# Tools & Scripts

**URL:** https://onehack.st/c/tools-scripts/27.md?page=68

[Latest](https://onehack.st/latest.md) · [Categories](https://onehack.st/categories.md) · [Tags](https://onehack.st/tags.md)

**Page:** 69

---

## [35+ Website Building Tools You Should Know ⭐](https://onehack.st/t/35-website-building-tools-you-should-know/220420)

<div class="topic-metadata">

**Author:** [@TheStrength](https://onehack.st/u/TheStrength)\
**Replies:** 3\
**Last updated:** [July 3, 2023, 11:30am UTC](https://onehack.st/t/35-website-building-tools-you-should-know/220420 "2023-07-03T11:30:06Z")

</div>

Web designers are always on the look out for free design tools to help them save time and resources. As projects are always piled up for designers, they need some useful tools to produce quality stuff in a limited time. …

---

## [DFSCoerce | PoC For MS-DFSNM Coerce Authentication Using NetrDfsRemoveStdRoot Method](https://onehack.st/t/dfscoerce-poc-for-ms-dfsnm-coerce-authentication-using-netrdfsremovestdroot-method/220418)

<div class="topic-metadata">

**Author:** [@TheStrength](https://onehack.st/u/TheStrength)\
**Replies:** 0\
**Last updated:** [June 26, 2022, 9:53am UTC](https://onehack.st/t/dfscoerce-poc-for-ms-dfsnm-coerce-authentication-using-netrdfsremovestdroot-method/220418 "2022-06-26T09:53:17Z")

</div>

PoC for MS-DFSNM coerce authentication using NetrDfsRemoveStdRoot and NetrDfsAddStdRoot (found by @xct\_de) methods. Documentation: https://docs.microsoft.com/en-us/openspecs/windows\_protocols/ms-dfsnm/95a506a8-cae6-4…

---

## [Authcov | Web App Authorisation Coverage Scanning](https://onehack.st/t/authcov-web-app-authorisation-coverage-scanning/220380)

<div class="topic-metadata">

**Author:** [@Prometheus](https://onehack.st/u/Prometheus)\
**Replies:** 0\
**Last updated:** [June 25, 2022, 9:23am UTC](https://onehack.st/t/authcov-web-app-authorisation-coverage-scanning/220380 "2022-06-25T09:23:17Z")

</div>

Web app authorisation coverage scanning. Introduction AuthCov crawls your web application using a Chrome headless browser while logged in as a pre-defined user. It intercepts and logs API requests as well as pages l…

---

## [The Best Photo Gallery & Slideshow WordPress Plugins](https://onehack.st/t/the-best-photo-gallery-slideshow-wordpress-plugins/220342)

<div class="topic-metadata">

**Author:** [@BlueHacker](https://onehack.st/u/BlueHacker)\
**Replies:** 0\
**Last updated:** [June 24, 2022, 9:18am UTC](https://onehack.st/t/the-best-photo-gallery-slideshow-wordpress-plugins/220342 "2022-06-24T09:18:51Z")

</div>

For any portfolio or image-oriented website running on WordPress, it is imperative to have a photo gallery and slideshow plugin. They allow you to showcase your images and video content and add different features. If yo…

---

## [TrelloC2 | Simple C2 Over The Trello API](https://onehack.st/t/trelloc2-simple-c2-over-the-trello-api/220336)

<div class="topic-metadata">

**Author:** [@BlueHacker](https://onehack.st/u/BlueHacker)\
**Replies:** 0\
**Last updated:** [June 24, 2022, 9:02am UTC](https://onehack.st/t/trelloc2-simple-c2-over-the-trello-api/220336 "2022-06-24T09:02:18Z")

</div>

Simple C2 over Trello’s API (Proof-of-Concept) By: Fabrizio Siciliano (@0rbz\_) Removed hardcoded API key and Token, use input() instead. Requirements Python 3.x Setup Create a Trello account: https://trello.com/s…

---

## [50+ tools / brute - combo - etc / hq paid tools / working](https://onehack.st/t/50-tools-brute-combo-etc-hq-paid-tools-working/220315)

<div class="topic-metadata">

**Author:** [@TheStrength](https://onehack.st/u/TheStrength)\
**Replies:** 0\
**Last updated:** [June 23, 2022, 10:30am UTC](https://onehack.st/t/50-tools-brute-combo-etc-hq-paid-tools-working/220315 "2022-06-23T10:30:33Z")

</div>

50+ TOOLS / BRUTE - COMBO - ETC / HQ PAID TOOLS / WORKING Download Enjoy!

---

## [GooFuzz | Tool To Perform Fuzzing With An OSINT Approach, Managing To Enumerate Directories](https://onehack.st/t/goofuzz-tool-to-perform-fuzzing-with-an-osint-approach-managing-to-enumerate-directories/220312)

<div class="topic-metadata">

**Author:** [@TheStrength](https://onehack.st/u/TheStrength)\
**Replies:** 0\
**Last updated:** [June 23, 2022, 10:24am UTC](https://onehack.st/t/goofuzz-tool-to-perform-fuzzing-with-an-osint-approach-managing-to-enumerate-directories/220312 "2022-06-23T10:24:30Z")

</div>

GooFuzz - The Power of Google Dorks Credits Author: M3n0sD0n4ld Twitter: @David\_Uton Description: GooFuzz is a script written in Bash Scripting that uses advanced Google search techniques to obtain sensitive inf…

---

## [TWINT | Twitter Intelligence Tool | Dox Peoples Easily](https://onehack.st/t/twint-twitter-intelligence-tool-dox-peoples-easily/220286)

<div class="topic-metadata">

**Author:** [@TheStrength](https://onehack.st/u/TheStrength)\
**Replies:** 0\
**Last updated:** [June 22, 2022, 1:04pm UTC](https://onehack.st/t/twint-twitter-intelligence-tool-dox-peoples-easily/220286 "2022-06-22T13:04:58Z")

</div>

No authentication. No API. No limits. Twint is an advanced Twitter scraping tool written in Python that allows for scraping Tweets from Twitter profiles without using Twitter’s API. Twint utilizes Twitter…

---

## [Bulk URL Opener & URL's Extract With A Simple Click](https://onehack.st/t/bulk-url-opener-urls-extract-with-a-simple-click/220281)

<div class="topic-metadata">

**Author:** [@WhiteHat](https://onehack.st/u/WhiteHat)\
**Replies:** 0\
**Last updated:** [June 22, 2022, 12:39pm UTC](https://onehack.st/t/bulk-url-opener-urls-extract-with-a-simple-click/220281 "2022-06-22T12:39:48Z")

</div>

Chrome extension: https://chrome.googl…ikgkclihp?hl=en Firefox extension: https://addons.mozil…ulk-url-opener/ Edge Microsoft extension: https://microsoftedg…ekkichephgaebcn Enjoy!

---

## [The Best YouTube Playlist Downloaders](https://onehack.st/t/the-best-youtube-playlist-downloaders/220215)

<div class="topic-metadata">

**Author:** [@WhiteHat](https://onehack.st/u/WhiteHat)\
**Replies:** 0\
**Last updated:** [June 20, 2022, 9:46pm UTC](https://onehack.st/t/the-best-youtube-playlist-downloaders/220215 "2022-06-20T21:46:58Z")

</div>

List of Best YouTube Playlist Downloaders 1. 4K Video Downloader Our first choice is 4K Video Downloader which is one of the best YouTube downloader tools. It allows you to download content from various sites, including …

---

## [The Best Google Play Store Alternatives For Android](https://onehack.st/t/the-best-google-play-store-alternatives-for-android/220214)

<div class="topic-metadata">

**Author:** [@WhiteHat](https://onehack.st/u/WhiteHat)\
**Replies:** 0\
**Last updated:** [June 20, 2022, 9:43pm UTC](https://onehack.st/t/the-best-google-play-store-alternatives-for-android/220214 "2022-06-20T21:43:45Z")

</div>

List of Best Google Play Store Alternatives for Android 1. Amazon App Store We are starting our list with the Amazon App Store, which is currently one of the best alternatives to the Google Play Store. It serves as the p…

---

## [Hunt-Sleeping-Beacons | Aims To Identify Sleeping Beacons](https://onehack.st/t/hunt-sleeping-beacons-aims-to-identify-sleeping-beacons/220208)

<div class="topic-metadata">

**Author:** [@BlueHacker](https://onehack.st/u/BlueHacker)\
**Replies:** 0\
**Last updated:** [June 20, 2022, 9:29pm UTC](https://onehack.st/t/hunt-sleeping-beacons-aims-to-identify-sleeping-beacons/220208 "2022-06-20T21:29:59Z")

</div>

Hunt-Sleeping-Beacons The idea of this project is to identify beacons which are unpacked at runtime or running in the context of another process. To do so, I make use of the observation that beacons tend to call Slee…

---

## [\[Tool\] Free Elements Envato Downloader](https://onehack.st/t/tool-free-elements-envato-downloader/220188)

<div class="topic-metadata">

**Author:** [@chirag\_pipaliya](https://onehack.st/u/chirag_pipaliya)\
**Replies:** 27\
**Last updated:** [August 30, 2023, 5:58pm UTC](https://onehack.st/t/tool-free-elements-envato-downloader/220188 "2023-08-30T17:58:19Z")

</div>

Url: Envato Elements Downloader steps: → Copy url you want to download file from elements.envato.com → paste it in url input → resolve the captcha → click on get file → then click on download file

---

## [Website Building Tips & Tools](https://onehack.st/t/website-building-tips-tools/220145)

<div class="topic-metadata">

**Author:** [@BlueHacker](https://onehack.st/u/BlueHacker)\
**Replies:** 0\
**Last updated:** [June 19, 2022, 2:26pm UTC](https://onehack.st/t/website-building-tips-tools/220145 "2022-06-19T14:26:52Z")

</div>

In this article, we present the most popular website-building solutions. We hope to help you find a tool that will best fit your needs. Wix Wix is a free cloud-based website builder platform for developing high-quality …

---

## [Awesome Screen Capturing Browser Extensions](https://onehack.st/t/awesome-screen-capturing-browser-extensions/220143)

<div class="topic-metadata">

**Author:** [@Prometheus](https://onehack.st/u/Prometheus)\
**Replies:** 0\
**Last updated:** [June 19, 2022, 2:18pm UTC](https://onehack.st/t/awesome-screen-capturing-browser-extensions/220143 "2022-06-19T14:18:12Z")

</div>

Screen capture is the quickest way to share your work or current page with anyone. Though there are many screen capture desktop tools (and we previously did a post on that), but if your work is mostly done on a web brows…

---

## [Nightingale | Docker Environment For Pentesting Which Having All The Required Tool For VAPT](https://onehack.st/t/nightingale-docker-environment-for-pentesting-which-having-all-the-required-tool-for-vapt/220140)

<div class="topic-metadata">

**Author:** [@Prometheus](https://onehack.st/u/Prometheus)\
**Replies:** 0\
**Last updated:** [June 19, 2022, 2:01pm UTC](https://onehack.st/t/nightingale-docker-environment-for-pentesting-which-having-all-the-required-tool-for-vapt/220140 "2022-06-19T14:01:35Z")

</div>

Project Name: Nightingale ================================================== Docker for Pentesters: Pentesting Framework Description In today’s technological era, docker is the most powerful technology in eac…

---

## [The Best Security Plugins To Protect Your WordPress Site](https://onehack.st/t/the-best-security-plugins-to-protect-your-wordpress-site/220039)

<div class="topic-metadata">

**Author:** [@WhiteHat](https://onehack.st/u/WhiteHat)\
**Replies:** 1\
**Last updated:** [June 17, 2022, 10:05pm UTC](https://onehack.st/t/the-best-security-plugins-to-protect-your-wordpress-site/220039 "2022-06-17T22:05:53Z")

</div>

In the following post, we’ve broken down the 7 best security plugins available for WordPress users right now. Wordfence One of the most widely-used WordPress security plugins, Wordfence is a comprehensive security solut…

---

## [LambdaGuard | AWS Serverless Security](https://onehack.st/t/lambdaguard-aws-serverless-security/220038)

<div class="topic-metadata">

**Author:** [@WhiteHat](https://onehack.st/u/WhiteHat)\
**Replies:** 0\
**Last updated:** [June 17, 2022, 8:43pm UTC](https://onehack.st/t/lambdaguard-aws-serverless-security/220038 "2022-06-17T20:43:22Z")

</div>

LambdaGuard AWS Lambda is an event-driven, serverless computing platform provided by Amazon Web Services. It is a computing service that runs code in response to events and automatically manages the computing reso…

---

## [Tools To Teach Kids Basics Of Programming](https://onehack.st/t/tools-to-teach-kids-basics-of-programming/219951)

<div class="topic-metadata">

**Author:** [@BlueHacker](https://onehack.st/u/BlueHacker)\
**Replies:** 0\
**Last updated:** [June 16, 2022, 10:29pm UTC](https://onehack.st/t/tools-to-teach-kids-basics-of-programming/219951 "2022-06-16T22:29:34Z")

</div>

We are living in a digital era where gadgets from computers and smartphones to tablets have become an essential part of our lives. Even kids these days pick up an iPad and figure out apps like how a fish takes to water. …

---

## [Admin Panel Finder | A Burp Suite Extension That Enumerates Infrastructure And Application Admin Interfaces](https://onehack.st/t/admin-panel-finder-a-burp-suite-extension-that-enumerates-infrastructure-and-application-admin-interfaces/219949)

<div class="topic-metadata">

**Author:** [@TheStrength](https://onehack.st/u/TheStrength)\
**Replies:** 1\
**Last updated:** [June 18, 2022, 6:39pm UTC](https://onehack.st/t/admin-panel-finder-a-burp-suite-extension-that-enumerates-infrastructure-and-application-admin-interfaces/219949 "2022-06-18T18:39:33Z")

</div>

A burp suite extension that enumerates infrastructure and application Admin Interfaces. OWASP References: Classification: Web Application Security Testing \> 02-Configuration and Deployment Management Testing OTG v4:…

---

## [Time-Saving Apps For Freelance Workers](https://onehack.st/t/time-saving-apps-for-freelance-workers/219891)

<div class="topic-metadata">

**Author:** [@PlayBoy83](https://onehack.st/u/PlayBoy83)\
**Replies:** 0\
**Last updated:** [June 15, 2022, 9:18pm UTC](https://onehack.st/t/time-saving-apps-for-freelance-workers/219891 "2022-06-15T21:18:14Z")

</div>

A regular employee is paid on the basis of the working hours set by company but freelancers are mostly paid according to the time they spend on the project. However, if freelancers don’t have a tool or mechanism in place…

---

## [Gshell | A Flexible And Scalable Cross-Plaform Shell Generator Tool](https://onehack.st/t/gshell-a-flexible-and-scalable-cross-plaform-shell-generator-tool/219889)

<div class="topic-metadata">

**Author:** [@PlayBoy83](https://onehack.st/u/PlayBoy83)\
**Replies:** 0\
**Last updated:** [June 15, 2022, 9:18pm UTC](https://onehack.st/t/gshell-a-flexible-and-scalable-cross-plaform-shell-generator-tool/219889 "2022-06-15T21:18:10Z")

</div>

Introduction A simple yet flexible cross-platform shell generator tool. Name: G(Great) Shell Description: A cross-platform shell generator tool that lets you generate whichever shell you want, in any system you w…

---

## [Goreplay | Open-Source Tool For Capturing And Replaying Live HTTP Traffic Into A Test Environment](https://onehack.st/t/goreplay-open-source-tool-for-capturing-and-replaying-live-http-traffic-into-a-test-environment/219860)

<div class="topic-metadata">

**Author:** [@PlayBoy83](https://onehack.st/u/PlayBoy83)\
**Replies:** 0\
**Last updated:** [June 14, 2022, 8:22pm UTC](https://onehack.st/t/goreplay-open-source-tool-for-capturing-and-replaying-live-http-traffic-into-a-test-environment/219860 "2022-06-14T20:22:24Z")

</div>

https://goreplay.org/ GoReplay is an open-source network monitoring tool which can record your live traffic and use it for shadowing, load testing, monitoring and detailed analysis. About As your application grows, th…

---

## [The Best 20 Mozilla Firefox Extensions (Add-Ons)](https://onehack.st/t/the-best-20-mozilla-firefox-extensions-add-ons/219817)

<div class="topic-metadata">

**Author:** [@PlayBoy83](https://onehack.st/u/PlayBoy83)\
**Replies:** 1\
**Last updated:** [June 14, 2022, 5:19am UTC](https://onehack.st/t/the-best-20-mozilla-firefox-extensions-add-ons/219817 "2022-06-14T05:19:53Z")

</div>

Extensions and add-ons can be beneficial as they help to improve your overall browsing experience. There exist different types of extensions, and each of them is designed for a specific purpose. If you are missing any f…

---

## [DOMDig | DOM XSS Scanner For Single Page Applications](https://onehack.st/t/domdig-dom-xss-scanner-for-single-page-applications/219811)

<div class="topic-metadata">

**Author:** [@BlueHacker](https://onehack.st/u/BlueHacker)\
**Replies:** 0\
**Last updated:** [June 13, 2022, 7:34pm UTC](https://onehack.st/t/domdig-dom-xss-scanner-for-single-page-applications/219811 "2022-06-13T19:34:27Z")

</div>

DOMDig is a DOM XSS scanner that runs inside the Chromium web browser and it can scan single page applications (SPA) recursively. Unlike other scanners, DOMDig can crawl any webapplication (including gmail) by keepin…

---

## [Browser Leakage Checkers ⭐](https://onehack.st/t/browser-leakage-checkers/219772)

<div class="topic-metadata">

**Author:** [@BlueHacker](https://onehack.st/u/BlueHacker)\
**Replies:** 0\
**Last updated:** [June 12, 2022, 8:58pm UTC](https://onehack.st/t/browser-leakage-checkers/219772 "2022-06-12T20:58:14Z")

</div>

Enjoy this currated list https://pixelscan.net/ (start checking with it) http://vektort13.space/ (don’t take it personally) https://panopticlick.eff.org/ (top checker, if you don’t know how to use it - see webinars) …

---

## [SocialHunter | Capture Social Media Usernames Of Companies And Users](https://onehack.st/t/socialhunter-capture-social-media-usernames-of-companies-and-users/219770)

<div class="topic-metadata">

**Author:** [@BlueHacker](https://onehack.st/u/BlueHacker)\
**Replies:** 0\
**Last updated:** [June 12, 2022, 8:42pm UTC](https://onehack.st/t/socialhunter-capture-social-media-usernames-of-companies-and-users/219770 "2022-06-12T20:42:35Z")

</div>

It scans the website and finds uncreated social media accounts. Broken social links may allow an attacker to conduct phishing attacks. It also can cost a loss of the company’s reputation. Broken social media hijack i…

---

## [Exfilkit | Data Exfiltration Utility For Testing Detection Capabilities](https://onehack.st/t/exfilkit-data-exfiltration-utility-for-testing-detection-capabilities/219766)

<div class="topic-metadata">

**Author:** [@BlueHacker](https://onehack.st/u/BlueHacker)\
**Replies:** 0\
**Last updated:** [June 12, 2022, 8:06pm UTC](https://onehack.st/t/exfilkit-data-exfiltration-utility-for-testing-detection-capabilities/219766 "2022-06-12T20:06:33Z")

</div>

exfilkit Data exfiltration utility for testing detection capabilities Description Data exfiltration utility used for testing detection capabilities of security products. Obviously for legal purposes only. Exfiltra…

---

## [ReCaptcha Bypassing Tool](https://onehack.st/t/recaptcha-bypassing-tool/219743)

<div class="topic-metadata">

**Author:** [@BlueHacker](https://onehack.st/u/BlueHacker)\
**Replies:** 0\
**Last updated:** [June 11, 2022, 10:28pm UTC](https://onehack.st/t/recaptcha-bypassing-tool/219743 "2022-06-11T22:28:18Z")

</div>

Defeating Google’s audio reCaptcha system with 85% accuracy. Disclaimer unCaptcha is intended to be a proof of concept. As of the time of our paper, we found it to successfully solve reCaptcha’s audio challenges with …

---

## [ROSY-BEATED FOR TERMUX USER'S (ALL IN ONE TOOL)](https://onehack.st/t/rosy-beated-for-termux-users-all-in-one-tool/219688)

<div class="topic-metadata">

**Author:** [@Poki](https://onehack.st/u/Poki)\
**Replies:** 0\
**Last updated:** [June 10, 2022, 2:37pm UTC](https://onehack.st/t/rosy-beated-for-termux-users-all-in-one-tool/219688 "2022-06-10T14:37:49Z")

</div>

ABOUT TOOL Looking forward to not wasting time.I know your looking for new termux tool’s. Yikes,What are you waiting for. Just clone ROSY all in one toolkit. 30 tool’s With different capabilities in one click.(Tool for t…

[Previous page](https://onehack.st/c/tools-scripts/27.md?page=67)

[Next page](https://onehack.st/c/tools-scripts/27.md?page=69)
