# Tools & Scripts

**URL:** https://onehack.st/c/tools-scripts/27.md?page=88

[Latest](https://onehack.st/latest.md) · [Categories](https://onehack.st/categories.md) · [Tags](https://onehack.st/tags.md)

**Page:** 89

---

## [Smogcloud | Find Cloud Assets That No One Wants Exposed](https://onehack.st/t/smogcloud-find-cloud-assets-that-no-one-wants-exposed/176869)

<div class="topic-metadata">

**Author:** [@BlueHacker](https://onehack.st/u/BlueHacker)\
**Replies:** 0\
**Last updated:** [March 28, 2021, 2:53pm UTC](https://onehack.st/t/smogcloud-find-cloud-assets-that-no-one-wants-exposed/176869 "2021-03-28T14:53:46Z")

</div>

Find exposed AWS cloud assets that you did not know you had. A comprehensive asset inventory is step one to any capable security program. We made smogcloud to enable security engineers, penetration testers, and AWS ad…

---

## [APKLAB | Android Reverse Engineering WorkBench For VS Code](https://onehack.st/t/apklab-android-reverse-engineering-workbench-for-vs-code/176779)

<div class="topic-metadata">

**Author:** [@PlayBoy83](https://onehack.st/u/PlayBoy83)\
**Replies:** 0\
**Last updated:** [March 27, 2021, 3:06pm UTC](https://onehack.st/t/apklab-android-reverse-engineering-workbench-for-vs-code/176779 "2021-03-27T15:06:32Z")

</div>

APKLab The ultimate Android RE experience right inside your VS Code. APKLab seamlessly integrates the best open-source tools: Quark-Engine, Apktool, Jadx, uber-apk-signer, apk-mitm and more to the excellent VS Code so…

---

## [Kraker | Distributed Password Brute-Force System That Focused On Easy Use](https://onehack.st/t/kraker-distributed-password-brute-force-system-that-focused-on-easy-use/176771)

<div class="topic-metadata">

**Author:** [@PlayBoy83](https://onehack.st/u/PlayBoy83)\
**Replies:** 0\
**Last updated:** [March 27, 2021, 2:33pm UTC](https://onehack.st/t/kraker-distributed-password-brute-force-system-that-focused-on-easy-use/176771 "2021-03-27T14:33:05Z")

</div>

Kraker is a distributed password brute-force system that allows you to run and manage the hashcat on different servers and workstations, focused on easy of use. There were two main goals during the design and developm…

---

## [OSCP Exam Report Template in Markdown | Markdown Templates For Offensive Security](https://onehack.st/t/oscp-exam-report-template-in-markdown-markdown-templates-for-offensive-security/176701)

<div class="topic-metadata">

**Author:** [@TheStrength](https://onehack.st/u/TheStrength)\
**Replies:** 0\
**Last updated:** [March 26, 2021, 1:30pm UTC](https://onehack.st/t/oscp-exam-report-template-in-markdown-markdown-templates-for-offensive-security/176701 "2021-03-26T13:30:21Z")

</div>

I created an Offensive Security Exam Report Template in Markdown so LaTeX, Microsoft Office Word, LibreOffice Writer are no longer needed during your Offensive Security OSCP, OSWE, OSCE, OSEE, OSWP exam! Now you can …

---

## [Godehashed | Tool That Uses The Dehashed.Com API To Search For Compromised Assets](https://onehack.st/t/godehashed-tool-that-uses-the-dehashed-com-api-to-search-for-compromised-assets/176694)

<div class="topic-metadata">

**Author:** [@BlueHacker](https://onehack.st/u/BlueHacker)\
**Replies:** 0\
**Last updated:** [March 26, 2021, 12:36pm UTC](https://onehack.st/t/godehashed-tool-that-uses-the-dehashed-com-api-to-search-for-compromised-assets/176694 "2021-03-26T12:36:57Z")

</div>

A golang tool that uses the dehashed.com API to search for compromised assets. Results can then be compiled into a CSV for further analysis. Dehashed API You must supply the tool an api key. See apikey\_template.txt …

---

## [CTF-Party | A Ruby Library To Enhance And Speed Up Script/Exploit Writing For CTF Players](https://onehack.st/t/ctf-party-a-ruby-library-to-enhance-and-speed-up-script-exploit-writing-for-ctf-players/176624)

<div class="topic-metadata">

**Author:** [@BlueHacker](https://onehack.st/u/BlueHacker)\
**Replies:** 0\
**Last updated:** [March 25, 2021, 3:17pm UTC](https://onehack.st/t/ctf-party-a-ruby-library-to-enhance-and-speed-up-script-exploit-writing-for-ctf-players/176624 "2021-03-25T15:17:57Z")

</div>

A library to enhance and speed up script/exploit writing for CTF players (or security researchers, bug bounty hunters, pentesters but mostly focused on CTF) by patching the String class to add a short syntax of usual …

---

## [Multi Converter For More Than 41 Sources | Free Online Video Downloader](https://onehack.st/t/multi-converter-for-more-than-41-sources-free-online-video-downloader/176616)

<div class="topic-metadata">

**Author:** [@TheStrength](https://onehack.st/u/TheStrength)\
**Replies:** 2\
**Last updated:** [March 25, 2021, 4:03pm UTC](https://onehack.st/t/multi-converter-for-more-than-41-sources-free-online-video-downloader/176616 "2021-03-25T16:03:37Z")

</div>

Are you searching for a Multi Converter? It can convert links from 41 sources! Check it out https://multidownloader.net/ Enjoy!

---

## [10 Free Multipurpose WordPress Themes You Should Try!](https://onehack.st/t/10-free-multipurpose-wordpress-themes-you-should-try/176527)

<div class="topic-metadata">

**Author:** [@TheStrength](https://onehack.st/u/TheStrength)\
**Replies:** 0\
**Last updated:** [March 24, 2021, 2:50pm UTC](https://onehack.st/t/10-free-multipurpose-wordpress-themes-you-should-try/176527 "2021-03-24T14:50:56Z")

</div>

When it comes to WordPress themes, the choices out there are a dime a dozen, we have WordPress starter themes suited for advanced developers. We also have beautiful premium WordPress themes that you can afford for an aff…

---

## [Netmap.Js | Fast Browser-Based Network Discovery Module](https://onehack.st/t/netmap-js-fast-browser-based-network-discovery-module/176521)

<div class="topic-metadata">

**Author:** [@TheStrength](https://onehack.st/u/TheStrength)\
**Replies:** 0\
**Last updated:** [March 24, 2021, 2:36pm UTC](https://onehack.st/t/netmap-js-fast-browser-based-network-discovery-module/176521 "2021-03-24T14:36:19Z")

</div>

Fast browser-based network discovery module Description netmap.js provides browser-based host discovery and port scanning capabilities to allow you to map website visitors’ networks. It’s quite fast, making use of e…

---

## [Subcert | An Subdomain Enumeration Tool, That Finds All The Subdomains](https://onehack.st/t/subcert-an-subdomain-enumeration-tool-that-finds-all-the-subdomains/176518)

<div class="topic-metadata">

**Author:** [@Astrid](https://onehack.st/u/Astrid)\
**Replies:** 1\
**Last updated:** [March 25, 2021, 11:17am UTC](https://onehack.st/t/subcert-an-subdomain-enumeration-tool-that-finds-all-the-subdomains/176518 "2021-03-25T11:17:56Z")

</div>

Subcert is a subdomain enumeration tool, that finds all the valid subdomains from certificate transparency logs. Setup Step 1: Install Python 3 apt-get install python3-pip Step 2: Clone the Repository git clone h…

---

## [Manage Onedrive for Business with this tool or any other cloudservice](https://onehack.st/t/manage-onedrive-for-business-with-this-tool-or-any-other-cloudservice/176439)

<div class="topic-metadata">

**Author:** [@Judocus](https://onehack.st/u/Judocus)\
**Replies:** 0\
**Last updated:** [March 23, 2021, 11:17pm UTC](https://onehack.st/t/manage-onedrive-for-business-with-this-tool-or-any-other-cloudservice/176439 "2021-03-23T23:17:58Z")

</div>

This tool is called SmartFtp and it can handle any kind of webresource in the cloud. Especially useful for queuing files into your Onedrive for business or 365 drive account. With this Enterprise Edition it is possible…

---

## [Discord Raid ToolBox | Message Spam, VC Spam, Mass Mention, Server Smasher](https://onehack.st/t/discord-raid-toolbox-message-spam-vc-spam-mass-mention-server-smasher/176427)

<div class="topic-metadata">

**Author:** [@DevilKnown](https://onehack.st/u/DevilKnown)\
**Replies:** 0\
**Last updated:** [March 23, 2021, 8:56pm UTC](https://onehack.st/t/discord-raid-toolbox-message-spam-vc-spam-mass-mention-server-smasher/176427 "2021-03-23T20:56:47Z")

</div>

This code is very out of date and not very good, feel free to make it into something better. Raid-Toolbox A big toolkit of spamming tools for discord. “it’s for education purpose only” Supports Windows, Linux, Mac, Andr…

---

## [Vajra | A Highly Customi zable Target And Scope Based Automated Web Hacking Framework To Automate Boring Recon Tasks](https://onehack.st/t/vajra-a-highly-customi-zable-target-and-scope-based-automated-web-hacking-framework-to-automate-boring-recon-tasks/176362)

<div class="topic-metadata">

**Author:** [@TheStrength](https://onehack.st/u/TheStrength)\
**Replies:** 0\
**Last updated:** [March 23, 2021, 12:50pm UTC](https://onehack.st/t/vajra-a-highly-customi-zable-target-and-scope-based-automated-web-hacking-framework-to-automate-boring-recon-tasks/176362 "2021-03-23T12:50:07Z")

</div>

An automated web hacking framework for web applications Detailed insight about Vajra can be found at https://hackwithproxy.medium.com/introducing-vajra-an-advanced-web-hacking-framework-bd8307a01aa8 About Vajra Va…

---

## [Bulk Username Checker \[Steam, Instagram, Tiktok, Github, Minecraft\]](https://onehack.st/t/bulk-username-checker-steam-instagram-tiktok-github-minecraft/176355)

<div class="topic-metadata">

**Author:** [@Prometheus](https://onehack.st/u/Prometheus)\
**Replies:** 0\
**Last updated:** [March 23, 2021, 12:26pm UTC](https://onehack.st/t/bulk-username-checker-steam-instagram-tiktok-github-minecraft/176355 "2021-03-23T12:26:10Z")

</div>

Bulk check popular social media sites for username availability. Supports Instagram, Steam Community, Twitter, Twitch, Instagram, Minecraft, and GitHub. All available names are output to “available.txt”. HTTP(S) proxy …

---

## [Mole | A Framework For Identifying And Exploiting Out-Of-Band Application Vulnerabilities](https://onehack.st/t/mole-a-framework-for-identifying-and-exploiting-out-of-band-application-vulnerabilities/176351)

<div class="topic-metadata">

**Author:** [@Prometheus](https://onehack.st/u/Prometheus)\
**Replies:** 0\
**Last updated:** [March 23, 2021, 12:10pm UTC](https://onehack.st/t/mole-a-framework-for-identifying-and-exploiting-out-of-band-application-vulnerabilities/176351 "2021-03-23T12:10:25Z")

</div>

Mole A framework for identifying and exploiting out-of-band (OOB) vulnerabilities. Installation & Setup Mole Install Python \>= 3.6 virtualenv -p /usr/bin/python3 venv source venv/bin/activate ./venv/bin/pip3 insta…

---

## [Top Tools For Termux](https://onehack.st/t/top-tools-for-termux/176239)

<div class="topic-metadata">

**Author:** [@TheStrength](https://onehack.st/u/TheStrength)\
**Replies:** 0\
**Last updated:** [March 22, 2021, 11:44am UTC](https://onehack.st/t/top-tools-for-termux/176239 "2021-03-22T11:44:28Z")

</div>

There a lot hype about Termux in the hacking world so i though was only fair to add a post on the top tools to install on termux So that is termux? Termux turns a Android device into a lightweight and versatile Linux e…

---

## [Reverse-Shell-Generator | Hosted Reverse Shell Generator With A Ton Of Functionality](https://onehack.st/t/reverse-shell-generator-hosted-reverse-shell-generator-with-a-ton-of-functionality/176232)

<div class="topic-metadata">

**Author:** [@TheStrength](https://onehack.st/u/TheStrength)\
**Replies:** 0\
**Last updated:** [March 22, 2021, 11:21am UTC](https://onehack.st/t/reverse-shell-generator-hosted-reverse-shell-generator-with-a-ton-of-functionality/176232 "2021-03-22T11:21:40Z")

</div>

Hosted Reverse Shell generator with a ton of functionality — (great for CTFs) Hosted Instance https://revshells.com Features Generate common listeners and reverse shells Automatically copy to clipboard Button to …

---

## [Invoke-SocksProxy | Socks Proxy, And Reverse Socks Server Using Powershell](https://onehack.st/t/invoke-socksproxy-socks-proxy-and-reverse-socks-server-using-powershell/176222)

<div class="topic-metadata">

**Author:** [@BlueHacker](https://onehack.st/u/BlueHacker)\
**Replies:** 0\
**Last updated:** [March 22, 2021, 10:53am UTC](https://onehack.st/t/invoke-socksproxy-socks-proxy-and-reverse-socks-server-using-powershell/176222 "2021-03-22T10:53:35Z")

</div>

Creates a local or “reverse” Socks proxy using powershell. The local proxy is a simple Socks 4/5 proxy. The reverse proxy creates a tcp tunnel by initiating outbond SSL connections that can go through the system’s p…

---

## [Discord IP Resolver | Grabs A Targets IP Address](https://onehack.st/t/discord-ip-resolver-grabs-a-targets-ip-address/176133)

<div class="topic-metadata">

**Author:** [@BlueHacker](https://onehack.st/u/BlueHacker)\
**Replies:** 0\
**Last updated:** [March 21, 2021, 2:14pm UTC](https://onehack.st/t/discord-ip-resolver-grabs-a-targets-ip-address/176133 "2021-03-21T14:14:33Z")

</div>

Grabs a targets IP address and sends it along with its information through a discord webhook. Usage Run this command in CMD, terminal or PowerShell (if you don’t already have the following modules installed): pip i…

---

## [Rafel-Rat | Android Rat Written In Java With WebPanel For Controlling Victims](https://onehack.st/t/rafel-rat-android-rat-written-in-java-with-webpanel-for-controlling-victims/176127)

<div class="topic-metadata">

**Author:** [@TheStrength](https://onehack.st/u/TheStrength)\
**Replies:** 0\
**Last updated:** [March 21, 2021, 1:48pm UTC](https://onehack.st/t/rafel-rat-android-rat-written-in-java-with-webpanel-for-controlling-victims/176127 "2021-03-21T13:48:10Z")

</div>

Rafel is Remote Access Tool Used to Control Victims Using WebPanel With More Advance Features. Main Features : Admin Permission Add App To White List Looks Like Browser Runs In Background Even App is Closed(May not w…

---

## [Logs Stealer With Bot Discord Webhook SRC](https://onehack.st/t/logs-stealer-with-bot-discord-webhook-src/175998)

<div class="topic-metadata">

**Author:** [@PlayBoy83](https://onehack.st/u/PlayBoy83)\
**Replies:** 0\
**Last updated:** [March 20, 2021, 11:42am UTC](https://onehack.st/t/logs-stealer-with-bot-discord-webhook-src/175998 "2021-03-20T11:42:33Z")

</div>

Source Code C# Stealer with sending logs to a discord bot using the Discord Webhook API. Support for Chrome v80 +, Firefox v75 +, styling vpn, crypto wallets, wimworld, steam, ftp, gets BSSID, token and session discord…

---

## [NETFLIX Checkers & Tools Pack](https://onehack.st/t/netflix-checkers-tools-pack/175997)

<div class="topic-metadata">

**Author:** [@PlayBoy83](https://onehack.st/u/PlayBoy83)\
**Replies:** 1\
**Last updated:** [March 20, 2021, 3:32pm UTC](https://onehack.st/t/netflix-checkers-tools-pack/175997 "2021-03-20T15:32:55Z")

</div>

Everything that required for Netflix Cracking, All in one bundle: Scanner Checker Combo generator Etc! Download Enjoy!

---

## [Universal IPTV Scan | A Tool Scan User/Pass & Combo Lists](https://onehack.st/t/universal-iptv-scan-a-tool-scan-user-pass-combo-lists/175991)

<div class="topic-metadata">

**Author:** [@PlayBoy83](https://onehack.st/u/PlayBoy83)\
**Replies:** 2\
**Last updated:** [April 10, 2021, 11:50am UTC](https://onehack.st/t/universal-iptv-scan-a-tool-scan-user-pass-combo-lists/175991 "2021-04-10T11:50:27Z")

</div>

UNIVERSAL IPTV SCAN v2.0.7 is a tool that works very fast. Mac, user: pass and admin panel can be scanned. Attached is a combo list of 1.7M user: pass. Worth a try. It is activated by double-clicking on the text key …

---

## [OffensivePipeline | Tool To Download, Compile (Without Visual Studio) And Obfuscate](https://onehack.st/t/offensivepipeline-tool-to-download-compile-without-visual-studio-and-obfuscate/175987)

<div class="topic-metadata">

**Author:** [@PlayBoy83](https://onehack.st/u/PlayBoy83)\
**Replies:** 0\
**Last updated:** [March 20, 2021, 11:06am UTC](https://onehack.st/t/offensivepipeline-tool-to-download-compile-without-visual-studio-and-obfuscate/175987 "2021-03-20T11:06:26Z")

</div>

OffensivePipeline OffensivePipeline allows to download, compile (without Visual Studio) and obfuscate C# tools for Red Team exercises. OffensivePipeline downloads the tool from the git repository, then compiles it wit…

---

## [Strafer | A Tool To Detect Potential Infections In Elasticsearch Instances](https://onehack.st/t/strafer-a-tool-to-detect-potential-infections-in-elasticsearch-instances/175870)

<div class="topic-metadata">

**Author:** [@TheStrength](https://onehack.st/u/TheStrength)\
**Replies:** 0\
**Last updated:** [March 19, 2021, 10:31am UTC](https://onehack.st/t/strafer-a-tool-to-detect-potential-infections-in-elasticsearch-instances/175870 "2021-03-19T10:31:29Z")

</div>

Elasticsearch infections are rising exponentially. The adversaries are exploiting open and exposed Elasticsearch interfaces to trigger infections in the cloud and non-cloud deployments. During this talk, we will relea…

---

## [Free Screen Capture Tools And Plugins To Record Online Videos](https://onehack.st/t/free-screen-capture-tools-and-plugins-to-record-online-videos/175865)

<div class="topic-metadata">

**Author:** [@BlueHacker](https://onehack.st/u/BlueHacker)\
**Replies:** 0\
**Last updated:** [March 19, 2021, 10:25am UTC](https://onehack.st/t/free-screen-capture-tools-and-plugins-to-record-online-videos/175865 "2021-03-19T10:25:13Z")

</div>

There’s no denying the fact that screenshots are the best way to record your computer’s activity or create a guide either to keep for yourself or to share with others. However, what troubles most users is that which tool…

---

## [Free macOS Tools For Screen Recording / Capturing](https://onehack.st/t/free-macos-tools-for-screen-recording-capturing/175863)

<div class="topic-metadata">

**Author:** [@BlueHacker](https://onehack.st/u/BlueHacker)\
**Replies:** 0\
**Last updated:** [March 19, 2021, 10:09am UTC](https://onehack.st/t/free-macos-tools-for-screen-recording-capturing/175863 "2021-03-19T10:09:02Z")

</div>

If you spend lots of time conducting tutorials, it can get a bit frustrating when you have difficulty in getting your point across to your audience. After all, certain things just can’t be explained through images and te…

---

## [AnonX | An Encrypted File Transfer Via AES-256-CBC](https://onehack.st/t/anonx-an-encrypted-file-transfer-via-aes-256-cbc/175861)

<div class="topic-metadata">

**Author:** [@BlueHacker](https://onehack.st/u/BlueHacker)\
**Replies:** 0\
**Last updated:** [March 19, 2021, 10:03am UTC](https://onehack.st/t/anonx-an-encrypted-file-transfer-via-aes-256-cbc/175861 "2021-03-19T10:03:39Z")

</div>

An Encrypted File transfer via AES-256-CBC AnonX is an encrypted file uploader and downloader. The uploaded archive lasts for one week and shall remove from the server. AnonX encrypts the directory before uploading i…

---

## [Lazy-RDP | Script For AutomRDPatic Scanning And Brute-Force](https://onehack.st/t/lazy-rdp-script-for-automrdpatic-scanning-and-brute-force/175776)

<div class="topic-metadata">

**Author:** [@PlayBoy83](https://onehack.st/u/PlayBoy83)\
**Replies:** 0\
**Last updated:** [March 18, 2021, 11:32am UTC](https://onehack.st/t/lazy-rdp-script-for-automrdpatic-scanning-and-brute-force/175776 "2021-03-18T11:32:37Z")

</div>

Script For AutomRDPatic Scanning And Brute-Force. Demo Video: Lazy-RDP over SSH: Script for automatic scanning of the address list for the presence of open 3389 ports, and then selecting the method and starting bu…

---

## [The Best File Sharing Apps For Android Phones](https://onehack.st/t/the-best-file-sharing-apps-for-android-phones/175761)

<div class="topic-metadata">

**Author:** [@NoBody](https://onehack.st/u/NoBody)\
**Replies:** 1\
**Last updated:** [March 18, 2021, 8:42pm UTC](https://onehack.st/t/the-best-file-sharing-apps-for-android-phones/175761 "2021-03-18T20:42:06Z")

</div>

https://i2.wp.com/www.techowns.com/wp-content/uploads/2020/02/Best-File-Sharing-Apps-for-Android.jpg The ability to share files is an important aspect of storage and computing. With such a huge amount of mobile phones, …

[Previous page](https://onehack.st/c/tools-scripts/27.md?page=87)

[Next page](https://onehack.st/c/tools-scripts/27.md?page=89)
