script-to-harden-debloat-optimize-enhance-privacy-avoid-fingerprinting-and-improve-performance-on-windows-10-and-11/239683 "2023-04-30T16:04:22Z")

</div>

Windows On Reins - Windows 10 Ameliorated, Bloatware removal, privacy fix and performance optimization https://github.com/gordonbay/Windows-On-Reins Warning I do not take responsibility for what may happen to your sy…

---

## [PhoneSploit-Pro | An All-In-One Hacking Tool To Remotely Exploit Android Devices Using ADB](https://onehack.st/t/phonesploit-pro-an-all-in-one-hacking-tool-to-remotely-exploit-android-devices-using-adb/239654)

<div class="topic-metadata">

**Author:** [@PlayBoy83](https://onehack.st/u/PlayBoy83)\
**Replies:** 0\
**Last updated:** [April 29, 2023, 9:42pm UTC](https://onehack.st/t/phonesploit-pro-an-all-in-one-hacking-tool-to-remotely-exploit-android-devices-using-adb/239654 "2023-04-29T21:42:07Z")

</div>

PhoneSploit Pro PhoneSploit with Metasploit Integration. An all-in-one hacking tool written in Python to remotely exploit Android devices using ADB (Android Debug Bridge) and Metasploit-Framework. Complete Au…

---

## [PortEx | Java Library To Analyse Portable Executable Files With A Special Focus On Malware Analysis And PE Malformation Robustness](https://onehack.st/t/portex-java-library-to-analyse-portable-executable-files-with-a-special-focus-on-malware-analysis-and-pe-malformation-robustness/239557)

<div class="topic-metadata">

**Author:** [@NoBody](https://onehack.st/u/NoBody)\
**Replies:** 0\
**Last updated:** [April 28, 2023, 11:49pm UTC](https://onehack.st/t/portex-java-library-to-analyse-portable-executable-files-with-a-special-focus-on-malware-analysis-and-pe-malformation-robustness/239557 "2023-04-28T23:49:09Z")

</div>

Welcome to PortEx PortEx is a Java library for static malware analysis of Portable Executable files. Its focus is on PE malformation robustness, and anomaly detection. PortEx is written in Java and Scala, and targeted at…

---

## [Wi-Fi Cracking | Crack WPA/WPA2 Wi-Fi Routers with Airodump-ng And Aircrack-ng/Hashcat.](https://onehack.st/t/wi-fi-cracking-crack-wpa-wpa2-wi-fi-routers-with-airodump-ng-and-aircrack-ng-hashcat/239492)

<div class="topic-metadata">

**Author:** [@WhiteHat](https://onehack.st/u/WhiteHat)\
**Replies:** 0\
**Last updated:** [April 27, 2023, 10:28pm UTC](https://onehack.st/t/wi-fi-cracking-crack-wpa-wpa2-wi-fi-routers-with-airodump-ng-and-aircrack-ng-hashcat/239492 "2023-04-27T22:28:34Z")

</div>

Wi-Fi Cracking Crack WPA/WPA2 Wi-Fi Routers with Airodump-ng and Aircrack-ng/Hashcat. This is a brief walk-through tutorial that illustrates how to crack Wi-Fi networks that are secured using weak passwords. It is no…

---

## [AuditpolCIS | CIS Benchmark Testing Of Windows SIEM Configuration](https://onehack.st/t/auditpolcis-cis-benchmark-testing-of-windows-siem-configuration/239490)

<div class="topic-metadata">

**Author:** [@WhiteHat](https://onehack.st/u/WhiteHat)\
**Replies:** 0\
**Last updated:** [April 27, 2023, 10:28pm UTC](https://onehack.st/t/auditpolcis-cis-benchmark-testing-of-windows-siem-configuration/239490 "2023-04-27T22:28:20Z")

</div>

auditpolCIS CIS Benchmark testing of Windows SIEM configuration This is an application for testing the configuration of Windows Audit Policy settings against the CIS Benchmark recommended settings. A few points: Th…

---

## [Links To Drive | Upload Files To Onedrive & Google Drive Without Downloading](https://onehack.st/t/links-to-drive-upload-files-to-onedrive-google-drive-without-downloading/239466)

<div class="topic-metadata">

**Author:** [@Aina](https://onehack.st/u/Aina)\
**Replies:** 4\
**Last updated:** [May 21, 2023, 11:59am UTC](https://onehack.st/t/links-to-drive-upload-files-to-onedrive-google-drive-without-downloading/239466 "2023-05-21T11:59:02Z")

</div>

Links To Drive | Upload Files To Onedrive & Google Drive Without Downloading About Links/magnet link to direct OneDrive/Google Drive with a help of rclone. Links to drive A simple colab file to upload files to One…

---

## [KubeStalk | Discovers Kubernetes And Related Infrastructure Based Attack Surface From A Black-Box Perspective](https://onehack.st/t/kubestalk-discovers-kubernetes-and-related-infrastructure-based-attack-surface-from-a-black-box-perspective/239461)

<div class="topic-metadata">

**Author:** [@BlueHacker](https://onehack.st/u/BlueHacker)\
**Replies:** 0\
**Last updated:** [April 27, 2023, 12:41pm UTC](https://onehack.st/t/kubestalk-discovers-kubernetes-and-related-infrastructure-based-attack-surface-from-a-black-box-perspective/239461 "2023-04-27T12:41:13Z")

</div>

KubeStalk KubeStalk is a tool to discover Kubernetes and related infrastructure based attack surface from a black-box perspective. This tool is a community version of the tool used to probe for unsecured Kubernetes cl…

---

## [Nuclearpond | A Utility Leveraging Nuclei To Perform Internet Wide Scans For The Cost Of A Cup Of Coffee](https://onehack.st/t/nuclearpond-a-utility-leveraging-nuclei-to-perform-internet-wide-scans-for-the-cost-of-a-cup-of-coffee/239382)

<div class="topic-metadata">

**Author:** [@WhiteHat](https://onehack.st/u/WhiteHat)\
**Replies:** 0\
**Last updated:** [April 25, 2023, 10:45pm UTC](https://onehack.st/t/nuclearpond-a-utility-leveraging-nuclei-to-perform-internet-wide-scans-for-the-cost-of-a-cup-of-coffee/239382 "2023-04-25T22:45:50Z")

</div>

Nuclear Pond Nuclear Pond is used to leverage Nuclei in the cloud with unremarkable speed, flexibility, and perform internet wide scans for far less than a cup of coffee. It leverages AWS Lambda as a backend to invoke…

---

## [How To Get Spotify Premium Free For Lifetime On Your Computer](https://onehack.st/t/how-to-get-spotify-premium-free-for-lifetime-on-your-computer/239321)

<div class="topic-metadata">

**Author:** [@WhiteHat](https://onehack.st/u/WhiteHat)\
**Replies:** 8\
**Last updated:** [May 2, 2023, 7:09am UTC](https://onehack.st/t/how-to-get-spotify-premium-free-for-lifetime-on-your-computer/239321 "2023-05-02T07:09:37Z")

</div>

It works with the official Spotify App, so you can enjoy the premium experience with no Ads or limitations on your main Spotify Account including your playlists & liked songs, Also it’s open source so you can take a look…

---

## [PowerMeUp | A Small Library Of Powershell Scripts For Post Exploitation That You May Need Or Use!](https://onehack.st/t/powermeup-a-small-library-of-powershell-scripts-for-post-exploitation-that-you-may-need-or-use/239320)

<div class="topic-metadata">

**Author:** [@PlayBoy83](https://onehack.st/u/PlayBoy83)\
**Replies:** 0\
**Last updated:** [April 24, 2023, 11:14pm UTC](https://onehack.st/t/powermeup-a-small-library-of-powershell-scripts-for-post-exploitation-that-you-may-need-or-use/239320 "2023-04-24T23:14:45Z")

</div>

Power Me Up This is a powershell reverse shell that executes the commands and or scripts that you add to the powerreverse.ps1 file as well as a small library of Post-Exploitation scripts. This also can be used for post e…

---

## [Awesome Content Writing | AI Tools And Awesome Resources | OneHack ⭐](https://onehack.st/t/awesome-content-writing-ai-tools-and-awesome-resources-onehack/239265)

<div class="topic-metadata">

**Author:** [@Aina](https://onehack.st/u/Aina)\
**Replies:** 6\
**Last updated:** [May 1, 2023, 11:25am UTC](https://onehack.st/t/awesome-content-writing-ai-tools-and-awesome-resources-onehack/239265 "2023-05-01T11:25:18Z")

</div>

Awesome Content Writing | AI Tools And Awesome Resources | OneHack :star: A list of AI Tools for content writing along with resources and the type of work they do :man\_shrugging: Conversion.ai - https://convers…

---

## [Striker | A Command And Control (C2)](https://onehack.st/t/striker-a-command-and-control-c2/239259)

<div class="topic-metadata">

**Author:** [@Astrid](https://onehack.st/u/Astrid)\
**Replies:** 0\
**Last updated:** [April 23, 2023, 10:34pm UTC](https://onehack.st/t/striker-a-command-and-control-c2/239259 "2023-04-23T22:34:38Z")

</div>

Disclaimer This project is under active development. Most of the features are experimental, with more to come. Expect breaking changes. Features A) Agents Native agents for linux and windows hosts. Self-contained…

---

## [UDPX | Fast A nd Lightweight, UDPX Is A Single-Packet UDP Scanner Written In Go](https://onehack.st/t/udpx-fast-a-nd-lightweight-udpx-is-a-single-packet-udp-scanner-written-in-go/239068)

<div class="topic-metadata">

**Author:** [@NoBody](https://onehack.st/u/NoBody)\
**Replies:** 0\
**Last updated:** [April 23, 2023, 12:48am UTC](https://onehack.st/t/udpx-fast-a-nd-lightweight-udpx-is-a-single-packet-udp-scanner-written-in-go/239068 "2023-04-23T00:48:33Z")

</div>

Fast and lightweight, UDPX is a single-packet UDP scanner written in Go that supports the discovery of over 45 services with the ability to add custom ones. It is easy to use and portable, and can be run on Linux, Mac…

[Previous page](https://onehack.st/c/tools-scripts/27.md?page=53)

[Next page](https://onehack.st/c/tools-scripts/27.md?page=55)
