padding-oracle-attacker is now on offsec.tools check it out!