# Tools & Scripts **URL:** https://onehack.st/c/tools-scripts/27.md?page=77 [Latest](https://onehack.st/latest.md) · [Categories](https://onehack.st/categories.md) · [Tags](https://onehack.st/tags.md) **Page:** 78 --- ## [CloudSpec | An Open Source Tool For Validating Your Resources In Your Cloud Providers Using A Logical Language](https://onehack.st/t/cloudspec-an-open-source-tool-for-validating-your-resources-in-your-cloud-providers-using-a-logical-language/209389)
**Author:** [@Prometheus](https://onehack.st/u/Prometheus)\ **Replies:** 0\ **Last updated:** [December 13, 2021, 12:16pm UTC](https://onehack.st/t/cloudspec-an-open-source-tool-for-validating-your-resources-in-your-cloud-providers-using-a-logical-language/209389 "2021-12-13T12:16:46Z")
CloudSpec is an open source tool for validating your resources in your cloud providers using a logical language that everybody can understand. With its reasonably simple syntax, you can validate the configuration of yo… --- ## [Websites To Edit Your Photos Online For Free](https://onehack.st/t/websites-to-edit-your-photos-online-for-free/209310)
**Author:** [@Prometheus](https://onehack.st/u/Prometheus)\ **Replies:** 4\ **Last updated:** [January 13, 2022, 9:17am UTC](https://onehack.st/t/websites-to-edit-your-photos-online-for-free/209310 "2022-01-13T09:17:01Z")
We take thousands of pictures of people, places, and things and most often share them with others. But not every click is perfect and you often need to improve your photos. If you don’t have the time and resources to ru… --- ## [CaptfEncoder | An Extensible Cross Platform Network Security Tool Suite](https://onehack.st/t/captfencoder-an-extensible-cross-platform-network-security-tool-suite/209303)
**Author:** [@Hannah](https://onehack.st/u/Hannah)\ **Replies:** 0\ **Last updated:** [December 12, 2021, 10:43am UTC](https://onehack.st/t/captfencoder-an-extensible-cross-platform-network-security-tool-suite/209303 "2021-12-12T10:43:53Z")
English | 中文 Captfencoder is an extensible cross platform network security tool suite, providing network security related code conversion, classical cryptography, cryptography, asymmetric encryption, special coding… --- ## [Tarian | Antivirus for Kubernetes](https://onehack.st/t/tarian-antivirus-for-kubernetes/209230)
**Author:** [@WhiteHat](https://onehack.st/u/WhiteHat)\ **Replies:** 0\ **Last updated:** [December 11, 2021, 11:48am UTC](https://onehack.st/t/tarian-antivirus-for-kubernetes/209230 "2021-12-11T11:48:23Z")
We want to maintain this as an open-source project to fight against the attacks on our favorite Kubernetes ecosystem. By continuous contribution, we can fight threats together as a community. Protect your Applicatio… --- ## [Fresh Coupons | Automatically Find & Apply Discount Coupons For Udemy Courses ⭐](https://onehack.st/t/fresh-coupons-automatically-find-apply-discount-coupons-for-udemy-courses/209155)
**Author:** [@Aina](https://onehack.st/u/Aina)\ **Replies:** 16\ **Last updated:** [July 1, 2024, 4:55pm UTC](https://onehack.st/t/fresh-coupons-automatically-find-apply-discount-coupons-for-udemy-courses/209155 "2024-07-01T16:55:11Z")
Automatically find and apply discount coupon codes for Udemy courses Buy paid Udemy courses for free/with discount without extra step! See all discounted courses right in Udemy and apply coupon code automatically o… --- ## [AFLTriage | Tool To Triage Crashing Input Files Using A Debugger](https://onehack.st/t/afltriage-tool-to-triage-crashing-input-files-using-a-debugger/209152)
**Author:** [@TheStrength](https://onehack.st/u/TheStrength)\ **Replies:** 0\ **Last updated:** [December 10, 2021, 9:59am UTC](https://onehack.st/t/afltriage-tool-to-triage-crashing-input-files-using-a-debugger/209152 "2021-12-10T09:59:12Z")
AFLTriage is a tool to triage crashing input files using a debugger. It is designed to be portable and not require any run-time dependencies, besides libc and an external debugger. It supports triaging crashes generat… --- ## [SMBeagle | Fileshare Auditing Tool That Hunts Out All Files It Can See In The Network And Reports If The File Can Be Read And/Or Written](https://onehack.st/t/smbeagle-fileshare-auditing-tool-that-hunts-out-all-files-it-can-see-in-the-network-and-reports-if-the-file-can-be-read-and-or-written/209074)
**Author:** [@BlueHacker](https://onehack.st/u/BlueHacker)\ **Replies:** 0\ **Last updated:** [December 9, 2021, 10:16am UTC](https://onehack.st/t/smbeagle-fileshare-auditing-tool-that-hunts-out-all-files-it-can-see-in-the-network-and-reports-if-the-file-can-be-read-and-or-written/209074 "2021-12-09T10:16:10Z")
Intro SMBeagle is an (SMB) fileshare auditing tool that hunts out all files it can see in the network and reports if the file can be read and/or written. All these findings are streamed out to either a CSV file or an … --- ## [Swurg | Parse OpenAPI Documents Into Burp Suite For Automating OpenAPI-based APIs Security Assessments](https://onehack.st/t/swurg-parse-openapi-documents-into-burp-suite-for-automating-openapi-based-apis-security-assessments/208978)
**Author:** [@Hannah](https://onehack.st/u/Hannah)\ **Replies:** 0\ **Last updated:** [December 8, 2021, 9:45am UTC](https://onehack.st/t/swurg-parse-openapi-documents-into-burp-suite-for-automating-openapi-based-apis-security-assessments/208978 "2021-12-08T09:45:28Z")
Swurg is a Burp Suite extension designed for OpenAPI testing. The OpenAPI Specification (OAS) defines a standard, programming language-agnostic interface description for REST APIs, which allows both humans an… --- ## [STEWS | A Security Tool For Enumerating WebSockets](https://onehack.st/t/stews-a-security-tool-for-enumerating-websockets/208909)
**Author:** [@Prometheus](https://onehack.st/u/Prometheus)\ **Replies:** 0\ **Last updated:** [December 7, 2021, 9:11am UTC](https://onehack.st/t/stews-a-security-tool-for-enumerating-websockets/208909 "2021-12-07T09:11:37Z")
STEWS is a tool suite for security testing of WebSockets This research was first presented at OWASP Global AppSec US 2021 Features STEWS provides the ability to: Discover: find We… --- ## [Forbidden | Bypass 4Xx HTTP Response Status Codes](https://onehack.st/t/forbidden-bypass-4xx-http-response-status-codes/208828)
**Author:** [@NoBody](https://onehack.st/u/NoBody)\ **Replies:** 0\ **Last updated:** [December 6, 2021, 10:59am UTC](https://onehack.st/t/forbidden-bypass-4xx-http-response-status-codes/208828 "2021-12-06T10:59:56Z")
Bypass 4xx HTTP response status codes. Based on PycURL. Script uses multithreading, and is based on brute forcing so might have some false positives. Script uses colored output. Results will be sorted by HTTP respon… --- ## [Social Media Tools To Post Content At The Right Time 💥](https://onehack.st/t/social-media-tools-to-post-content-at-the-right-time/177653)
**Author:** [@NoBody](https://onehack.st/u/NoBody)\ **Replies:** 0\ **Last updated:** [December 5, 2021, 10:15am UTC](https://onehack.st/t/social-media-tools-to-post-content-at-the-right-time/177653 "2021-12-05T10:15:00Z")
We’re all quite familiar with posting statuses, tweets, and photos on different social media networks. However, managing multiple networks for social media marketing of your business is a whole new story – that too, a co… --- ## [IAM Vulnerable | Use Terraform To Create Your Own Vulnerable By Design AWS IAM Privilege Escalation Playground](https://onehack.st/t/iam-vulnerable-use-terraform-to-create-your-own-vulnerable-by-design-aws-iam-privilege-escalation-playground/208735)
**Author:** [@WhiteHat](https://onehack.st/u/WhiteHat)\ **Replies:** 0\ **Last updated:** [December 5, 2021, 9:48am UTC](https://onehack.st/t/iam-vulnerable-use-terraform-to-create-your-own-vulnerable-by-design-aws-iam-privilege-escalation-playground/208735 "2021-12-05T09:48:18Z")
Use Terraform to create your own vulnerable by design AWS IAM privilege escalation playground. IAM Vulnerable uses the Terraform binary and your AWS credentials to deploy over 250 IAM resources into your selected AWS… --- ## [Kerberoast | Kerberoast Attack Pure Python](https://onehack.st/t/kerberoast-kerberoast-attack-pure-python/208643)
**Author:** [@PlayBoy83](https://onehack.st/u/PlayBoy83)\ **Replies:** 0\ **Last updated:** [December 4, 2021, 8:11am UTC](https://onehack.st/t/kerberoast-kerberoast-attack-pure-python/208643 "2021-12-04T08:11:00Z")
Install pip3 install kerberoast Prereqirements Python 3.6 See requirements.txt For the impatient IMPORTANT: the accepted target url formats for LDAP and Kerberos are the following \ : \+… --- ## [Collection Of 30+ Useful Web Tools And Services | Massive List ⭐](https://onehack.st/t/collection-of-30-useful-web-tools-and-services-massive-list/208571)
**Author:** [@Aina](https://onehack.st/u/Aina)\ **Replies:** 6\ **Last updated:** [April 27, 2024, 8:52pm UTC](https://onehack.st/t/collection-of-30-useful-web-tools-and-services-massive-list/208571 "2024-04-27T20:52:29Z")
In this day and age, time is of the essence. This is especially true for the design and development industry as they have to deal with multiple projects mostly with stringent deadlines. So for these folks, it is impe… --- ## [Crawpy | Yet Another Content Discovery Tool](https://onehack.st/t/crawpy-yet-another-content-discovery-tool/208567)
**Author:** [@PlayBoy83](https://onehack.st/u/PlayBoy83)\ **Replies:** 1\ **Last updated:** [December 9, 2021, 4:19am UTC](https://onehack.st/t/crawpy-yet-another-content-discovery-tool/208567 "2021-12-09T04:19:37Z")
Yet another content discovery tool written in python. What makes this tool different than others: It is written to work asynchronously which allows reaching to maximum limits. So it is very fast. Calibration mode, … --- ## [ShonyDanza | A Customizable, Easy-To-Navigate Tool For Researching, Pen Testing, And Defending With The Power Of Shodan](https://onehack.st/t/shonydanza-a-customizable-easy-to-navigate-tool-for-researching-pen-testing-and-defending-with-the-power-of-shodan/208468)
**Author:** [@BlueHacker](https://onehack.st/u/BlueHacker)\ **Replies:** 0\ **Last updated:** [December 2, 2021, 10:38am UTC](https://onehack.st/t/shonydanza-a-customizable-easy-to-navigate-tool-for-researching-pen-testing-and-defending-with-the-power-of-shodan/208468 "2021-12-02T10:38:11Z")
A customizable, easy-to-navigate tool for researching, pen testing, and defending with the power of Shodan. With ShonyDanza, you can: Obtain IPs based on search criteria Automatica… --- ## [The Best Free Invoice Generators To Create Invoices Instantly](https://onehack.st/t/the-best-free-invoice-generators-to-create-invoices-instantly/208394)
**Author:** [@TheStrength](https://onehack.st/u/TheStrength)\ **Replies:** 1\ **Last updated:** [December 1, 2021, 10:41am UTC](https://onehack.st/t/the-best-free-invoice-generators-to-create-invoices-instantly/208394 "2021-12-01T10:41:59Z")
As a small business owner or a freelancer, you know the importance of invoicing. Invoices are sent to notify your clients about products and services you delivered, so you can get paid for your work. As a rule, invoices… --- ## [ZipExec | A Unique Technique To Execute Binaries From A Password Protected Zip](https://onehack.st/t/zipexec-a-unique-technique-to-execute-binaries-from-a-password-protected-zip/208384)
**Author:** [@TheStrength](https://onehack.st/u/TheStrength)\ **Replies:** 0\ **Last updated:** [December 1, 2021, 9:48am UTC](https://onehack.st/t/zipexec-a-unique-technique-to-execute-binaries-from-a-password-protected-zip/208384 "2021-12-01T09:48:36Z")
ZipExec is a Proof-of-Concept (POC) tool to wrap binary-based tools into a password-protected zip file. This zip file is then base64 encoded into a string that is rebuilt on disk. This encoded string is then loaded in… --- ## [Digital-Forensics-Lab | Free Hands-On Digital Forensics Labs For Students And Faculty](https://onehack.st/t/digital-forensics-lab-free-hands-on-digital-forensics-labs-for-students-and-faculty/208246)
**Author:** [@WhiteHat](https://onehack.st/u/WhiteHat)\ **Replies:** 1\ **Last updated:** [December 13, 2021, 1:07pm UTC](https://onehack.st/t/digital-forensics-lab-free-hands-on-digital-forensics-labs-for-students-and-faculty/208246 "2021-12-13T13:07:16Z")
Hands-on labs Forensic Intelligence Repository Features of Repository =================== Hands-on Digital Forensics Labs: designed for Students and Faculty Linux-based lab: All labs are purely based on Ka… --- ## [DetectionLabELK | A Fork From DetectionLab With ELK Stack Instead Of Splunk](https://onehack.st/t/detectionlabelk-a-fork-from-detectionlab-with-elk-stack-instead-of-splunk/208151)
**Author:** [@TheStrength](https://onehack.st/u/TheStrength)\ **Replies:** 0\ **Last updated:** [November 29, 2021, 10:29am UTC](https://onehack.st/t/detectionlabelk-a-fork-from-detectionlab-with-elk-stack-instead-of-splunk/208151 "2021-11-29T10:29:07Z")
DetectionLabELK is a fork from Chris Long’s DetectionLab with ELK stack instead of Splunk. Description: DetectionLabELK is the perfect lab to use if you would like to build effective detection capabilities. It h… --- ## [Cracken | A Fast Password Wordlist Generator, Smartlist Creation And Password Hybrid-Mask Analysis Tool](https://onehack.st/t/cracken-a-fast-password-wordlist-generator-smartlist-creation-and-password-hybrid-mask-analysis-tool/208057)
**Author:** [@WhiteHat](https://onehack.st/u/WhiteHat)\ **Replies:** 0\ **Last updated:** [November 28, 2021, 11:07am UTC](https://onehack.st/t/cracken-a-fast-password-wordlist-generator-smartlist-creation-and-password-hybrid-mask-analysis-tool/208057 "2021-11-28T11:07:40Z")
Cracken is a fast password wordlist generator, Smartlist creation and password hybrid-mask analysis tool written in pure safe Rust (more on talk/). Inspired by great tools like maskprocessor, hashcat, Crunch and … --- ## [ELFXtract | An Automated Analysis Tool Used For Enumerating ELF Binaries](https://onehack.st/t/elfxtract-an-automated-analysis-tool-used-for-enumerating-elf-binaries/207978)
**Author:** [@Hannah](https://onehack.st/u/Hannah)\ **Replies:** 0\ **Last updated:** [November 27, 2021, 9:35am UTC](https://onehack.st/t/elfxtract-an-automated-analysis-tool-used-for-enumerating-elf-binaries/207978 "2021-11-27T09:35:46Z")
ELFXtract is an automated analysis tool used for enumerating ELF binaries Powered by Radare2 and r2ghidra This is specially developed for PWN challenges and it has many automated features It almost displays every d… --- ## [Nanobrok | Web Service For Control And Protect Your Android Device Remotely](https://onehack.st/t/nanobrok-web-service-for-control-and-protect-your-android-device-remotely/207892)
**Author:** [@WhiteHat](https://onehack.st/u/WhiteHat)\ **Replies:** 0\ **Last updated:** [November 26, 2021, 8:57am UTC](https://onehack.st/t/nanobrok-web-service-for-control-and-protect-your-android-device-remotely/207892 "2021-11-26T08:57:07Z")
Web Service write in Python for control and protect your android device remotely. The official app can be found on the PlayStore: NanobrokPro Nanobrok Community Overview Nanobrok-Server is powerful opensource webs… --- ## [Redherd Framework | A Collaborative And Serverless Framework For Orchestrating A Geographically Distributed Group Of Assets](https://onehack.st/t/redherd-framework-a-collaborative-and-serverless-framework-for-orchestrating-a-geographically-distributed-group-of-assets/207784)
**Author:** [@PlayBoy83](https://onehack.st/u/PlayBoy83)\ **Replies:** 0\ **Last updated:** [November 25, 2021, 12:42am UTC](https://onehack.st/t/redherd-framework-a-collaborative-and-serverless-framework-for-orchestrating-a-geographically-distributed-group-of-assets/207784 "2021-11-25T00:42:25Z")
RedHerd is a collaborative and serverless framework for orchestrating a geographically distributed group of assets capable of conducting simulating complex offensive cyberspace operations. Getting Started Take a look… --- ## [Whispers | Identify Hardcoded Secrets In Static Structured Text](https://onehack.st/t/whispers-identify-hardcoded-secrets-in-static-structured-text/207666)
**Author:** [@Prometheus](https://onehack.st/u/Prometheus)\ **Replies:** 0\ **Last updated:** [November 24, 2021, 12:51am UTC](https://onehack.st/t/whispers-identify-hardcoded-secrets-in-static-structured-text/207666 "2021-11-24T00:51:08Z")
“My little birds are everywhere, even in the North, they whisper to me the strangest stories.” - Lord Varys Whispers is a static code analysis tool designed for parsing various common data formats in search … --- ## [ThreatBox | A Standard And Controlled Linux Based Attack Platform](https://onehack.st/t/threatbox-a-standard-and-controlled-linux-based-attack-platform/207610)
**Author:** [@Prometheus](https://onehack.st/u/Prometheus)\ **Replies:** 0\ **Last updated:** [November 23, 2021, 4:53am UTC](https://onehack.st/t/threatbox-a-standard-and-controlled-linux-based-attack-platform/207610 "2021-11-23T04:53:18Z")
ThreatBox is a standard and controlled Linux based attack platform. I’ve used a version of this for years. It started as a collection of scripts, lived as a rolling virtual machine, e… --- ## [ThreadBoat | Program Uses Thread Execution Hijacking To Inject Native Shell-code Into A Standard Win32 Application](https://onehack.st/t/threadboat-program-uses-thread-execution-hijacking-to-inject-native-shell-code-into-a-standard-win32-application/207537)
**Author:** [@TheStrength](https://onehack.st/u/TheStrength)\ **Replies:** 0\ **Last updated:** [November 22, 2021, 1:31pm UTC](https://onehack.st/t/threadboat-program-uses-thread-execution-hijacking-to-inject-native-shell-code-into-a-standard-win32-application/207537 "2021-11-22T13:31:57Z")
https://camo.githubusercontent.com/d54fb78d7f3fdc84e375b317048b4c0c2ff70529fba9f581554a838ac6f55127/68747470733a2f2f312e62702e626c6f6773706f742e636f6d2f2d70514358506b364e4242382f585a5535694c57584f46492f414141414141414151… --- ## [SillyRAT | A Cross Platform Multifunctional (Windows/Linux/Mac) RAT](https://onehack.st/t/sillyrat-a-cross-platform-multifunctional-windows-linux-mac-rat/207428)
**Author:** [@Hannah](https://onehack.st/u/Hannah)\ **Replies:** 0\ **Last updated:** [November 21, 2021, 1:01pm UTC](https://onehack.st/t/sillyrat-a-cross-platform-multifunctional-windows-linux-mac-rat/207428 "2021-11-21T13:01:55Z")
A Cross Platform multifunctional (Windows/Linux/Mac) RAT. Getting Started Description A cross platform RAT written in pure Python. The RAT accept commands alongside arguments to either perform as the server who a… --- ## [Nosferatu | Lsass NTLM Authentication Backdoor](https://onehack.st/t/nosferatu-lsass-ntlm-authentication-backdoor/207352)
**Author:** [@Prometheus](https://onehack.st/u/Prometheus)\ **Replies:** 0\ **Last updated:** [November 20, 2021, 11:32am UTC](https://onehack.st/t/nosferatu-lsass-ntlm-authentication-backdoor/207352 "2021-11-20T11:32:19Z")
Lsass NTLM Authentication Backdoor How it Works First, the DLL is injected into the lsass.exe process, and will begin hooking authentication WinAPI calls. The targeted function is MsvpPasswordValidate(), located in N… --- ## [Kube-Applier | Enables Automated Deployment And Declarative Configuration For Your Kubernetes Cluster](https://onehack.st/t/kube-applier-enables-automated-deployment-and-declarative-configuration-for-your-kubernetes-cluster/207249)
**Author:** [@TheStrength](https://onehack.st/u/TheStrength)\ **Replies:** 0\ **Last updated:** [November 19, 2021, 1:04am UTC](https://onehack.st/t/kube-applier-enables-automated-deployment-and-declarative-configuration-for-your-kubernetes-cluster/207249 "2021-11-19T01:04:16Z")
kube-applier is a service that enables continuous deployment of Kubernetes objects by applying declarative configuration files from a Git repository to a Kubernetes cluster. kube-applier runs as a Pod in your clus… [Previous page](https://onehack.st/c/tools-scripts/27.md?page=76) [Next page](https://onehack.st/c/tools-scripts/27.md?page=78)