# Tools & Scripts

**URL:** https://onehack.st/c/tools-scripts/27.md?page=59

[Latest](https://onehack.st/latest.md) · [Categories](https://onehack.st/categories.md) · [Tags](https://onehack.st/tags.md)

**Page:** 60

---

## [Ghauri | An Advanced Cross-Platform Tool That Automates The Process Of Detecting And Exploiting SQL Injection Security Flaws](https://onehack.st/t/ghauri-an-advanced-cross-platform-tool-that-automates-the-process-of-detecting-and-exploiting-sql-injection-security-flaws/231712)

<div class="topic-metadata">

**Author:** [@TheStrength](https://onehack.st/u/TheStrength)\
**Replies:** 0\
**Last updated:** [January 21, 2023, 11:14am UTC](https://onehack.st/t/ghauri-an-advanced-cross-platform-tool-that-automates-the-process-of-detecting-and-exploiting-sql-injection-security-flaws/231712 "2023-01-21T11:14:34Z")

</div>

Ghauri An advanced cross-platform tool that automates the process of detecting and exploiting SQL injection security flaws Requirements Python 3 Python pip3 Installation cd to ghauri directory. install requir…

---

## [Defender Remover / Defender Disabler | Remove Defender On Windows 10 & 11](https://onehack.st/t/defender-remover-defender-disabler-remove-defender-on-windows-10-11/231665)

<div class="topic-metadata">

**Author:** [@Astrid](https://onehack.st/u/Astrid)\
**Replies:** 1\
**Last updated:** [April 24, 2024, 7:40pm UTC](https://onehack.st/t/defender-remover-defender-disabler-remove-defender-on-windows-10-11/231665 "2024-04-24T19:40:02Z")

</div>

:cross\_mark: Defender Remover / Defender Disabler :red\_question\_mark: What is the app do? This application is removing / disables Windows Defender , including the Windows Security App, Windows Virtualization-Based Se…

---

## [Windows 10 Gaming Focus | Debloat And Optimize Windows 10/11 For The Lowest Latency Gaming Experience](https://onehack.st/t/windows-10-gaming-focus-debloat-and-optimize-windows-10-11-for-the-lowest-latency-gaming-experience/231577)

<div class="topic-metadata">

**Author:** [@BlueHacker](https://onehack.st/u/BlueHacker)\
**Replies:** 0\
**Last updated:** [January 19, 2023, 10:05am UTC](https://onehack.st/t/windows-10-gaming-focus-debloat-and-optimize-windows-10-11-for-the-lowest-latency-gaming-experience/231577 "2023-01-19T10:05:36Z")

</div>

Windows10GamingFocus This is A FORK Based On ChrisTitusTech that’s foucus on debloat and optimize windows 10/11 for the lowest latency and best gaming experience, the Ultimate Windows 10/11 Script is a creation from mult…

---

## [APTRS | Automated Penetration Testing Reporting System](https://onehack.st/t/aptrs-automated-penetration-testing-reporting-system/231524)

<div class="topic-metadata">

**Author:** [@Prometheus](https://onehack.st/u/Prometheus)\
**Replies:** 0\
**Last updated:** [January 18, 2023, 2:04pm UTC](https://onehack.st/t/aptrs-automated-penetration-testing-reporting-system/231524 "2023-01-18T14:04:26Z")

</div>

APTRS (Automated Penetration Testing Reporting System) is an automated reporting tool in Python and Django. The tool allows Penetration testers to create a report directly without using the Traditional Docx file. It al…

---

## [LATMA | Lateral Movement Analyzer Tool](https://onehack.st/t/latma-lateral-movement-analyzer-tool/231451)

<div class="topic-metadata">

**Author:** [@TheStrength](https://onehack.st/u/TheStrength)\
**Replies:** 0\
**Last updated:** [January 17, 2023, 1:55pm UTC](https://onehack.st/t/latma-lateral-movement-analyzer-tool/231451 "2023-01-17T13:55:13Z")

</div>

Lateral movement analyzer tool Lateral movement analyzer (LATMA) collects authentication logs from the domain and searches for potential lateral movement attacks and suspicious activity. The tool visualizes the findin…

---

## [AVIator | Antivirus Evasion Project](https://onehack.st/t/aviator-antivirus-evasion-project/231413)

<div class="topic-metadata">

**Author:** [@WhiteHat](https://onehack.st/u/WhiteHat)\
**Replies:** 0\
**Last updated:** [January 16, 2023, 4:07pm UTC](https://onehack.st/t/aviator-antivirus-evasion-project/231413 "2023-01-16T16:07:22Z")

</div>

AviAtor Ported to NETCore 5 with an updated UI AV|Ator About://name AV: AntiVirus Ator: Is a swordsman, alchemist, scientist, magician, scholar, and engineer, with the ability to sometimes produce objects out of thi…

---

## [The Best Money Making Apps For Android Phones | Fast Cash In 2023](https://onehack.st/t/the-best-money-making-apps-for-android-phones-fast-cash-in-2023/231333)

<div class="topic-metadata">

**Author:** [@WhiteHat](https://onehack.st/u/WhiteHat)\
**Replies:** 1\
**Last updated:** [January 15, 2023, 11:40pm UTC](https://onehack.st/t/the-best-money-making-apps-for-android-phones-fast-cash-in-2023/231333 "2023-01-15T23:40:33Z")

</div>

The Best Money Making Apps For Android Phones | Fast Cash In 2023 Are you spending time surfing social media apps or watching Instagram reels? Stop wasting time and start earning real money by using any or all of t…

---

## [Fuzzable | Framework For Automating Fuzzable Target Discovery With Static Analysis](https://onehack.st/t/fuzzable-framework-for-automating-fuzzable-target-discovery-with-static-analysis/231331)

<div class="topic-metadata">

**Author:** [@PlayBoy83](https://onehack.st/u/PlayBoy83)\
**Replies:** 0\
**Last updated:** [January 14, 2023, 7:00pm UTC](https://onehack.st/t/fuzzable-framework-for-automating-fuzzable-target-discovery-with-static-analysis/231331 "2023-01-14T19:00:38Z")

</div>

Fuzzable Framework for Automating Fuzzable Target Discovery with Static Analysis Introduction Vulnerability researchers conducting security assessments on software will often harness the capabilities of coverag…

---

## [Bkcrack | Crack Legacy Zip Encryption With Biham And Kocher’s Known Plaintext Attack](https://onehack.st/t/bkcrack-crack-legacy-zip-encryption-with-biham-and-kocher-s-known-plaintext-attack/231271)

<div class="topic-metadata">

**Author:** [@BlueHacker](https://onehack.st/u/BlueHacker)\
**Replies:** 0\
**Last updated:** [January 13, 2023, 7:05pm UTC](https://onehack.st/t/bkcrack-crack-legacy-zip-encryption-with-biham-and-kocher-s-known-plaintext-attack/231271 "2023-01-13T19:05:15Z")

</div>

Crack legacy zip encryption with Biham and Kocher’s known plaintext attack. Overview A ZIP archive may contain many entries whose content can be compressed and/or encrypted. In particular, entries can be encrypte…

---

## [KRIe | Linux Kernel Runtime Integrity With eBPF](https://onehack.st/t/krie-linux-kernel-runtime-integrity-with-ebpf/231252)

<div class="topic-metadata">

**Author:** [@Astrid](https://onehack.st/u/Astrid)\
**Replies:** 0\
**Last updated:** [January 13, 2023, 7:52am UTC](https://onehack.st/t/krie-linux-kernel-runtime-integrity-with-ebpf/231252 "2023-01-13T07:52:44Z")

</div>

KRIe is a research project that aims to detect Linux Kernel exploits with eBPF. KRIe is far from being a bulletproof strategy: from eBPF related limitations to post exploitation detections that might rely on a comp…

---

## [PowerHuntShares | Audit Script Designed In Inventory, Analyze, And Report Excessive Privileges Configured On Active Directory Domains](https://onehack.st/t/powerhuntshares-audit-script-designed-in-inventory-analyze-and-report-excessive-privileges-configured-on-active-directory-domains/231197)

<div class="topic-metadata">

**Author:** [@TheStrength](https://onehack.st/u/TheStrength)\
**Replies:** 0\
**Last updated:** [January 12, 2023, 8:19am UTC](https://onehack.st/t/powerhuntshares-audit-script-designed-in-inventory-analyze-and-report-excessive-privileges-configured-on-active-directory-domains/231197 "2023-01-12T08:19:06Z")

</div>

PowerHuntShares is design to automatically inventory, analyze, and report excessive privilege assigned to SMB shares on Active Directory domain joined computers. It is intented to help IAM and other blue teams gain a…

---

## [TerraLdr | A Payload Loader Designed With Advanced Evasion Features](https://onehack.st/t/terraldr-a-payload-loader-designed-with-advanced-evasion-features/231121)

<div class="topic-metadata">

**Author:** [@Prometheus](https://onehack.st/u/Prometheus)\
**Replies:** 0\
**Last updated:** [January 10, 2023, 9:34pm UTC](https://onehack.st/t/terraldr-a-payload-loader-designed-with-advanced-evasion-features/231121 "2023-01-10T21:34:42Z")

</div>

TerraLdr: A Payload Loader Designed With Advanced Evasion Features Details: no crt functions imported syscall unhooking using KnownDllUnhook api hashing using Rotr32 hashing algo payload encryption using rc4 - payloa…

---

## [Discord Nitro Generator and Checker | A discord nitro generator and checker for all your nitro needs](https://onehack.st/t/discord-nitro-generator-and-checker-a-discord-nitro-generator-and-checker-for-all-your-nitro-needs/231046)

<div class="topic-metadata">

**Author:** [@Prometheus](https://onehack.st/u/Prometheus)\
**Replies:** 8\
**Last updated:** [November 25, 2023, 6:25pm UTC](https://onehack.st/t/discord-nitro-generator-and-checker-a-discord-nitro-generator-and-checker-for-all-your-nitro-needs/231046 "2023-11-25T18:25:19Z")

</div>

Discord Nitro Generator and Checker A discord nitro generator and checker for all your nitro needs Explore the docs » Report Bug · Request Feature · Join the discord Table of Contents About The Project Buil…

---

## [YATAS | A Simple Tool To Audit Your AWS Infrastructure For Misconfiguration Or Potential Security Issues With Plugins Integration](https://onehack.st/t/yatas-a-simple-tool-to-audit-your-aws-infrastructure-for-misconfiguration-or-potential-security-issues-with-plugins-integration/231044)

<div class="topic-metadata">

**Author:** [@WhiteHat](https://onehack.st/u/WhiteHat)\
**Replies:** 0\
**Last updated:** [January 9, 2023, 10:31pm UTC](https://onehack.st/t/yatas-a-simple-tool-to-audit-your-aws-infrastructure-for-misconfiguration-or-potential-security-issues-with-plugins-integration/231044 "2023-01-09T22:31:32Z")

</div>

YATAS Yet Another Testing & Auditing Solution The goal of YATAS is to help you create a secure AWS environment without too much hassle. It won’t check for all best practices but only for the ones that are important…

---

## [AceLdr | Cobalt Strike UDRL For Memory Scanner Evasion](https://onehack.st/t/aceldr-cobalt-strike-udrl-for-memory-scanner-evasion/231003)

<div class="topic-metadata">

**Author:** [@TheStrength](https://onehack.st/u/TheStrength)\
**Replies:** 0\
**Last updated:** [January 8, 2023, 8:41pm UTC](https://onehack.st/t/aceldr-cobalt-strike-udrl-for-memory-scanner-evasion/231003 "2023-01-08T20:41:03Z")

</div>

AceLdr - Avoid Memory Scanners A position-independent reflective loader for Cobalt Strike. Zero results from Hunt-Sleeping-Beacons, BeaconHunter, BeaconEye, Patriot, Moneta, PE-sieve, or MalMemDetect. Features Easy to …

---

## [REST-Attacker | Designed As A Proof-Of-Concept For The Feasibility Of Testing Generic Real-World REST Implementations](https://onehack.st/t/rest-attacker-designed-as-a-proof-of-concept-for-the-feasibility-of-testing-generic-real-world-rest-implementations/230939)

<div class="topic-metadata">

**Author:** [@Prometheus](https://onehack.st/u/Prometheus)\
**Replies:** 1\
**Last updated:** [January 8, 2023, 3:40am UTC](https://onehack.st/t/rest-attacker-designed-as-a-proof-of-concept-for-the-feasibility-of-testing-generic-real-world-rest-implementations/230939 "2023-01-08T03:40:27Z")

</div>

REST-Attacker is an automated penetration testing framework for APIs following the REST architecture style. The tool’s focus is on streamlining the analysis of generic REST API implementations by completely automating…

---

## [DotDumper | An Automatic Unpacker And Logger For DotNet Framework Targeting Files](https://onehack.st/t/dotdumper-an-automatic-unpacker-and-logger-for-dotnet-framework-targeting-files/230885)

<div class="topic-metadata">

**Author:** [@NoBody](https://onehack.st/u/NoBody)\
**Replies:** 0\
**Last updated:** [January 6, 2023, 7:02pm UTC](https://onehack.st/t/dotdumper-an-automatic-unpacker-and-logger-for-dotnet-framework-targeting-files/230885 "2023-01-06T19:02:36Z")

</div>

DotDumper An automatic unpacker and logger for DotNet Framework targeting files! This tool has been unveiled at Black Hat USA 2022. The automatic detection and classification of any given file in a reliable manner is …

---

## [ExchangeFinder | Find Microsoft Exchange Instance For A Given Domain And Identify The Exact Version](https://onehack.st/t/exchangefinder-find-microsoft-exchange-instance-for-a-given-domain-and-identify-the-exact-version/230827)

<div class="topic-metadata">

**Author:** [@BlueHacker](https://onehack.st/u/BlueHacker)\
**Replies:** 0\
**Last updated:** [January 5, 2023, 7:11pm UTC](https://onehack.st/t/exchangefinder-find-microsoft-exchange-instance-for-a-given-domain-and-identify-the-exact-version/230827 "2023-01-05T19:11:00Z")

</div>

ExchangeFinder ExchangeFinder is a simple and open-source tool that tries to find Micrsoft Exchange instance for a given domain based on the top common DNS names for Microsoft Exchange. ExchangeFinder can identify t…

---

## [Degoogle | Tool to Automate Google Dork Search on Target](https://onehack.st/t/degoogle-tool-to-automate-google-dork-search-on-target/230773)

<div class="topic-metadata">

**Author:** [@NoBody](https://onehack.st/u/NoBody)\
**Replies:** 0\
**Last updated:** [January 4, 2023, 8:00pm UTC](https://onehack.st/t/degoogle-tool-to-automate-google-dork-search-on-target/230773 "2023-01-04T20:00:37Z")

</div>

Simple fork from degoogle with bug hunting purposes Added degoogle\_hunter.sh with an associative array with some dorks and descriptions, and runs degoogle (: You can add your own dorks following the same scheme inclu…

---

## [CodeCrackers Reversing Tools | Mega Pack ⭐ ](https://onehack.st/t/codecrackers-reversing-tools-mega-pack/230718)

<div class="topic-metadata">

**Author:** [@NoBody](https://onehack.st/u/NoBody)\
**Replies:** 0\
**Last updated:** [January 3, 2023, 7:17pm UTC](https://onehack.st/t/codecrackers-reversing-tools-mega-pack/230718 "2023-01-03T19:17:08Z")

</div>

ALL OF CODECRACKERS REVERSING TOOLS Download & Backup Happy learning!

---

## [Subparse | Modular Malware Analysis Artifact Collection And Correlation Framework](https://onehack.st/t/subparse-modular-malware-analysis-artifact-collection-and-correlation-framework/230715)

<div class="topic-metadata">

**Author:** [@WhiteHat](https://onehack.st/u/WhiteHat)\
**Replies:** 0\
**Last updated:** [January 3, 2023, 7:16pm UTC](https://onehack.st/t/subparse-modular-malware-analysis-artifact-collection-and-correlation-framework/230715 "2023-01-03T19:16:55Z")

</div>

Subparse, is a modular framework developed by Josh Strochein, Aaron Baker, and Odin Bernstein. The framework is designed to parse and index malware files and present the information found during the parsing i…

---

## [Cypherhound | Terminal Application That Contains 260+ Neo4j Cyphers For BloodHound Data Sets](https://onehack.st/t/cypherhound-terminal-application-that-contains-260-neo4j-cyphers-for-bloodhound-data-sets/230670)

<div class="topic-metadata">

**Author:** [@Prometheus](https://onehack.st/u/Prometheus)\
**Replies:** 0\
**Last updated:** [January 2, 2023, 7:04pm UTC](https://onehack.st/t/cypherhound-terminal-application-that-contains-260-neo4j-cyphers-for-bloodhound-data-sets/230670 "2023-01-02T19:04:46Z")

</div>

A Python3 terminal application that contains 260+ Neo4j cyphers for BloodHound data sets. Why? BloodHound is a staple tool for every red teamer. However, there are some negative side effects based on its design. I wi…

---

## [ApkLeaks | Tool For Scanning APK file to Extract URIs, Endpoints & Secrets](https://onehack.st/t/apkleaks-tool-for-scanning-apk-file-to-extract-uris-endpoints-secrets/230626)

<div class="topic-metadata">

**Author:** [@PlayBoy83](https://onehack.st/u/PlayBoy83)\
**Replies:** 2\
**Last updated:** [January 3, 2023, 12:46am UTC](https://onehack.st/t/apkleaks-tool-for-scanning-apk-file-to-extract-uris-endpoints-secrets/230626 "2023-01-03T00:46:43Z")

</div>

APKLeaks Scanning APK file for URIs, endpoints & secrets. Installation from Pypi from Source from Docker Usage Options Output Pattern Pattern Arguments (disassembler) License Acknowledments Installatio…

---

## [IntruderPayloads | Collection of Burpsuite Intruder Payloads For Bug Hunting](https://onehack.st/t/intruderpayloads-collection-of-burpsuite-intruder-payloads-for-bug-hunting/230575)

<div class="topic-metadata">

**Author:** [@WhiteHat](https://onehack.st/u/WhiteHat)\
**Replies:** 1\
**Last updated:** [September 23, 2023, 12:52am UTC](https://onehack.st/t/intruderpayloads-collection-of-burpsuite-intruder-payloads-for-bug-hunting/230575 "2023-09-23T00:52:45Z")

</div>

IntruderPayloads A collection of Burpsuite Intruder payloads, BurpBounty payloads (https://github.com/wagiro/BurpBounty), fuzz lists and pentesting methodologies. To pull down all 3rd party repos, run install.sh in th…

---

## [The Best Monetization Tools For Your Blog](https://onehack.st/t/the-best-monetization-tools-for-your-blog/230530)

<div class="topic-metadata">

**Author:** [@WhiteHat](https://onehack.st/u/WhiteHat)\
**Replies:** 2\
**Last updated:** [December 31, 2022, 6:24am UTC](https://onehack.st/t/the-best-monetization-tools-for-your-blog/230530 "2022-12-31T06:24:49Z")

</div>

We’ve gathered a list of the top 20+ tools to improve monetization on your blog. Alongside each tool are the pros and cons (nothing’s perfect) of using these tools. This will help you to decide if the tool is the right t…

---

## [Subzy | Subdomain Takeover Vulnerability Tool](https://onehack.st/t/subzy-subdomain-takeover-vulnerability-tool/230523)

<div class="topic-metadata">

**Author:** [@NoBody](https://onehack.st/u/NoBody)\
**Replies:** 0\
**Last updated:** [December 30, 2022, 9:52pm UTC](https://onehack.st/t/subzy-subdomain-takeover-vulnerability-tool/230523 "2022-12-30T21:52:13Z")

</div>

Subdomain takeover tool which works based on matching response fingerprints from can-i-take-over-xyz Installation go get -u -v github.com/lukasikic/subzy go install -v github.com/lukasikic/subzy@latest If $GOBIN and…

---

## [Search That Hash | The Fastest Hash Cracking System](https://onehack.st/t/search-that-hash-the-fastest-hash-cracking-system/230486)

<div class="topic-metadata">

**Author:** [@NoBody](https://onehack.st/u/NoBody)\
**Replies:** 1\
**Last updated:** [December 30, 2022, 4:15am UTC](https://onehack.st/t/search-that-hash-the-fastest-hash-cracking-system/230486 "2022-12-30T04:15:29Z")

</div>

:right\_arrow: Discord :left\_arrow: The Fastest Hash Cracking System pip3 install search-that-hash && sth :thinking: Overview Tired of going to every website to crack your hash? Search-That-Hash automates this …

---

## [Log4j-scan | Log4j RCE Scanning and Exploit Tool](https://onehack.st/t/log4j-scan-log4j-rce-scanning-and-exploit-tool/230483)

<div class="topic-metadata">

**Author:** [@TheStrength](https://onehack.st/u/TheStrength)\
**Replies:** 0\
**Last updated:** [December 29, 2022, 8:17pm UTC](https://onehack.st/t/log4j-scan-log4j-rce-scanning-and-exploit-tool/230483 "2022-12-29T20:17:55Z")

</div>

A fully automated, accurate, and extensive scanner for finding vulnerable log4j hosts Features Support for lists of URLs. Fuzzing for more than 60 HTTP request headers (not only 3-4 headers as previously seen tools). F…

---

## [Dirsearch | Web Content Discovery Scanner](https://onehack.st/t/dirsearch-web-content-discovery-scanner/230442)

<div class="topic-metadata">

**Author:** [@WhiteHat](https://onehack.st/u/WhiteHat)\
**Replies:** 0\
**Last updated:** [December 28, 2022, 9:01pm UTC](https://onehack.st/t/dirsearch-web-content-discovery-scanner/230442 "2022-12-28T21:01:11Z")

</div>

dirsearch - Web path discovery An advanced web path brute-forcer dirsearch is being actively developed by @maurosoria and @shelld3v Reach to our Discord server to communicate with the team at best Table of…

---

## [The Top 20 Most Popular Hacking Tools Of 2022](https://onehack.st/t/the-top-20-most-popular-hacking-tools-of-2022/230440)

<div class="topic-metadata">

**Author:** [@TheStrength](https://onehack.st/u/TheStrength)\
**Replies:** 0\
**Last updated:** [December 28, 2022, 9:01pm UTC](https://onehack.st/t/the-top-20-most-popular-hacking-tools-of-2022/230440 "2022-12-28T21:01:03Z")

</div>

As last year, this year we made a ranking with the most popular tools between January and December 2022. Topics of the tools focus on Phishing, Information Gathering, Automation Tools, among others. Without going into …

[Previous page](https://onehack.st/c/tools-scripts/27.md?page=58)

[Next page](https://onehack.st/c/tools-scripts/27.md?page=60)
