# Tools & Scripts **URL:** https://onehack.st/c/tools-scripts/27.md?page=62 [Latest](https://onehack.st/latest.md) · [Categories](https://onehack.st/categories.md) · [Tags](https://onehack.st/tags.md) **Page:** 63 --- ## [AutoSSRF | Smart Context-Based SSRF Vulnerabiltiy Scanner](https://onehack.st/t/autossrf-smart-context-based-ssrf-vulnerabiltiy-scanner/228395)
**Author:** [@WhiteHat](https://onehack.st/u/WhiteHat)\ **Replies:** 0\ **Last updated:** [November 14, 2022, 8:36pm UTC](https://onehack.st/t/autossrf-smart-context-based-ssrf-vulnerabiltiy-scanner/228395 "2022-11-14T20:36:13Z")
Summary autoSSRF is your best ally for identifying SSRF vulnerabilities at scale. Different from other ssrf automation tools, this one comes with the two following original features : Smart fuzzing on relevant SSRF … --- ## [RDPHijack-BOF | Cobalt Strike Beacon Object File (BOF) That Uses WinStationConnect API To Perform Local/Remote RDP Session Hijacking](https://onehack.st/t/rdphijack-bof-cobalt-strike-beacon-object-file-bof-that-uses-winstationconnect-api-to-perform-local-remote-rdp-session-hijacking/228311)
**Author:** [@BlueHacker](https://onehack.st/u/BlueHacker)\ **Replies:** 0\ **Last updated:** [November 12, 2022, 9:10pm UTC](https://onehack.st/t/rdphijack-bof-cobalt-strike-beacon-object-file-bof-that-uses-winstationconnect-api-to-perform-local-remote-rdp-session-hijacking/228311 "2022-11-12T21:10:55Z")
Cobalt Strike Beacon Object File (BOF) that uses WinStationConnect API to perform local/remote RDP session hijacking. With a valid access token / kerberos ticket (e.g., golden ticket) of the session owner, you will be… --- ## [Mega Import Bypass | A Tool To Bypass Transfer Limitation](https://onehack.st/t/mega-import-bypass-a-tool-to-bypass-transfer-limitation/228292)
**Author:** [@BlueHacker](https://onehack.st/u/BlueHacker)\ **Replies:** 2\ **Last updated:** [November 13, 2022, 10:25am UTC](https://onehack.st/t/mega-import-bypass-a-tool-to-bypass-transfer-limitation/228292 "2022-11-13T10:25:23Z")
Mega-Import-Bypass A userscript to import a inifinitly large directory bypassing your storage limit on only 1 condition -As long as there’s even a little space remaining in your cloud, you can import any link bypassin… --- ## [Appshark | Static Taint Analysis Platform To Scan Vulnerabilities In An Android App](https://onehack.st/t/appshark-static-taint-analysis-platform-to-scan-vulnerabilities-in-an-android-app/228226)
**Author:** [@PlayBoy83](https://onehack.st/u/PlayBoy83)\ **Replies:** 0\ **Last updated:** [November 10, 2022, 9:20pm UTC](https://onehack.st/t/appshark-static-taint-analysis-platform-to-scan-vulnerabilities-in-an-android-app/228226 "2022-11-10T21:20:00Z")
Document Index 1.overview 2.startup 3.how to write rules 4.how to find compliance problems use appshark 5.a path traversal game 6.argument 7.engine config 8.result 9.faq AppShark Appshark is a static taint analysis … --- ## [Prefetch-Hash-Cracker | A Small Util To Brute-Force Prefetch Hashes](https://onehack.st/t/prefetch-hash-cracker-a-small-util-to-brute-force-prefetch-hashes/228168)
**Author:** [@TheStrength](https://onehack.st/u/TheStrength)\ **Replies:** 0\ **Last updated:** [November 9, 2022, 8:57pm UTC](https://onehack.st/t/prefetch-hash-cracker-a-small-util-to-brute-force-prefetch-hashes/228168 "2022-11-09T20:57:31Z")
Motivation During the forensic analysis of a Windows machine, you may find the name of a deleted prefetch file. While its content may not be recoverable, the filename itself is often enough to find the full path of th… --- ## [Evilgophish | Evilginx2 + Gophish](https://onehack.st/t/evilgophish-evilginx2-gophish/228105)
**Author:** [@NoBody](https://onehack.st/u/NoBody)\ **Replies:** 0\ **Last updated:** [November 8, 2022, 8:42pm UTC](https://onehack.st/t/evilgophish-evilginx2-gophish/228105 "2022-11-08T20:42:40Z")
Table of Contents evilgophish Credits Prerequisites Disclaimer Why? Background Infrastructure Layout setup.sh replace\_rid.sh Email Campaign Setup SMS Campaign Setup Live Feed Setup Phishlets Surprise A Word About Ph… --- ## [PEnetration TEsting Proxy (PETEP) for TCP (with SSL/TLS support)](https://onehack.st/t/penetration-testing-proxy-petep-for-tcp-with-ssl-tls-support/228083)
**Author:** [@majk](https://onehack.st/u/majk)\ **Replies:** 0\ **Last updated:** [November 8, 2022, 10:26am UTC](https://onehack.st/t/penetration-testing-proxy-petep-for-tcp-with-ssl-tls-support/228083 "2022-11-08T10:26:21Z")
PETEP (PEnetration TEsting Proxy) is open-source Java application for network communication proxying for the purpose of penetration testing. It allows penetration testers to setup proxies and interceptors to manage the … --- ## [Collect-MemoryDump | Automated Creation Of Windows Memory Snapshots For DFIR](https://onehack.st/t/collect-memorydump-automated-creation-of-windows-memory-snapshots-for-dfir/228057)
**Author:** [@WhiteHat](https://onehack.st/u/WhiteHat)\ **Replies:** 0\ **Last updated:** [November 7, 2022, 9:50pm UTC](https://onehack.st/t/collect-memorydump-automated-creation-of-windows-memory-snapshots-for-dfir/228057 "2022-11-07T21:50:24Z")
Collect-MemoryDump - Automated Creation of Windows Memory Snapshots for DFIR Collect-MemoryDump.ps1 is PowerShell script utilized to collect a Memory Snapshot from a live Windows system (in a forensically sound manne… --- ## [VuCSA | Vulnerable Client-Server Application Made For Learning/Presenting How To Perform Penetration Tests Of Non-Http Thick Clients](https://onehack.st/t/vucsa-vulnerable-client-server-application-made-for-learning-presenting-how-to-perform-penetration-tests-of-non-http-thick-clients/228013)
**Author:** [@TheStrength](https://onehack.st/u/TheStrength)\ **Replies:** 0\ **Last updated:** [November 6, 2022, 8:00pm UTC](https://onehack.st/t/vucsa-vulnerable-client-server-application-made-for-learning-presenting-how-to-perform-penetration-tests-of-non-http-thick-clients/228013 "2022-11-06T20:00:29Z")
Vulnerable Client-Server Application (VuCSA) Vulnerable client-server application (VuCSA) is made for learning/presenting how to perform penetration tests of non-http thick clients. It is written in Java (with JavaFX gr… --- ## [Ermir | An Evil Java RMI Registry](https://onehack.st/t/ermir-an-evil-java-rmi-registry/227970)
**Author:** [@Prometheus](https://onehack.st/u/Prometheus)\ **Replies:** 0\ **Last updated:** [November 5, 2022, 9:31pm UTC](https://onehack.st/t/ermir-an-evil-java-rmi-registry/227970 "2022-11-05T21:31:42Z")
Ermir is an Evil/Rogue RMI Registry, it exploits unsecure deserialization on any Java code calling standard RMI methods on it (list()/lookup()/bind()/rebind()/unbind()). Requirements Ruby v3 or newer. Installation I… --- ## [The Best Online PDF Tools To Do Everything](https://onehack.st/t/the-best-online-pdf-tools-to-do-everything/227927)
**Author:** [@PlayBoy83](https://onehack.st/u/PlayBoy83)\ **Replies:** 7\ **Last updated:** [February 8, 2023, 11:20pm UTC](https://onehack.st/t/the-best-online-pdf-tools-to-do-everything/227927 "2023-02-08T23:20:53Z")
PDF is one of the most frequently-used file formats used by millions daily. At times when you have to edit or convert PDF file and don’t have time for downloading a special tool for that, then online PDF tools perfectly. … --- ## [Reverse SSH | SSH Based Reverse Shell](https://onehack.st/t/reverse-ssh-ssh-based-reverse-shell/227922)
**Author:** [@PlayBoy83](https://onehack.st/u/PlayBoy83)\ **Replies:** 0\ **Last updated:** [November 4, 2022, 9:33pm UTC](https://onehack.st/t/reverse-ssh-ssh-based-reverse-shell/227922 "2022-11-04T21:33:36Z")
(Art credit to https://www.instagram.com/smart.hedgehog.art/) Want to use SSH for reverse shells? Now you can. Manage and connect to reverse shells with native SSH syntax Dynamic, local and remote forwarding Native … --- ## [Awesome Windows | Applications & Tools | Massive Collection & Resources ⭐](https://onehack.st/t/awesome-windows-applications-tools-massive-collection-resources/227891)
**Author:** [@Aina](https://onehack.st/u/Aina)\ **Replies:** 8\ **Last updated:** [November 9, 2022, 2:14am UTC](https://onehack.st/t/awesome-windows-applications-tools-massive-collection-resources/227891 "2022-11-09T02:14:30Z")
An awesome & curated list of best applications and tools for Windows. Items marked with Software are open-source software. Items marked with are free. Applications Audio Chat Clients Compression Customizat… --- ## [Cicd-Goat | A Deliberately Vulnerable CI/CD Environment](https://onehack.st/t/cicd-goat-a-deliberately-vulnerable-ci-cd-environment/227886)
**Author:** [@BlueHacker](https://onehack.st/u/BlueHacker)\ **Replies:** 1\ **Last updated:** [November 4, 2022, 1:47am UTC](https://onehack.st/t/cicd-goat-a-deliberately-vulnerable-ci-cd-environment/227886 "2022-11-04T01:47:24Z")
Deliberately vulnerable CI/CD environment. Hack CI/CD pipelines, capture the flags. :triangular\_flag: Created by Cider Security. Table of Contents Description Download & Run Linux & Mac Windows (Powershell) … --- ## [Tools To Improve Your Social Media Performance](https://onehack.st/t/tools-to-improve-your-social-media-performance/227882)
**Author:** [@BlueHacker](https://onehack.st/u/BlueHacker)\ **Replies:** 1\ **Last updated:** [November 7, 2022, 7:37am UTC](https://onehack.st/t/tools-to-improve-your-social-media-performance/227882 "2022-11-07T07:37:55Z")
In this article, you will find some of the best tools to track your social media performance. 1. ClickUp ClickUp is a great cloud-based project management tool that lets you combine everything into one place. It offers t… --- ## [Threatest | Threatest Is A Go Framework For End-To-End Testing Threat Detection Rules](https://onehack.st/t/threatest-threatest-is-a-go-framework-for-end-to-end-testing-threat-detection-rules/227836)
**Author:** [@WhiteHat](https://onehack.st/u/WhiteHat)\ **Replies:** 0\ **Last updated:** [November 2, 2022, 9:25pm UTC](https://onehack.st/t/threatest-threatest-is-a-go-framework-for-end-to-end-testing-threat-detection-rules/227836 "2022-11-02T21:25:36Z")
Threatest Threatest is a Go framework for testing threat detection end-to-end. Threatest allows you to detonate an attack technique, and verify that the alert you expect was generated in your favorite security pla… --- ## [ SpotX | Modified Spotify Client For Windows](https://onehack.st/t/spotx-modified-spotify-client-for-windows/227793)
**Author:** [@TheStrength](https://onehack.st/u/TheStrength)\ **Replies:** 0\ **Last updated:** [November 1, 2022, 9:01pm UTC](https://onehack.st/t/spotx-modified-spotify-client-for-windows/227793 "2022-11-01T21:01:47Z")
Modified Spotify Client for Windows System requirements OS: Windows 7-11 Spotify: Recommended official version 1.1.97.962 For Windows Desktop only (Microsoft store version is not suitable). PowerShell: 3 or high… --- ## [The Best Mobile Apps To Manage Photos](https://onehack.st/t/the-best-mobile-apps-to-manage-photos/227732)
**Author:** [@TheStrength](https://onehack.st/u/TheStrength)\ **Replies:** 0\ **Last updated:** [October 31, 2022, 8:08pm UTC](https://onehack.st/t/the-best-mobile-apps-to-manage-photos/227732 "2022-10-31T20:08:27Z")
The apps shown here are available for mobile, which we’re guessing is the most popular way we take photos now. Some of them have great ways to better sort and organize your photos for you; others have handy sharing capab… --- ## [Sandman | NTP Based Backdoor For Red Team Engagements In Hardened Networks](https://onehack.st/t/sandman-ntp-based-backdoor-for-red-team-engagements-in-hardened-networks/227729)
**Author:** [@WhiteHat](https://onehack.st/u/WhiteHat)\ **Replies:** 0\ **Last updated:** [October 31, 2022, 8:08pm UTC](https://onehack.st/t/sandman-ntp-based-backdoor-for-red-team-engagements-in-hardened-networks/227729 "2022-10-31T20:08:10Z")
Sandman is a backdoor that is meant to work on hardened networks during red team engagements. Sandman works as a stager and leverages NTP (a protocol to sync time & date) to get and run an arbitrary shellcode fro… --- ## [Mangle | Tool That Manipulates Aspects Of Compiled Executables (.Exe Or DLL) To Avoid Detection From EDRs](https://onehack.st/t/mangle-tool-that-manipulates-aspects-of-compiled-executables-exe-or-dll-to-avoid-detection-from-edrs/227705)
**Author:** [@Prometheus](https://onehack.st/u/Prometheus)\ **Replies:** 0\ **Last updated:** [October 30, 2022, 10:17pm UTC](https://onehack.st/t/mangle-tool-that-manipulates-aspects-of-compiled-executables-exe-or-dll-to-avoid-detection-from-edrs/227705 "2022-10-30T22:17:48Z")
Authored By Tyl0us Featured at Source Zero Con 2022 Mangle is a tool that manipulates aspects of compiled executables (.exe or DLL). Mangle can remove known Indicators of Compromise (IoC) based strings and replace th… --- ## [The Best Tools For Social Media Managers](https://onehack.st/t/the-best-tools-for-social-media-managers/227662)
**Author:** [@Prometheus](https://onehack.st/u/Prometheus)\ **Replies:** 0\ **Last updated:** [October 29, 2022, 10:31pm UTC](https://onehack.st/t/the-best-tools-for-social-media-managers/227662 "2022-10-29T22:31:01Z")
Social media has become increasingly popular, and social media managers are a regular occurrence nowadays. Maybe it doesn’t sound like it, but social media managers have a lot of jobs to do daily. They are in charge of t… --- ## [Whids | Open Source EDR For Windows](https://onehack.st/t/whids-open-source-edr-for-windows/227660)
**Author:** [@TheStrength](https://onehack.st/u/TheStrength)\ **Replies:** 0\ **Last updated:** [October 29, 2022, 10:30pm UTC](https://onehack.st/t/whids-open-source-edr-for-windows/227660 "2022-10-29T22:30:45Z")
IMPORTANT: this README and other documentation is not updated to reflect the changes made to latest beta releases (as a lot of changes happened). All this will be updated in time when a stable version will be r… --- ## [ProtectMyTooling | Multi-Packer Wrapper Letting Us Daisy-Chain Various Packers, Obfuscators And Other Red Team Oriented Weaponry](https://onehack.st/t/protectmytooling-multi-packer-wrapper-letting-us-daisy-chain-various-packers-obfuscators-and-other-red-team-oriented-weaponry/227615)
**Author:** [@Astrid](https://onehack.st/u/Astrid)\ **Replies:** 0\ **Last updated:** [October 28, 2022, 7:26pm UTC](https://onehack.st/t/protectmytooling-multi-packer-wrapper-letting-us-daisy-chain-various-packers-obfuscators-and-other-red-team-oriented-weaponry/227615 "2022-10-28T19:26:48Z")
Don’t Detect Tools - Detect Techniques Rationale behind releasing this software was outlined in an acompanying blog post: ProtectMyTooling - Don’t detect tools, detect techniques Intro Script that wraps around multi… --- ## [Top 6 WordPress Plugins That Add Interactivity For Students](https://onehack.st/t/top-6-wordpress-plugins-that-add-interactivity-for-students/227590)
**Author:** [@Astrid](https://onehack.st/u/Astrid)\ **Replies:** 1\ **Last updated:** [October 28, 2022, 6:52am UTC](https://onehack.st/t/top-6-wordpress-plugins-that-add-interactivity-for-students/227590 "2022-10-28T06:52:21Z")
If you work in education, you’re undoubtedly excited about using your website to arrange your teaching resources. WordPress has several plugins that can let you produce, sell subject courses, or transform your page into … --- ## [Shomon | Shodan Monitoring Integration For TheHive](https://onehack.st/t/shomon-shodan-monitoring-integration-for-thehive/227585)
**Author:** [@BlueHacker](https://onehack.st/u/BlueHacker)\ **Replies:** 0\ **Last updated:** [October 27, 2022, 9:32pm UTC](https://onehack.st/t/shomon-shodan-monitoring-integration-for-thehive/227585 "2022-10-27T21:32:58Z")
ShoMon is a Shodan alert feeder for TheHive written in GoLang. With version 2.0, it is more powerful than ever! Functionalities Can be used as Webhook OR Stream listener Webhook listener opens a restful API endp… --- ## [Bomber | Scans Software Bill Of Materials (SBOMs) For Security Vulnerabilities](https://onehack.st/t/bomber-scans-software-bill-of-materials-sboms-for-security-vulnerabilities/227523)
**Author:** [@PlayBoy83](https://onehack.st/u/PlayBoy83)\ **Replies:** 0\ **Last updated:** [October 26, 2022, 7:46pm UTC](https://onehack.st/t/bomber-scans-software-bill-of-materials-sboms-for-security-vulnerabilities/227523 "2022-10-26T19:46:28Z")
bomber bomber is an application that scans SBOMs for security vulnerabilities. Overview So you’ve asked a vendor for an Software Bill of Materials (SBOM) for one of their closed source products, and they provid… --- ## [Usbsas | Tool And Framework For Securely Reading Untrusted USB Mass Storage Devices](https://onehack.st/t/usbsas-tool-and-framework-for-securely-reading-untrusted-usb-mass-storage-devices/227471)
**Author:** [@BlueHacker](https://onehack.st/u/BlueHacker)\ **Replies:** 0\ **Last updated:** [October 25, 2022, 9:07pm UTC](https://onehack.st/t/usbsas-tool-and-framework-for-securely-reading-untrusted-usb-mass-storage-devices/227471 "2022-10-25T21:07:58Z")
usbsas is a free and open source (GPLv3) tool and framework for securely reading untrusted USB mass storage devices. Description Following the concept of defense in depth and the principle of least privilege, usbsas’s… --- ## [MHDDoS | DDoS Attack Script With 56 Methods](https://onehack.st/t/mhddos-ddos-attack-script-with-56-methods/227411)
**Author:** [@WhiteHat](https://onehack.st/u/WhiteHat)\ **Replies:** 1\ **Last updated:** [October 27, 2022, 1:29am UTC](https://onehack.st/t/mhddos-ddos-attack-script-with-56-methods/227411 "2022-10-27T01:29:17Z")
MHDDoS - DDoS Attack Script With 56 Methods ##### (Programming Language - Python 3) Please Don’t Attack websites without the owners consent. Features And Methods :bomb: Layer7 GET | GET Flood POST | PO… --- ## [xnLinkFinder | A Python Tool Used To Discover Endpoints (And Potential Parameters) For A Given Target](https://onehack.st/t/xnlinkfinder-a-python-tool-used-to-discover-endpoints-and-potential-parameters-for-a-given-target/226963)
**Author:** [@TheStrength](https://onehack.st/u/TheStrength)\ **Replies:** 0\ **Last updated:** [October 23, 2022, 7:47pm UTC](https://onehack.st/t/xnlinkfinder-a-python-tool-used-to-discover-endpoints-and-potential-parameters-for-a-given-target/226963 "2022-10-23T19:47:15Z")
About - v2.1 This is a tool used to discover endpoints (and potential parameters) for a given target. It can find them by: crawling a target (pass a domain/URL) crawling multiple targets (pass a file of domains/URLs) … --- ## [Reverse Engineering Challenge 2022](https://onehack.st/t/reverse-engineering-challenge-2022/226906)
**Author:** [@PlayBoy83](https://onehack.st/u/PlayBoy83)\ **Replies:** 0\ **Last updated:** [October 22, 2022, 8:13pm UTC](https://onehack.st/t/reverse-engineering-challenge-2022/226906 "2022-10-22T20:13:16Z")
Download Zip Archives passwords = seotuts dot net [Previous page](https://onehack.st/c/tools-scripts/27.md?page=61) [Next page](https://onehack.st/c/tools-scripts/27.md?page=63)