# Tools & Scripts

**URL:** https://onehack.st/c/tools-scripts/27.md?page=63

[Latest](https://onehack.st/latest.md) · [Categories](https://onehack.st/categories.md) · [Tags](https://onehack.st/tags.md)

**Page:** 64

---

## [PenguinTrace | Tool To Show How Code Runs At The Hardware Level](https://onehack.st/t/penguintrace-tool-to-show-how-code-runs-at-the-hardware-level/226903)

<div class="topic-metadata">

**Author:** [@PlayBoy83](https://onehack.st/u/PlayBoy83)\
**Replies:** 0\
**Last updated:** [October 22, 2022, 8:12pm UTC](https://onehack.st/t/penguintrace-tool-to-show-how-code-runs-at-the-hardware-level/226903 "2022-10-22T20:12:57Z")

</div>

Introduction penguinTrace is intended to help build an understanding of how programs run at the hardware level. It provides a way to see what instructions compile to, and then step through those instructions and see h…

---

## [PartyLoud | A Simple Tool To Generate Fake Web Browsing And Mitigate Tracking](https://onehack.st/t/partyloud-a-simple-tool-to-generate-fake-web-browsing-and-mitigate-tracking/226845)

<div class="topic-metadata">

**Author:** [@BlueHacker](https://onehack.st/u/BlueHacker)\
**Replies:** 0\
**Last updated:** [October 21, 2022, 10:01pm UTC](https://onehack.st/t/partyloud-a-simple-tool-to-generate-fake-web-browsing-and-mitigate-tracking/226845 "2022-10-21T22:01:31Z")

</div>

Partyloud Get your privacy back Generate fake web browsing and mitigate tracking PartyLoud is a highly configurable and straightforward free tool that helps you prevent tracking directly from your linux ter…

---

## [JSubFinder | Searches Webpages For Javascript And Analyzes Them For Hidden Subdomains And Secrets](https://onehack.st/t/jsubfinder-searches-webpages-for-javascript-and-analyzes-them-for-hidden-subdomains-and-secrets/226764)

<div class="topic-metadata">

**Author:** [@Astrid](https://onehack.st/u/Astrid)\
**Replies:** 0\
**Last updated:** [October 20, 2022, 8:22pm UTC](https://onehack.st/t/jsubfinder-searches-webpages-for-javascript-and-analyzes-them-for-hidden-subdomains-and-secrets/226764 "2022-10-20T20:22:32Z")

</div>

JSubFinder is a tool writtin in golang to search webpages & javascript for hidden subdomains and secrets in the given URL. Developed with BugBounty hunters in mind JSubFinder takes advantage of Go’s amazing performance …

---

## [Matano | The Open-Source Security Lake Platform For AWS](https://onehack.st/t/matano-the-open-source-security-lake-platform-for-aws/226712)

<div class="topic-metadata">

**Author:** [@WhiteHat](https://onehack.st/u/WhiteHat)\
**Replies:** 0\
**Last updated:** [October 19, 2022, 6:27pm UTC](https://onehack.st/t/matano-the-open-source-security-lake-platform-for-aws/226712 "2022-10-19T18:27:39Z")

</div>

The open-source security lake platform for AWS. Website | Docs | Community :bell: Read our announcement blog post :bell: What is Matano? Matano is an open source security lake platform for AWS. It lets you ing…

---

## [GodGenesis | A Python3 Based C2 Server To Make Life Of Red Teamer A Bit Easier](https://onehack.st/t/godgenesis-a-python3-based-c2-server-to-make-life-of-red-teamer-a-bit-easier/225963)

<div class="topic-metadata">

**Author:** [@PlayBoy83](https://onehack.st/u/PlayBoy83)\
**Replies:** 0\
**Last updated:** [October 17, 2022, 9:17pm UTC](https://onehack.st/t/godgenesis-a-python3-based-c2-server-to-make-life-of-red-teamer-a-bit-easier/225963 "2022-10-17T21:17:08Z")

</div>

God Genesis is a C2 server purely coded in Python3 created to help Red Teamers and Penetration Testers. Currently It only supports TCP reverse shell but wait a min, its a FUD and can give u admin shell from any target…

---

## [FUD-UUID-Shellcode | Another shellcode injection technique using C++](https://onehack.st/t/fud-uuid-shellcode-another-shellcode-injection-technique-using-c/225600)

<div class="topic-metadata">

**Author:** [@Prometheus](https://onehack.st/u/Prometheus)\
**Replies:** 0\
**Last updated:** [October 16, 2022, 8:34pm UTC](https://onehack.st/t/fud-uuid-shellcode-another-shellcode-injection-technique-using-c/225600 "2022-10-16T20:34:08Z")

</div>

Introduction Another shellcode injection technique using C++ that attempts to bypass Windows Defender using XOR encryption sorcery and UUID strings madness :). How it works Shellcode generation Firstly, generate a p…

---

## [HSTP | Simple Hyper Service Transfer Protocol On Networks](https://onehack.st/t/hstp-simple-hyper-service-transfer-protocol-on-networks/225483)

<div class="topic-metadata">

**Author:** [@NoBody](https://onehack.st/u/NoBody)\
**Replies:** 0\
**Last updated:** [October 15, 2022, 8:23pm UTC](https://onehack.st/t/hstp-simple-hyper-service-transfer-protocol-on-networks/225483 "2022-10-15T20:23:06Z")

</div>

Hyper Service Transfer Protocol on Networks The protocol aims to develop a application layer abstraction for the Hyper Service Transfer Protocol. HSTP is a recursion as nature of HSTP. This protocol implements itself…

---

## [SteaLinG | Open-Source Penetration Testing Framework Designed For Social Engineering](https://onehack.st/t/stealing-open-source-penetration-testing-framework-designed-for-social-engineering/225400)

<div class="topic-metadata">

**Author:** [@WhiteHat](https://onehack.st/u/WhiteHat)\
**Replies:** 1\
**Last updated:** [October 19, 2022, 2:02pm UTC](https://onehack.st/t/stealing-open-source-penetration-testing-framework-designed-for-social-engineering/225400 "2022-10-19T14:02:51Z")

</div>

SteaLinG v0.3 Description The SteaLinG is an open-source penetration testing framework designed for social engineering After the hack, you can upload it to the victim’s device and run it disclaimers: This is only…

---

## [Monkey365 | For Security Consultants To Easily Conduct Microsoft 365, Azure Subscriptions And Azure Active Directory](https://onehack.st/t/monkey365-for-security-consultants-to-easily-conduct-microsoft-365-azure-subscriptions-and-azure-active-directory/225232)

<div class="topic-metadata">

**Author:** [@PlayBoy83](https://onehack.st/u/PlayBoy83)\
**Replies:** 0\
**Last updated:** [October 13, 2022, 11:08am UTC](https://onehack.st/t/monkey365-for-security-consultants-to-easily-conduct-microsoft-365-azure-subscriptions-and-azure-active-directory/225232 "2022-10-13T11:08:26Z")

</div>

Monkey365 is an Open Source security tool that can be used to easily conduct not only Microsoft 365, but also Azure subscriptions and Azure Active Directory security configuration reviews without the significant …

---

## [AoratosWin | A Tool That Removes Traces Of Executed Applications On Windows OS](https://onehack.st/t/aoratoswin-a-tool-that-removes-traces-of-executed-applications-on-windows-os/225167)

<div class="topic-metadata">

**Author:** [@NoBody](https://onehack.st/u/NoBody)\
**Replies:** 0\
**Last updated:** [October 11, 2022, 9:10pm UTC](https://onehack.st/t/aoratoswin-a-tool-that-removes-traces-of-executed-applications-on-windows-os/225167 "2022-10-11T21:10:26Z")

</div>

AoratosWin AoratosWin is a tool that removes traces of executed applications on Windows OS which can easily be listed with tools such as ExecutedProgramList by Nirsoft. (Feel free to decompile, reverse, redistribute, et…

---

## [EvilnoVNC | Ready To Go Phishing Platform](https://onehack.st/t/evilnovnc-ready-to-go-phishing-platform/225104)

<div class="topic-metadata">

**Author:** [@Prometheus](https://onehack.st/u/Prometheus)\
**Replies:** 0\
**Last updated:** [October 10, 2022, 9:29pm UTC](https://onehack.st/t/evilnovnc-ready-to-go-phishing-platform/225104 "2022-10-10T21:29:12Z")

</div>

EvilnoVNC EvilnoVNC is a Ready to go Phishing Platform. Unlike other phishing techniques, EvilnoVNC allows 2FA bypassing by using a real browser over a noVNC connection. In addition, this tool allows us to see in rea…

---

## [Cloudfox | Automating Situational Awareness For Cloud Penetration Tests](https://onehack.st/t/cloudfox-automating-situational-awareness-for-cloud-penetration-tests/225049)

<div class="topic-metadata">

**Author:** [@WhiteHat](https://onehack.st/u/WhiteHat)\
**Replies:** 0\
**Last updated:** [October 9, 2022, 9:40pm UTC](https://onehack.st/t/cloudfox-automating-situational-awareness-for-cloud-penetration-tests/225049 "2022-10-09T21:40:10Z")

</div>

:fox: CloudFox :fox: CloudFox helps you gain situational awareness in unfamiliar cloud environments. It’s an open source command line tool created to help penetration testers and other offensive security professionals …

---

## [Arsenal | Recon Tool installer](https://onehack.st/t/arsenal-recon-tool-installer/224974)

<div class="topic-metadata">

**Author:** [@TheStrength](https://onehack.st/u/TheStrength)\
**Replies:** 0\
**Last updated:** [October 8, 2022, 8:49pm UTC](https://onehack.st/t/arsenal-recon-tool-installer/224974 "2022-10-08T20:49:35Z")

</div>

Recon Tool installer Arsenal is a Simple shell script (Bash) used to install the most important tools and requirements for your environment and save time in installing all these tools. Tools in Arsenal Name desc…

---

## [Deadfinder | Find Dead-Links (Broken Links)](https://onehack.st/t/deadfinder-find-dead-links-broken-links/224923)

<div class="topic-metadata">

**Author:** [@PlayBoy83](https://onehack.st/u/PlayBoy83)\
**Replies:** 0\
**Last updated:** [October 7, 2022, 8:41pm UTC](https://onehack.st/t/deadfinder-find-dead-links-broken-links/224923 "2022-10-07T20:41:10Z")

</div>

DeadFinder Dead link (broken link) means a link within a web page that cannot be connected. These links can have a negative impact to SEO and Security. This tool makes it easy to identify and modify. Installation I…

---

## [Erlik 2 | Vulnerable-Flask-App](https://onehack.st/t/erlik-2-vulnerable-flask-app/224850)

<div class="topic-metadata">

**Author:** [@Prometheus](https://onehack.st/u/Prometheus)\
**Replies:** 1\
**Last updated:** [October 7, 2022, 10:54am UTC](https://onehack.st/t/erlik-2-vulnerable-flask-app/224850 "2022-10-07T10:54:17Z")

</div>

Vulnerable-Flask-App Erlik 2 - Vulnerable-Flask-App Tested - Kali 2022.1 Description It is a vulnerable Flask Web App. It is a lab environment created for people who want to improve themselves in the field of web pe…

---

## [Bayanay | Python Wardriving Tool](https://onehack.st/t/bayanay-python-wardriving-tool/224790)

<div class="topic-metadata">

**Author:** [@TheStrength](https://onehack.st/u/TheStrength)\
**Replies:** 0\
**Last updated:** [October 5, 2022, 9:35pm UTC](https://onehack.st/t/bayanay-python-wardriving-tool/224790 "2022-10-05T21:35:05Z")

</div>

Description WarDriving is the act of navigating, on foot or by car, to discover wireless networks in the surrounding area. Features Wardriving is done by combining the SSID information obtained with scapy using the H…

---

## [Utkuici | Nessus Automation](https://onehack.st/t/utkuici-nessus-automation/224744)

<div class="topic-metadata">

**Author:** [@PlayBoy83](https://onehack.st/u/PlayBoy83)\
**Replies:** 0\
**Last updated:** [October 4, 2022, 8:58pm UTC](https://onehack.st/t/utkuici-nessus-automation/224744 "2022-10-04T20:58:25Z")

</div>

Utkuici - Nessus Automation Description Today, with the spread of information technology systems, investments in the field of cyber security have increased to a great extent. Vulnerability management, penetration test…

---

## [Java Remote Class Loader | Tool To Send Java Bytecode To Your Victims](https://onehack.st/t/java-remote-class-loader-tool-to-send-java-bytecode-to-your-victims/224705)

<div class="topic-metadata">

**Author:** [@Hannah](https://onehack.st/u/Hannah)\
**Replies:** 0\
**Last updated:** [October 3, 2022, 8:51pm UTC](https://onehack.st/t/java-remote-class-loader-tool-to-send-java-bytecode-to-your-victims/224705 "2022-10-03T20:51:11Z")

</div>

This tool allows you to send Java bytecode in the form of class files to your clients (or potential targets) to load and execute using Java ClassLoader together with Reflect API. The client receives the class file from …

---

## [Pmanager | Store And Retrieve Your Passwords From A Secure Offline Database](https://onehack.st/t/pmanager-store-and-retrieve-your-passwords-from-a-secure-offline-database/224658)

<div class="topic-metadata">

**Author:** [@WhiteHat](https://onehack.st/u/WhiteHat)\
**Replies:** 0\
**Last updated:** [October 2, 2022, 10:08pm UTC](https://onehack.st/t/pmanager-store-and-retrieve-your-passwords-from-a-secure-offline-database/224658 "2022-10-02T22:08:59Z")

</div>

Pmanager Demo Description Store and retrieve your passwords from a secure offline database. Check if your passwords has leaked previously to prevent targeted password reuse attacks. Why develop another password …

---

## [SpyCast | A Crossplatform mDNS Enumeration Tool](https://onehack.st/t/spycast-a-crossplatform-mdns-enumeration-tool/224618)

<div class="topic-metadata">

**Author:** [@TheStrength](https://onehack.st/u/TheStrength)\
**Replies:** 0\
**Last updated:** [October 1, 2022, 10:56pm UTC](https://onehack.st/t/spycast-a-crossplatform-mdns-enumeration-tool/224618 "2022-10-01T22:56:24Z")

</div>

SpyCast is a crossplatform mDNS enumeration tool that can work either in active mode by recursively querying services, or in passive mode by only listening to multicast packets. Building cargo build --release OS spe…

---

## [PyFlipper | Unoffical Flipper Zero Cli Wrapper Written In Python](https://onehack.st/t/pyflipper-unoffical-flipper-zero-cli-wrapper-written-in-python/224557)

<div class="topic-metadata">

**Author:** [@BlueHacker](https://onehack.st/u/BlueHacker)\
**Replies:** 0\
**Last updated:** [September 30, 2022, 9:31pm UTC](https://onehack.st/t/pyflipper-unoffical-flipper-zero-cli-wrapper-written-in-python/224557 "2022-09-30T21:31:42Z")

</div>

PyFlipper Unoffical Flipper Zero cli wrapper written in Python Articles How to hack a restaurant Functions and characteristics: Flipper serial CLI wrapper Websocket client interface Setup instructions: $ git clon…

---

## [Psudohash | Password List Generator That Focuses On Keywords Mutated By Commonly Used Password Creation Patterns](https://onehack.st/t/psudohash-password-list-generator-that-focuses-on-keywords-mutated-by-commonly-used-password-creation-patterns/224512)

<div class="topic-metadata">

**Author:** [@WhiteHat](https://onehack.st/u/WhiteHat)\
**Replies:** 0\
**Last updated:** [September 29, 2022, 8:31pm UTC](https://onehack.st/t/psudohash-password-list-generator-that-focuses-on-keywords-mutated-by-commonly-used-password-creation-patterns/224512 "2022-09-29T20:31:29Z")

</div>

Purpose psudohash is a password list generator for orchestrating brute force attacks. It imitates certain password creation patterns commonly used by humans, like substituting a word’s letters with symbols or numb…

---

## [The Best Photoshop Extensions And Plugins For Designers](https://onehack.st/t/the-best-photoshop-extensions-and-plugins-for-designers/224474)

<div class="topic-metadata">

**Author:** [@TheStrength](https://onehack.st/u/TheStrength)\
**Replies:** 0\
**Last updated:** [September 28, 2022, 10:54pm UTC](https://onehack.st/t/the-best-photoshop-extensions-and-plugins-for-designers/224474 "2022-09-28T22:54:24Z")

</div>

Adobe Photoshop is a powerful platform for designers, but sometimes it may seem lacking of features that can help improve productivity and workflow and make life just that much easier. Luckily for us, Photoshop supports …

---

## [SharpNamedPipePTH | Pass The Hash To A Named Pipe For Token Impersonation](https://onehack.st/t/sharpnamedpipepth-pass-the-hash-to-a-named-pipe-for-token-impersonation/224470)

<div class="topic-metadata">

**Author:** [@BlueHacker](https://onehack.st/u/BlueHacker)\
**Replies:** 0\
**Last updated:** [September 28, 2022, 10:53pm UTC](https://onehack.st/t/sharpnamedpipepth-pass-the-hash-to-a-named-pipe-for-token-impersonation/224470 "2022-09-28T22:53:53Z")

</div>

SharpNamedPipePTH This project is a C# tool to use Pass-the-Hash for authentication on a local Named Pipe for user Impersonation. You need a local administrator or SEImpersonate rights to use this. There is a blog pos…

---

## [Credit Card Generator & Validator Checker](https://onehack.st/t/credit-card-generator-validator-checker/224421)

<div class="topic-metadata">

**Author:** [@BlueHacker](https://onehack.st/u/BlueHacker)\
**Replies:** 0\
**Last updated:** [September 27, 2022, 9:29pm UTC](https://onehack.st/t/credit-card-generator-validator-checker/224421 "2022-09-27T21:29:56Z")

</div>

Simply Visit Here: https://neapay.com/online-tools/credit-card-number-generator-validator.html And start checking and using further more options! Enjoy!

---

## [SCodeScanner | Stands For Source Code Scanner Where The User Can Scans The Source Code For Finding The Critical Vulnerabilities](https://onehack.st/t/scodescanner-stands-for-source-code-scanner-where-the-user-can-scans-the-source-code-for-finding-the-critical-vulnerabilities/224418)

<div class="topic-metadata">

**Author:** [@Prometheus](https://onehack.st/u/Prometheus)\
**Replies:** 0\
**Last updated:** [September 27, 2022, 9:29pm UTC](https://onehack.st/t/scodescanner-stands-for-source-code-scanner-where-the-user-can-scans-the-source-code-for-finding-the-critical-vulnerabilities/224418 "2022-09-27T21:29:37Z")

</div>

SCodeScanner SCodeScanner stands for Source Code scanner where the user can scans the source code for finding the Critical Vulnerabilities. The main objective for this scanner is to find the vulnerabilities inside the…

---

## [Pax | CLI Tool For PKCS7 Padding Oracle Attacks](https://onehack.st/t/pax-cli-tool-for-pkcs7-padding-oracle-attacks/224378)

<div class="topic-metadata">

**Author:** [@PlayBoy83](https://onehack.st/u/PlayBoy83)\
**Replies:** 0\
**Last updated:** [September 26, 2022, 9:27pm UTC](https://onehack.st/t/pax-cli-tool-for-pkcs7-padding-oracle-attacks/224378 "2022-09-26T21:27:15Z")

</div>

Exploit padding oracles for fun and profit! Pax (PAdding oracle eXploiter) is a tool for exploiting padding oracles in order to: Obtain plaintext for a given piece of CBC encrypted data. Obtain encrypted bytes f…

---

## [PSAsyncShell | PowerShell Asynchronous TCP Reverse Shell](https://onehack.st/t/psasyncshell-powershell-asynchronous-tcp-reverse-shell/224342)

<div class="topic-metadata">

**Author:** [@TheStrength](https://onehack.st/u/TheStrength)\
**Replies:** 0\
**Last updated:** [September 25, 2022, 9:23pm UTC](https://onehack.st/t/psasyncshell-powershell-asynchronous-tcp-reverse-shell/224342 "2022-09-25T21:23:45Z")

</div>

PSAsyncShell PSAsyncShell is an Asynchronous TCP Reverse Shell written in pure PowerShell. Unlike other reverse shells, all the communication and execution flow is done asynchronously, allowing to bypass some firewal…

---

## [OSRipper | AV Evading OSX Backdoor And Crypter Framework](https://onehack.st/t/osripper-av-evading-osx-backdoor-and-crypter-framework/224305)

<div class="topic-metadata">

**Author:** [@WhiteHat](https://onehack.st/u/WhiteHat)\
**Replies:** 0\
**Last updated:** [September 24, 2022, 7:55pm UTC](https://onehack.st/t/osripper-av-evading-osx-backdoor-and-crypter-framework/224305 "2022-09-24T19:55:59Z")

</div>

,-.----. ,----.. ,-.----. ,---,\\ / \\ / / \\ .--.--. ,--, ,--, \\ / \\ ,\`--.' || : \\ / . : / / '. |'. …

---

## [Kam1n0 | Assembly Analysis Platform](https://onehack.st/t/kam1n0-assembly-analysis-platform/224256)

<div class="topic-metadata">

**Author:** [@BlueHacker](https://onehack.st/u/BlueHacker)\
**Replies:** 0\
**Last updated:** [September 23, 2022, 7:40pm UTC](https://onehack.st/t/kam1n0-assembly-analysis-platform/224256 "2022-09-23T19:40:34Z")

</div>

Kam1n0 v2.x is a scalable assembly management and analysis platform. It allows a user to first index a (large) collection of binaries into different repositories and provide different analytic services such a…

[Previous page](https://onehack.st/c/tools-scripts/27.md?page=62)

[Next page](https://onehack.st/c/tools-scripts/27.md?page=64)
