# Tools & Scripts

**URL:** https://onehack.st/c/tools-scripts/27.md?page=76

[Latest](https://onehack.st/latest.md) · [Categories](https://onehack.st/categories.md) · [Tags](https://onehack.st/tags.md)

**Page:** 77

---

## [NimHollow | Nim Implementation Of Process Hollowing Using Syscalls (PoC)](https://onehack.st/t/nimhollow-nim-implementation-of-process-hollowing-using-syscalls-poc/211081)

<div class="topic-metadata">

**Author:** [@Astrid](https://onehack.st/u/Astrid)\
**Replies:** 0\
**Last updated:** [January 2, 2022, 8:47am UTC](https://onehack.st/t/nimhollow-nim-implementation-of-process-hollowing-using-syscalls-poc/211081 "2022-01-02T08:47:37Z")

</div>

Playing around with the Process Hollowing technique using Nim. Features: Direct syscalls for triggering Windows Native API functions with NimlineWhispers or NimlineWhispers2. Shellcode encryption/decryption with AE…

---

## [Mac Applications | A Massive List Of Useful Mac Applications For Mac User ⭐](https://onehack.st/t/mac-applications-a-massive-list-of-useful-mac-applications-for-mac-user/211004)

<div class="topic-metadata">

**Author:** [@Aina](https://onehack.st/u/Aina)\
**Replies:** 5\
**Last updated:** [September 13, 2026, 4:04pm UTC](https://onehack.st/t/mac-applications-a-massive-list-of-useful-mac-applications-for-mac-user/211004 "2026-09-13T16:04:04Z")

</div>

Macs are already amazing machines that offer many useful features built right into the operating system. However, if you want to make your Mac experience more worthwhile and productive, take a look at this comprehens…

---

## [Spamscanner | Spam Scanner Is The Best Anti-Spam, Email Filtering, And Phishing Prevention Service](https://onehack.st/t/spamscanner-spam-scanner-is-the-best-anti-spam-email-filtering-and-phishing-prevention-service/211003)

<div class="topic-metadata">

**Author:** [@Prometheus](https://onehack.st/u/Prometheus)\
**Replies:** 0\
**Last updated:** [January 1, 2022, 9:07am UTC](https://onehack.st/t/spamscanner-spam-scanner-is-the-best-anti-spam-email-filtering-and-phishing-prevention-service/211003 "2022-01-01T09:07:46Z")

</div>

Spam Scanner is the best anti-spam, email filtering, and phishing prevention service. Spam Scanner is a drop-in replacement and the best alternative to SpamAssassin, rspamd, SpamTitan, and more. Table of Con…

---

## [Desktop Tools To Generate & Manage Passwords](https://onehack.st/t/desktop-tools-to-generate-manage-passwords/184497)

<div class="topic-metadata">

**Author:** [@PlayBoy83](https://onehack.st/u/PlayBoy83)\
**Replies:** 1\
**Last updated:** [January 2, 2022, 1:10am UTC](https://onehack.st/t/desktop-tools-to-generate-manage-passwords/184497 "2022-01-02T01:10:06Z")

</div>

Passwords are a great way to secure your accounts and sensitive information from getting into wrong hands. But this security measure is not easy to handle as you have to remember different passwords for different account…

---

## [Top 10 Applications Every New Apple Devices Should Have](https://onehack.st/t/top-10-applications-every-new-apple-devices-should-have/210919)

<div class="topic-metadata">

**Author:** [@PlayBoy83](https://onehack.st/u/PlayBoy83)\
**Replies:** 0\
**Last updated:** [December 31, 2021, 9:08am UTC](https://onehack.st/t/top-10-applications-every-new-apple-devices-should-have/210919 "2021-12-31T09:08:18Z")

</div>

Do I smell a fresh Apple device straight out of the box? I think I do. We’ve all been there, smooth and unblemished, not even a fingerprint on sight. Once you’re done relishing the look and feel of your new device, it’s …

---

## [Onionservice | Manage Your Onion Services Via CLI Or TUI On Unix-like Operating System With A POSIX Compliant Shell](https://onehack.st/t/onionservice-manage-your-onion-services-via-cli-or-tui-on-unix-like-operating-system-with-a-posix-compliant-shell/210918)

<div class="topic-metadata">

**Author:** [@PlayBoy83](https://onehack.st/u/PlayBoy83)\
**Replies:** 0\
**Last updated:** [December 31, 2021, 8:56am UTC](https://onehack.st/t/onionservice-manage-your-onion-services-via-cli-or-tui-on-unix-like-operating-system-with-a-posix-compliant-shell/210918 "2021-12-31T08:56:10Z")

</div>

Feature-rich onion service manager for UNIX-like operating systems written in POSIX compliant shellscript OnionJuggler is a minimal requirement, portable collection of scripts and documentation to help the servi…

---

## [SourceLeakHacker | A Multi Threads Web Application Source Leak Scanner](https://onehack.st/t/sourceleakhacker-a-multi-threads-web-application-source-leak-scanner/210801)

<div class="topic-metadata">

**Author:** [@Astrid](https://onehack.st/u/Astrid)\
**Replies:** 0\
**Last updated:** [December 29, 2021, 11:28pm UTC](https://onehack.st/t/sourceleakhacker-a-multi-threads-web-application-source-leak-scanner/210801 "2021-12-29T23:28:39Z")

</div>

SourceLeakHacker is a muilt-threads web directories scanner. Installation pip install -r requirements.txt Usage usage: SourceLeakHacker.py \[options\] optional arguments: -h, --help show this help messag…

---

## [The Best Free Screen Capturing Tools ⭐](https://onehack.st/t/the-best-free-screen-capturing-tools/210712)

<div class="topic-metadata">

**Author:** [@Astrid](https://onehack.st/u/Astrid)\
**Replies:** 2\
**Last updated:** [December 29, 2021, 12:47pm UTC](https://onehack.st/t/the-best-free-screen-capturing-tools/210712 "2021-12-29T12:47:39Z")

</div>

Virtual workplaces are gaining much popularity these days. But when you’re working with virtual teams, you need some tools to ensure efficient communication. A screen capture tool or screen capture borwser extension is i…

---

## [Free Android VPN Applications To Surf Anonymously](https://onehack.st/t/free-android-vpn-applications-to-surf-anonymously/207673)

<div class="topic-metadata">

**Author:** [@PlayBoy83](https://onehack.st/u/PlayBoy83)\
**Replies:** 0\
**Last updated:** [December 28, 2021, 11:20pm UTC](https://onehack.st/t/free-android-vpn-applications-to-surf-anonymously/207673 "2021-12-28T23:20:00Z")

</div>

Every internet user should have access to all kinds of content available online. Unfortunately however, this is not so and many websites and services are either blocked by authorities or geo-restricted by service provide…

---

## [SQLbit | Just Another Script For Automatize Boolean-Based Blind SQL Injections](https://onehack.st/t/sqlbit-just-another-script-for-automatize-boolean-based-blind-sql-injections/210707)

<div class="topic-metadata">

**Author:** [@Hannah](https://onehack.st/u/Hannah)\
**Replies:** 0\
**Last updated:** [December 28, 2021, 11:15pm UTC](https://onehack.st/t/sqlbit-just-another-script-for-automatize-boolean-based-blind-sql-injections/210707 "2021-12-28T23:15:23Z")

</div>

A script for automatize boolean-based blind SQL injections. Works with SQLite at least, supports using cookies. It uses bitwise comparisons with multithreading to find cell values instead of binary search, which is …

---

## [MacOS Applications Every Web Developers Need!](https://onehack.st/t/macos-applications-every-web-developers-need/210676)

<div class="topic-metadata">

**Author:** [@WhiteHat](https://onehack.st/u/WhiteHat)\
**Replies:** 1\
**Last updated:** [January 2, 2022, 11:28pm UTC](https://onehack.st/t/macos-applications-every-web-developers-need/210676 "2022-01-02T23:28:36Z")

</div>

macOS is one of the best-operating systems preferred by many web developers. Apart from its efficiency and hardware reliability, what developers love about macOS is the abundance of developer tools available to enhance t…

---

## [TrojanSourceFinder | Help Find Trojan Source Vulnerability In Code](https://onehack.st/t/trojansourcefinder-help-find-trojan-source-vulnerability-in-code/210672)

<div class="topic-metadata">

**Author:** [@WhiteHat](https://onehack.st/u/WhiteHat)\
**Replies:** 0\
**Last updated:** [December 28, 2021, 3:52pm UTC](https://onehack.st/t/trojansourcefinder-help-find-trojan-source-vulnerability-in-code/210672 "2021-12-28T15:52:52Z")

</div>

TrojanSourceFinder helps developers detect “Trojan Source” vulnerability in source code. Trojan Source vulnerability allows an attacker to make malicious code appear innocent. In general, the attacker tries to lure by pa…

---

## [Free Photo Management Software You Should Try!](https://onehack.st/t/free-photo-management-software-you-should-try/210584)

<div class="topic-metadata">

**Author:** [@WhiteHat](https://onehack.st/u/WhiteHat)\
**Replies:** 1\
**Last updated:** [December 27, 2021, 10:02pm UTC](https://onehack.st/t/free-photo-management-software-you-should-try/210584 "2021-12-27T22:02:12Z")

</div>

Photo managers allow you to organize your life in photo albums and take care of your digital memories – smartly and efficiently. In this post, we’re showcasing the best 13 desktop photo managers that help you view images…

---

## [Snap-Scraper | Snap Scraper Enables Users To Download Media Uploaded To Snapchat’s Snap Map](https://onehack.st/t/snap-scraper-snap-scraper-enables-users-to-download-media-uploaded-to-snapchat-s-snap-map/210583)

<div class="topic-metadata">

**Author:** [@WhiteHat](https://onehack.st/u/WhiteHat)\
**Replies:** 0\
**Last updated:** [December 27, 2021, 2:12pm UTC](https://onehack.st/t/snap-scraper-snap-scraper-enables-users-to-download-media-uploaded-to-snapchat-s-snap-map/210583 "2021-12-27T14:12:19Z")

</div>

Description Snap Scraper is an open source intelligence tool which enables users to download media uploaded to Snapchat’s Snap Map using a set of latitude and longitiude co-ordinates. This project is in no way affiliat…

---

## [Social Analyzer | API, CLI & Web App For Analyzing & Finding A Person's profiles](https://onehack.st/t/social-analyzer-api-cli-web-app-for-analyzing-finding-a-persons-profiles/210497)

<div class="topic-metadata">

**Author:** [@PlayBoy83](https://onehack.st/u/PlayBoy83)\
**Replies:** 1\
**Last updated:** [January 4, 2022, 2:14pm UTC](https://onehack.st/t/social-analyzer-api-cli-web-app-for-analyzing-finding-a-persons-profiles/210497 "2022-01-04T14:14:18Z")

</div>

Social Analyzer - API, CLI & Web App for analyzing & finding a person’s profile across +1000 social media \\ websites. It includes different analysis and detection modules, and you can choose which modules to us…

---

## [The Best Screen Capture Browser Extensions](https://onehack.st/t/the-best-screen-capture-browser-extensions/208475)

<div class="topic-metadata">

**Author:** [@BlueHacker](https://onehack.st/u/BlueHacker)\
**Replies:** 0\
**Last updated:** [December 25, 2021, 11:41am UTC](https://onehack.st/t/the-best-screen-capture-browser-extensions/208475 "2021-12-25T11:41:00Z")

</div>

creen capture is the quickest way to share your work or current page with anyone. Though there are many screen capture desktop tools (and we previously did a post on that), but if your work is mostly done on a web browse…

---

## [Spray365 | Makes Spraying Microsoft Accounts ](https://onehack.st/t/spray365-makes-spraying-microsoft-accounts/210406)

<div class="topic-metadata">

**Author:** [@TheStrength](https://onehack.st/u/TheStrength)\
**Replies:** 0\
**Last updated:** [December 25, 2021, 11:40am UTC](https://onehack.st/t/spray365-makes-spraying-microsoft-accounts/210406 "2021-12-25T11:40:32Z")

</div>

What is Spray365? Spray365 is a password spraying tool that identifies valid credentials for Microsoft accounts (Office 365 / Azure AD). How is Spray365 different from the many other password spraying tools that…

---

## [MultiPotato | Another Potato to get SYSTEM via SeImpersonate privileges](https://onehack.st/t/multipotato-another-potato-to-get-system-via-seimpersonate-privileges/210311)

<div class="topic-metadata">

**Author:** [@TheStrength](https://onehack.st/u/TheStrength)\
**Replies:** 0\
**Last updated:** [December 24, 2021, 11:36am UTC](https://onehack.st/t/multipotato-another-potato-to-get-system-via-seimpersonate-privileges/210311 "2021-12-24T11:36:18Z")

</div>

First of all - credit to @splinter\_code & @decoder\_it for RoguePotato as this code heavily bases on it. This is just another Potato to get SYSTEM via SeImpersonate privileges. But this one is different in terms of I…

---

## [W3Schools Offline Version | Download Tutorials](https://onehack.st/t/w3schools-offline-version-download-tutorials/210233)

<div class="topic-metadata">

**Author:** [@Aina](https://onehack.st/u/Aina)\
**Replies:** 2\
**Last updated:** [December 26, 2021, 11:53am UTC](https://onehack.st/t/w3schools-offline-version-download-tutorials/210233 "2021-12-26T11:53:33Z")

</div>

W3Schools Offline :high\_voltage: Update v2021.10.21 W3schools tutorials are available at any time within your local computer. :exclamation\_question\_mark: How to run docker image ? First pull image to your dock…

---

## [Umay | IoT Malware Similarity Analysis Platform](https://onehack.st/t/umay-iot-malware-similarity-analysis-platform/210227)

<div class="topic-metadata">

**Author:** [@Prometheus](https://onehack.st/u/Prometheus)\
**Replies:** 0\
**Last updated:** [December 23, 2021, 10:21am UTC](https://onehack.st/t/umay-iot-malware-similarity-analysis-platform/210227 "2021-12-23T10:21:13Z")

</div>

IoT Malware Similarity Analysis Platform View Demo Table of contents About The Project Current features Getting Started Prerequisites Installation Create your own dataset Contributing License About The Proj…

---

## [Mesh-Kridik | An Open-Source Security Checker That Performs Various Security Checks On A Kubernetes Cluster](https://onehack.st/t/mesh-kridik-an-open-source-security-checker-that-performs-various-security-checks-on-a-kubernetes-cluster/210138)

<div class="topic-metadata">

**Author:** [@TheStrength](https://onehack.st/u/TheStrength)\
**Replies:** 0\
**Last updated:** [December 22, 2021, 10:44am UTC](https://onehack.st/t/mesh-kridik-an-open-source-security-checker-that-performs-various-security-checks-on-a-kubernetes-cluster/210138 "2021-12-22T10:44:07Z")

</div>

mesh-kridik Enhance your Kubernetes service mesh security !! mesh-kridik is an open-source security checker that performs various security checks on a Kubernetes cluster with istio service mesh and outputs a security …

---

## [Mariana Trench | Security Focused Static Analysis Tool For Android And Java Applications](https://onehack.st/t/mariana-trench-security-focused-static-analysis-tool-for-android-and-java-applications/210053)

<div class="topic-metadata">

**Author:** [@NoBody](https://onehack.st/u/NoBody)\
**Replies:** 0\
**Last updated:** [December 21, 2021, 11:56am UTC](https://onehack.st/t/mariana-trench-security-focused-static-analysis-tool-for-android-and-java-applications/210053 "2021-12-21T11:56:22Z")

</div>

Mariana Trench is a security focused static analysis platform targeting Android. This guide will walk you through setting up Mariana Trench on your machine and get you to find your first remote code execution vulne…

---

## [Log4-detector | Detects Log4J versions on your file-system within any application](https://onehack.st/t/log4-detector-detects-log4j-versions-on-your-file-system-within-any-application/209964)

<div class="topic-metadata">

**Author:** [@PlayBoy83](https://onehack.st/u/PlayBoy83)\
**Replies:** 0\
**Last updated:** [December 20, 2021, 12:29pm UTC](https://onehack.st/t/log4-detector-detects-log4j-versions-on-your-file-system-within-any-application/209964 "2021-12-20T12:29:17Z")

</div>

Log4-detector Detects Log4J versions on your file-system within any application that are vulnerable to CVE-2021-44228 and CVE-2021-45046. It is able to even find instances that are hidden several layers deep. Works o…

---

## [O365Spray | Username Enumeration And Password Spraying Tool Aimed At Microsoft O365](https://onehack.st/t/o365spray-username-enumeration-and-password-spraying-tool-aimed-at-microsoft-o365/209887)

<div class="topic-metadata">

**Author:** [@TheStrength](https://onehack.st/u/TheStrength)\
**Replies:** 0\
**Last updated:** [December 19, 2021, 12:29pm UTC](https://onehack.st/t/o365spray-username-enumeration-and-password-spraying-tool-aimed-at-microsoft-o365/209887 "2021-12-19T12:29:00Z")

</div>

For educational, authorized and/or research purposes only. o365spray a username enumeration and password spraying tool aimed at Microsoft Office 365 (O365). This tool reimplements a collection of enumeration and sp…

---

## [DInjector | Collection Of Shellcode Injection Techniques Packed In A D/Invoke Weaponized DLL](https://onehack.st/t/dinjector-collection-of-shellcode-injection-techniques-packed-in-a-d-invoke-weaponized-dll/209804)

<div class="topic-metadata">

**Author:** [@Prometheus](https://onehack.st/u/Prometheus)\
**Replies:** 0\
**Last updated:** [December 18, 2021, 12:11pm UTC](https://onehack.st/t/dinjector-collection-of-shellcode-injection-techniques-packed-in-a-d-invoke-weaponized-dll/209804 "2021-12-18T12:11:09Z")

</div>

This repository is an accumulation of my code snippets for various shellcode injection techniques using fantastic D/Invoke API by @TheWover and @FuzzySecurity. Features: Fully ported to D/Invoke API Encrypted paylo…

---

## [ADenum | A Pentesting Tool That Allows To Find Misconfiguration Through The The Protocol LDAP And Exploit Some Of Those Weaknesses With Kerberos](https://onehack.st/t/adenum-a-pentesting-tool-that-allows-to-find-misconfiguration-through-the-the-protocol-ldap-and-exploit-some-of-those-weaknesses-with-kerberos/209711)

<div class="topic-metadata">

**Author:** [@Astrid](https://onehack.st/u/Astrid)\
**Replies:** 0\
**Last updated:** [December 16, 2021, 8:30pm UTC](https://onehack.st/t/adenum-a-pentesting-tool-that-allows-to-find-misconfiguration-through-the-the-protocol-ldap-and-exploit-some-of-those-weaknesses-with-kerberos/209711 "2021-12-16T20:30:59Z")

</div>

AD Enum is a pentesting tool that allows to find misconfiguration through the protocol LDAP and exploit some of those weaknesses with Kerberos. █████╗ ██████╗ ███████╗███╗ ██╗██╗ ██╗███╗ ███╗ ██╔══██╗█…

---

## [FiddleZAP | A Simplified Version Of EKFiddle For OWASP ZAP](https://onehack.st/t/fiddlezap-a-simplified-version-of-ekfiddle-for-owasp-zap/209674)

<div class="topic-metadata">

**Author:** [@WhiteHat](https://onehack.st/u/WhiteHat)\
**Replies:** 0\
**Last updated:** [December 16, 2021, 12:28pm UTC](https://onehack.st/t/fiddlezap-a-simplified-version-of-ekfiddle-for-owasp-zap/209674 "2021-12-16T12:28:20Z")

</div>

FiddleZAP is a simplified version of EKFiddle for OWASP ZAP. With ZAP as your web proxy, you are able to flag malicious traffic based on predefined regular expressions. Example: Alert, highlighting and tagging when …

---

## [Jektor | A Windows User-Mode Shellcode Execution Tool That Demonstrates Various Techniques That Malware Uses](https://onehack.st/t/jektor-a-windows-user-mode-shellcode-execution-tool-that-demonstrates-various-techniques-that-malware-uses/209594)

<div class="topic-metadata">

**Author:** [@Prometheus](https://onehack.st/u/Prometheus)\
**Replies:** 0\
**Last updated:** [December 15, 2021, 11:40am UTC](https://onehack.st/t/jektor-a-windows-user-mode-shellcode-execution-tool-that-demonstrates-various-techniques-that-malware-uses/209594 "2021-12-15T11:40:45Z")

</div>

This utility focuses on shellcode injection techniques to demonstrate methods that malware may use to execute shellcode on a victim system Dynamically resolves API functions to evade IAT inclusion Includes usage of …

---

## [Haptyc | Test Generation Framework](https://onehack.st/t/haptyc-test-generation-framework/209482)

<div class="topic-metadata">

**Author:** [@PlayBoy83](https://onehack.st/u/PlayBoy83)\
**Replies:** 0\
**Last updated:** [December 14, 2021, 12:11pm UTC](https://onehack.st/t/haptyc-test-generation-framework/209482 "2021-12-14T12:11:10Z")

</div>

What’s Haptyc? Haptyc is a python library which was built to add payload position support and Sniper/Clusterbomb/Batteringram/Pitchfork attack types into Turbo Intruder. While Haptyc accomplishes these goals fairly we…

---

## [The Best Design Tools For Online Instructors](https://onehack.st/t/the-best-design-tools-for-online-instructors/209397)

<div class="topic-metadata">

**Author:** [@PlayBoy83](https://onehack.st/u/PlayBoy83)\
**Replies:** 1\
**Last updated:** [December 13, 2021, 9:25pm UTC](https://onehack.st/t/the-best-design-tools-for-online-instructors/209397 "2021-12-13T21:25:29Z")

</div>

As a successful online instructor, you need to have all the tools and resources in place to create amazing learning experiences for your learners. Apart from using an Learning Management System (LMS), or an online platf…

[Previous page](https://onehack.st/c/tools-scripts/27.md?page=75)

[Next page](https://onehack.st/c/tools-scripts/27.md?page=77)
