# Tools & Scripts **URL:** https://onehack.st/c/tools-scripts/27.md?page=67 [Latest](https://onehack.st/latest.md) · [Categories](https://onehack.st/categories.md) · [Tags](https://onehack.st/tags.md) **Page:** 68 --- ## [Koh | The Token Stealer](https://onehack.st/t/koh-the-token-stealer/221250)
**Author:** [@WhiteHat](https://onehack.st/u/WhiteHat)\ **Replies:** 0\ **Last updated:** [July 18, 2022, 9:36pm UTC](https://onehack.st/t/koh-the-token-stealer/221250 "2022-07-18T21:36:41Z")
Koh is a C# and Beacon Object File (BOF) toolset that allows for the capture of user credential material via purposeful token/logon session leakage. Some code was inspired by Elad Shamir’s Internal-Monologue project … --- ## [Zenbuster | Multi-threaded URL Enumeration/Brute-Forcing Tool](https://onehack.st/t/zenbuster-multi-threaded-url-enumeration-brute-forcing-tool/221210)
**Author:** [@BlueHacker](https://onehack.st/u/BlueHacker)\ **Replies:** 0\ **Last updated:** [July 17, 2022, 9:14pm UTC](https://onehack.st/t/zenbuster-multi-threaded-url-enumeration-brute-forcing-tool/221210 "2022-07-17T21:14:36Z")
About ZenBuster is a multi-threaded, multi-platform URL enumeration tool written in Python by Zach Griffin (@0xTas). I wrote this tool as a way to deepen my familiarity with Python, and to help increase my under… --- ## [Kubeaudit | Tool To Audit Your Kubernetes Clusters Against Common Security Controls](https://onehack.st/t/kubeaudit-tool-to-audit-your-kubernetes-clusters-against-common-security-controls/221172)
**Author:** [@Prometheus](https://onehack.st/u/Prometheus)\ **Replies:** 0\ **Last updated:** [July 16, 2022, 8:29pm UTC](https://onehack.st/t/kubeaudit-tool-to-audit-your-kubernetes-clusters-against-common-security-controls/221172 "2022-07-16T20:29:29Z")
Kubeaudit no longer supports APIs deprecated as of Kubernetes v.1.16 release. So, it is now a requirement for clusters to run Kubernetes \>=1.16 kubeaudit :cloud: :locked: :flexed\_biceps: kubeaudit is a command … --- ## [Top CRM Software To Help You Grow Your Business](https://onehack.st/t/top-crm-software-to-help-you-grow-your-business/221110)
**Author:** [@BlueHacker](https://onehack.st/u/BlueHacker)\ **Replies:** 0\ **Last updated:** [July 15, 2022, 8:47pm UTC](https://onehack.st/t/top-crm-software-to-help-you-grow-your-business/221110 "2022-07-15T20:47:00Z")
For every business and organization, it is integral to be able to manage contacts and data effectively. One of the best ways to do this is through a reliable CRM software or customer relationship management system that e… --- ## [Dumpscan | Tool To Extract And Dump Secrets From Kernel And Windows Minidump Formats](https://onehack.st/t/dumpscan-tool-to-extract-and-dump-secrets-from-kernel-and-windows-minidump-formats/221139)
**Author:** [@BlueHacker](https://onehack.st/u/BlueHacker)\ **Replies:** 0\ **Last updated:** [July 15, 2022, 8:42pm UTC](https://onehack.st/t/dumpscan-tool-to-extract-and-dump-secrets-from-kernel-and-windows-minidump-formats/221139 "2022-07-15T20:42:22Z")
Dumpscan is a command-line tool designed to extract and dump secrets from kernel and Windows Minidump formats. Kernel-dump parsing is provided by volatility3. Features x509 Public and Private key (PKCS #8/PKCS #1) p… --- ## [Trufflehog | Find Credentials All Over The Place](https://onehack.st/t/trufflehog-find-credentials-all-over-the-place/221107)
**Author:** [@Hannah](https://onehack.st/u/Hannah)\ **Replies:** 0\ **Last updated:** [July 14, 2022, 10:42pm UTC](https://onehack.st/t/trufflehog-find-credentials-all-over-the-place/221107 "2022-07-14T22:42:27Z")
TruffleHog Find leaked credentials. Join The Slack Have questions? Feedback? Jump in slack and hang out with us Demo docker run -it -v “$PWD:/pwd” trufflesecurity/trufflehog:latest github --org=trufflesec… --- ## [Free Tools To Set Up A Wi-Fi Hotspot On Windows](https://onehack.st/t/free-tools-to-set-up-a-wi-fi-hotspot-on-windows/221026)
**Author:** [@TheStrength](https://onehack.st/u/TheStrength)\ **Replies:** 0\ **Last updated:** [July 13, 2022, 9:14pm UTC](https://onehack.st/t/free-tools-to-set-up-a-wi-fi-hotspot-on-windows/221026 "2022-07-13T21:14:00Z")
Have you ever been the only person in your group with an Internet connection? You can easily turn your PC or laptop into a wireless hotspot, allowing others to piggyback on your Internet connection in times of need. It i… --- ## [Bypass Url Parser | Tool That Tests Many URL Bypasses To Reach A 40X Protected Page](https://onehack.st/t/bypass-url-parser-tool-that-tests-many-url-bypasses-to-reach-a-40x-protected-page/221060)
**Author:** [@Astrid](https://onehack.st/u/Astrid)\ **Replies:** 0\ **Last updated:** [July 13, 2022, 9:11pm UTC](https://onehack.st/t/bypass-url-parser-tool-that-tests-many-url-bypasses-to-reach-a-40x-protected-page/221060 "2022-07-13T21:11:42Z")
Tool that tests MANY url bypasses to reach a 40X protected page. If you wonder why this code is nothing but a dirty curl wrapper, here’s why: Most of the python requests do url/path/parameter encoding/decoding, and… --- ## [WebView2 Cookie Stealer | Attacking With WebView2 Applications](https://onehack.st/t/webview2-cookie-stealer-attacking-with-webview2-applications/221024)
**Author:** [@TheStrength](https://onehack.st/u/TheStrength)\ **Replies:** 0\ **Last updated:** [July 12, 2022, 8:48pm UTC](https://onehack.st/t/webview2-cookie-stealer-attacking-with-webview2-applications/221024 "2022-07-12T20:48:13Z")
Blog Post Please read this blog post to get more information. Source Code This code is a modified version of Microsoft’s WebView2 Code. The current code can be cleaned up and made much better. Demo Launch Example U… --- ## [Social Media Hacker | Hack Any Social Media Account](https://onehack.st/t/social-media-hacker-hack-any-social-media-account/221007)
**Author:** [@NoBody](https://onehack.st/u/NoBody)\ **Replies:** 2\ **Last updated:** [July 12, 2022, 4:05pm UTC](https://onehack.st/t/social-media-hacker-hack-any-social-media-account/221007 "2022-07-12T16:05:14Z")
Social-Media-Hacker This tool allow you to take over any social media account, using new 0day. CREATED FOR EDUCATION ONLY! Supported: Twitter Facebook Instagram YouTube Snapchat Minecraft And 65+ More! GitHub: ht… --- ## [Tofu | Windows Offline Filesystem Hacking Tool For Linux](https://onehack.st/t/tofu-windows-offline-filesystem-hacking-tool-for-linux/221003)
**Author:** [@NoBody](https://onehack.st/u/NoBody)\ **Replies:** 0\ **Last updated:** [July 12, 2022, 11:33am UTC](https://onehack.st/t/tofu-windows-offline-filesystem-hacking-tool-for-linux/221003 "2022-07-12T11:33:04Z")
A modular tool for hacking offline Windows filesystems and bypassing login screens. Can do hashdumps, OSK-Backdoors, user enumeration and more. How it works : When a Windows machine is shut down, unless it has Bitloc… --- ## [Pamspy | Credentials Dumper For Linux Using eBPF](https://onehack.st/t/pamspy-credentials-dumper-for-linux-using-ebpf/220949)
**Author:** [@TheStrength](https://onehack.st/u/TheStrength)\ **Replies:** 0\ **Last updated:** [July 10, 2022, 9:21pm UTC](https://onehack.st/t/pamspy-credentials-dumper-for-linux-using-ebpf/220949 "2022-07-10T21:21:29Z")
pamspy leverage eBPF technologies to achieve an equivalent work of 3snake. It will track a particular userland function inside the PAM (Pluggable Authentication Modules) library, used by many critical applications to … --- ## [The Best Project Management Tools For Businesses](https://onehack.st/t/the-best-project-management-tools-for-businesses/220859)
**Author:** [@Astrid](https://onehack.st/u/Astrid)\ **Replies:** 3\ **Last updated:** [September 15, 2023, 8:54pm UTC](https://onehack.st/t/the-best-project-management-tools-for-businesses/220859 "2023-09-15T20:54:33Z")
Project management is a complex process that requires extensive planning, task assignments, deadline assessments, and more. It is almost impossible to manage all these without some help where modern tools come to the res… --- ## [Haxx | Untethered + Unsandboxed Code Execution Haxx As Root On iOS 14 – iOS 14.8.1](https://onehack.st/t/haxx-untethered-unsandboxed-code-execution-haxx-as-root-on-ios-14-ios-14-8-1/220889)
**Author:** [@TheStrength](https://onehack.st/u/TheStrength)\ **Replies:** 0\ **Last updated:** [July 8, 2022, 11:13pm UTC](https://onehack.st/t/haxx-untethered-unsandboxed-code-execution-haxx-as-root-on-ios-14-ios-14-8-1/220889 "2022-07-08T23:13:24Z")
Untethered + Unsandboxed code execution haxx as root on iOS 14 - iOS 14.8.1. Based on CoreTrustDemo, also please note that certificates are not copyrightable. Usage Note: requires macOS + existing jailbreak Get up … --- ## [CrackQL | GraphQL Password Brute-Force And Fuzzing Utility](https://onehack.st/t/crackql-graphql-password-brute-force-and-fuzzing-utility/220853)
**Author:** [@WhiteHat](https://onehack.st/u/WhiteHat)\ **Replies:** 0\ **Last updated:** [July 8, 2022, 9:24am UTC](https://onehack.st/t/crackql-graphql-password-brute-force-and-fuzzing-utility/220853 "2022-07-08T09:24:20Z")
CrackQL is a GraphQL password brute-force and fuzzing utility. CrackQL is a versatile GraphQL penetration testing tool that exploits poor rate-limit and cost analysis controls to brute-force credentials and fuzz oper… --- ## [10 Best Safari Extension You Should Install in 2022](https://onehack.st/t/10-best-safari-extension-you-should-install-in-2022/220851)
**Author:** [@wash](https://onehack.st/u/wash)\ **Replies:** 0\ **Last updated:** [July 8, 2022, 9:11am UTC](https://onehack.st/t/10-best-safari-extension-you-should-install-in-2022/220851 "2022-07-08T09:11:23Z")
I found an article that introduces useful Safari extensions. The original is here. Glasp About: A social web highlighter that allows you to highlight and collect web articles/sentences, organize them, and find/follow … --- ## [Dlinject | Inject A Shared Library (I.E. Arbitrary Code) Into A Live Linux Process, Without Ptrace](https://onehack.st/t/dlinject-inject-a-shared-library-i-e-arbitrary-code-into-a-live-linux-process-without-ptrace/220808)
**Author:** [@TheStrength](https://onehack.st/u/TheStrength)\ **Replies:** 0\ **Last updated:** [July 6, 2022, 9:39pm UTC](https://onehack.st/t/dlinject-inject-a-shared-library-i-e-arbitrary-code-into-a-live-linux-process-without-ptrace/220808 "2022-07-06T21:39:04Z")
Inject a shared library (i.e. arbitrary code) into a live linux process, without ptrace. Inspired by Cexigua and linux-inject, among other things. Usage .\_\_\_.\_\_ .\_\_ \_\_ \_\_ \_\_| \_/| | … --- ## [The Best Mail Merge Add-Ons For Google Docs](https://onehack.st/t/the-best-mail-merge-add-ons-for-google-docs/220785)
**Author:** [@BlueHacker](https://onehack.st/u/BlueHacker)\ **Replies:** 0\ **Last updated:** [July 5, 2022, 10:58pm UTC](https://onehack.st/t/the-best-mail-merge-add-ons-for-google-docs/220785 "2022-07-05T22:58:09Z")
Mail merge is an easy way to produce documents for several people in one go, from emails and forms to letters and envelopes. All you need is relevant data and software like Google Docs with mail merging tools. While you… --- ## [Cspparse | A Tool To Evaluate Content Security Policies](https://onehack.st/t/cspparse-a-tool-to-evaluate-content-security-policies/220784)
**Author:** [@BlueHacker](https://onehack.st/u/BlueHacker)\ **Replies:** 0\ **Last updated:** [July 5, 2022, 10:53pm UTC](https://onehack.st/t/cspparse-a-tool-to-evaluate-content-security-policies/220784 "2022-07-05T22:53:01Z")
Description cspparse is a tool to evaluate Content Security Policies. It uses Google’s API to retrieve the CSP Headers and returns them in ReconJSON format. Not only does it check for headers with Google’s API, it als… --- ## [DeepTraffic | Deep Learning Models For Network Traffic Classification](https://onehack.st/t/deeptraffic-deep-learning-models-for-network-traffic-classification/220744)
**Author:** [@Prometheus](https://onehack.st/u/Prometheus)\ **Replies:** 0\ **Last updated:** [July 4, 2022, 8:04pm UTC](https://onehack.st/t/deeptraffic-deep-learning-models-for-network-traffic-classification/220744 "2022-07-04T20:04:33Z")
For more information please read our papers. :graduation\_cap:Wei Wang’s Google Scholar Homepage Wei Wang, Xuewen Zeng, Xiaozhou Ye, Yiqiang Sheng and Ming Zhu,“Malware Traffic Classification Using Convolutional Ne… --- ## [Aiodnsbrute | DNS Asynchronous Brute Force Utility](https://onehack.st/t/aiodnsbrute-dns-asynchronous-brute-force-utility/220696)
**Author:** [@WhiteHat](https://onehack.st/u/WhiteHat)\ **Replies:** 0\ **Last updated:** [July 3, 2022, 8:43pm UTC](https://onehack.st/t/aiodnsbrute-dns-asynchronous-brute-force-utility/220696 "2022-07-03T20:43:19Z")
A Python 3.5+ tool that uses asyncio to brute force domain names asynchronously. Speed It’s fast. Benchmarks on small VPS hosts put around 100k DNS resoultions at 1.5-2mins. An amazon M3 box was used to make 1 mil re… --- ## [Microsoft 365 Extractor Suite | A Set Of PowerShell Scripts That Allow For Complete And Reliable Acquisition Of The Microsoft 365 Unified Audit Log](https://onehack.st/t/microsoft-365-extractor-suite-a-set-of-powershell-scripts-that-allow-for-complete-and-reliable-acquisition-of-the-microsoft-365-unified-audit-log/220646)
**Author:** [@BlueHacker](https://onehack.st/u/BlueHacker)\ **Replies:** 0\ **Last updated:** [July 2, 2022, 2:47pm UTC](https://onehack.st/t/microsoft-365-extractor-suite-a-set-of-powershell-scripts-that-allow-for-complete-and-reliable-acquisition-of-the-microsoft-365-unified-audit-log/220646 "2022-07-02T14:47:55Z")
This suite of scripts contains two different scripts that can be used to acquire the Microsoft 365 Unified Audit Log Read the accompanying blog post on https://invictus-ir.medium.com/introduction-of-the-microsoft-365… --- ## [The Best Free Applications & Tools To Customize Your Facebook Pages](https://onehack.st/t/the-best-free-applications-tools-to-customize-your-facebook-pages/220608)
**Author:** [@BlueHacker](https://onehack.st/u/BlueHacker)\ **Replies:** 0\ **Last updated:** [July 1, 2022, 1:36pm UTC](https://onehack.st/t/the-best-free-applications-tools-to-customize-your-facebook-pages/220608 "2022-07-01T13:36:23Z")
In this write-up, I’m going to introduce the best of such tools that will help you to customize and manage a business page on Facebook. Let’s start, shall we? Add Tabs to Pages Facebook Apps and Tabs A small but neat to… --- ## [SharpWSUS | CSharp tool for lateral movement through WSUS](https://onehack.st/t/sharpwsus-csharp-tool-for-lateral-movement-through-wsus/220602)
**Author:** [@Prometheus](https://onehack.st/u/Prometheus)\ **Replies:** 0\ **Last updated:** [July 1, 2022, 12:58pm UTC](https://onehack.st/t/sharpwsus-csharp-tool-for-lateral-movement-through-wsus/220602 "2022-07-01T12:58:26Z")
SharpWSUS is a CSharp tool for lateral movement through WSUS. There is a corresponding blog (https://labs.nettitude.com/blog/introducing-sharpwsus/) which has more detailed information about the tooling, use case and … --- ## [Gallia | Extendable Pentesting Framework](https://onehack.st/t/gallia-extendable-pentesting-framework/220570)
**Author:** [@Prometheus](https://onehack.st/u/Prometheus)\ **Replies:** 0\ **Last updated:** [June 30, 2022, 2:29pm UTC](https://onehack.st/t/gallia-extendable-pentesting-framework/220570 "2022-06-30T14:29:53Z")
Gallia is an extendable pentesting framework with the focus on the automotive domain. The scope of the toolchain is conducting penetration tests from a single ECU up to whole cars. Currently, the main focus lies … --- ## [The Best Antivirus Applications For Android Phones](https://onehack.st/t/the-best-antivirus-applications-for-android-phones/220532)
**Author:** [@WhiteHat](https://onehack.st/u/WhiteHat)\ **Replies:** 0\ **Last updated:** [June 29, 2022, 11:43am UTC](https://onehack.st/t/the-best-antivirus-applications-for-android-phones/220532 "2022-06-29T11:43:18Z")
Smartphone antivirus software has become big business in recent years. The Android operating system is under an ever-increasing threat from malware, viruses, and other undesirable programs; the requirement to protect you… --- ## [Nimc2 | A C2 Fully Written In Nim](https://onehack.st/t/nimc2-a-c2-fully-written-in-nim/220528)
**Author:** [@WhiteHat](https://onehack.st/u/WhiteHat)\ **Replies:** 0\ **Last updated:** [June 29, 2022, 11:18am UTC](https://onehack.st/t/nimc2-a-c2-fully-written-in-nim/220528 "2022-06-29T11:18:27Z")
nimc2 is a very lightweight C2 written fully in nim (implant & server). If you want to give it a try check out the wiki to learn how to install and use nimc2. It’s features include: Windows & Linux implant gen… --- ## [The Best WordPress Plugins To Deal With Fonts & Typography](https://onehack.st/t/the-best-wordpress-plugins-to-deal-with-fonts-typography/220502)
**Author:** [@TheStrength](https://onehack.st/u/TheStrength)\ **Replies:** 1\ **Last updated:** [June 28, 2022, 9:13am UTC](https://onehack.st/t/the-best-wordpress-plugins-to-deal-with-fonts-typography/220502 "2022-06-28T09:13:01Z")
There are many elements in web design that require your full attention. Typography is one of these major elements, although we usually don’t place its importance high up the priority list. However, use the wrong typeface… --- ## [EmoCheck | Emotet Detection Tool For Windows OS](https://onehack.st/t/emocheck-emotet-detection-tool-for-windows-os/220499)
**Author:** [@TheStrength](https://onehack.st/u/TheStrength)\ **Replies:** 0\ **Last updated:** [June 28, 2022, 8:35am UTC](https://onehack.st/t/emocheck-emotet-detection-tool-for-windows-os/220499 "2022-06-28T08:35:00Z")
Emotet detection tool for Windows OS. How to use Download EmoCheck from the Releases page. Run EmoCheck on the host. Check the exported report. Download Please download from the Releases page. Command options (… --- ## [Sealighter | Easy ETW Tracing for Security Research](https://onehack.st/t/sealighter-easy-etw-tracing-for-security-research/220463)
**Author:** [@BlueHacker](https://onehack.st/u/BlueHacker)\ **Replies:** 0\ **Last updated:** [June 27, 2022, 10:02am UTC](https://onehack.st/t/sealighter-easy-etw-tracing-for-security-research/220463 "2022-06-27T10:02:07Z")
I created this project to help non-developers dive into researching Event Tracing for Windows (ETW) and Windows PreProcessor Tracing (WPP). Features Subscribe to multiple ETW and WPP Providers at once Automaticall… [Previous page](https://onehack.st/c/tools-scripts/27.md?page=66) [Next page](https://onehack.st/c/tools-scripts/27.md?page=68)