# Tools & Scripts **URL:** https://onehack.st/c/tools-scripts/27.md?page=78 [Latest](https://onehack.st/latest.md) · [Categories](https://onehack.st/categories.md) · [Tags](https://onehack.st/tags.md) **Page:** 79 --- ## [JVMXRay | Make Java Security Events Of Interest Visible For Analysis](https://onehack.st/t/jvmxray-make-java-security-events-of-interest-visible-for-analysis/207187)
**Author:** [@WhiteHat](https://onehack.st/u/WhiteHat)\ **Replies:** 0\ **Last updated:** [November 18, 2021, 12:25pm UTC](https://onehack.st/t/jvmxray-make-java-security-events-of-interest-visible-for-analysis/207187 "2021-11-18T12:25:17Z")
JVMXRay is a technology for monitoring access to system resources within the Java Virtual Machine. It’s designed with application security emphasis but some will also find it beneficial for software quality processes … --- ## [Gotanda | Browser Web Extension For OSINT](https://onehack.st/t/gotanda-browser-web-extension-for-osint/207097)
**Author:** [@WhiteHat](https://onehack.st/u/WhiteHat)\ **Replies:** 0\ **Last updated:** [November 17, 2021, 10:42am UTC](https://onehack.st/t/gotanda-browser-web-extension-for-osint/207097 "2021-11-17T10:42:20Z")
Gotanda is OSINT(Open Source Intelligence) Web Extension for Firefox/Chrome. This Web Extension could search OSINT information from some IOC in web page.(IP,Domain,URL,SNS…etc) This Repository partly the studying an… --- ## [EXOCET | AV-evading, Undetectable, Payload Delivery Tool](https://onehack.st/t/exocet-av-evading-undetectable-payload-delivery-tool/207012)
**Author:** [@WhiteHat](https://onehack.st/u/WhiteHat)\ **Replies:** 0\ **Last updated:** [November 16, 2021, 11:27am UTC](https://onehack.st/t/exocet-av-evading-undetectable-payload-delivery-tool/207012 "2021-11-16T11:27:19Z")
Chang Tan AWS Certified Cloud Practitioner and Solutions Architect Associate changtan@listerunlimited.com EXOCET is superior to Metasploit’s “Evasive Payloads” modules as EXOCET uses AES-256 in GCM Mode (Galois/Coun… --- ## [AzureHunter | A Cloud Forensics Powershell Module To Run Threat Hunting Playbooks On Data From Azure And O365](https://onehack.st/t/azurehunter-a-cloud-forensics-powershell-module-to-run-threat-hunting-playbooks-on-data-from-azure-and-o365/206919)
**Author:** [@BlueHacker](https://onehack.st/u/BlueHacker)\ **Replies:** 0\ **Last updated:** [November 15, 2021, 10:53am UTC](https://onehack.st/t/azurehunter-a-cloud-forensics-powershell-module-to-run-threat-hunting-playbooks-on-data-from-azure-and-o365/206919 "2021-11-15T10:53:35Z")
A Powershell module to run threat hunting playbooks on data from Azure and O365 for Cloud Forensics purposes. Getting Started 1. Check that you have the right O365 Permissions T… --- ## [Fuse | Tool to Find File Upload Vulnerability](https://onehack.st/t/fuse-tool-to-find-file-upload-vulnerability/206796)
**Author:** [@WhiteHat](https://onehack.st/u/WhiteHat)\ **Replies:** 0\ **Last updated:** [November 13, 2021, 10:56pm UTC](https://onehack.st/t/fuse-tool-to-find-file-upload-vulnerability/206796 "2021-11-13T22:56:13Z")
FUSE FUSE is a penetration testing system designed to identify Unrestricted Executable File Upload (UEFU) vulnerabilities. The details of the testing strategy is in our paper, “FUSE: Finding File Upload Bugs via Penet… --- ## [Ad-Honeypot-Autodeploy | Deploy A Small, Intentionally Insecure, Vulnerable Windows Domain For RDP Honeypot Fully Automatically](https://onehack.st/t/ad-honeypot-autodeploy-deploy-a-small-intentionally-insecure-vulnerable-windows-domain-for-rdp-honeypot-fully-automatically/206766)
**Author:** [@TheStrength](https://onehack.st/u/TheStrength)\ **Replies:** 0\ **Last updated:** [November 13, 2021, 9:11am UTC](https://onehack.st/t/ad-honeypot-autodeploy-deploy-a-small-intentionally-insecure-vulnerable-windows-domain-for-rdp-honeypot-fully-automatically/206766 "2021-11-13T09:11:17Z")
Deploy a small, intentionally insecure, vulnerable Windows Domain for RDP Honeypot fully automatically. Runs on self-hosted virtualization using libvirt with QEMU/KVM (but it can be customized easily for cloud-based … --- ## [Chrome Extensions That Enhance Steam Gaming Experience ⭐](https://onehack.st/t/chrome-extensions-that-enhance-steam-gaming-experience/206329)
**Author:** [@Prometheus](https://onehack.st/u/Prometheus)\ **Replies:** 0\ **Last updated:** [November 12, 2021, 1:44pm UTC](https://onehack.st/t/chrome-extensions-that-enhance-steam-gaming-experience/206329 "2021-11-12T13:44:00Z")
If you’re a PC gamer, you probably use Steam to buy, play and manage some, if not all, of your video games. With all the sales and convenience that Steam brings, you’d probably be crazy not to. The Steam application is p… --- ## [Boofuzz | Network Protocol Fuzzing for Humans](https://onehack.st/t/boofuzz-network-protocol-fuzzing-for-humans/206679)
**Author:** [@WhiteHat](https://onehack.st/u/WhiteHat)\ **Replies:** 0\ **Last updated:** [November 12, 2021, 1:34pm UTC](https://onehack.st/t/boofuzz-network-protocol-fuzzing-for-humans/206679 "2021-11-12T13:34:40Z")
Boofuzz is a fork of and the successor to the venerable Sulley fuzzing framework. Besides numerous bug fixes, boofuzz aims for extensibility. The goal: fuzz everything. Why? Sulley has been the preeminent ope… --- ## [Kunyu | More Efficient Corporate Asset Collection](https://onehack.st/t/kunyu-more-efficient-corporate-asset-collection/206598)
**Author:** [@Hannah](https://onehack.st/u/Hannah)\ **Replies:** 0\ **Last updated:** [November 11, 2021, 10:35am UTC](https://onehack.st/t/kunyu-more-efficient-corporate-asset-collection/206598 "2021-11-11T10:35:49Z")
Kunyu(坤舆) - More efficient corporate asset collection English | 中文文档 0x00 Introduce Tool introduction Kunyu (kunyu), whose name is taken from , is actually a professional subject related to geographic informati… --- ## [Private Set Membership (PSM) | Cryptographic Protocol That Allows Clients To Privately Query](https://onehack.st/t/private-set-membership-psm-cryptographic-protocol-that-allows-clients-to-privately-query/206520)
**Author:** [@WhiteHat](https://onehack.st/u/WhiteHat)\ **Replies:** 0\ **Last updated:** [November 10, 2021, 11:31am UTC](https://onehack.st/t/private-set-membership-psm-cryptographic-protocol-that-allows-clients-to-privately-query/206520 "2021-11-10T11:31:46Z")
Private Set Membership (PSM) Problem Statement Private Set Membership (PSM) is a cryptographic protocol that allows clients to privately query whether the client’s identifier is a member of a set of identifiers held b… --- ## [Koppeling | Adaptive DLL Hijacking / Dynamic Export Forwarding](https://onehack.st/t/koppeling-adaptive-dll-hijacking-dynamic-export-forwarding/206409)
**Author:** [@BlueHacker](https://onehack.st/u/BlueHacker)\ **Replies:** 0\ **Last updated:** [November 9, 2021, 8:26am UTC](https://onehack.st/t/koppeling-adaptive-dll-hijacking-dynamic-export-forwarding/206409 "2021-11-09T08:26:20Z")
Koppeling This project is a demonstration of advanced DLL hijack techniques. It was released in conjunction with the “Adaptive DLL Hijacking” blog post. I recommend you start there to contextualize this code. This pr… --- ## [Etl-Parser | Event Trace Log File Parser In Pure Python](https://onehack.st/t/etl-parser-event-trace-log-file-parser-in-pure-python/206325)
**Author:** [@BlueHacker](https://onehack.st/u/BlueHacker)\ **Replies:** 0\ **Last updated:** [November 8, 2021, 8:05am UTC](https://onehack.st/t/etl-parser-event-trace-log-file-parser-in-pure-python/206325 "2021-11-08T08:05:10Z")
Event Trace Log file reader in pure Python etl-parser is a pure Python 3 parser library for ETL Windows log files. ETL is the default format for ETW as well as the default format for the Kernel logger. etl-parser ha… --- ## [The Best Discord Bots To Improve Your Discord Server](https://onehack.st/t/the-best-discord-bots-to-improve-your-discord-server/206218)
**Author:** [@PlayBoy83](https://onehack.st/u/PlayBoy83)\ **Replies:** 0\ **Last updated:** [November 7, 2021, 9:18am UTC](https://onehack.st/t/the-best-discord-bots-to-improve-your-discord-server/206218 "2021-11-07T09:18:26Z")
There’s much to like about Discord, the go-to chat server for communities. It’s free to use and manage, has VOIP support, and thanks to support for bots, it’s pretty customizable, too. Here are the best Discord bots you … --- ## [Smuggler | An HTTP Request Smuggling / Desync Testing Tool](https://onehack.st/t/smuggler-an-http-request-smuggling-desync-testing-tool/206214)
**Author:** [@Hannah](https://onehack.st/u/Hannah)\ **Replies:** 0\ **Last updated:** [November 7, 2021, 9:12am UTC](https://onehack.st/t/smuggler-an-http-request-smuggling-desync-testing-tool/206214 "2021-11-07T09:12:12Z")
Smuggler An HTTP Request Smuggling / Desync testing tool written in Python 3 Acknowledgements A special thanks to James Kettle for his research and methods into HTTP desyncs And a special thanks to Ben Sadeghipour f… --- ## [Retoolkit | Collections of Reverse Engineering Tools](https://onehack.st/t/retoolkit-collections-of-reverse-engineering-tools/206127)
**Author:** [@TheStrength](https://onehack.st/u/TheStrength)\ **Replies:** 0\ **Last updated:** [November 6, 2021, 7:07am UTC](https://onehack.st/t/retoolkit-collections-of-reverse-engineering-tools/206127 "2021-11-06T07:07:57Z")
https://github.com/mentebinaria/retoolkit/raw/main/assets/retoolkit.gif Reverse Engineer’s Toolkit What? This is a collection of tools you may like if you are interested on reverse engineering and/or malware analysis on… --- ## [HackTools | Browser Extension Contains Variety of Hacking Tool for Pentester](https://onehack.st/t/hacktools-browser-extension-contains-variety-of-hacking-tool-for-pentester/206125)
**Author:** [@PlayBoy83](https://onehack.st/u/PlayBoy83)\ **Replies:** 0\ **Last updated:** [November 6, 2021, 6:59am UTC](https://onehack.st/t/hacktools-browser-extension-contains-variety-of-hacking-tool-for-pentester/206125 "2021-11-06T06:59:25Z")
Introduction — Preview — Install — Build — Support The all-in-one Red Team browser extension for Web Pentesters HackTools, is a web extension facilitating your web application penetration tests, it includes cheat she… --- ## [HackerTarget | Tools And Network Intelligence To Identification of Security Vulnerabilities](https://onehack.st/t/hackertarget-tools-and-network-intelligence-to-identification-of-security-vulnerabilities/206022)
**Author:** [@WhiteHat](https://onehack.st/u/WhiteHat)\ **Replies:** 0\ **Last updated:** [November 5, 2021, 7:25am UTC](https://onehack.st/t/hackertarget-tools-and-network-intelligence-to-identification-of-security-vulnerabilities/206022 "2021-11-05T07:25:19Z")
Use open source tools and network intelligence to help organizations with attack surface discovery and identification of security vulnerabilities. Identification of an organizations vulnerabilities is an imposs… --- ## [ScanT3r | Web Security and Bug Bounty Automation Tool](https://onehack.st/t/scant3r-web-security-and-bug-bounty-automation-tool/205949)
**Author:** [@BlueHacker](https://onehack.st/u/BlueHacker)\ **Replies:** 0\ **Last updated:** [November 4, 2021, 8:19am UTC](https://onehack.st/t/scant3r-web-security-and-bug-bounty-automation-tool/205949 "2021-11-04T08:19:03Z")
ScanT3r Scant3r Wiki • Main Usage • For Developers • Media • Collaborators • TIPS • Description scant3r is a module-based web security tool, our goal is to make customizable tool with providing many functions and fea… --- ## [Lorsrf | Tool to Bruteforce SSRF Parameter](https://onehack.st/t/lorsrf-tool-to-bruteforce-ssrf-parameter/205871)
**Author:** [@WhiteHat](https://onehack.st/u/WhiteHat)\ **Replies:** 0\ **Last updated:** [November 3, 2021, 7:55am UTC](https://onehack.st/t/lorsrf-tool-to-bruteforce-ssrf-parameter/205871 "2021-11-03T07:55:43Z")
https://github.com/knassar702/lorsrf/raw/master/src/lorsrf.gif Lorsrf has been added to scant3r with useful additions (multi http method , multi content-type (json , query , xml , speed , large worlist and more)) http… --- ## [ToRat | Remote Administation Tool Using Tor Network](https://onehack.st/t/torat-remote-administation-tool-using-tor-network/205780)
**Author:** [@Hannah](https://onehack.st/u/Hannah)\ **Replies:** 0\ **Last updated:** [November 2, 2021, 7:53am UTC](https://onehack.st/t/torat-remote-administation-tool-using-tor-network/205780 "2021-11-02T07:53:32Z")
A Cross Platform Remote Administration tool written in Go using Tor as its transport mechanism currently supporting Windows, Linux, MacOS clients. DISCLAIMER USE FOR EDUCATIONAL PURPOSES ONLY Wiki How to use To… --- ## [WAES | Web Auto Enum & Scanner and Dumps Files as Result](https://onehack.st/t/waes-web-auto-enum-scanner-and-dumps-files-as-result/205684)
**Author:** [@Hannah](https://onehack.st/u/Hannah)\ **Replies:** 0\ **Last updated:** [November 1, 2021, 7:15am UTC](https://onehack.st/t/waes-web-auto-enum-scanner-and-dumps-files-as-result/205684 "2021-11-01T07:15:08Z")
CPH:SEC WAES at a Glance Doing HTB or other CTFs enumeration against targets with HTTP(S) can become trivial. It can get tiresome to always run the same script/tests on every box eg. nmap, nikto, dirb and so on. A one… --- ## [AdoBot | Open-source Android Spyware](https://onehack.st/t/adobot-open-source-android-spyware/205582)
**Author:** [@BlueHacker](https://onehack.st/u/BlueHacker)\ **Replies:** 0\ **Last updated:** [October 31, 2021, 7:31am UTC](https://onehack.st/t/adobot-open-source-android-spyware/205582 "2021-10-31T07:31:17Z")
AdoBot Opensource Android Spyware Features Realtime command execution Schedule commands Hidden app icon (stealth mode) Fetch SMS in Fetch call logs Fetch contacts Send SMS command Forward received/sent SMS Monitor l… --- ## [CBM | Car Backdoor Maker (Hacking a Car)](https://onehack.st/t/cbm-car-backdoor-maker-hacking-a-car/205476)
**Author:** [@PlayBoy83](https://onehack.st/u/PlayBoy83)\ **Replies:** 0\ **Last updated:** [October 29, 2021, 11:32pm UTC](https://onehack.st/t/cbm-car-backdoor-maker-hacking-a-car/205476 "2021-10-29T23:32:33Z")
Car Backdoor Maker The Car Backdoor Maker is a software for making attack templates and load them into The Bicho. Before starting, please read how to Get The Bicho hardware. Screnshot Install and Usage This projec… --- ## [Open Source Cybersecurity | 30+ Tools You Must Have!](https://onehack.st/t/open-source-cybersecurity-30-tools-you-must-have/158828)
**Author:** [@PlayBoy83](https://onehack.st/u/PlayBoy83)\ **Replies:** 2\ **Last updated:** [October 30, 2021, 5:02am UTC](https://onehack.st/t/open-source-cybersecurity-30-tools-you-must-have/158828 "2021-10-30T05:02:36Z")
\----BetterCAP BetterCAP is often used by those who perform penetration testing and security assessments. This tool and framework is in particular useful for attempting man-in-the-middle attacks (MitM). https://git… --- ## [WordPress Exploit Framework | Tool For Scan Vulnerabilities In WordPress](https://onehack.st/t/wordpress-exploit-framework-tool-for-scan-vulnerabilities-in-wordpress/202191)
**Author:** [@BlueHacker](https://onehack.st/u/BlueHacker)\ **Replies:** 0\ **Last updated:** [October 28, 2021, 5:47pm UTC](https://onehack.st/t/wordpress-exploit-framework-tool-for-scan-vulnerabilities-in-wordpress/202191 "2021-10-28T17:47:00Z")
WordPress Exploit Framework A Ruby framework designed to aid in the penetration testing of WordPress systems. Installation To install the latest stable build, run gem install wpxf. After installation, you can la… --- ## [XSpear | Powerfull XSS Scanner and Parameter Analysis Tool](https://onehack.st/t/xspear-powerfull-xss-scanner-and-parameter-analysis-tool/205296)
**Author:** [@TheStrength](https://onehack.st/u/TheStrength)\ **Replies:** 0\ **Last updated:** [October 27, 2021, 2:29pm UTC](https://onehack.st/t/xspear-powerfull-xss-scanner-and-parameter-analysis-tool/205296 "2021-10-27T14:29:20Z")
XSpear XSpear is XSS Scanner on ruby gems TOC XSpear Key features Installation Dependency gems Usage on cli Result types Verbose Mode Case by Case Sample log Usage on ruby code Add Scanning Module Upd… --- ## [Osmedeus | The Most Complete Reconnaissance Tool and Vulnerability Scanning](https://onehack.st/t/osmedeus-the-most-complete-reconnaissance-tool-and-vulnerability-scanning/205191)
**Author:** [@TheStrength](https://onehack.st/u/TheStrength)\ **Replies:** 0\ **Last updated:** [October 26, 2021, 1:20pm UTC](https://onehack.st/t/osmedeus-the-most-complete-reconnaissance-tool-and-vulnerability-scanning/205191 "2021-10-26T13:20:50Z")
What is Osmedeus? Osmedeus allows you automated run the collection of awesome tools to reconnaissance and vulnerability scanning against the target. Next generation version? Enjoying this tool? Support it’s devel… --- ## [BrainDamage | Remote Administration Tool Which Uses Telegram as Command & Control Server](https://onehack.st/t/braindamage-remote-administration-tool-which-uses-telegram-as-command-control-server/205125)
**Author:** [@Prometheus](https://onehack.st/u/Prometheus)\ **Replies:** 0\ **Last updated:** [October 25, 2021, 3:21pm UTC](https://onehack.st/t/braindamage-remote-administration-tool-which-uses-telegram-as-command-control-server/205125 "2021-10-25T15:21:02Z")
BrainDamage A python based remote administration tool which uses Telegram as C&C server. /\\ /\_.\\ \_,.-'/ \`",\\'-.,\_ -~^ /\_\_\_\_… --- ## [Envato Elements Downloader \[Unlimited download\]](https://onehack.st/t/envato-elements-downloader-unlimited-download/205119)
**Author:** [@Techtanic](https://onehack.st/u/Techtanic)\ **Replies:** 150\ **Last updated:** [December 28, 2021, 1:40pm UTC](https://onehack.st/t/envato-elements-downloader-unlimited-download/205119 "2021-12-28T13:40:32Z")
Description A simple tool to download Envato Elements Items. Unlimited Download High-Speed Download No Advertisement Completely free. Requirements Windows x64bit Chrome or MSEdge or Brave) Note The servers are not c… --- ## [XSRFProbe | Advanced Cross Site Request Forgery (CSRF/XSRF) Audit and Exploitation Toolkit](https://onehack.st/t/xsrfprobe-advanced-cross-site-request-forgery-csrf-xsrf-audit-and-exploitation-toolkit/205054)
**Author:** [@TheStrength](https://onehack.st/u/TheStrength)\ **Replies:** 0\ **Last updated:** [October 24, 2021, 2:32pm UTC](https://onehack.st/t/xsrfprobe-advanced-cross-site-request-forgery-csrf-xsrf-audit-and-exploitation-toolkit/205054 "2021-10-24T14:32:50Z")
XSRFProbe The Prime Cross Site Request Forgery Audit & Exploitation Toolkit. About: XSRFProbe is an advanced Cross Site Request Forgery (CSRF/XSRF) Audit and Exploitation Toolkit. Equipped with a powerful crawli… [Previous page](https://onehack.st/c/tools-scripts/27.md?page=77) [Next page](https://onehack.st/c/tools-scripts/27.md?page=79)