Using "by" or "through"
The Hacktuator is involved in both forms of attack, so you've branched your statement too early. Try, perhaps:
Attacks consist of HTTP requests sent by The Hacktuator either directly or via tools.
If you need bullet points for the slide:
Attacks consist of HTTP requests sent by The Hacktuator
- directly
- via tools