# Tools & Scripts

**URL:** https://onehack.st/c/tools-scripts/27.md?page=65

[Latest](https://onehack.st/latest.md) · [Categories](https://onehack.st/categories.md) · [Tags](https://onehack.st/tags.md)

**Page:** 66

---

## [Block Grabify And Other IP Grabbers!](https://onehack.st/t/block-grabify-and-other-ip-grabbers/223244)

<div class="topic-metadata">

**Author:** [@BlueHacker](https://onehack.st/u/BlueHacker)\
**Replies:** 0\
**Last updated:** [August 31, 2022, 8:06pm UTC](https://onehack.st/t/block-grabify-and-other-ip-grabbers/223244 "2022-08-31T20:06:00Z")

</div>

If you are worried about clicking on IP grabber links, maybe you already check them on a VPN to not get IP logged. However there is a better way, one that lets you be much less cautious. This browser extension will au…

---

## [dBmonster | Track WiFi Devices With Their Recieved Signal Strength](https://onehack.st/t/dbmonster-track-wifi-devices-with-their-recieved-signal-strength/223242)

<div class="topic-metadata">

**Author:** [@BlueHacker](https://onehack.st/u/BlueHacker)\
**Replies:** 0\
**Last updated:** [August 30, 2022, 6:18pm UTC](https://onehack.st/t/dbmonster-track-wifi-devices-with-their-recieved-signal-strength/223242 "2022-08-30T18:18:50Z")

</div>

With dBmonster you are able to scan for nearby WiFi devices and track them trough the signal strength (dBm) of their sent packets (sniffed with TShark). These dBm values will be plotted to a graph with matplotl…

---

## [Toxssin | An XSS Exploitation Command-Line Interface And Payload Generator](https://onehack.st/t/toxssin-an-xss-exploitation-command-line-interface-and-payload-generator/223181)

<div class="topic-metadata">

**Author:** [@Prometheus](https://onehack.st/u/Prometheus)\
**Replies:** 0\
**Last updated:** [August 29, 2022, 12:27pm UTC](https://onehack.st/t/toxssin-an-xss-exploitation-command-line-interface-and-payload-generator/223181 "2022-08-29T12:27:45Z")

</div>

Purpose toxssin is an open-source penetration testing tool that automates the process of exploiting Cross-Site Scripting (XSS) vulnerabilities. It consists of an https server that works as an interpreter for the…

---

## [Free PowerPoint Templates For Your Presentation](https://onehack.st/t/free-powerpoint-templates-for-your-presentation/223105)

<div class="topic-metadata">

**Author:** [@Prometheus](https://onehack.st/u/Prometheus)\
**Replies:** 1\
**Last updated:** [August 28, 2022, 6:10am UTC](https://onehack.st/t/free-powerpoint-templates-for-your-presentation/223105 "2022-08-28T06:10:12Z")

</div>

You can download them and edit them to your heart’s content, and spend more time on your content instead. For most of these templates, the fonts, graphs, charts, tables, icons and maps are included. They are easily edita…

---

## [Ox4Shell | Deobfuscate Log4Shell Payloads With Ease](https://onehack.st/t/ox4shell-deobfuscate-log4shell-payloads-with-ease/223097)

<div class="topic-metadata">

**Author:** [@PlayBoy83](https://onehack.st/u/PlayBoy83)\
**Replies:** 0\
**Last updated:** [August 27, 2022, 11:34pm UTC](https://onehack.st/t/ox4shell-deobfuscate-log4shell-payloads-with-ease/223097 "2022-08-27T23:34:07Z")

</div>

Ox4Shell Deobfuscate Log4Shell payloads with ease. Description Since the release of the Log4Shell vulnerability (CVE-2021-44228), many tools were created to obfuscate Log4Shell payloads, making the lives of sec…

---

## [Concealed Code Execution | Tools And Technical Write-Ups Describing Attacking Techniques](https://onehack.st/t/concealed-code-execution-tools-and-technical-write-ups-describing-attacking-techniques/223044)

<div class="topic-metadata">

**Author:** [@BlueHacker](https://onehack.st/u/BlueHacker)\
**Replies:** 1\
**Last updated:** [August 27, 2022, 2:29am UTC](https://onehack.st/t/concealed-code-execution-tools-and-technical-write-ups-describing-attacking-techniques/223044 "2022-08-27T02:29:53Z")

</div>

Concealed Code Execution Hunt & Hackett presents a set of tools and technical write-ups describing attacking techniques that rely on concealing code execution on Windows. Here you will find explanations of how these t…

---

## [dnsReaper | Subdomain Takeover Tool For Attackers, Bug Bounty Hunters And The Blue Team!](https://onehack.st/t/dnsreaper-subdomain-takeover-tool-for-attackers-bug-bounty-hunters-and-the-blue-team/223006)

<div class="topic-metadata">

**Author:** [@WhiteHat](https://onehack.st/u/WhiteHat)\
**Replies:** 0\
**Last updated:** [August 25, 2022, 11:01pm UTC](https://onehack.st/t/dnsreaper-subdomain-takeover-tool-for-attackers-bug-bounty-hunters-and-the-blue-team/223006 "2022-08-25T23:01:23Z")

</div>

DNS Reaper DNS Reaper is yet another sub-domain takeover tool, but with an emphasis on accuracy, speed and the number of signatures in our arsenal! We can scan around 50 subdomains per second, testing each one…

---

## [Gopherus | Tool for Exploiting SSRF and gaining RCE](https://onehack.st/t/gopherus-tool-for-exploiting-ssrf-and-gaining-rce/222957)

<div class="topic-metadata">

**Author:** [@Prometheus](https://onehack.st/u/Prometheus)\
**Replies:** 0\
**Last updated:** [August 24, 2022, 9:17pm UTC](https://onehack.st/t/gopherus-tool-for-exploiting-ssrf-and-gaining-rce/222957 "2022-08-24T21:17:18Z")

</div>

Gopherus If you know a place which is SSRF vulnerable then, this tool will help you to generate Gopher payload for exploiting SSRF (Server Side Request Forgery) and gaining RCE (Remote Code Execution). And also it wil…

---

## [System Informer | Multi-Purpose Tool That Helps You Monitor System Resources, Debug Software And Detect Malware](https://onehack.st/t/system-informer-multi-purpose-tool-that-helps-you-monitor-system-resources-debug-software-and-detect-malware/222912)

<div class="topic-metadata">

**Author:** [@PlayBoy83](https://onehack.st/u/PlayBoy83)\
**Replies:** 0\
**Last updated:** [August 23, 2022, 9:45pm UTC](https://onehack.st/t/system-informer-multi-purpose-tool-that-helps-you-monitor-system-resources-debug-software-and-detect-malware/222912 "2022-08-23T21:45:16Z")

</div>

System Informer A free, powerful, multi-purpose tool that helps you monitor system resources, debug software and detect malware. Brought to you by Winsider Seminars & Solutions, Inc. Project Website - Project…

---

## [RPCMon | RPC Monitor Tool Based On Event Tracing For Windows](https://onehack.st/t/rpcmon-rpc-monitor-tool-based-on-event-tracing-for-windows/222864)

<div class="topic-metadata">

**Author:** [@PlayBoy83](https://onehack.st/u/PlayBoy83)\
**Replies:** 0\
**Last updated:** [August 22, 2022, 9:56pm UTC](https://onehack.st/t/rpcmon-rpc-monitor-tool-based-on-event-tracing-for-windows/222864 "2022-08-22T21:56:58Z")

</div>

A GUI tool for scanning RPC communication through Event Tracing for Windows (ETW). The tool was published as part of a research on RPC communication between the host and a Windows container. Overview RPCMon can h…

---

## [Faraday | Open Source Vulnerability Management Platform](https://onehack.st/t/faraday-open-source-vulnerability-management-platform/222824)

<div class="topic-metadata">

**Author:** [@PlayBoy83](https://onehack.st/u/PlayBoy83)\
**Replies:** 0\
**Last updated:** [August 21, 2022, 7:42pm UTC](https://onehack.st/t/faraday-open-source-vulnerability-management-platform/222824 "2022-08-21T19:42:17Z")

</div>

Open Source Vulnerability Manager Security has two difficult tasks: designing smart ways of getting new information, and keeping track of findings to improve remediation efforts. With Faraday, you may focus on discov…

---

## [crAPI | Completely Ridiculous API](https://onehack.st/t/crapi-completely-ridiculous-api/222809)

<div class="topic-metadata">

**Author:** [@NoBody](https://onehack.st/u/NoBody)\
**Replies:** 0\
**Last updated:** [August 21, 2022, 6:56pm UTC](https://onehack.st/t/crapi-completely-ridiculous-api/222809 "2022-08-21T18:56:50Z")

</div>

crAPI completely ridiculous API (crAPI) will help you to understand the ten most critical API security risks. crAPI is vulnerable by design, but you’ll be able to safely run it to educate/train yourself. crAPI is mod…

---

## [Ropr | A Blazing Fast Multithreaded ROP Gadget Finder. Ropper / Ropgadget Alternative](https://onehack.st/t/ropr-a-blazing-fast-multithreaded-rop-gadget-finder-ropper-ropgadget-alternative/222751)

<div class="topic-metadata">

**Author:** [@WhiteHat](https://onehack.st/u/WhiteHat)\
**Replies:** 0\
**Last updated:** [August 19, 2022, 11:43pm UTC](https://onehack.st/t/ropr-a-blazing-fast-multithreaded-rop-gadget-finder-ropper-ropgadget-alternative/222751 "2022-08-19T23:43:03Z")

</div>

ropr is a blazing fast multithreaded ROP Gadget finder What is a ROP Gadget? ROP (Return Oriented Programming) Gadgets are small snippets of a few assembly instructions typically ending in a ret instruction which alr…

---

## [A1RunGuard Anti-Malware Block All (Ransomware, Trojans, Keyloggers, Unwanted Apps, Info Stealers)](https://onehack.st/t/a1runguard-anti-malware-block-all-ransomware-trojans-keyloggers-unwanted-apps-info-stealers/222575)

<div class="topic-metadata">

**Author:** [@Nina](https://onehack.st/u/Nina)\
**Replies:** 1\
**Last updated:** [August 18, 2022, 10:42pm UTC](https://onehack.st/t/a1runguard-anti-malware-block-all-ransomware-trojans-keyloggers-unwanted-apps-info-stealers/222575 "2022-08-18T22:42:10Z")

</div>

A1RunGuard Blocks or Password Protect Any Program + Adds Extra Ransomware Protection Features Process Blocking Password Lock for Any Program Anti-Ransomware Protection Event Logging …

---

## [Hoaxshell | An Unconventional Windows Reverse Shell](https://onehack.st/t/hoaxshell-an-unconventional-windows-reverse-shell/222687)

<div class="topic-metadata">

**Author:** [@BlueHacker](https://onehack.st/u/BlueHacker)\
**Replies:** 0\
**Last updated:** [August 18, 2022, 10:20pm UTC](https://onehack.st/t/hoaxshell-an-unconventional-windows-reverse-shell/222687 "2022-08-18T22:20:28Z")

</div>

Purpose hoaxshell is an unconventional Windows reverse shell, currently undetected by Microsoft Defender and possibly other AV solutions as it is solely based on http(s) traffic. The tool is easy to use, it gener…

---

## [VLANPWN | VLAN Attacks Toolkit](https://onehack.st/t/vlanpwn-vlan-attacks-toolkit/222639)

<div class="topic-metadata">

**Author:** [@TheStrength](https://onehack.st/u/TheStrength)\
**Replies:** 0\
**Last updated:** [August 17, 2022, 11:23pm UTC](https://onehack.st/t/vlanpwn-vlan-attacks-toolkit/222639 "2022-08-17T23:23:46Z")

</div>

VLAN attacks toolkit The author has nothing to do with those who will use these tools for personal purposes to destroy other people’s computer networks. The tools are presented for training purposes to help engineers…

---

## [RedGuard | C2 Front Flow Control Tool, Can Avoid Blue Teams, AVs, EDRs Check](https://onehack.st/t/redguard-c2-front-flow-control-tool-can-avoid-blue-teams-avs-edrs-check/222582)

<div class="topic-metadata">

**Author:** [@WhiteHat](https://onehack.st/u/WhiteHat)\
**Replies:** 0\
**Last updated:** [August 16, 2022, 10:12pm UTC](https://onehack.st/t/redguard-c2-front-flow-control-tool-can-avoid-blue-teams-avs-edrs-check/222582 "2022-08-16T22:12:00Z")

</div>

RedGuard - Excellent C2 Front Flow Control tool English | 中文文档 0x00 Introduction What is RedGuard RedGuard, a derivative tool based on command and control (C2) front flow control technology, has a lighter design…

---

## [Chisel-Strike | A .NET XOR Encrypted Cobalt Strike Aggressor Implementation](https://onehack.st/t/chisel-strike-a-net-xor-encrypted-cobalt-strike-aggressor-implementation/222535)

<div class="topic-metadata">

**Author:** [@BlueHacker](https://onehack.st/u/BlueHacker)\
**Replies:** 0\
**Last updated:** [August 15, 2022, 8:58pm UTC](https://onehack.st/t/chisel-strike-a-net-xor-encrypted-cobalt-strike-aggressor-implementation/222535 "2022-08-15T20:58:45Z")

</div>

Chisel-Strike A .NET XOR encrypted cobalt strike aggressor implementation for chisel to utilize faster proxy and advanced socks5 capabilities. Why write this? In my experience I found socks4/socks4a proxies quite slow…

---

## [NimGetSyscallStub | Get Fresh Syscalls From A Fresh Ntdll.Dll Copy](https://onehack.st/t/nimgetsyscallstub-get-fresh-syscalls-from-a-fresh-ntdll-dll-copy/222483)

<div class="topic-metadata">

**Author:** [@NoBody](https://onehack.st/u/NoBody)\
**Replies:** 0\
**Last updated:** [August 14, 2022, 9:10pm UTC](https://onehack.st/t/nimgetsyscallstub-get-fresh-syscalls-from-a-fresh-ntdll-dll-copy/222483 "2022-08-14T21:10:36Z")

</div>

NimGetSyscallStub Get fresh Syscalls from a fresh ntdll.dll copy. This code can be used as an alternative to the already published awesome tools NimlineWhispers and NimlineWhispers2 by @ajpc500 or ParallelNimcalls. T…

---

## [OffensiveVBA | Code Execution And AV Evasion Methods For Macros In Office Documents](https://onehack.st/t/offensivevba-code-execution-and-av-evasion-methods-for-macros-in-office-documents/222429)

<div class="topic-metadata">

**Author:** [@Hannah](https://onehack.st/u/Hannah)\
**Replies:** 0\
**Last updated:** [August 13, 2022, 8:59pm UTC](https://onehack.st/t/offensivevba-code-execution-and-av-evasion-methods-for-macros-in-office-documents/222429 "2022-08-13T20:59:43Z")

</div>

OffensiveVBA In preparation for a VBS AV Evasion Stream/Video I was doing some research for Office Macro code execution methods and evasion techniques. The list got longer and longer and I found no central place for …

---

## [ReBomb2 | TikTok Mass Report Bot | Ban Anyone On TikTok](https://onehack.st/t/rebomb2-tiktok-mass-report-bot-ban-anyone-on-tiktok/222381)

<div class="topic-metadata">

**Author:** [@TheStrength](https://onehack.st/u/TheStrength)\
**Replies:** 0\
**Last updated:** [August 12, 2022, 8:20pm UTC](https://onehack.st/t/rebomb2-tiktok-mass-report-bot-ban-anyone-on-tiktok/222381 "2022-08-12T20:20:33Z")

</div>

ReBomb2 - TikTok Mass Report Bot THIS DOES NOT GAURANTEE A BAN. STILL UP TO TIKTOK, THIS JUST INCREASES THE CHANCES OF THE RIGHT PERSON SEEING THE REPORT OR CONFUSING THE AI THAT SUPPOSEDLY CONTROLS THE REPORTING. PROXI…

---

## [Packj | Large-Scale Security Analysis Platform To Detect Malicious/Risky Open-Source Packages](https://onehack.st/t/packj-large-scale-security-analysis-platform-to-detect-malicious-risky-open-source-packages/222378)

<div class="topic-metadata">

**Author:** [@TheStrength](https://onehack.st/u/TheStrength)\
**Replies:** 0\
**Last updated:** [August 12, 2022, 8:20pm UTC](https://onehack.st/t/packj-large-scale-security-analysis-platform-to-detect-malicious-risky-open-source-packages/222378 "2022-08-12T20:20:14Z")

</div>

Packj flags malicious/risky open-source packages Packj (pronounced package) is a command line (CLI) tool to vet open-source software packages for “risky” attributes that make them vulnerable to supply chain attacks. …

---

## [MrKaplan | Tool Aimed To Help Red Teamers To Stay Hidden By Clearing Evidence Of Execution](https://onehack.st/t/mrkaplan-tool-aimed-to-help-red-teamers-to-stay-hidden-by-clearing-evidence-of-execution/222334)

<div class="topic-metadata">

**Author:** [@WhiteHat](https://onehack.st/u/WhiteHat)\
**Replies:** 0\
**Last updated:** [August 11, 2022, 8:46pm UTC](https://onehack.st/t/mrkaplan-tool-aimed-to-help-red-teamers-to-stay-hidden-by-clearing-evidence-of-execution/222334 "2022-08-11T20:46:33Z")

</div>

Mr.Kaplan Description MrKaplan is a tool aimed to help red teamers to stay hidden by clearing evidence of execution. It works by saving information such as the time it ran, snapshot of files and associate each evid…

---

## [The Top Plugins To Speed Up Your WordPress Website](https://onehack.st/t/the-top-plugins-to-speed-up-your-wordpress-website/222275)

<div class="topic-metadata">

**Author:** [@WhiteHat](https://onehack.st/u/WhiteHat)\
**Replies:** 0\
**Last updated:** [August 11, 2022, 8:45pm UTC](https://onehack.st/t/the-top-plugins-to-speed-up-your-wordpress-website/222275 "2022-08-11T20:45:00Z")

</div>

Why get your hands dirty in trying to edit and hack the codes of your WordPress site when there are plenty of great WordPress plugins that you can install instantly and do all the dirty work for you? Here are 12 WordPres…

---

## [Arjun | Tool to Find Query Parameters for URL Endpoints](https://onehack.st/t/arjun-tool-to-find-query-parameters-for-url-endpoints/222269)

<div class="topic-metadata">

**Author:** [@Prometheus](https://onehack.st/u/Prometheus)\
**Replies:** 0\
**Last updated:** [August 10, 2022, 8:25pm UTC](https://onehack.st/t/arjun-tool-to-find-query-parameters-for-url-endpoints/222269 "2022-08-10T20:25:40Z")

</div>

Arjun HTTP Parameter Discovery Suite What’s Arjun? Arjun can find query parameters for URL endpoints. If you don’t get what that means, it’s okay, read along. Web applications use parameters (or queries) to a…

---

## [Request Smuggler | HTTP Request Smuggling Vulnerability Scanner](https://onehack.st/t/request-smuggler-http-request-smuggling-vulnerability-scanner/222221)

<div class="topic-metadata">

**Author:** [@Astrid](https://onehack.st/u/Astrid)\
**Replies:** 0\
**Last updated:** [August 9, 2022, 9:05pm UTC](https://onehack.st/t/request-smuggler-http-request-smuggling-vulnerability-scanner/222221 "2022-08-09T21:05:40Z")

</div>

Request smuggler Http request smuggling vulnerability scanner Based on the amazing research by James Kettle. The tool can help to find servers that may be vulnerable to request smuggling vulnerability. Usage U…

---

## [Free Backup Tools For Your PC & Laptop](https://onehack.st/t/free-backup-tools-for-your-pc-laptop/222181)

<div class="topic-metadata">

**Author:** [@Astrid](https://onehack.st/u/Astrid)\
**Replies:** 0\
**Last updated:** [August 8, 2022, 8:56pm UTC](https://onehack.st/t/free-backup-tools-for-your-pc-laptop/222181 "2022-08-08T20:56:59Z")

</div>

If you have an important project that has taken you hours to complete, wouldn’t it be devastating if you lost your files? The thought of it happening makes our blood run cold, and we wouldn’t know what to do if it did ha…

---

## [Gospider | Web Crawling and Content Discovery Tool](https://onehack.st/t/gospider-web-crawling-and-content-discovery-tool/222173)

<div class="topic-metadata">

**Author:** [@BlueHacker](https://onehack.st/u/BlueHacker)\
**Replies:** 0\
**Last updated:** [August 8, 2022, 8:36pm UTC](https://onehack.st/t/gospider-web-crawling-and-content-discovery-tool/222173 "2022-08-08T20:36:04Z")

</div>

GoSpider - Fast web spider written in Go Painless integrate Gospider into your recon workflow? this project was part of Osmedeus Engine. Check out how it was integrated at @OsmedeusEngine Installation GO111MODULE=…

---

## [BlackStone | Pentesting Reporting Tool](https://onehack.st/t/blackstone-pentesting-reporting-tool/222116)

<div class="topic-metadata">

**Author:** [@Prometheus](https://onehack.st/u/Prometheus)\
**Replies:** 0\
**Last updated:** [August 7, 2022, 10:00pm UTC](https://onehack.st/t/blackstone-pentesting-reporting-tool/222116 "2022-08-07T22:00:48Z")

</div>

BlackStone Project v1.0 BlackStone project or “BlackStone Project” is a tool created in order to automate the work of drafting and submitting a report on audits of ethical hacking or pentesting. In this tool we can re…

---

## [Instagram Username Auto Claimer](https://onehack.st/t/instagram-username-auto-claimer/222084)

<div class="topic-metadata">

**Author:** [@Prometheus](https://onehack.st/u/Prometheus)\
**Replies:** 1\
**Last updated:** [August 7, 2022, 6:45pm UTC](https://onehack.st/t/instagram-username-auto-claimer/222084 "2022-08-07T18:45:12Z")

</div>

Fast and multi-threaded script to automatically claim targeted username. Click here to report bugs. Usage Download ZIP here and extract the ZIP Install requirements.txt by typing pip install -r requirements.txt in C…

[Previous page](https://onehack.st/c/tools-scripts/27.md?page=64)

[Next page](https://onehack.st/c/tools-scripts/27.md?page=66)
