# Tools & Scripts **URL:** https://onehack.st/c/tools-scripts/27.md?page=93 [Latest](https://onehack.st/latest.md) · [Categories](https://onehack.st/categories.md) · [Tags](https://onehack.st/tags.md) **Page:** 94 --- ## [Satellite | Easy-To-Use Payload Hosting](https://onehack.st/t/satellite-easy-to-use-payload-hosting/171903)
**Author:** [@Prometheus](https://onehack.st/u/Prometheus)\ **Replies:** 0\ **Last updated:** [February 5, 2021, 9:55am UTC](https://onehack.st/t/satellite-easy-to-use-payload-hosting/171903 "2021-02-05T09:55:38Z")
Satellite is an web payload hosting service which filters requests to ensure the correct target is getting a payload. This can also be a useful service for hosting files that should be only accessed in very specific c… --- ## [OpenCSPM | Open Cloud Security Posture Management Engine](https://onehack.st/t/opencspm-open-cloud-security-posture-management-engine/171815)
**Author:** [@BlueHacker](https://onehack.st/u/BlueHacker)\ **Replies:** 0\ **Last updated:** [February 4, 2021, 12:00pm UTC](https://onehack.st/t/opencspm-open-cloud-security-posture-management-engine/171815 "2021-02-04T12:00:59Z")
Open Cloud Security Posture Management, OpenCSPM, is an open-source platform for gaining deeper insight into your cloud configuration and metadata to help understand and reduce risk over time. Who is OpenCSPM for? S… --- ## [Linux Chrome Recon | An Information Gathering Tool Used To Enumerate All Possible Data](https://onehack.st/t/linux-chrome-recon-an-information-gathering-tool-used-to-enumerate-all-possible-data/171804)
**Author:** [@Astrid](https://onehack.st/u/Astrid)\ **Replies:** 0\ **Last updated:** [February 4, 2021, 11:21am UTC](https://onehack.st/t/linux-chrome-recon-an-information-gathering-tool-used-to-enumerate-all-possible-data/171804 "2021-02-04T11:21:16Z")
“linux-chrome-recon” is a Information gathering tool used to enumerate all possible data about an user from Google-Chrome browser from any Linux distribution Intro 1.Loots possible data from Google-Chrome 2.Launches… --- ## [BurpMetaFinder | Burp Suite Extension For Extracting Metadata From Files](https://onehack.st/t/burpmetafinder-burp-suite-extension-for-extracting-metadata-from-files/171698)
**Author:** [@PlayBoy83](https://onehack.st/u/PlayBoy83)\ **Replies:** 0\ **Last updated:** [February 3, 2021, 10:22am UTC](https://onehack.st/t/burpmetafinder-burp-suite-extension-for-extracting-metadata-from-files/171698 "2021-02-03T10:22:42Z")
Burp Suite extension for extracting metadata from files Currently supported documents: PDF DOCX PPTX XLSX The project created at Jetbrains has been completely added. Don’t forget to change the settings you need. U… --- ## [Uroboros | A GNU/Linux Monitoring And Profiling Tool Focused On Single Processes](https://onehack.st/t/uroboros-a-gnu-linux-monitoring-and-profiling-tool-focused-on-single-processes/171691)
**Author:** [@TheStrength](https://onehack.st/u/TheStrength)\ **Replies:** 0\ **Last updated:** [February 3, 2021, 9:54am UTC](https://onehack.st/t/uroboros-a-gnu-linux-monitoring-and-profiling-tool-focused-on-single-processes/171691 "2021-02-03T09:54:16Z")
Uroboros is a GNU/Linux monitoring tool focused on single processes. While utilities like top, ps and htop provide great overall details, they often lack useful temporal representation for specific processes, such … --- ## [Web-Brutator | Modular Web Interfaces Bruteforcer](https://onehack.st/t/web-brutator-modular-web-interfaces-bruteforcer/171624)
**Author:** [@BlueHacker](https://onehack.st/u/BlueHacker)\ **Replies:** 0\ **Last updated:** [February 2, 2021, 12:33pm UTC](https://onehack.st/t/web-brutator-modular-web-interfaces-bruteforcer/171624 "2021-02-02T12:33:10Z")
\[ Web Brutator Fast Modular Web Interfaces Bruteforcer :inbox\_tray: Install python3 -m pip install -r requirements.txt :fast\_forward\_button: Usage $ python3 web-brutator.py -h \_\_ \_\_ \_\_\_. \_\_\_\_\_\_\_… --- ## [Top 15 Android Apps Every Blogger Should Have | 2021](https://onehack.st/t/top-15-android-apps-every-blogger-should-have-2021/171616)
**Author:** [@NoBody](https://onehack.st/u/NoBody)\ **Replies:** 0\ **Last updated:** [February 2, 2021, 11:42am UTC](https://onehack.st/t/top-15-android-apps-every-blogger-should-have-2021/171616 "2021-02-02T11:42:40Z")
Blogging has always been about expressing yourself and sharing what you know on the Internet. Android as an operating system is growing fast thanks to its availability on a wide range of smartphones and tablet devices as… --- ## [Flawfinder | A Static Analysis Tool For Finding Vulnerabilities In C/C++ Source Code](https://onehack.st/t/flawfinder-a-static-analysis-tool-for-finding-vulnerabilities-in-c-c-source-code/171610)
**Author:** [@NoBody](https://onehack.st/u/NoBody)\ **Replies:** 0\ **Last updated:** [February 2, 2021, 11:13am UTC](https://onehack.st/t/flawfinder-a-static-analysis-tool-for-finding-vulnerabilities-in-c-c-source-code/171610 "2021-02-02T11:13:15Z")
This is “flawfinder” by David A. Wheeler. Flawfinder is a simple program that scans C/C++ source code and reports potential security flaws. It can be a useful tool for examining software for vulnerabilities, and it c… --- ## [We Make Updating Your Drivers Easy | DriverEasy](https://onehack.st/t/we-make-updating-your-drivers-easy-drivereasy/171594)
**Author:** [@Nina](https://onehack.st/u/Nina)\ **Replies:** 3\ **Last updated:** [February 17, 2021, 11:09am UTC](https://onehack.st/t/we-make-updating-your-drivers-easy-drivereasy/171594 "2021-02-17T11:09:53Z")
Many computer problems are caused by outdated device drivers. So when you have a computer problem, the first thing you should do is check to see if your drivers are up to date. And if they’re not, update them. About… --- ## [10 Apps To Connect Your PC To Android Devices](https://onehack.st/t/10-apps-to-connect-your-pc-to-android-devices/171524)
**Author:** [@TheStrength](https://onehack.st/u/TheStrength)\ **Replies:** 1\ **Last updated:** [February 1, 2021, 2:36pm UTC](https://onehack.st/t/10-apps-to-connect-your-pc-to-android-devices/171524 "2021-02-01T14:36:38Z")
When you’re a vivid smartphone user, you may need to connect your device to your PC or Mac. Maybe you wish to backup your photos and videos, extract some crucial data, or extract files to free space on your device. Or ma… --- ## [OpenCVE | CVE Alerting Platform](https://onehack.st/t/opencve-cve-alerting-platform/171521)
**Author:** [@TheStrength](https://onehack.st/u/TheStrength)\ **Replies:** 1\ **Last updated:** [February 1, 2021, 10:30pm UTC](https://onehack.st/t/opencve-cve-alerting-platform/171521 "2021-02-01T22:30:14Z")
OpenCVE, formerly known as Saucs, is a platform used to locally import the list of CVEs and perform searches on it (by vendors, products, CVSS, CWE…). Users subscribe to vendors or products, and OpenCVE alert… --- ## [MOSE | Post Exploitation Tool For Configuration Management Servers](https://onehack.st/t/mose-post-exploitation-tool-for-configuration-management-servers/171510)
**Author:** [@PlayBoy83](https://onehack.st/u/PlayBoy83)\ **Replies:** 0\ **Last updated:** [February 1, 2021, 11:29am UTC](https://onehack.st/t/mose-post-exploitation-tool-for-configuration-management-servers/171510 "2021-02-01T11:29:35Z")
MOSE (Master Of SErvers) Copyright 2020 National Technology & Engineering Solutions of Sandia, LLC (NTESS). Under the terms of Contract DE-NA0003525 with NTESS, the U.S. Government retains certain rights in this… --- ## [SSRF-King | SSRF Plugin For Burp Automates SSRF Detection In All Of The Request](https://onehack.st/t/ssrf-king-ssrf-plugin-for-burp-automates-ssrf-detection-in-all-of-the-request/171439)
**Author:** [@PlayBoy83](https://onehack.st/u/PlayBoy83)\ **Replies:** 0\ **Last updated:** [January 31, 2021, 10:40am UTC](https://onehack.st/t/ssrf-king-ssrf-plugin-for-burp-automates-ssrf-detection-in-all-of-the-request/171439 "2021-01-31T10:40:30Z")
SSRF plugin for burp that Automates SSRF Detection in all of the Request If you are facing any problems or would like a new feature that is not listed below Please create a new issue below in this form Create New … --- ## [PSC | E2E Encryption For Multi-Hop Tty Sessions Or Portshells + TCP/UDP Port Forward](https://onehack.st/t/psc-e2e-encryption-for-multi-hop-tty-sessions-or-portshells-tcp-udp-port-forward/171434)
**Author:** [@TheStrength](https://onehack.st/u/TheStrength)\ **Replies:** 0\ **Last updated:** [January 31, 2021, 9:43am UTC](https://onehack.st/t/psc-e2e-encryption-for-multi-hop-tty-sessions-or-portshells-tcp-udp-port-forward/171434 "2021-01-31T09:43:20Z")
PortShellCrypter – PSC DNS lookup and SSH session forwarded across an UART connection to a Pi PSC allows to e2e encrypt shell sessions, single- or multip-hop, being agnostic of the underlying transport, as long as i… --- ## [Arbitrium-RAT | A Cross-Platform, Fully Undetectable Remote Access Trojan, To Control Android, Windows And Linux](https://onehack.st/t/arbitrium-rat-a-cross-platform-fully-undetectable-remote-access-trojan-to-control-android-windows-and-linux/171355)
**Author:** [@BlueHacker](https://onehack.st/u/BlueHacker)\ **Replies:** 0\ **Last updated:** [January 30, 2021, 11:29am UTC](https://onehack.st/t/arbitrium-rat-a-cross-platform-fully-undetectable-remote-access-trojan-to-control-android-windows-and-linux/171355 "2021-01-30T11:29:25Z")
Arbitrium is a cross-platform is a remote access trojan (RAT), Fully UnDetectable (FUD), It allows you to control Android, Windows and Linux and doesn’t require any firewall exceptions or port forwarding. It gives access… --- ## [CSSG | Cobalt Strike Shellcode Generator](https://onehack.st/t/cssg-cobalt-strike-shellcode-generator/171348)
**Author:** [@Astrid](https://onehack.st/u/Astrid)\ **Replies:** 0\ **Last updated:** [January 30, 2021, 10:51am UTC](https://onehack.st/t/cssg-cobalt-strike-shellcode-generator/171348 "2021-01-30T10:51:54Z")
Adds Shellcode – Shellcode Generator to the Cobalt Strike top menu bar CSSG is an aggressor and python script used to more easily generate and format beacon shellcode Generates beacon stageless shellcode with expose… --- ## [Tritium | Password Spraying Framework](https://onehack.st/t/tritium-password-spraying-framework/171275)
**Author:** [@PlayBoy83](https://onehack.st/u/PlayBoy83)\ **Replies:** 0\ **Last updated:** [January 29, 2021, 2:02pm UTC](https://onehack.st/t/tritium-password-spraying-framework/171275 "2021-01-29T14:02:50Z")
A tool to enumerate and spray valid Active Directory accounts through Kerberos Pre-Authentication. Background Although many Kerberos password spraying tools currently exist on the market, I found it difficult to fin… --- ## [JWT Key ID Injector | Simple Python Script To Check Against Hypothetical JWT Vulnerability](https://onehack.st/t/jwt-key-id-injector-simple-python-script-to-check-against-hypothetical-jwt-vulnerability/171262)
**Author:** [@Prometheus](https://onehack.st/u/Prometheus)\ **Replies:** 0\ **Last updated:** [January 29, 2021, 1:05pm UTC](https://onehack.st/t/jwt-key-id-injector-simple-python-script-to-check-against-hypothetical-jwt-vulnerability/171262 "2021-01-29T13:05:17Z")
Simple python script to check against hypothetical JWT vulnerability. Let’s say there is an application that uses JWT tokens signed HS256 algorithm. An example token looks like the follow: eyJhbGciOiJIUzI1NiIsInR5cC… --- ## [Emba | An Analyzer For Linux-based Firmware Of Embedded Devices](https://onehack.st/t/emba-an-analyzer-for-linux-based-firmware-of-embedded-devices/171169)
**Author:** [@Prometheus](https://onehack.st/u/Prometheus)\ **Replies:** 0\ **Last updated:** [January 28, 2021, 1:06pm UTC](https://onehack.st/t/emba-an-analyzer-for-linux-based-firmware-of-embedded-devices/171169 "2021-01-28T13:06:24Z")
emba is being developed as a firmware scanner that analyses already-extracted Linux-based firmware images. It should help you to identify and focus on the interesting areas of a huge firmware image. Although emba is o… --- ## [Microsoft Activation Scripts | Activate Windows & Office](https://onehack.st/t/microsoft-activation-scripts-activate-windows-office/171162)
**Author:** [@Aina](https://onehack.st/u/Aina)\ **Replies:** 2\ **Last updated:** [April 21, 2021, 2:12pm UTC](https://onehack.st/t/microsoft-activation-scripts-activate-windows-office/171162 "2021-04-21T14:12:29Z")
You can get a clean copy here without taking any security risks. Run the app, follow on-screen directions and steps. VERY SIMPLE!!! Description: A collection of scripts for activating Microsoft products & windows 10… --- ## [SharpEDRChecker | Checks Running Processes, Metadata, DLLs Loaded Into Your Current Process](https://onehack.st/t/sharpedrchecker-checks-running-processes-metadata-dlls-loaded-into-your-current-process/171151)
**Author:** [@NoBody](https://onehack.st/u/NoBody)\ **Replies:** 0\ **Last updated:** [January 28, 2021, 10:48am UTC](https://onehack.st/t/sharpedrchecker-checks-running-processes-metadata-dlls-loaded-into-your-current-process/171151 "2021-01-28T10:48:07Z")
SharpEDRChecker New and improved C# Implementation of Invoke-EDRChecker. Checks running processes, process metadata, Dlls loaded into your current process and each DLLs metadata, common install directories, installed … --- ## [Duf | Disk Usage/Free Utility (Linux, BSD, macOS & Windows)](https://onehack.st/t/duf-disk-usage-free-utility-linux-bsd-macos-windows/171036)
**Author:** [@TheStrength](https://onehack.st/u/TheStrength)\ **Replies:** 0\ **Last updated:** [January 27, 2021, 11:10am UTC](https://onehack.st/t/duf-disk-usage-free-utility-linux-bsd-macos-windows/171036 "2021-01-27T11:10:40Z")
Disk Usage/Free Utility (Linux, BSD, macOS & Windows) Features User-friendly, colorful output Adjusts to your terminal’s width Sort the results according to your needs Groups & filters devices Can conveniently outp… --- ## [Batea | AI-based, Context-Driven Network Device Ranking](https://onehack.st/t/batea-ai-based-context-driven-network-device-ranking/171034)
**Author:** [@BlueHacker](https://onehack.st/u/BlueHacker)\ **Replies:** 1\ **Last updated:** [January 27, 2021, 10:58am UTC](https://onehack.st/t/batea-ai-based-context-driven-network-device-ranking/171034 "2021-01-27T10:58:42Z")
Batea A batea is a large shallow pan of wood or iron traditionally used by gold prospectors for washing sand and gravel to recover gold nuggets. Batea is a context-driven network device ranking framework based on th… --- ## [MobileHackersWeapons | Mobile Hacker’s Weapons | A Collection Of Cool Tools Used By Mobile Hackers](https://onehack.st/t/mobilehackersweapons-mobile-hacker-s-weapons-a-collection-of-cool-tools-used-by-mobile-hackers/170889)
**Author:** [@Aina](https://onehack.st/u/Aina)\ **Replies:** 0\ **Last updated:** [January 26, 2021, 9:20am UTC](https://onehack.st/t/mobilehackersweapons-mobile-hacker-s-weapons-a-collection-of-cool-tools-used-by-mobile-hackers/170889 "2021-01-26T09:20:00Z")
A collection of cool tools used by Mobile hackers. Happy hacking , Happy bug-hunting Family project Table of Contents Weapons Contribute Thanks to contributor Weapons OS Type Name Description Popular… --- ## [Structured Text Tools | Massive Collection ⭐](https://onehack.st/t/structured-text-tools-massive-collection/170887)
**Author:** [@Aina](https://onehack.st/u/Aina)\ **Replies:** 1\ **Last updated:** [January 27, 2021, 5:27am UTC](https://onehack.st/t/structured-text-tools-massive-collection/170887 "2021-01-27T05:27:07Z")
Structured text tools The following is a list of text-based file formats and command line tools for manipulating each. Contents Awk-like Awk POSIX commands SQL-based tools Other tools CSV JSON XML, HTML YAML, TOM… --- ## [WPCracker | WordPress User Enumeration And Login Brute Force Tool](https://onehack.st/t/wpcracker-wordpress-user-enumeration-and-login-brute-force-tool/170884)
**Author:** [@Astrid](https://onehack.st/u/Astrid)\ **Replies:** 0\ **Last updated:** [January 26, 2021, 9:12am UTC](https://onehack.st/t/wpcracker-wordpress-user-enumeration-and-login-brute-force-tool/170884 "2021-01-26T09:12:00Z")
WPCracker WordPress user enumeration and login Brute Force tool for Windows and Linux With the Brute Force tool, you can control how aggressive an attack you want to perform, and this affects the attack time required… --- ## [Shellex | C-shellcode To Hex Converter, Handy Tool For Paste And Execute Shellcodes](https://onehack.st/t/shellex-c-shellcode-to-hex-converter-handy-tool-for-paste-and-execute-shellcodes/170883)
**Author:** [@Astrid](https://onehack.st/u/Astrid)\ **Replies:** 0\ **Last updated:** [January 26, 2021, 8:10am UTC](https://onehack.st/t/shellex-c-shellcode-to-hex-converter-handy-tool-for-paste-and-execute-shellcodes/170883 "2021-01-26T08:10:00Z")
WARNING: the ugliest code in the world C-shellcode to hex converter. Handy tool for paste & execute shellcodes in gdb, windbg, radare2, ollydbg, x64dbg, immunity debugger & 010 editor. Are you having problems conve… --- ## [ATMMalScan | Tool for Windows which helps to search for malware traces](https://onehack.st/t/atmmalscan-tool-for-windows-which-helps-to-search-for-malware-traces/170784)
**Author:** [@TheStrength](https://onehack.st/u/TheStrength)\ **Replies:** 0\ **Last updated:** [January 25, 2021, 2:06am UTC](https://onehack.st/t/atmmalscan-tool-for-windows-which-helps-to-search-for-malware-traces/170784 "2021-01-25T02:06:21Z")
Introduction ATMMalScan is a commandline tool for Windows operating systems version 7 and higher, which helps to search for malware traces on an ATM during the DFIR process. This tool examines the running processes of… --- ## [Top 5 Desktop Linux Distributions For Beginners](https://onehack.st/t/top-5-desktop-linux-distributions-for-beginners/170781)
**Author:** [@NoBody](https://onehack.st/u/NoBody)\ **Replies:** 9\ **Last updated:** [June 4, 2021, 9:03am UTC](https://onehack.st/t/top-5-desktop-linux-distributions-for-beginners/170781 "2021-06-04T09:03:11Z")
If you are bored from Windows or macOS, you may wish to try out Linux. It raises a question: which distribution should you try? The reason being there are hundreds of Linux OSs (or distributions), making it confusing for… --- ## [WSuspicious | A Tool To Abuse Insecure WSUS Connections For Privilege Escalations](https://onehack.st/t/wsuspicious-a-tool-to-abuse-insecure-wsus-connections-for-privilege-escalations/170779)
**Author:** [@NoBody](https://onehack.st/u/NoBody)\ **Replies:** 0\ **Last updated:** [January 25, 2021, 1:42am UTC](https://onehack.st/t/wsuspicious-a-tool-to-abuse-insecure-wsus-connections-for-privilege-escalations/170779 "2021-01-25T01:42:25Z")
Summary This is a proof of concept program to escalate privileges on a Windows host by abusing WSUS. Details in this blog post: https://www.gosecure.net/blog/2020/09/08/wsus-attacks-part-2-cve-2020-1013-a-windows-10-lo… [Previous page](https://onehack.st/c/tools-scripts/27.md?page=92) [Next page](https://onehack.st/c/tools-scripts/27.md?page=94)