# Tools & Scripts **URL:** https://onehack.st/c/tools-scripts/27.md?page=87 [Latest](https://onehack.st/latest.md) · [Categories](https://onehack.st/categories.md) · [Tags](https://onehack.st/tags.md) **Page:** 88 --- ## [RogueWinRM | Windows Local Privilege Escalation From Service Account To System](https://onehack.st/t/roguewinrm-windows-local-privilege-escalation-from-service-account-to-system/178403)
**Author:** [@PlayBoy83](https://onehack.st/u/PlayBoy83)\ **Replies:** 0\ **Last updated:** [April 11, 2021, 11:17am UTC](https://onehack.st/t/roguewinrm-windows-local-privilege-escalation-from-service-account-to-system/178403 "2021-04-11T11:17:09Z")
RogueWinRM is a local privilege escalation exploit that allows to escalate from a Service account (with SeImpersonatePrivilege) to Local System account if WinRM service is not running (default on Win10 but NOT on Wind… --- ## [The Best Free WordPress Plugins To Create Forms, Polls & Surveys](https://onehack.st/t/the-best-free-wordpress-plugins-to-create-forms-polls-surveys/178331)
**Author:** [@TheStrength](https://onehack.st/u/TheStrength)\ **Replies:** 0\ **Last updated:** [April 10, 2021, 2:11pm UTC](https://onehack.st/t/the-best-free-wordpress-plugins-to-create-forms-polls-surveys/178331 "2021-04-10T14:11:21Z")
It is a well-known fact that one of the best ways to engage users on your website and gather significant user insights, is through polls, forms and surveys. For websites built on the WordPress platform, there is an abund… --- ## [Byp4Xx Simple Bash Script To Bypass "403 Forbidden" Messages](https://onehack.st/t/byp4xx-simple-bash-script-to-bypass-403-forbidden-messages/178308)
**Author:** [@Prometheus](https://onehack.st/u/Prometheus)\ **Replies:** 0\ **Last updated:** [April 10, 2021, 12:32pm UTC](https://onehack.st/t/byp4xx-simple-bash-script-to-bypass-403-forbidden-messages/178308 "2021-04-10T12:32:08Z")
byp4xx.sh \_\_ \_\_ \_\_ / /\_ \_\_ \_\_\_\_\_\_ / // / \_ \_\_\_ \_\_ / \_\_ / / / / \_\_ / // /\_| |/\_/ |/\_/ / /\_/ / /\_/ / /\_/ /\_\_ \_\_/\> \<\_\> \< /\_.\_\_\_/\_\_, / .\_\_\_/ /\_/ /\_/|\_/\_/|\_| /\_\_\_\_/\_/ … --- ## [Urlhunter | A Recon Tool That Allows Searching On URLs That Are Exposed Via Shortener Services](https://onehack.st/t/urlhunter-a-recon-tool-that-allows-searching-on-urls-that-are-exposed-via-shortener-services/178211)
**Author:** [@TheStrength](https://onehack.st/u/TheStrength)\ **Replies:** 0\ **Last updated:** [April 9, 2021, 10:53am UTC](https://onehack.st/t/urlhunter-a-recon-tool-that-allows-searching-on-urls-that-are-exposed-via-shortener-services/178211 "2021-04-09T10:53:20Z")
urlhunter is a recon tool that allows searching on URLs that are exposed via shortener services such as bit.ly and goo.gl. The project is written in Go. How? A group named URLTeam (kudos to them) are brute forcing t… --- ## [XSS Scanner | Detects Cross-Site Scripting Vulnerabilities In Website](https://onehack.st/t/xss-scanner-detects-cross-site-scripting-vulnerabilities-in-website/178113)
**Author:** [@Prometheus](https://onehack.st/u/Prometheus)\ **Replies:** 0\ **Last updated:** [April 8, 2021, 11:39am UTC](https://onehack.st/t/xss-scanner-detects-cross-site-scripting-vulnerabilities-in-website/178113 "2021-04-08T11:39:48Z")
Cross-Site Scripting (XSS) is one of the most well known web application vulnerabilities. It even has a dedicated chapter in the OWASP Top 10 project and it is a highly chased vulnerability in bug bounty programs. Th… --- ## [The Best Arcade Emulators For Windows Systems](https://onehack.st/t/the-best-arcade-emulators-for-windows-systems/178002)
**Author:** [@Astrid](https://onehack.st/u/Astrid)\ **Replies:** 0\ **Last updated:** [April 7, 2021, 11:12am UTC](https://onehack.st/t/the-best-arcade-emulators-for-windows-systems/178002 "2021-04-07T11:12:27Z")
There’s something magical about arcades. A dark-lit room, neon lights, and the chatter of dozens of excited gamers, perhaps punctuated by the hard impact of an air hockey table in the distance, makes the games come alive… --- ## [Sarenka | OSINT Tool – Data From Services Like Shodan, Censys Etc. In One Place](https://onehack.st/t/sarenka-osint-tool-data-from-services-like-shodan-censys-etc-in-one-place/177997)
**Author:** [@BlueHacker](https://onehack.st/u/BlueHacker)\ **Replies:** 0\ **Last updated:** [April 7, 2021, 10:59am UTC](https://onehack.st/t/sarenka-osint-tool-data-from-services-like-shodan-censys-etc-in-one-place/177997 "2021-04-07T10:59:51Z")
SARENKA is an Open Source Intelligence (OSINT) tool which helps you obtaining and understanding Attack Surface. The main goal is to gathering infromation from search engines for Internet-connected devices (https://ce… --- ## [Top 10 Disk Space Analyzer For Windows 10](https://onehack.st/t/top-10-disk-space-analyzer-for-windows-10/177899)
**Author:** [@PlayBoy83](https://onehack.st/u/PlayBoy83)\ **Replies:** 1\ **Last updated:** [April 9, 2021, 11:18pm UTC](https://onehack.st/t/top-10-disk-space-analyzer-for-windows-10/177899 "2021-04-09T23:18:33Z")
With the improvement in the quality of media files, games and software, our computer systems are becoming hungrier for more storage space with every passing day. No matter how huge your system’s hard drive is, you’re eve… --- ## [UhOh365 | A Script That Can See If An Email Address Is Valid In Office365 (User/Email Enumeration)](https://onehack.st/t/uhoh365-a-script-that-can-see-if-an-email-address-is-valid-in-office365-user-email-enumeration/177893)
**Author:** [@PlayBoy83](https://onehack.st/u/PlayBoy83)\ **Replies:** 1\ **Last updated:** [April 6, 2021, 4:27pm UTC](https://onehack.st/t/uhoh365-a-script-that-can-see-if-an-email-address-is-valid-in-office365-user-email-enumeration/177893 "2021-04-06T16:27:33Z")
A script that can see if an email address is valid in Office365. This does not perform any login attempts, is unthrottled, and is incredibly useful for social engineering assessments to find which emails exist and whi… --- ## [Download all headspace packs with a single command\[python script\]](https://onehack.st/t/download-all-headspace-packs-with-a-single-command-python-script/177879)
**Author:** [@Yash\_Rathi](https://onehack.st/u/Yash_Rathi)\ **Replies:** 7\ **Last updated:** [April 9, 2021, 7:30pm UTC](https://onehack.st/t/download-all-headspace-packs-with-a-single-command-python-script/177879 "2021-04-09T19:30:25Z")
Python command-line script to download heaspace packs, singles or everyday headspace OR download all packs at once. Note that: You should have headspace subscription, to use this tool. Github: https://github.com/yash… --- ## [Android HID | Hacking Devices With Your Android](https://onehack.st/t/android-hid-hacking-devices-with-your-android/177740)
**Author:** [@TheStrength](https://onehack.st/u/TheStrength)\ **Replies:** 0\ **Last updated:** [April 5, 2021, 12:36pm UTC](https://onehack.st/t/android-hid-hacking-devices-with-your-android/177740 "2021-04-05T12:36:43Z")
Use Android as Rubber Ducky against targeted Android device or PC HID attack using Android Using Android as Rubber Ducky against Android or Windows. This is not a new technique, just a demo how to perform HID attack … --- ## [Best Project Managing & Planning Tools For Freelancers](https://onehack.st/t/best-project-managing-planning-tools-for-freelancers/177735)
**Author:** [@TheStrength](https://onehack.st/u/TheStrength)\ **Replies:** 0\ **Last updated:** [April 5, 2021, 12:07pm UTC](https://onehack.st/t/best-project-managing-planning-tools-for-freelancers/177735 "2021-04-05T12:07:28Z")
Whether you are a freelancer or simply an owner of a small business, it comes in handy to know what is required and needed in order to manage a client’s project successfully. But you don’t have to go at it alone, especia… --- ## [Solarflare | SolarWinds Orion Account Audit / Password Dumping Utility](https://onehack.st/t/solarflare-solarwinds-orion-account-audit-password-dumping-utility/177729)
**Author:** [@Astrid](https://onehack.st/u/Astrid)\ **Replies:** 0\ **Last updated:** [April 5, 2021, 11:39am UTC](https://onehack.st/t/solarflare-solarwinds-orion-account-audit-password-dumping-utility/177729 "2021-04-05T11:39:18Z")
Credential Dumping Tool for SolarWinds Orion Blog post: https://malicious.link/post/2020/solarflare-release-password-dumper-for-solarwinds-orion/ Credit to @asolino, @gentilkiwi, and @skelsec for helping me figuring… --- ## [Best Free Spyware Removal Tools | 2021](https://onehack.st/t/best-free-spyware-removal-tools-2021/177645)
**Author:** [@PlayBoy83](https://onehack.st/u/PlayBoy83)\ **Replies:** 0\ **Last updated:** [April 4, 2021, 11:50am UTC](https://onehack.st/t/best-free-spyware-removal-tools-2021/177645 "2021-04-04T11:50:47Z")
Spyware is a type of malicious software that secretly monitors and collects user information from PCs without their knowledge. It can gather valuable information such as user passwords, credit card details, and other con… --- ## [Exif-Gps-Tracer | A Python Script Which Allows You To Parse GeoLocation Data From Your Image Files Stored In A dataset](https://onehack.st/t/exif-gps-tracer-a-python-script-which-allows-you-to-parse-geolocation-data-from-your-image-files-stored-in-a-dataset/177643)
**Author:** [@PlayBoy83](https://onehack.st/u/PlayBoy83)\ **Replies:** 0\ **Last updated:** [April 4, 2021, 11:37am UTC](https://onehack.st/t/exif-gps-tracer-a-python-script-which-allows-you-to-parse-geolocation-data-from-your-image-files-stored-in-a-dataset/177643 "2021-04-04T11:37:11Z")
A python script which allows you to parse GeoLocation data from your Image files stored in a dataset.It also produces output in CSV file and also in HTML Google Maps Prerequisite To run this script fluently , (1) Yo… --- ## [The Best Free Unlimited VPN For Android Phones |2021](https://onehack.st/t/the-best-free-unlimited-vpn-for-android-phones-2021/177568)
**Author:** [@PlayBoy83](https://onehack.st/u/PlayBoy83)\ **Replies:** 1\ **Last updated:** [April 3, 2021, 6:10pm UTC](https://onehack.st/t/the-best-free-unlimited-vpn-for-android-phones-2021/177568 "2021-04-03T18:10:52Z")
In today’s technological era, all of us stay connected to the whole world through the internet. While doing so, we put a lot of our information at risk as they are exposed to the world. We surf a lot of websites in our d… --- ## [Emp3R0R | Linux Post-Exploitation Framework Made By Linux User](https://onehack.st/t/emp3r0r-linux-post-exploitation-framework-made-by-linux-user/177561)
**Author:** [@PlayBoy83](https://onehack.st/u/PlayBoy83)\ **Replies:** 0\ **Last updated:** [April 3, 2021, 2:17pm UTC](https://onehack.st/t/emp3r0r-linux-post-exploitation-framework-made-by-linux-user/177561 "2021-04-03T14:17:48Z")
Linux post-exploitation framework made by linux user Still under active development 中文介绍 check my blog for updates how to use collaborators wanted!!! please contact me if you are interested cross-platform support… --- ## [PongoOS | A Pre-Boot Execution Environment For Apple Boards](https://onehack.st/t/pongoos-a-pre-boot-execution-environment-for-apple-boards/177555)
**Author:** [@TheStrength](https://onehack.st/u/TheStrength)\ **Replies:** 0\ **Last updated:** [April 3, 2021, 1:35pm UTC](https://onehack.st/t/pongoos-a-pre-boot-execution-environment-for-apple-boards/177555 "2021-04-03T13:35:14Z")
A pre-boot execution environment for Apple boards built on top of checkra1n. Building on macOS Install Xcode + command-line utilities make clean all Building on Linux Download Sam Bingner’s iOS Toolchain Copy sc… --- ## [K55 | Linux X86\_64 Process Injection Utility | Manipulate Processes With Customized Payloads](https://onehack.st/t/k55-linux-x86-64-process-injection-utility-manipulate-processes-with-customized-payloads/177427)
**Author:** [@Prometheus](https://onehack.st/u/Prometheus)\ **Replies:** 0\ **Last updated:** [April 2, 2021, 11:52am UTC](https://onehack.st/t/k55-linux-x86-64-process-injection-utility-manipulate-processes-with-customized-payloads/177427 "2021-04-02T11:52:49Z")
K55 - Linux x86\_64 Process Injection Utility (C++14) About K55 (pronounced: “kay fifty-five”) The K55 payload injection tool is used for injecting x86\_64 shellcode payloads into running processes. The utility was d… --- ## [PDF Password Remover Tools To Crack PDF Passwords Easily](https://onehack.st/t/pdf-password-remover-tools-to-crack-pdf-passwords-easily/177291)
**Author:** [@Prometheus](https://onehack.st/u/Prometheus)\ **Replies:** 0\ **Last updated:** [April 1, 2021, 12:52pm UTC](https://onehack.st/t/pdf-password-remover-tools-to-crack-pdf-passwords-easily/177291 "2021-04-01T12:52:41Z")
Forgetting passwords of our documents is one of the things which usually happens to all of us. Password protection adds some kind of additional security to our documents on the one hand, but on the other side, you may lo… --- ## [35+ Best Offline Android Games To Play Without The Internet | 2021](https://onehack.st/t/35-best-offline-android-games-to-play-without-the-internet-2021/177284)
**Author:** [@TheStrength](https://onehack.st/u/TheStrength)\ **Replies:** 0\ **Last updated:** [April 1, 2021, 12:08pm UTC](https://onehack.st/t/35-best-offline-android-games-to-play-without-the-internet-2021/177284 "2021-04-01T12:08:57Z")
Android games have been such a rave in the past few years that they have quickly surpassed even gaming consoles concerning popularity.The continuous development in the smartphone sphere has made it possible for top game … --- ## [Pineapple MK7 REST Client | WiFi Hacking Workflow With Pineapple Mark 7 API](https://onehack.st/t/pineapple-mk7-rest-client-wifi-hacking-workflow-with-pineapple-mark-7-api/177270)
**Author:** [@NoBody](https://onehack.st/u/NoBody)\ **Replies:** 0\ **Last updated:** [April 1, 2021, 10:59am UTC](https://onehack.st/t/pineapple-mk7-rest-client-wifi-hacking-workflow-with-pineapple-mark-7-api/177270 "2021-04-01T10:59:42Z")
PINEAPPLE MARK VII REST CLIENT The leading rogue access point and WiFi pentest toolkit for close access operations. Passive and active attacks analyze vulnerable and misconfigured devices. @HAK5 Author:: TW-D Vers… --- ## [🚀 Fluid Status - Uptime & Cronjob Monitoring \[Giveaway\]](https://onehack.st/t/fluid-status-uptime-cronjob-monitoring-giveaway/177262)
**Author:** [@Newbie](https://onehack.st/u/Newbie)\ **Replies:** 4\ **Last updated:** [April 2, 2021, 7:23am UTC](https://onehack.st/t/fluid-status-uptime-cronjob-monitoring-giveaway/177262 "2021-04-02T07:23:21Z")
Failed service maintenance, technical breakdown, network outage, or human error – everything terrible can happen, usually when you least expect. You will not lose your customer because of any of these faults, but becau… --- ## [ByteDance-HIDS | A Cloud-Native Host-Based Intrusion Detection Solution Project](https://onehack.st/t/bytedance-hids-a-cloud-native-host-based-intrusion-detection-solution-project/177134)
**Author:** [@PlayBoy83](https://onehack.st/u/PlayBoy83)\ **Replies:** 0\ **Last updated:** [March 31, 2021, 9:54am UTC](https://onehack.st/t/bytedance-hids-a-cloud-native-host-based-intrusion-detection-solution-project/177134 "2021-03-31T09:54:34Z")
AgentSmith-HIDS English | 简体中文 AgentSmith-HIDS is a Cloud-Native Host-Based Intrusion Detection solution project to provide next-generation Threat Detection and Behavior Audition with modern architecture. AgentSmith… --- ## [HosTaGe | Low Interaction Mobile Honeypot](https://onehack.st/t/hostage-low-interaction-mobile-honeypot/177013)
**Author:** [@TheStrength](https://onehack.st/u/TheStrength)\ **Replies:** 1\ **Last updated:** [March 30, 2021, 2:33pm UTC](https://onehack.st/t/hostage-low-interaction-mobile-honeypot/177013 "2021-03-30T14:33:06Z")
HosTaGe - Honeypot-To-Go Copyright (C) 2013-2021, Aalborg University (Denmark) and Technische Universität Darmstadt (Germany) HosTaGe is a lightweight, low-interaction, portable, and generic honeypot for mobile devi… --- ## [Git Wild Hunt | A Tool To Hunt For Credentials In Github Wild AKA Git\*Hunt](https://onehack.st/t/git-wild-hunt-a-tool-to-hunt-for-credentials-in-github-wild-aka-git-hunt/177003)
**Author:** [@Prometheus](https://onehack.st/u/Prometheus)\ **Replies:** 0\ **Last updated:** [March 30, 2021, 7:05am UTC](https://onehack.st/t/git-wild-hunt-a-tool-to-hunt-for-credentials-in-github-wild-aka-git-hunt/177003 "2021-03-30T07:05:50Z")
A tool to hunt for credentials in the GitHub wild AKA git\*hunt Getting started Install the tool Configure your GitHub token Search for credentials See results cat result… --- ## [Free Online Photos, Videos & Music Editors](https://onehack.st/t/free-online-photos-videos-music-editors/176956)
**Author:** [@Prometheus](https://onehack.st/u/Prometheus)\ **Replies:** 1\ **Last updated:** [March 30, 2021, 8:19am UTC](https://onehack.st/t/free-online-photos-videos-music-editors/176956 "2021-03-30T08:19:23Z")
We tend to rely heavily on our favorite desktop applications like Photoshop, GIMP, Audacity, Adobe Premier and so on when it comes to dealing with multimedia files. That’s fine on our desktops but what if we need to use … --- ## [Best Free Email Account And Service Providers](https://onehack.st/t/best-free-email-account-and-service-providers/176954)
**Author:** [@TheStrength](https://onehack.st/u/TheStrength)\ **Replies:** 0\ **Last updated:** [March 29, 2021, 4:43pm UTC](https://onehack.st/t/best-free-email-account-and-service-providers/176954 "2021-03-29T16:43:39Z")
In today’s digital world, having an email account is extremely important. You need it for job recruitment, networking, transferring files, downloading resources, and so much more. Agreed, there are plenty of chat platfo… --- ## [Gitlab Watchman | Monitoring GitLab For Sensitive Data Shared Publicly](https://onehack.st/t/gitlab-watchman-monitoring-gitlab-for-sensitive-data-shared-publicly/176951)
**Author:** [@TheStrength](https://onehack.st/u/TheStrength)\ **Replies:** 0\ **Last updated:** [March 29, 2021, 4:30pm UTC](https://onehack.st/t/gitlab-watchman-monitoring-gitlab-for-sensitive-data-shared-publicly/176951 "2021-03-29T16:30:53Z")
GitLab Watchman is an application that uses the GitLab API to audit GitLab for sensitive data and credentials exposed internally. Features It searches GitLab for internally shared projects and looks at: Code Commi… --- ## [Gitrecon | OSINT Tool To Get Information From A Github Profile](https://onehack.st/t/gitrecon-osint-tool-to-get-information-from-a-github-profile/176870)
**Author:** [@Shayla](https://onehack.st/u/Shayla)\ **Replies:** 0\ **Last updated:** [March 28, 2021, 2:56pm UTC](https://onehack.st/t/gitrecon-osint-tool-to-get-information-from-a-github-profile/176870 "2021-03-28T14:56:07Z")
OSINT tool to get information from a github profile and find GitHub user’s email addresses leaked on commits. How does this work? GitHub uses the email address associated with a GitHub account to link commits and ot… [Previous page](https://onehack.st/c/tools-scripts/27.md?page=86) [Next page](https://onehack.st/c/tools-scripts/27.md?page=88)