# Tools & Scripts **URL:** https://onehack.st/c/tools-scripts/27.md?page=64 [Latest](https://onehack.st/latest.md) · [Categories](https://onehack.st/categories.md) · [Tags](https://onehack.st/tags.md) **Page:** 65 --- ## [CATS | REST API Fuzzer And Negative Testing Tool For OpenAPI Endpoints](https://onehack.st/t/cats-rest-api-fuzzer-and-negative-testing-tool-for-openapi-endpoints/224209)
**Author:** [@WhiteHat](https://onehack.st/u/WhiteHat)\ **Replies:** 0\ **Last updated:** [September 22, 2022, 10:12pm UTC](https://onehack.st/t/cats-rest-api-fuzzer-and-negative-testing-tool-for-openapi-endpoints/224209 "2022-09-22T22:12:15Z")
REST API fuzzer and negative testing tool. Run thousands of self-healing API tests within minutes with no coding effort! Comprehensive: tests are generated automatically based on a large number scenarios and … --- ## [FISSURE | Frequency Independent SDR-based Signal Understanding and Reverse Engineering](https://onehack.st/t/fissure-frequency-independent-sdr-based-signal-understanding-and-reverse-engineering/224178)
**Author:** [@Prometheus](https://onehack.st/u/Prometheus)\ **Replies:** 0\ **Last updated:** [September 21, 2022, 9:44pm UTC](https://onehack.st/t/fissure-frequency-independent-sdr-based-signal-understanding-and-reverse-engineering/224178 "2022-09-21T21:44:56Z")
FISSURE - The RF Framework Frequency Independent SDR-based Signal Understanding and Reverse Engineering FISSURE is an open-source RF and reverse engineering framework designed for all skill levels with hooks for sign… --- ## [SharpImpersonation | A User Impersonation Tool – Via Token Or Shellcode Injection](https://onehack.st/t/sharpimpersonation-a-user-impersonation-tool-via-token-or-shellcode-injection/224131)
**Author:** [@Prometheus](https://onehack.st/u/Prometheus)\ **Replies:** 0\ **Last updated:** [September 20, 2022, 7:59pm UTC](https://onehack.st/t/sharpimpersonation-a-user-impersonation-tool-via-token-or-shellcode-injection/224131 "2022-09-20T19:59:45Z")
This was a learning by doing project from my side. Well known techniques are used to built just another impersonation tool with some improvements in comparison to other public tools. The code base was taken from: ht… --- ## [XLL\_Phishing | XLL Phishing Tradecraft](https://onehack.st/t/xll-phishing-xll-phishing-tradecraft/224096)
**Author:** [@NoBody](https://onehack.st/u/NoBody)\ **Replies:** 0\ **Last updated:** [September 19, 2022, 8:39pm UTC](https://onehack.st/t/xll-phishing-xll-phishing-tradecraft/224096 "2022-09-19T20:39:19Z")
Introduction With Microsoft’s recent announcement regarding the blocking of macros in documents originating from the internet (email AND web download), attackers have began aggressively exploring other options to achi… --- ## [Awesome SEO | Marketing Tools Mega Collection ⭐](https://onehack.st/t/awesome-seo-marketing-tools-mega-collection/224018)
**Author:** [@Aina](https://onehack.st/u/Aina)\ **Replies:** 21\ **Last updated:** [January 4, 2025, 7:41pm UTC](https://onehack.st/t/awesome-seo-marketing-tools-mega-collection/224018 "2025-01-04T19:41:50Z")
This is a handpicked list of SEO and Marketing tools. The idea behind this site is that you can find all the tools you would ever need as an SEO or Marketing Consultant in one spot. Beginner’s Guides SEO SEO News R… --- ## [DeathSleep | A PoC Implementation For An Evasion Technique To Terminate The Current Thread And Restore It](https://onehack.st/t/deathsleep-a-poc-implementation-for-an-evasion-technique-to-terminate-the-current-thread-and-restore-it/224014)
**Author:** [@NoBody](https://onehack.st/u/NoBody)\ **Replies:** 0\ **Last updated:** [September 17, 2022, 9:36pm UTC](https://onehack.st/t/deathsleep-a-poc-implementation-for-an-evasion-technique-to-terminate-the-current-thread-and-restore-it/224014 "2022-09-17T21:36:39Z")
██████╗ ███████╗ █████╗ ████████╗██╗ ██╗███████╗██╗ ███████╗███████╗██████╗ ██╔══██╗██╔════╝██╔══██╗╚══██╔══╝██║ ██║██╔════╝██║ ██╔════╝██╔════╝██╔══██╗ ██║ ██║█████╗ ███████║ ██║ ███████║███… --- ## [LinkedIn Apps To Make Work Easier](https://onehack.st/t/linkedin-apps-to-make-work-easier/223977)
**Author:** [@WhiteHat](https://onehack.st/u/WhiteHat)\ **Replies:** 0\ **Last updated:** [September 17, 2022, 9:35pm UTC](https://onehack.st/t/linkedin-apps-to-make-work-easier/223977 "2022-09-17T21:35:00Z")
The list includes everything from knowledge builders and business development tools to networking apps, powerful search engines, and free templates to help you better approach a potential client. Let’s jump right in. Of… --- ## [A Massive List Of Link Generators | Mega List ⭐](https://onehack.st/t/a-massive-list-of-link-generators-mega-list/223975)
**Author:** [@WhiteHat](https://onehack.st/u/WhiteHat)\ **Replies:** 9\ **Last updated:** [April 1, 2026, 2:34pm UTC](https://onehack.st/t/a-massive-list-of-link-generators-mega-list/223975 "2026-04-01T14:34:36Z")
LINK GENERATORS My favorites: http://www.luxleech.net/ http://www.leechking.com/ http://prem.link/ http://www.gigaleecher.com/ http://37.187.173.205/multi2/Uploaded, Turbobit, Uptobox, 1Fichier, Oboom, Datafile, U… --- ## [SDomDiscover | A Easy-To-Use Python Tool To Perform DNS Recon](https://onehack.st/t/sdomdiscover-a-easy-to-use-python-tool-to-perform-dns-recon/223973)
**Author:** [@WhiteHat](https://onehack.st/u/WhiteHat)\ **Replies:** 0\ **Last updated:** [September 16, 2022, 8:58pm UTC](https://onehack.st/t/sdomdiscover-a-easy-to-use-python-tool-to-perform-dns-recon/223973 "2022-09-16T20:58:38Z")
All in One Recon Tool An easy-to-use python tool to perform dns recon, subdomain enumeration and much more The purpouse of this tool is helping bug hunters and pentesters during reconnaissance If you want to know mo… --- ## [Nim-RunPE | A Nim Implementation Of Reflective PE-Loading From Memory](https://onehack.st/t/nim-runpe-a-nim-implementation-of-reflective-pe-loading-from-memory/223959)
**Author:** [@TheStrength](https://onehack.st/u/TheStrength)\ **Replies:** 0\ **Last updated:** [September 16, 2022, 3:31pm UTC](https://onehack.st/t/nim-runpe-a-nim-implementation-of-reflective-pe-loading-from-memory/223959 "2022-09-16T15:31:19Z")
A Nim implementation of reflective PE-Loading from memory. The base for this code was taken from RunPE-In-Memory - which I ported to Nim. You’ll need to install the following dependencies: nimble install ptr\_math wi… --- ## [PersistenceSniper | Powershell module that can be used by Blue Teams](https://onehack.st/t/persistencesniper-powershell-module-that-can-be-used-by-blue-teams/223890)
**Author:** [@Prometheus](https://onehack.st/u/Prometheus)\ **Replies:** 0\ **Last updated:** [September 14, 2022, 8:03pm UTC](https://onehack.st/t/persistencesniper-powershell-module-that-can-be-used-by-blue-teams/223890 "2022-09-14T20:03:22Z")
PersistenceSniper PersistenceSniper is a Powershell module that can be used by Blue Teams, Incident Responders and System Administrators to hunt persistences implanted in Windows machines. The script is also a… --- ## [GraphCrawler | GraphQL Automated Security Testing Toolkit](https://onehack.st/t/graphcrawler-graphql-automated-security-testing-toolkit/223852)
**Author:** [@BlueHacker](https://onehack.st/u/BlueHacker)\ **Replies:** 0\ **Last updated:** [September 13, 2022, 5:59pm UTC](https://onehack.st/t/graphcrawler-graphql-automated-security-testing-toolkit/223852 "2022-09-13T17:59:10Z")
THE GraphQL automated testing tookit Graph Crawler is the most powerful automated testing toolkit for any GraphQL endpoint. Version 1.2 is out!! NEW: Can search for endpoints for you using Escape Technology’s powerful… --- ## [The Best Privacy & Security Browser Extensions ](https://onehack.st/t/the-best-privacy-security-browser-extensions/223785)
**Author:** [@Hannah](https://onehack.st/u/Hannah)\ **Replies:** 0\ **Last updated:** [September 11, 2022, 9:27pm UTC](https://onehack.st/t/the-best-privacy-security-browser-extensions/223785 "2022-09-11T21:27:47Z")
UMatrix (Very advanced anti-tracker) Ublock origin (Advanced ad-blocker & anti-tracker) Decentraleyes (Tool, which provides google libraries from local resources to avoid tracking) Privacy Badger (Simple anti-tracker) P… --- ## [ForceAdmin | Create Infinite UAC Prompts Forcing A User To Run As Admin](https://onehack.st/t/forceadmin-create-infinite-uac-prompts-forcing-a-user-to-run-as-admin/223781)
**Author:** [@Hannah](https://onehack.st/u/Hannah)\ **Replies:** 0\ **Last updated:** [September 11, 2022, 9:27pm UTC](https://onehack.st/t/forceadmin-create-infinite-uac-prompts-forcing-a-user-to-run-as-admin/223781 "2022-09-11T21:27:27Z")
:flexed\_biceps: ForceAdmin :flexed\_biceps: ForceAdmin is a c# payload builder, creating infinate UAC pop-ups until the user allows the program to be ran. The inputted commands are ran via powershell calling cmd.… --- ## [The Most Wanted WordPress Plugins Pack ⭐](https://onehack.st/t/the-most-wanted-wordpress-plugins-pack/223741)
**Author:** [@TheStrength](https://onehack.st/u/TheStrength)\ **Replies:** 0\ **Last updated:** [September 10, 2022, 10:10pm UTC](https://onehack.st/t/the-most-wanted-wordpress-plugins-pack/223741 "2022-09-10T22:10:42Z")
Click Access By Adding Password Password: 246585 Enjoy! --- ## [Gohide | Tunnel Port To Port Traffic Over An Obfuscated Channel With AES-GCM Encryption](https://onehack.st/t/gohide-tunnel-port-to-port-traffic-over-an-obfuscated-channel-with-aes-gcm-encryption/223736)
**Author:** [@TheStrength](https://onehack.st/u/TheStrength)\ **Replies:** 0\ **Last updated:** [September 10, 2022, 10:10pm UTC](https://onehack.st/t/gohide-tunnel-port-to-port-traffic-over-an-obfuscated-channel-with-aes-gcm-encryption/223736 "2022-09-10T22:10:21Z")
Tunnel port to port traffic via an obfuscated channel with AES-GCM encryption. Obfuscation Modes Session Cookie HTTP GET (http-client) Set-Cookie Session Cookie HTTP/2 200 OK (http-server) WebSocket Handshake “Sec-… --- ## [Coercer | A Python Script To Automatically Coerce A Windows Server To Authenticate On An Arbitrary Machine Through 9 Methods](https://onehack.st/t/coercer-a-python-script-to-automatically-coerce-a-windows-server-to-authenticate-on-an-arbitrary-machine-through-9-methods/223682)
**Author:** [@Astrid](https://onehack.st/u/Astrid)\ **Replies:** 0\ **Last updated:** [September 9, 2022, 11:42pm UTC](https://onehack.st/t/coercer-a-python-script-to-automatically-coerce-a-windows-server-to-authenticate-on-an-arbitrary-machine-through-9-methods/223682 "2022-09-09T23:42:30Z")
A python script to automatically coerce a Windows server to authenticate on an arbitrary machine through 9 methods. Features Automatically detects open SMB pipes on the remote machine. Calls one by one all the v… --- ## [ApacheTomcatScanner | A Python Script To Scan For Apache Tomcat Server Vulnerabilities](https://onehack.st/t/apachetomcatscanner-a-python-script-to-scan-for-apache-tomcat-server-vulnerabilities/223638)
**Author:** [@WhiteHat](https://onehack.st/u/WhiteHat)\ **Replies:** 0\ **Last updated:** [September 8, 2022, 10:58pm UTC](https://onehack.st/t/apachetomcatscanner-a-python-script-to-scan-for-apache-tomcat-server-vulnerabilities/223638 "2022-09-08T22:58:02Z")
A python script to scan for Apache Tomcat server vulnerabilities. Features Multithreaded workers to search for Apache tomcat servers. Multiple target source possible: Retrieving list of computers from a Window… --- ## [BeatRev | POC For Frustrating/Defeating Malware Analysts](https://onehack.st/t/beatrev-poc-for-frustrating-defeating-malware-analysts/223593)
**Author:** [@PlayBoy83](https://onehack.st/u/PlayBoy83)\ **Replies:** 0\ **Last updated:** [September 7, 2022, 10:20pm UTC](https://onehack.st/t/beatrev-poc-for-frustrating-defeating-malware-analysts/223593 "2022-09-07T22:20:14Z")
BeatRev Version 2 Disclaimer/Liability The work that follows is a POC to enable malware to “key” itself to a particular victim in order to frustrate efforts of malware analysts. I assume no responsibility for malicio… --- ## [Aced | Tool to parse and resolve a single targeted Active Directory principal’s DACL](https://onehack.st/t/aced-tool-to-parse-and-resolve-a-single-targeted-active-directory-principal-s-dacl/223548)
**Author:** [@Prometheus](https://onehack.st/u/Prometheus)\ **Replies:** 0\ **Last updated:** [September 7, 2022, 10:09pm UTC](https://onehack.st/t/aced-tool-to-parse-and-resolve-a-single-targeted-active-directory-principal-s-dacl/223548 "2022-09-07T22:09:00Z")
Aced is a tool to parse and resolve a single targeted Active Directory principal’s DACL. Aced will identify interesting inbound access allowed privileges against the targeted account, resolve the SIDS of the inbound p… --- ## [PyTranscriber | Automatic Transcription And Subtitles For Audio/Video Files](https://onehack.st/t/pytranscriber-automatic-transcription-and-subtitles-for-audio-video-files/223520)
**Author:** [@Aina](https://onehack.st/u/Aina)\ **Replies:** 0\ **Last updated:** [September 5, 2022, 11:21pm UTC](https://onehack.st/t/pytranscriber-automatic-transcription-and-subtitles-for-audio-video-files/223520 "2022-09-05T23:21:45Z")
pyTranscriber is an application that can be used to generate automatic transcription / automatic subtitles for audio/video files through a friendly graphical user interface. The hard work of speech recogni… --- ## [The Best Web Scraping Tools To Extract Online Data](https://onehack.st/t/the-best-web-scraping-tools-to-extract-online-data/223515)
**Author:** [@Prometheus](https://onehack.st/u/Prometheus)\ **Replies:** 4\ **Last updated:** [September 6, 2022, 8:09pm UTC](https://onehack.st/t/the-best-web-scraping-tools-to-extract-online-data/223515 "2022-09-06T20:09:54Z")
Web Scraping tools are specifically developed for extracting information from websites. They are also known as web harvesting tools or web data extraction tools. These tools are useful for anyone trying to collect some f… --- ## [Autodeauth | A Tool Built To Automatically Deauth Local Networks](https://onehack.st/t/autodeauth-a-tool-built-to-automatically-deauth-local-networks/223509)
**Author:** [@BlueHacker](https://onehack.st/u/BlueHacker)\ **Replies:** 0\ **Last updated:** [September 5, 2022, 10:37pm UTC](https://onehack.st/t/autodeauth-a-tool-built-to-automatically-deauth-local-networks/223509 "2022-09-05T22:37:21Z")
A tool built to automatically deauth local networks Tested on Raspberry Pi OS and Kali Linux Setup $ chmod +x setup.sh $ sudo ./setup.sh \[\*\] This can be changed by editing /etc/systemd/system/autodeauth.service \[?… --- ## [ReconPal | Leveraging NLP For Infosec](https://onehack.st/t/reconpal-leveraging-nlp-for-infosec/223458)
**Author:** [@WhiteHat](https://onehack.st/u/WhiteHat)\ **Replies:** 0\ **Last updated:** [September 4, 2022, 10:42pm UTC](https://onehack.st/t/reconpal-leveraging-nlp-for-infosec/223458 "2022-09-04T22:42:29Z")
ReconPal: Leveraging NLP for Infosec Recon is one of the most important phases that seem easy but takes a lot of effort and skill to do right. One needs to know about the right tools, correct queries/syntax, run those … --- ## [The Most Useful Mobile Apps For Designers](https://onehack.st/t/the-most-useful-mobile-apps-for-designers/223430)
**Author:** [@WhiteHat](https://onehack.st/u/WhiteHat)\ **Replies:** 3\ **Last updated:** [January 7, 2023, 12:33pm UTC](https://onehack.st/t/the-most-useful-mobile-apps-for-designers/223430 "2023-01-07T12:33:43Z")
So, here’s a long list of useful mobile apps for designers that can help them manage their daily tasks swiftly on the go. The list encompasses everything from social media and invoicing apps to image editing and photo ma… --- ## [Rekono | Execute Full Pentesting Processes Combining Multiple Hacking Tools Automatically](https://onehack.st/t/rekono-execute-full-pentesting-processes-combining-multiple-hacking-tools-automatically/223424)
**Author:** [@PlayBoy83](https://onehack.st/u/PlayBoy83)\ **Replies:** 0\ **Last updated:** [September 3, 2022, 11:07pm UTC](https://onehack.st/t/rekono-execute-full-pentesting-processes-combining-multiple-hacking-tools-automatically/223424 "2022-09-03T23:07:55Z")
Rekono combines other hacking tools and its results to execute complete pentesting processes against a target in an automated way. The findings obtained during the executions will be sent to the user via email or… --- ## [Erlik | Vulnerable Soap Service](https://onehack.st/t/erlik-vulnerable-soap-service/223376)
**Author:** [@WhiteHat](https://onehack.st/u/WhiteHat)\ **Replies:** 0\ **Last updated:** [September 2, 2022, 9:01pm UTC](https://onehack.st/t/erlik-vulnerable-soap-service/223376 "2022-09-02T21:01:41Z")
Vulnerable-Soap-Service Erlik - Vulnerable Soap Service Tested - Kali 2022.1 Description It is a vulnerable SOAP web service. It is a lab environment created for people who want to improve themselves in the field of… --- ## [Masky | Python Library With CLI Allowing To Remotely Dump Domain User Credentials](https://onehack.st/t/masky-python-library-with-cli-allowing-to-remotely-dump-domain-user-credentials/223339)
**Author:** [@Astrid](https://onehack.st/u/Astrid)\ **Replies:** 0\ **Last updated:** [September 1, 2022, 9:05pm UTC](https://onehack.st/t/masky-python-library-with-cli-allowing-to-remotely-dump-domain-user-credentials/223339 "2022-09-01T21:05:43Z")
Masky Masky is a python library providing an alternative way to remotely dump domain users’ credentials thanks to an ADCS. A command line tool has been built on top of this library in order to easily gather PFX, NT … --- ## [Corsy | CORS Misconfiguration Scanner](https://onehack.st/t/corsy-cors-misconfiguration-scanner/223297)
**Author:** [@Astrid](https://onehack.st/u/Astrid)\ **Replies:** 0\ **Last updated:** [August 31, 2022, 8:41pm UTC](https://onehack.st/t/corsy-cors-misconfiguration-scanner/223297 "2022-08-31T20:41:17Z")
Corsy CORS Misconfiguration Scanner Introduction Corsy is a lightweight program that scans for all known misconfigurations in CORS implementations. Requirements Corsy only works with Python 3 and has just one d… --- ## [Awesome Password Cracking | Everything A Cracker Needs ⭐](https://onehack.st/t/awesome-password-cracking-everything-a-cracker-needs/223289)
**Author:** [@Aina](https://onehack.st/u/Aina)\ **Replies:** 6\ **Last updated:** [October 14, 2022, 10:05am UTC](https://onehack.st/t/awesome-password-cracking-everything-a-cracker-needs/223289 "2022-10-14T10:05:40Z")
Awesome Password Cracking A curated list of awesome tools, research, papers and other projects related to password cracking and password security. Read the guidelines before contributing! In short: List is alphab… [Previous page](https://onehack.st/c/tools-scripts/27.md?page=63) [Next page](https://onehack.st/c/tools-scripts/27.md?page=65)