HackGit
الذهاب إلى القناة على Telegram
The channel was created for cybersecurity specialists. • Offensive Security • RedTeam • Malware Research • BugBounty • OSINT • etc Disclaimer: t.me/hackgit/2082 Donations - Ads: t.me/hackgit/5423
إظهار المزيد📈 نظرة تحليلية على قناة تيليجرام HackGit
تُعد قناة HackGit (@hackgit) في القطاع اللغوي الإنكليزية لاعباً نشطاً. يضم المجتمع حالياً 21 579 مشتركاً، محتلاً المرتبة 4 526 في فئة التكنولوجيات والتطبيقات والمرتبة 1 853 في منطقة الولايات المتحدة.
📊 مؤشرات الجمهور والحراك
منذ تأسيسه في невідомо، حقق المشروع نمواً سريعاً وجمع 21 579 مشتركاً.
بحسب آخر البيانات بتاريخ 02 مارس, 2025، تحافظ القناة على نشاط مستقر. خلال آخر 30 يوماً تغيّر عدد الأعضاء بمقدار 19، وفي آخر 24 ساعة بمقدار 0، مع بقاء الوصول العام مرتفعاً.
- حالة التحقق: غير موثّقة
- معدل التفاعل (ER): يبلغ متوسط تفاعل الجمهور 0%. وخلال أول 24 ساعة من النشر يحصد المحتوى عادةً N/A% من ردود الفعل نسبةً إلى إجمالي المشتركين.
- وصول المنشورات: يحصل كل منشور على متوسط 0 مشاهدة. وخلال اليوم الأول يجمع عادةً 0 مشاهدة.
- التفاعلات والاستجابة: يتفاعل الجمهور بانتظام؛ متوسط التفاعلات لكل منشور يبلغ 0.
📝 الوصف وسياسة المحتوى
يصف المؤلف القناة بأنها مساحة للتعبير عن الآراء الذاتية:
“The channel was created for cybersecurity specialists.
• Offensive Security
• RedTeam
• Malware Research
• BugBounty
• OSINT
• etc
Disclaimer:
t.me/hackgit/2082
Donations - Ads:
t.me/hackgit/5423”
بفضل وتيرة التحديث المرتفعة (أحدث البيانات بتاريخ 11 نوفمبر, 2026) تحافظ القناة على حداثتها ومستوى وصول مرتفع. وتُظهر التحليلات تفاعلاً نشطاً من الجمهور، ما يجعلها نقطة تأثير مهمة ضمن فئة التكنولوجيات والتطبيقات.
21 579
المشتركون
لا توجد بيانات24 ساعات
-37 أيام
+1930 أيام
أرشيف المشاركات
21 579
Ping Castle Cloud
Ping Castle Cloud is a tool designed to assess quickly the AzureAD security level with a methodology based on risk assessment and a maturity framework. It does not aim at a perfect evaluation but rather as an efficiency compromise. It is inspired from the Ping Castle project
https://github.com/vletoux/PingCastleCloud
#ad
21 579
Mangle
Mangle is a tool that manipulates aspects of compiled executables (.exe or DLL). Mangle can remove known Indicators of Compromise (IoC) based strings and replace them with random characters, change the file by inflating the size to avoid EDRs, and can clone code-signing certs from legitimate files. In doing so, Mangle helps loaders evade on-disk and in-memory scanners.
https://github.com/optiv/Mangle
21 579
Dirble
Fast directory scanning and scraping tool.
Dirble is a website directory scanning tool for Windows and Linux. It's designed to be fast to run and easy to use.
Features:
▫️ Cookies
▫️ Custom Headers
▫️ Extensions and prefixes
▫️ HTTP basic auth
▫️ Listable directory detection and scraping
▫️ Save output to file
▫️ Save output in XML and JSON formats
▫️ Proxy support
▫️ Recursion
▫️ Status code blacklisting and whitelisting
▫️ Threading
▫️ Request throttling
▫️ Detect not found code of each directory based on response code and length
▫️ Ability to provide a list of URLs to be scanned
▫️ User agents
▫️ Scanning with GET, POST or HEAD requests
▫️ Exclude ranges of response lengths from the output
https://github.com/nccgroup/dirble
21 579
Repost from N/a
xhunter
Android Penetration Tool (RAT for Android)
There are many great Android RAT available on GitHub; however, I didn't find one that really suited my needs so I created this enhanced one. I want to create a RAT so amazing that it'll be the last one you ever need -- I think this is it.
Here's why:
The main reason, I did started on this project is to simplify the problem of connection between attacker and victim.[Eliminated all port forwarding and over the internet issues]
Followed by, I wanted to have control over victims using smartphone📱 with a simple UI app rather then a pc💻 or remote virtual machine🖥 with command line interface.
Features:
▫️ Real time
▫️ receive any file or folder from target device
▫️ bind with other apps
▫️ fetch all whatsapp messages
▫️ fetch all whatsapp contacts
▫️ receive all target message
▫️ send sms with target device to any number
▫️ recive all target contacts
▫️ receive list of all installedd apps in target device
https://github.com/anirudhmalik/xhunter
21 579
Repost from N/a
NodeJS Ransomware
This is a proof-of-concept Node.js #ransomware.
https://github.com/EL-MTN/Ransomware
21 579
CVE-2022-32119
Arox-Unrestricted-File-Upload
https://github.com/JC175/CVE-2022-32119
#cve #exploit
21 579
Sliver GUI client.
Features:
▫️ You can click on stuff!
▫️ Sandboxed JavaScript scripting engine (with built-in script editor)
▫️ i18n Language Support (French, Spanish, Japanese, Chinese)
https://github.com/BishopFox/sliver-gui
21 579
Salus - SBOM Tool
The SBOM tool is a highly scalable and enterprise ready tool to create SPDX 2.2 compatible SBOMs for any variety of artifacts.
https://github.com/microsoft/sbom-tool
21 579
Oralyzer
Open Redirection Analyzer.
Simple #python script, capable of identifying the open redirection vulnerability on a website. It does that by fuzzing the URL i.e. provided as the input.
Features:
▫️ Improved DOM XSS detection mechanism
▫️ Test multiple parameters in one run
▫️ CRLF Injection Detection
https://github.com/r0075h3ll/Oralyzer
21 579
Awesome Privacy
Large data-hungry corporations dominate the digital world but with little, or no respect for your privacy. Migrating to open-source applications with a strong emphasis on security will help stop corporations, governments, and hackers from logging, storing or selling your personal data.
https://github.com/Lissy93/awesome-privacy
Website:
https://awesome-privacy.xyz/
21 579
Датчик открытия Xiaomi Aqara
Датчик Aqara Door Sensor уведомит вас об открытии/закрытии окон и дверей и отправит уведомление на ваш телефон через приложение MiHome. Он также включает подсветку или сигнализацию при открывании дверей/окон.
Обе части крепятся на клейкую ленту - нет необходимости делать лишние отверстия. Одна часть устанавливается на подвижную часть - окно/дверь, а вторая на раму/косяк. При расхождении двух частей сработает сигнализация и вам на телефон придёт оповещение.
Помимо этого есть множество вариантов сценариев. Например, очиститель воздуха перестанет работать при открытом окне. Или в комнате будет загораться свет при открытии двери.
Яндекс.Маркет:
🛒 https://bit.ly/3o5oFVv
#xiaomi #sensor
21 579
ProcessGhosting
Small POC for process ghosting
This is a C# implementation of the original Process Ghosting written in C Original #POC.
For easier understanding, the target file name and path have been hardcoded.
https://github.com/dosxuz/ProcessGhosting
Understanding Process Ghosting in detail
https://dosxuz.gitlab.io/post/processghosting/
21 579
Pretender
Cross-platform tool to obtain a machine-in-the-middle position inside Windows networks.
https://github.com/RedTeamPentesting/pretender
Introducing pretender - your new sidekick for relaying attacks
https://blog.redteam-pentesting.de/2022/introducing-pretender
21 579
RustyTokenManipulation
just manipulatin these here tokens yes sir nothing weird.
https://github.com/HuskyHacks/RustyTokenManipulation
Failing All The Way To Token Manipulation:
https://notes.huskyhacks.dev/notes/failing-all-the-way-to-token-manipulation-part-1
21 579
rbcd-attack
Abusing Kerberos Resource-Based Constrained Delegation
This repo is about a practical attack against Kerberos Resource-Based Constrained Delegation in a Windows Active Directory Domain.
The difference from other common implementations is that we are launching the attack from outside of the Windows Domain, not from a domain joined (usually Windows) computer.
The attack is implemented using only Python3 Impacket (and its dependencies). Tested on Arch with up-to-date Impacket (0.9.21 as of writing).
https://github.com/tothi/rbcd-attack
21 579
FAME
Recursive acronym meaning “FAME Automates Malware Evaluation”.
It is meant to facilitate the analysis of malicious files, leveraging as much knowledge as possible in order to speed up and automate end-to-end analysis.
Best case scenario: the analyst drops a sample, waits for a few minutes, and FAME is able to determine the malware family and extract its configuration and IOCs.
FAME is a Python application that relies on the following technologies:
▫️ flask for the web framework
▫️ celery for background tasks
▫️ MongoDB (and pymongo) for the database
https://github.com/certsocietegenerale/fame
21 579
Antares
Cross-platform #SQL client.
Antares is an SQL client based on Electron.js and Vue.js that aims to become a useful tool, especially for developers.
Features:
▫️ Multiple database connections at same time.
▫️ Database management (add/edit/delete).
▫️ Full tables management, including indexes and foreign keys.
▫️ Views, triggers, stored routines, functions and schedulers management (add/edit/delete).
▫️ A modern and friendly tab system; keep open every kind of tab you need in your workspace.
▫️ Fake table data filler to generate tons of data for test purpose.
▫️ Query suggestions and auto complete.
▫️ Query history: search through the last 1000 queries.
▫️ SSH tunnel support.
▫️ Manual commit mode.
▫️ Import and export database dumps.
https://github.com/antares-sql/antares
21 579
KubeEye
Find various problems on Kubernetes (misconfigs, unhealthy components and more).
KubeEye is an audit tool for Kubernetes to discover Kubernetes resources (by OPA ), cluster components, cluster nodes (by Node-Problem-Detector) and other configurations are meeting with best practices, and giving suggestions for modification.
KubeEye supports custom audit rules and plugins installation. Through KubeEye Operator, you can view audit results and modify suggestions by the website.
https://github.com/kubesphere/kubeeye
21 579
PCICrash
PCIDriverKit PoC for CVE-2022-26763 (exec arbitrary code w/ system privileges).
https://github.com/zhuowei/PCICrash
Research:
https://worthdoingbadly.com/coretrust/
21 579
Repost from Pentesting Shop
HackRF One + Portapack H2 Mayhem.
The HackRF is an exceptionally capable software defined radio (SDR) transceiver, but naturally you need to connect it to a computer to actually do anything with it. So the PortaPack was developed to turn it into a stand-alone device with the addition of a touchscreen LCD, a few buttons, and a headphone jack. With all the hardware in place, it’s just a matter of installing a firmware capable enough to do some proper RF hacking on the go.
Enter MAYHEM, an evolved fork of the original PortaPack firmware that the developers claim is the most up-to-date and feature packed version available. Without ever plugging into a computer, this firmware allows you to receive, decode, and re-transmit a dizzying number of wireless protocols. From firing off the seating pagers at a local restaurant to creating a fleet of phantom aircraft with spoofed ADS-B transponders, MAYHEM certainly seems like it lives up to the name.
Detailed blog post about installing and using MAYHEM on the HackRF/PortaPack, complete with a number of real-world examples that show off just a handful of possible applications for the project. Jamming cell phones, sending fake pager messages, and cloning RF remotes is just scratching the surface of what’s possible.
Example of use: exploitation of a Honda vulnerability Honda's Remote Keyless System (CVE-2022-27254)
Buy online:
🛒 https://ali.ski/tvBZB
#hackrf #radio #sdr #spoofing
