# Tools & Scripts

**URL:** https://onehack.st/c/tools-scripts/27.md?page=79

[Latest](https://onehack.st/latest.md) · [Categories](https://onehack.st/categories.md) · [Tags](https://onehack.st/tags.md)

**Page:** 80

---

## [Tor-Router | Use TOR as a Transparent Proxy and Send All Your Trafic Under TOR](https://onehack.st/t/tor-router-use-tor-as-a-transparent-proxy-and-send-all-your-trafic-under-tor/204979)

<div class="topic-metadata">

**Author:** [@PlayBoy83](https://onehack.st/u/PlayBoy83)\
**Replies:** 0\
**Last updated:** [October 23, 2021, 12:23pm UTC](https://onehack.st/t/tor-router-use-tor-as-a-transparent-proxy-and-send-all-your-trafic-under-tor/204979 "2021-10-23T12:23:04Z")

</div>

TOR Router Tor Router allow you to use TOR as a transparent proxy and send all your trafic under TOR INCLUDING DNS REQUESTS, the only that you need is: a system using systemd (if you want to use the service) and tor. …

---

## [Blisqy | Exploit Time-based blind-SQL Injection in HTTP-Headers](https://onehack.st/t/blisqy-exploit-time-based-blind-sql-injection-in-http-headers/204903)

<div class="topic-metadata">

**Author:** [@BlueHacker](https://onehack.st/u/BlueHacker)\
**Replies:** 0\
**Last updated:** [October 22, 2021, 11:50am UTC](https://onehack.st/t/blisqy-exploit-time-based-blind-sql-injection-in-http-headers/204903 "2021-10-22T11:50:38Z")

</div>

1. Blisqy Blisqy is a tool to aid Web Security researchers to find Time-based Blind SQL injection on HTTP Headers and also exploitation of the same vulnerability. The exploitation enables slow data siphon from a data…

---

## [QRLJacking | Tool To Hijack All Application With QR Code Login](https://onehack.st/t/qrljacking-tool-to-hijack-all-application-with-qr-code-login/204804)

<div class="topic-metadata">

**Author:** [@PlayBoy83](https://onehack.st/u/PlayBoy83)\
**Replies:** 0\
**Last updated:** [October 21, 2021, 10:31am UTC](https://onehack.st/t/qrljacking-tool-to-hijack-all-application-with-qr-code-login/204804 "2021-10-21T10:31:43Z")

</div>

QRLJacker - QRLJacking Exploitation Framework QRLJacker is a highly customizable exploitation framework to demonstrate “QRLJacking Attack Vector” to show how it is easy to hijack services that depend on QR Code as an…

---

## [Kali NetHunter App Store | Android Applications Penetration Testing Store](https://onehack.st/t/kali-nethunter-app-store-android-applications-penetration-testing-store/204688)

<div class="topic-metadata">

**Author:** [@TheStrength](https://onehack.st/u/TheStrength)\
**Replies:** 0\
**Last updated:** [October 20, 2021, 10:01am UTC](https://onehack.st/t/kali-nethunter-app-store-android-applications-penetration-testing-store/204688 "2021-10-20T10:01:53Z")

</div>

Kali NetHunter is open app store to install variety android applications for penetration testing and forensics, you can found any kind of android apps for Pentest (Linux Terminal, TOR, WIHD Injector, Wireless Kungfu A…

---

## [Bolt | Cross-Site Request Forgery (CSRF) Vulnerablity Scanner](https://onehack.st/t/bolt-cross-site-request-forgery-csrf-vulnerablity-scanner/204578)

<div class="topic-metadata">

**Author:** [@BlueHacker](https://onehack.st/u/BlueHacker)\
**Replies:** 1\
**Last updated:** [October 20, 2021, 1:52am UTC](https://onehack.st/t/bolt-cross-site-request-forgery-csrf-vulnerablity-scanner/204578 "2021-10-20T01:52:05Z")

</div>

Bolt A dumb CSRF scanner Important Bolt is in beta phase of development which means there can be bugs. Any production use of this tool discouraged. Pull requests and issues are welcome. I also suggest you to pu…

---

## [Slackor | Golang Implant That Uses Slack as a Command and Control Server](https://onehack.st/t/slackor-golang-implant-that-uses-slack-as-a-command-and-control-server/204474)

<div class="topic-metadata">

**Author:** [@Prometheus](https://onehack.st/u/Prometheus)\
**Replies:** 0\
**Last updated:** [October 18, 2021, 8:30am UTC](https://onehack.st/t/slackor-golang-implant-that-uses-slack-as-a-command-and-control-server/204474 "2021-10-18T08:30:50Z")

</div>

Maintained at https://github.com/n00py/Slackor A Golang implant that uses Slack as a command and control channel. This project was inspired by Gcat and Twittor. This tool is released as a proof of concept. Be su…

---

## [Killcast | Hijack Chromecast Devices in Your Network](https://onehack.st/t/killcast-hijack-chromecast-devices-in-your-network/204383)

<div class="topic-metadata">

**Author:** [@TheStrength](https://onehack.st/u/TheStrength)\
**Replies:** 0\
**Last updated:** [October 17, 2021, 8:00am UTC](https://onehack.st/t/killcast-hijack-chromecast-devices-in-your-network/204383 "2021-10-17T08:00:36Z")

</div>

Manipulate Chromecast Devices in your Network Available in Inspiration - Thousands of Google Chromecast Devices Hijacked to Promote PewDiePie This tool is a Proof of Concept and is for Research Purposes Only, k…

---

## [LeakLooker | Tool To Find Open Websites Databases With Shodan](https://onehack.st/t/leaklooker-tool-to-find-open-websites-databases-with-shodan/204293)

<div class="topic-metadata">

**Author:** [@TheStrength](https://onehack.st/u/TheStrength)\
**Replies:** 0\
**Last updated:** [October 16, 2021, 8:39am UTC](https://onehack.st/t/leaklooker-tool-to-find-open-websites-databases-with-shodan/204293 "2021-10-16T08:39:16Z")

</div>

Find open databases/services GUI https://www.offensiveosint.io/leaklooker-gui-discover-browse-and-monitor-database-source-code-leaks/ https://github.com/woj-ciech/LeakLooker-X New version supports: Elasticsearch C…

---

## [Cutter | Graphical User Interface For Radare2 Reverse Engineering Framework](https://onehack.st/t/cutter-graphical-user-interface-for-radare2-reverse-engineering-framework/204208)

<div class="topic-metadata">

**Author:** [@BlueHacker](https://onehack.st/u/BlueHacker)\
**Replies:** 0\
**Last updated:** [October 15, 2021, 7:11am UTC](https://onehack.st/t/cutter-graphical-user-interface-for-radare2-reverse-engineering-framework/204208 "2021-10-15T07:11:25Z")

</div>

Cutter is a free and open-source reverse engineering platform powered by rizin. It aims at being an advanced and customizable reverse engineering platform while keeping the user experience in mind. Cutter is created b…

---

## [FireShodanMap | Realtime Map To Search And Analyze Vulnerable Devices](https://onehack.st/t/fireshodanmap-realtime-map-to-search-and-analyze-vulnerable-devices/204142)

<div class="topic-metadata">

**Author:** [@BlueHacker](https://onehack.st/u/BlueHacker)\
**Replies:** 0\
**Last updated:** [October 14, 2021, 8:37am UTC](https://onehack.st/t/fireshodanmap-realtime-map-to-search-and-analyze-vulnerable-devices/204142 "2021-10-14T08:37:30Z")

</div>

FireShodanMap is a Realtime map that integrates Firebase and Shodan. A search is carried out using Shodan searching vulnerable devices and they are showed on the map for analysis. All data updated in Firebase are Real…

---

## [DarkScrape | OSINT Tool To Scrape and Analyze Sites On Dark Web](https://onehack.st/t/darkscrape-osint-tool-to-scrape-and-analyze-sites-on-dark-web/204050)

<div class="topic-metadata">

**Author:** [@PlayBoy83](https://onehack.st/u/PlayBoy83)\
**Replies:** 0\
**Last updated:** [October 13, 2021, 7:36am UTC](https://onehack.st/t/darkscrape-osint-tool-to-scrape-and-analyze-sites-on-dark-web/204050 "2021-10-13T07:36:34Z")

</div>

OSINT Tool to find the Media Links in Tor Sites Available in Tested On Kali Linux 2019.2 Ubuntu 18.04 Nethunter Arc Linux Installation git clone https://github.com/itsmehacker/DarkScrape.git pip3 install …

---

## [Optiva Framework | Cross Platform Web Application Scanner](https://onehack.st/t/optiva-framework-cross-platform-web-application-scanner/203965)

<div class="topic-metadata">

**Author:** [@BlueHacker](https://onehack.st/u/BlueHacker)\
**Replies:** 0\
**Last updated:** [October 12, 2021, 9:07am UTC](https://onehack.st/t/optiva-framework-cross-platform-web-application-scanner/203965 "2021-10-12T09:07:47Z")

</div>

:check\_mark: Description: You can use this Framework on your website to check the security of your website by finding the vulnerability in your website or you can use this tool to Get admin panel search SQL injection …

---

## [Play 200+ Android games on cloud for free](https://onehack.st/t/play-200-android-games-on-cloud-for-free/203901)

<div class="topic-metadata">

**Author:** [@FlashyFlash](https://onehack.st/u/FlashyFlash)\
**Replies:** 4\
**Last updated:** [October 11, 2021, 12:41pm UTC](https://onehack.st/t/play-200-android-games-on-cloud-for-free/203901 "2021-10-11T12:41:55Z")

</div>

I have tried it myself works good It hangs sometimes but still enjoyable

---

## [Idisagree | Tool To Control Remote Computers Using Discord BOT](https://onehack.st/t/idisagree-tool-to-control-remote-computers-using-discord-bot/203887)

<div class="topic-metadata">

**Author:** [@TheStrength](https://onehack.st/u/TheStrength)\
**Replies:** 0\
**Last updated:** [October 11, 2021, 8:17am UTC](https://onehack.st/t/idisagree-tool-to-control-remote-computers-using-discord-bot/203887 "2021-10-11T08:17:50Z")

</div>

Control remote computers using discord bot and python 3. \[ ! \] If your target is a windows system, you may want to compile your payload. Do this with py2exe or pyinstaller. MAINTAINERS Alisson Moretto | Twitter: @A1…

---

## [Brutemap | Tool For Automatic Web Application Brute Force Attack](https://onehack.st/t/brutemap-tool-for-automatic-web-application-brute-force-attack/203801)

<div class="topic-metadata">

**Author:** [@TheStrength](https://onehack.st/u/TheStrength)\
**Replies:** 0\
**Last updated:** [October 10, 2021, 9:32am UTC](https://onehack.st/t/brutemap-tool-for-automatic-web-application-brute-force-attack/203801 "2021-10-10T09:32:09Z")

</div>

What is this? Brutemap is an open source penetration testing tool that automates testing accounts to the site’s login page, based on Dictionary Attack. With this, you no longer need to search for other bruteforce t…

---

## [Tools To Create Custom Emoji | Online Tools & Applications!](https://onehack.st/t/tools-to-create-custom-emoji-online-tools-applications/203724)

<div class="topic-metadata">

**Author:** [@TheStrength](https://onehack.st/u/TheStrength)\
**Replies:** 0\
**Last updated:** [October 9, 2021, 1:25pm UTC](https://onehack.st/t/tools-to-create-custom-emoji-online-tools-applications/203724 "2021-10-09T13:25:32Z")

</div>

Emojis are a quintessential part of our digital conversation, adding emotions and expressions to our dull messages. People find so many clever ways to use emojis, however, there still may come a time when you won’t find …

---

## [Androwarn | Tool To Analyze Malicious Android Application](https://onehack.st/t/androwarn-tool-to-analyze-malicious-android-application/203716)

<div class="topic-metadata">

**Author:** [@PlayBoy83](https://onehack.st/u/PlayBoy83)\
**Replies:** 0\
**Last updated:** [October 9, 2021, 1:09pm UTC](https://onehack.st/t/androwarn-tool-to-analyze-malicious-android-application/203716 "2021-10-09T13:09:09Z")

</div>

Yet another static code analyzer for malicious Android applications Description Androwarn is a tool whose main aim is to detect and warn the user about potential malicious behaviours developped by an Android applicati…

---

## [JSShell | Javascript Shell To Hijack Browser And Execute Command With Interactive Multi User Web](https://onehack.st/t/jsshell-javascript-shell-to-hijack-browser-and-execute-command-with-interactive-multi-user-web/203615)

<div class="topic-metadata">

**Author:** [@TheStrength](https://onehack.st/u/TheStrength)\
**Replies:** 0\
**Last updated:** [October 8, 2021, 9:08am UTC](https://onehack.st/t/jsshell-javascript-shell-to-hijack-browser-and-execute-command-with-interactive-multi-user-web/203615 "2021-10-08T09:08:42Z")

</div>

JSShell 2.0 An interactive multi-user web based javascript shell. It was initially created in order to debug remote esoteric browsers during experiments and research. This tool can be easily attached to XSS (Cross…

---

## [Diggy | Detect All Endpoints/URLs From APK Files](https://onehack.st/t/diggy-detect-all-endpoints-urls-from-apk-files/203494)

<div class="topic-metadata">

**Author:** [@TheStrength](https://onehack.st/u/TheStrength)\
**Replies:** 0\
**Last updated:** [October 7, 2021, 12:15am UTC](https://onehack.st/t/diggy-detect-all-endpoints-urls-from-apk-files/203494 "2021-10-07T00:15:00Z")

</div>

Diggy can extract endpoints/URLs from apk files. It saves the result into a txt file for further processing. Dependencies apktool Usage ./diggy.sh /path/to/apk/file.apk You can also install it for easier access by…

---

## [Trial Account Generator Online \[VPNs, More Soon\]](https://onehack.st/t/trial-account-generator-online-vpns-more-soon/203356)

<div class="topic-metadata">

**Author:** [@Techtanic](https://onehack.st/u/Techtanic)\
**Replies:** 21\
**Last updated:** [October 20, 2021, 5:55am UTC](https://onehack.st/t/trial-account-generator-online-vpns-more-soon/203356 "2021-10-20T05:55:14Z")

</div>

Minimal Online Account Generator A simple webpage to generate, Account for multiple sites. ZenMate VPN 7 Days Trial AdGuard VPN 3GB Traffic Ivacy VPN 7 Days Trial More Soon (You can PM me Suggestions) Link: MOAG (tech…

---

## [FruityC2 | Tool To Control and Manage Agents From Server With Web Interface](https://onehack.st/t/fruityc2-tool-to-control-and-manage-agents-from-server-with-web-interface/203300)

<div class="topic-metadata">

**Author:** [@TheStrength](https://onehack.st/u/TheStrength)\
**Replies:** 0\
**Last updated:** [October 5, 2021, 2:08am UTC](https://onehack.st/t/fruityc2-tool-to-control-and-manage-agents-from-server-with-web-interface/203300 "2021-10-05T02:08:30Z")

</div>

FruityC2 This is the initial release for FruityC2 (alpha version). Can be installed on any linux system, but the installation scripts are made for Debian based systems. There are a lot of functionalities that will be …

---

## [CoffeMiner | MITM WiFi To Inject Miner Script](https://onehack.st/t/coffeminer-mitm-wifi-to-inject-miner-script/203241)

<div class="topic-metadata">

**Author:** [@Prometheus](https://onehack.st/u/Prometheus)\
**Replies:** 0\
**Last updated:** [October 4, 2021, 1:53pm UTC](https://onehack.st/t/coffeminer-mitm-wifi-to-inject-miner-script/203241 "2021-10-04T13:53:11Z")

</div>

Collaborative (mitm) cryptocurrency mining pool in wifi networks Warning: this project is for academic/research purposes only. A blog post about this project can be read here: http://arnaucode.com/blog/coffeeminer-hack…

---

## [The Rogue Toolkit | Tool To Perform Targeted Evil Twin Attack Against A Variety Of Wireless Network](https://onehack.st/t/the-rogue-toolkit-tool-to-perform-targeted-evil-twin-attack-against-a-variety-of-wireless-network/203166)

<div class="topic-metadata">

**Author:** [@Prometheus](https://onehack.st/u/Prometheus)\
**Replies:** 0\
**Last updated:** [October 3, 2021, 1:58pm UTC](https://onehack.st/t/the-rogue-toolkit-tool-to-perform-targeted-evil-twin-attack-against-a-variety-of-wireless-network/203166 "2021-10-03T13:58:11Z")

</div>

The Rogue Toolkit Getting Started Introduction Usage Features list of current features and the toolkit’s roadmap Installation toolkit’s installation guide Selecting a 802.11 protocol and authentication mode toolkit…

---

## [UberDucky | (Wireless USB Rubber Ducky) Tool For Injecting Keystoke Into Computer Via Wireless](https://onehack.st/t/uberducky-wireless-usb-rubber-ducky-tool-for-injecting-keystoke-into-computer-via-wireless/203053)

<div class="topic-metadata">

**Author:** [@TheStrength](https://onehack.st/u/TheStrength)\
**Replies:** 0\
**Last updated:** [October 2, 2021, 1:24pm UTC](https://onehack.st/t/uberducky-wireless-usb-rubber-ducky-tool-for-injecting-keystoke-into-computer-via-wireless/203053 "2021-10-02T13:24:17Z")

</div>

Uberducky is a tool for injecting keystrokes into a target computer that can be triggered wirelessly via BLE. It is inspired by Hak5’s USB Rubber Ducky, and like that tool it impersonates a USB keyboard and can inject…

---

## [KAGE | Graphical User Interface For Metasploit Framework](https://onehack.st/t/kage-graphical-user-interface-for-metasploit-framework/202939)

<div class="topic-metadata">

**Author:** [@PlayBoy83](https://onehack.st/u/PlayBoy83)\
**Replies:** 0\
**Last updated:** [October 1, 2021, 11:46am UTC](https://onehack.st/t/kage-graphical-user-interface-for-metasploit-framework/202939 "2021-10-01T11:46:28Z")

</div>

Kage (ka-geh) is a tool inspired by AhMyth designed for Metasploit RPC Server to interact with meterpreter sessions and generate payloads. For now it only supports windows/meterpreter & android/meterpreter. Getting …

---

## [HT-WPS BREAKER | Tool For Hacking Wifi Password From WPS](https://onehack.st/t/ht-wps-breaker-tool-for-hacking-wifi-password-from-wps/202859)

<div class="topic-metadata">

**Author:** [@TheStrength](https://onehack.st/u/TheStrength)\
**Replies:** 0\
**Last updated:** [September 30, 2021, 12:39pm UTC](https://onehack.st/t/ht-wps-breaker-tool-for-hacking-wifi-password-from-wps/202859 "2021-09-30T12:39:35Z")

</div>

High Touch WPS Breaker \[HT-WB\] is a small tool based on the bash script language, it can help you to extract the wps pin of many vulnerable routers and get the password, in the last i want to notice that HT-WPS Breake…

---

## [Twitter Unfollow All | Unfollow Peoples In A Bulk!](https://onehack.st/t/twitter-unfollow-all-unfollow-peoples-in-a-bulk/202760)

<div class="topic-metadata">

**Author:** [@BlueHacker](https://onehack.st/u/BlueHacker)\
**Replies:** 1\
**Last updated:** [September 29, 2021, 6:08pm UTC](https://onehack.st/t/twitter-unfollow-all-unfollow-peoples-in-a-bulk/202760 "2021-09-29T18:08:38Z")

</div>

Get started: Go to your ‘Following’ page (https://twitter.com/following) Start the extension Automatically, users will be unfollowed. Press stop at any time More information can be found at: https://hamlab.dev/twit…

---

## [The Best Free CAD Software | You Should Use](https://onehack.st/t/the-best-free-cad-software-you-should-use/202675)

<div class="topic-metadata">

**Author:** [@TheStrength](https://onehack.st/u/TheStrength)\
**Replies:** 0\
**Last updated:** [September 28, 2021, 10:11am UTC](https://onehack.st/t/the-best-free-cad-software-you-should-use/202675 "2021-09-28T10:11:12Z")

</div>

CAD is short for computer-aided design. It is a highly useful software that is used for technical illustrations and product designing. From small businesses to big enterprises, they use CAD for designing everything, incl…

---

## [Operative Framework | Tool For Digital Forensic to Investigate Websites,Email,Company,People and more](https://onehack.st/t/operative-framework-tool-for-digital-forensic-to-investigate-websites-email-company-people-and-more/202577)

<div class="topic-metadata">

**Author:** [@TheStrength](https://onehack.st/u/TheStrength)\
**Replies:** 0\
**Last updated:** [September 27, 2021, 10:06am UTC](https://onehack.st/t/operative-framework-tool-for-digital-forensic-to-investigate-websites-email-company-people-and-more/202577 "2021-09-27T10:06:53Z")

</div>

operative framework is a digital investigation framework, you can interact with multiple targets, execute multiple modules, create links with target, export rapport to PDF file, add note to target or results, intera…

---

## [Armor | Tool For Exploit MacOS And Create Encrypted Payloads For Bypass Antivirus Scanners](https://onehack.st/t/armor-tool-for-exploit-macos-and-create-encrypted-payloads-for-bypass-antivirus-scanners/202482)

<div class="topic-metadata">

**Author:** [@BlueHacker](https://onehack.st/u/BlueHacker)\
**Replies:** 0\
**Last updated:** [September 26, 2021, 10:39am UTC](https://onehack.st/t/armor-tool-for-exploit-macos-and-create-encrypted-payloads-for-bypass-antivirus-scanners/202482 "2021-09-26T10:39:17Z")

</div>

Armor Armor is a simple Bash script designed to create encrypted macOS payloads capable of evading antivirus scanners. Below is an example gif of Armor being used with a simple Netcat payload. A Netcat listener is …

[Previous page](https://onehack.st/c/tools-scripts/27.md?page=78)

[Next page](https://onehack.st/c/tools-scripts/27.md?page=80)
