# Tools & Scripts **URL:** https://onehack.st/c/tools-scripts/27.md?page=72 [Latest](https://onehack.st/latest.md) · [Categories](https://onehack.st/categories.md) · [Tags](https://onehack.st/tags.md) **Page:** 73 --- ## [HaccTheHub | Open Source Self-Hosted Cyber Security Learning Platform](https://onehack.st/t/haccthehub-open-source-self-hosted-cyber-security-learning-platform/215939)
**Author:** [@TheStrength](https://onehack.st/u/TheStrength)\ **Replies:** 0\ **Last updated:** [March 5, 2022, 9:07am UTC](https://onehack.st/t/haccthehub-open-source-self-hosted-cyber-security-learning-platform/215939 "2022-03-05T09:07:14Z")
Open source self-hosted cyber security learning platform About The Project HaccTheHub is an open source project that provides cyber security The HaccTheHub system consists of 3 main parts: Docker: containing all… --- ## [Ocr-Recon | Tool To Find A Particular String In A List Of URLs](https://onehack.st/t/ocr-recon-tool-to-find-a-particular-string-in-a-list-of-urls/215901)
**Author:** [@TheStrength](https://onehack.st/u/TheStrength)\ **Replies:** 0\ **Last updated:** [March 4, 2022, 3:45pm UTC](https://onehack.st/t/ocr-recon-tool-to-find-a-particular-string-in-a-list-of-urls/215901 "2022-03-04T15:45:01Z")
This tool is useful to find a particular string in a list of URLs using tesseract’s OCR (Optical Character Recognition) capabilities Usage Usage: python3 ocr-recon.py listwithURLs stringtosearch GitHub: --- ## [Searpy | Search Engine Tookit](https://onehack.st/t/searpy-search-engine-tookit/215818)
**Author:** [@NoBody](https://onehack.st/u/NoBody)\ **Replies:** 0\ **Last updated:** [March 3, 2022, 10:11am UTC](https://onehack.st/t/searpy-search-engine-tookit/215818 "2022-03-03T10:11:50Z")
Searpy :wrench: 批量搜索工具，可用于采集和溯源 支持py2和py3 1. Install git clone https://github.com/j3ers3/Searpy pip install -r requirement.txt 配置API及账号 ./config.py python Searpy -h 2. Help Searpy Engine Tookit optional a… --- ## [Top 10 macOS Apps For Web Developers](https://onehack.st/t/top-10-macos-apps-for-web-developers/215657)
**Author:** [@WhiteHat](https://onehack.st/u/WhiteHat)\ **Replies:** 1\ **Last updated:** [March 4, 2022, 8:46am UTC](https://onehack.st/t/top-10-macos-apps-for-web-developers/215657 "2022-03-04T08:46:24Z")
For web developers, applications are important factors to better productivity; without having the right ones, developing a single website could take up a lot of a developer’s time. There are many applications for web dev… --- ## [OpenSquat | Detection Of Phishing Domains And Domain Squatting](https://onehack.st/t/opensquat-detection-of-phishing-domains-and-domain-squatting/215750)
**Author:** [@NoBody](https://onehack.st/u/NoBody)\ **Replies:** 0\ **Last updated:** [March 2, 2022, 11:46am UTC](https://onehack.st/t/opensquat-detection-of-phishing-domains-and-domain-squatting/215750 "2022-03-02T11:46:22Z")
What is openSquat openSquat is an opensource Intelligence (OSINT) security tool to identify cyber squatting threats to specific companies or domains, such as: Phishing campaigns Domain squatting Typo squatting Bitsq… --- ## [LazyCSRF | More Powerful CSRF PoC Generator on Burp Suite](https://onehack.st/t/lazycsrf-more-powerful-csrf-poc-generator-on-burp-suite/215649)
**Author:** [@WhiteHat](https://onehack.st/u/WhiteHat)\ **Replies:** 0\ **Last updated:** [March 1, 2022, 9:48am UTC](https://onehack.st/t/lazycsrf-more-powerful-csrf-poc-generator-on-burp-suite/215649 "2022-03-01T09:48:20Z")
LazyCSRF is a more useful CSRF PoC generator that runs on Burp Suite. Motivation Burp Suite is an intercepting HTTP Proxy, and it is the defacto tool for performing web application security testing. The feature o… --- ## [JNDI-Injection-Exploit | A Tool Which Generates JNDI Links](https://onehack.st/t/jndi-injection-exploit-a-tool-which-generates-jndi-links/215560)
**Author:** [@TheStrength](https://onehack.st/u/TheStrength)\ **Replies:** 0\ **Last updated:** [February 28, 2022, 10:42am UTC](https://onehack.st/t/jndi-injection-exploit-a-tool-which-generates-jndi-links/215560 "2022-02-28T10:42:00Z")
JNDI-Injection-Exploit is a tool for generating workable JNDI links and provide background services by starting RMI server,LDAP server and HTTP server. RMI server and LDAP server are based on marshals and modified fur… --- ## [Useful Chrome Extensions For Better WhatsApp Web Experience 🔰](https://onehack.st/t/useful-chrome-extensions-for-better-whatsapp-web-experience/215466)
**Author:** [@PlayBoy83](https://onehack.st/u/PlayBoy83)\ **Replies:** 5\ **Last updated:** [November 9, 2022, 11:34am UTC](https://onehack.st/t/useful-chrome-extensions-for-better-whatsapp-web-experience/215466 "2022-11-09T11:34:50Z")
Fed up with mediocre experience while using WhatsApp Web on your desktop? Looking for something to enhance your WhatsApp Web experience? Look no further, we have compiled a list of the amazing Microsoft Edge and Google C… --- ## [NTLMRecon | Enumerate Information From NTLM Authentication Enabled Web Endpoints](https://onehack.st/t/ntlmrecon-enumerate-information-from-ntlm-authentication-enabled-web-endpoints/215459)
**Author:** [@PlayBoy83](https://onehack.st/u/PlayBoy83)\ **Replies:** 0\ **Last updated:** [February 27, 2022, 11:58am UTC](https://onehack.st/t/ntlmrecon-enumerate-information-from-ntlm-authentication-enabled-web-endpoints/215459 "2022-02-27T11:58:28Z")
NTLMRecon A fast and flexible NTLM reconnaissance tool without external dependencies. Useful to find out information about NTLM endpoints when working with a large set of potential IP addresses and domains. NTLMR… --- ## [Win-Brute-Logon | Crack Any Microsoft Windows Users Password Without Any Privilege](https://onehack.st/t/win-brute-logon-crack-any-microsoft-windows-users-password-without-any-privilege/215391)
**Author:** [@WhiteHat](https://onehack.st/u/WhiteHat)\ **Replies:** 0\ **Last updated:** [February 26, 2022, 1:06pm UTC](https://onehack.st/t/win-brute-logon-crack-any-microsoft-windows-users-password-without-any-privilege/215391 "2022-02-26T13:06:13Z")
Target: Windows XP to Latest Windows 10 Version (1909) Weakness location : LogonUserA, LogonUserW, CreateProcessWithLogonA, CreateProcessWithLogonW Usage Wordlist File WinBruteLogon.exe -u \ -w \ **Author:** [@WhiteHat](https://onehack.st/u/WhiteHat)\ **Replies:** 0\ **Last updated:** [February 24, 2022, 12:53am UTC](https://onehack.st/t/the-best-crypto-portfolio-tracking-apps/215209 "2022-02-24T00:53:50Z") A crypto portfolio tracker helps you monitor and manage your crypto assets in one place, and it will give you live updates and information to help you analyze the best time to buy or sell. Some even go beyond their addi… --- ## [Scylla | The Simplistic Information Gathering Engine ](https://onehack.st/t/scylla-the-simplistic-information-gathering-engine/215207)
**Author:** [@PlayBoy83](https://onehack.st/u/PlayBoy83)\ **Replies:** 0\ **Last updated:** [February 24, 2022, 12:37am UTC](https://onehack.st/t/scylla-the-simplistic-information-gathering-engine/215207 "2022-02-24T00:37:59Z")
! Notice For Deprecation ! This project is no longer being worked on by the developer. As of today, the program has many flaws and is not up to modern OSINT standards. A lot of APIs utilized within Scylla are no longer… --- ## [Jatayu | Stealthy Stand Alone PHP Web Shell](https://onehack.st/t/jatayu-stealthy-stand-alone-php-web-shell/215161)
**Author:** [@PlayBoy83](https://onehack.st/u/PlayBoy83)\ **Replies:** 0\ **Last updated:** [February 23, 2022, 2:00pm UTC](https://onehack.st/t/jatayu-stealthy-stand-alone-php-web-shell/215161 "2022-02-23T14:00:31Z")
Stealthy Stand Alone PHP Web Shell FEATURES Http Header Based Authentication. 100% Undetectable. Exec Function Changer. Nothing Fancy USAGE GET /test/jatayu.php?fn=1&&cmd=whoami Host : http://test.com Authtoken… --- ## [Chain-Reactor | An Open Source Framework For Composing Executables](https://onehack.st/t/chain-reactor-an-open-source-framework-for-composing-executables/215077)
**Author:** [@Prometheus](https://onehack.st/u/Prometheus)\ **Replies:** 0\ **Last updated:** [February 22, 2022, 2:06pm UTC](https://onehack.st/t/chain-reactor-an-open-source-framework-for-composing-executables/215077 "2022-02-22T14:06:54Z")
Chain Reactor is an open-source tool for testing detection and response coverage on Linux machines. The tool generates executables that simulate sequences of actions like process creation and network connection. Chain… --- ## [Discord All Tools In One | Script Gathering For Windows/Linux Systems ⭐](https://onehack.st/t/discord-all-tools-in-one-script-gathering-for-windows-linux-systems/215008)
**Author:** [@Aina](https://onehack.st/u/Aina)\ **Replies:** 1\ **Last updated:** [February 21, 2022, 9:59pm UTC](https://onehack.st/t/discord-all-tools-in-one-script-gathering-for-windows-linux-systems/215008 "2022-02-21T21:59:53Z")
\[Discord\] - All Tools In One (V2.1) \[Discord\] - All Tools In One is a Script Gathering for Windows/Linux systems written in Python. Disclaimer AstraaHome was made for Educational purposes This project was cr… --- ## [Top Online Meeting And Conferencing Tools](https://onehack.st/t/top-online-meeting-and-conferencing-tools/214589)
**Author:** [@Prometheus](https://onehack.st/u/Prometheus)\ **Replies:** 0\ **Last updated:** [February 21, 2022, 12:50pm UTC](https://onehack.st/t/top-online-meeting-and-conferencing-tools/214589 "2022-02-21T12:50:00Z")
Whether remote work is here to stay or not, one thing for sure is that online meeting and conferencing tools will be here forever. Not only for work, but also to connect with family and friends on a slow Saturday night o… --- ## [Voltron | A Hacky Debugger UI For Hackers](https://onehack.st/t/voltron-a-hacky-debugger-ui-for-hackers/214997)
**Author:** [@WhiteHat](https://onehack.st/u/WhiteHat)\ **Replies:** 0\ **Last updated:** [February 21, 2022, 12:48pm UTC](https://onehack.st/t/voltron-a-hacky-debugger-ui-for-hackers/214997 "2022-02-21T12:48:34Z")
Voltron is an extensible debugger UI toolkit written in Python. It aims to improve the user experience of various debuggers (LLDB, GDB, VDB and WinDbg) by enabling the attachment of utility views that can retrieve and di… --- ## [The Best Android Apps For Personal Finances](https://onehack.st/t/the-best-android-apps-for-personal-finances/214661)
**Author:** [@NoBody](https://onehack.st/u/NoBody)\ **Replies:** 0\ **Last updated:** [February 20, 2022, 11:28am UTC](https://onehack.st/t/the-best-android-apps-for-personal-finances/214661 "2022-02-20T11:28:00Z")
For many people, one of the most difficult tasks is to manage finances – especially when you have to do it manually. But there’s a way out of this problem that involves using a good finance management app that lets … --- ## [HybridTestFramework | End To End Testing Of Web, API And Security](https://onehack.st/t/hybridtestframework-end-to-end-testing-of-web-api-and-security/214940)
**Author:** [@TheStrength](https://onehack.st/u/TheStrength)\ **Replies:** 0\ **Last updated:** [February 20, 2022, 11:27am UTC](https://onehack.st/t/hybridtestframework-end-to-end-testing-of-web-api-and-security/214940 "2022-02-20T11:27:57Z")
Full-fledged WEB, API and Security testing framework using selenium,ZAP OWASP proxy and rest-assured Supported Platforms This framework supports WebUi automation across a variety of browsers like Chrome, Fire… --- ## [Talisman | Hooking Into The Pre-Push Hook Provided By Git](https://onehack.st/t/talisman-hooking-into-the-pre-push-hook-provided-by-git/214852)
**Author:** [@TheStrength](https://onehack.st/u/TheStrength)\ **Replies:** 0\ **Last updated:** [February 19, 2022, 12:35pm UTC](https://onehack.st/t/talisman-hooking-into-the-pre-push-hook-provided-by-git/214852 "2022-02-19T12:35:12Z")
Talisman A tool to detect and prevent secrets from getting checked in Table of Contents What is Talisman? Installation \[Recommended approach\] Installation as a global hook template Handling existing hooks 1.… --- ## [FakeLogonScreen | Fake Windows Logon Screen To Steal Passwords](https://onehack.st/t/fakelogonscreen-fake-windows-logon-screen-to-steal-passwords/214712)
**Author:** [@NoBody](https://onehack.st/u/NoBody)\ **Replies:** 0\ **Last updated:** [February 17, 2022, 8:47am UTC](https://onehack.st/t/fakelogonscreen-fake-windows-logon-screen-to-steal-passwords/214712 "2022-02-17T08:47:39Z")
FakeLogonScreen FakeLogonScreen is a utility to fake the Windows logon screen in order to obtain the user’s password. The password entered is validated against the Active Directory or… --- ## [Google Bug Bounty | A List of Writeups From Google VRP Bug Bounty Program](https://onehack.st/t/google-bug-bounty-a-list-of-writeups-from-google-vrp-bug-bounty-program/214710)
**Author:** [@NoBody](https://onehack.st/u/NoBody)\ **Replies:** 1\ **Last updated:** [February 17, 2022, 10:29am UTC](https://onehack.st/t/google-bug-bounty-a-list-of-writeups-from-google-vrp-bug-bounty-program/214710 "2022-02-17T10:29:53Z")
This is the writeup list from google bug bounty program. The list that shown here is just bug from google. Writeups: 2022: \[Feb 06 – $2,674\] Auth Bypass in Google Assistant\* by David Schütz \[Feb 06 – $1,337\] Auth By… --- ## [Shellcodetester | An Application To Test Windows And Linux Shellcodes](https://onehack.st/t/shellcodetester-an-application-to-test-windows-and-linux-shellcodes/214658)
**Author:** [@PlayBoy83](https://onehack.st/u/PlayBoy83)\ **Replies:** 0\ **Last updated:** [February 16, 2022, 11:55am UTC](https://onehack.st/t/shellcodetester-an-application-to-test-windows-and-linux-shellcodes/214658 "2022-02-16T11:55:19Z")
This tools test generated ShellCodes. Usage Exemple ShellCode Tester Linux Instalation git clone https://github.com/helviojunior/shellcodetester.git cd shellcodetester/Linux make Usage Without break-point: shell… --- ## [Droopescan | A Plugin-Based Scanner That Aids Security Researchers In Identifying Issues With Several CMSs, Mainly Drupal And Silverstripe](https://onehack.st/t/droopescan-a-plugin-based-scanner-that-aids-security-researchers-in-identifying-issues-with-several-cmss-mainly-drupal-and-silverstripe/214586)
**Author:** [@Prometheus](https://onehack.st/u/Prometheus)\ **Replies:** 0\ **Last updated:** [February 15, 2022, 10:56am UTC](https://onehack.st/t/droopescan-a-plugin-based-scanner-that-aids-security-researchers-in-identifying-issues-with-several-cmss-mainly-drupal-and-silverstripe/214586 "2022-02-15T10:56:31Z")
A plugin-based scanner that aids security researchers in identifying issues with several CMS. Usage of droopescan for attacking targets without prior mutual consent is illegal. It is the end user’s responsibility… --- ## [Download Spotify / Gaana / Youtube Music / Jio Saavn / SoundCloud Music For Free](https://onehack.st/t/download-spotify-gaana-youtube-music-jio-saavn-soundcloud-music-for-free/214585)
**Author:** [@fd2013](https://onehack.st/u/fd2013)\ **Replies:** 2\ **Last updated:** [February 17, 2022, 7:03am UTC](https://onehack.st/t/download-spotify-gaana-youtube-music-jio-saavn-soundcloud-music-for-free/214585 "2022-02-17T07:03:57Z")
Kotlin Multiplatform Music Downloader, Supports Spotify / Gaana / Youtube Music / Jio Saavn / SoundCloud Well, No need to diapers (accounts) With SpotiFlyer SpotiFlyer is an App(Written in Kotlin), which aims to wor… --- ## [Colorful Portfolio WordPress Themes You Should Try!](https://onehack.st/t/colorful-portfolio-wordpress-themes-you-should-try/214543)
**Author:** [@TheStrength](https://onehack.st/u/TheStrength)\ **Replies:** 0\ **Last updated:** [February 14, 2022, 5:16pm UTC](https://onehack.st/t/colorful-portfolio-wordpress-themes-you-should-try/214543 "2022-02-14T17:16:24Z")
To make themselves visible online, more and more artists, designers and creative professionals are using portfolio websites to showcase their work in the most inginous ways. A creative portfolio website is of utmost impo… --- ## [Ksubdomain | Fast and Accurate Subdomain Enumeration Tool](https://onehack.st/t/ksubdomain-fast-and-accurate-subdomain-enumeration-tool/214535)
**Author:** [@TheStrength](https://onehack.st/u/TheStrength)\ **Replies:** 0\ **Last updated:** [February 14, 2022, 4:35pm UTC](https://onehack.st/t/ksubdomain-fast-and-accurate-subdomain-enumeration-tool/214535 "2022-02-14T16:35:22Z")
Overview Ksubdomain is a stateless subdomain blasting tool, similar to stateless port scanning, supports fast DNS blasting on Windows/Linux/Mac, and has a retransmission mechanism, so you don’t have to worry about mis… --- ## [Email Tools | Checkers | Scrappers | Senders | Spammers 🔥](https://onehack.st/t/email-tools-checkers-scrappers-senders-spammers/214453)
**Author:** [@PlayBoy83](https://onehack.st/u/PlayBoy83)\ **Replies:** 2\ **Last updated:** [February 14, 2022, 4:58pm UTC](https://onehack.st/t/email-tools-checkers-scrappers-senders-spammers/214453 "2022-02-14T16:58:52Z")
Mail Access v1 by Sh4lltear Mailify3.0 MailRanger 2 - CHECKER MailSoft MiniMailViewer Spider Mail Yahoo Checker V2 All Mail Brute All Mail Checker 3.5.2.3 All Mail Checker by Sinus 1.4 Cragslist Mailer 2.0.1.0 Hotmail A… --- ## [The Best eBooks To Master Windows 10 | Beginners To Expert ⭐](https://onehack.st/t/the-best-ebooks-to-master-windows-10-beginners-to-expert/177903)
**Author:** [@TheStrength](https://onehack.st/u/TheStrength)\ **Replies:** 0\ **Last updated:** [February 13, 2022, 12:57pm UTC](https://onehack.st/t/the-best-ebooks-to-master-windows-10-beginners-to-expert/177903 "2022-02-13T12:57:00Z")
As Windows 10 was a free upgrade, I, like most of the Windows users, impetuously upgraded to it. To my surprise, Windows 10 ships with many new features and it is still being rapidly updated with new improvements comi… --- ## [PHP Malware Finder | Detect Potentially Malicious PHP Files](https://onehack.st/t/php-malware-finder-detect-potentially-malicious-php-files/214452)
**Author:** [@PlayBoy83](https://onehack.st/u/PlayBoy83)\ **Replies:** 0\ **Last updated:** [February 13, 2022, 12:56pm UTC](https://onehack.st/t/php-malware-finder-detect-potentially-malicious-php-files/214452 "2022-02-13T12:56:35Z")
\_\_\_\_\_\_\_ \_\_ \_\_ \_\_\_\_\_\_\_ | \_\_\_ || |\_| || | | | | || || \_\_\_| | |\_\_\_| || || |\_\_\_ Webshell finder, | \_\_\_|| || \_\_\_| kiddies hunter, | | | ||\_|| || | website cleaner. … [Previous page](https://onehack.st/c/tools-scripts/27.md?page=71) [Next page](https://onehack.st/c/tools-scripts/27.md?page=73)