HackGit

​Extension Fingerprints Chrome extensions can be detected by fetching their web accessible resources. These are files inside an extension that can be accessed by web pages. The detected extensions can be used to track you through browser fingerprinting. This scan only detects extensions from the Chrome Web Store. Read more https://github.com/z0ccc/extension-fingerprints#extension-fingerprints Check it out here: https://z0ccc.github.io/extension-fingerprints #privacy

​MemProcFS The Memory Process File System (MemProcFS) is an easy and convenient way of viewing physical memory as files in a virtual file system. Easy trivial point and click memory analysis without the need for complicated commandline arguments! Access memory content and artifacts via files in a mounted virtual file system or via a feature rich application library to include in your own projects! Analyze memory dump files, live memory via DumpIt or WinPMEM, live memory in read-write mode via linked PCILeech and PCILeech-FPGA devices! It's even possible to connect to a remote LeechAgent memory acquisition agent over a secured connection - allowing for remote live memory incident response - even over higher latency low band-width connections! Peek into Hyper-V Virtual Machines with LiveCloudKd! Use your favorite tools to analyze memory - use your favorite hex editors, your python and powershell scripts, WinDbg or your favorite disassemblers and debuggers - all will work trivally with MemProcFS by just reading and writing files! https://github.com/ufrisk/MemProcFS

​Vulnerable-AD Create a vulnerable active directory that's allowing you to test most of active directory attacks in local lab Main Features: ▫️ Randomize Attacks ▫️ Full Coverage of the mentioned attacks ▫️ you need run the script in DC with Active Directory installed ▫️ Some of attacks require client workstation Supported Attacks: ▫️ Abusing ACLs/ACEs ▫️ Kerberoasting ▫️ AS-REP Roasting ▫️ Abuse DnsAdmins ▫️ Password in Object Description ▫️ User Objects With Default password (Changeme123!) ▫️ Password Spraying ▫️ DCSync ▫️ Silver Ticket ▫️ Golden Ticket ▫️ Pass-the-Hash ▫️ Pass-the-Ticket ▫️ SMB Signing Disabled https://github.com/WazeHell/vulnerable-AD #ad

HTTPLoot An automated tool which can simultaneously crawl, fill forms, trigger error/debug pages and "loot" secrets out of the client-facing code of sites. https://github.com/redhuntlabs/httploot #web

​Hunt-Sleeping-Beacons Aims To Identify Sleeping Beacons.The idea of this project is to identify beacons which are unpacked at runtime or running in the context of another process. To do so, I make use of the observation that beacons tend to call Sleep between their callbacks. A call to sleep sets the state of the thread to DelayExecution which is taken as a first indiciator that a thread might be executing a beacon. After enumerating all threads whose state is DelayExecution, multiple metrics are applied to identify potential beacons https://github.com/thefLink/Hunt-Sleeping-Beacons

​Sifter Fully stocked Op Centre for Pentesters. Made up of over 80 different tools. It combines a plethara of OSINT, recon and vulnerability analysis tools within catagorized modsets in order to quickly perform recon tasks, check network firewalling, enumerate remote and local hosts, and scan for the 'blue' vulnerabilities within microsoft and if unpatched, exploit them. It uses tools like blackwidow and konan for webdir enumeration and attack surface mapping rapidly using ASM. Gathered info is saved to the results folder, these output files can be easily parsed over to TigerShark in order to be utilised within your campaign. Or compiled for a final report to wrap up a penetration test. https://github.com/whiterabb17/sifter Demo: https://www.youtube.com/watch?v=v3UzID9ZLfU

​DFIR Cheat Sheet Collection of tools, tips, and resources for #DFIR (as a tree directory) ▫️ Disk ▫️ Memory ▫️ Apps ▫️ Network ▫️ Threat Intelligence ▫️ and much more https://github.com/dfircheatsheet/dfircheatsheet.github.io

​Vulnman Open source pentest management application written in Python using the powerful Django framework. It aims to have a central place to manage vulnerabilities and other penetration assets. The report generation should be as simple as possible to allow the analyst to focus on finding bugs. https://github.com/vulnman/vulnman Website: https://vulnman.github.io/ Documentation: https://vulnman.github.io/doc

​SharpZippo List/Read contents of Zip files (in memory and without extraction) using #Cobalt Strike's Execute-Assembly. https://github.com/OG-Sadpanda/SharpZippo

​OctoPwn & OctoPwnWeb Pentest framework running (almost) entirely in the browser via pyodide. OctoPwnWeb has been presented a41con. How it started: “I waited 2 years for this, rewrote impacket for this, asked cryptographers to remake algos in python for this, spent enormous time of my life to make this happen. and it's finally here this finally works and I can't find the words to express my satisfaction.” (SkelSec) “For the record: the two crypto guys who eventually helped me in pure-python rewrite of some algos tole me to never ever use it anywhere and also they dont want to be mentioned.” (SkelSec) https://github.com/skelsec/octopwnweb Talk: https://youtu.be/jStdrDHTmD4 Slides: https://docs.google.com/presentation/d/1XQFYr_OBI1lrpybsLrHWTWcYNZcF_zOmGDHiIBwSMng Tool: http://octopwn.porchetta.industries/ Readme: http://octopwn.porchetta.industries/readme.html Sponsor for more features: https://porchetta.industries #pentest #framework

​ADB WEBKIT Access ADB On Browsers. Live Android Application Manager: ▫️ Install Apk With Some Options Like GrantPermission And … ▫️ Revoke And Grant Apk Permission ▫️ Uninstall Apk ▫️ Run Apk ▫️ Clear Cache ▫️ Save Apk ▫️ Stop Apk https://github.com/jxroot/adbwebkit

Payload-cob Payload Automation is a collection of Python classes to serve as a bridge between Sleep and Python which can be used to help automate payload development, testing, opsec checking, and deployment with Cobalt Strike or anything else you can come up with. Included Libraries: ▫️ Striker: A set of functions to interact with Cobalt Strike and execute functionality typically only accessible via Sleep/GUI. ▫️ Compyler: A set of functions to compile various payloads from platform or cross-platform. ▫️ Artifactor: A set of functions to inspect and review artifacts and collect and track IoCs. ▫️ Sleepy: A set of functions to help facilitate a bridge between Sleep objects and Python objects. ▫️ Detemplate: An incomplete idea of mine to automate the population of template files based on YAML configurations. Meant to be used with more complex payloads with multiple replacements and/or embedding. https://github.com/turalalv/Payload-cob

​Scavenger Burp extension to create target specific and tailored wordlist from #burp history. https://github.com/0xDexter0us/Scavenger

​Oneliner-Bugbounty A collection oneliner scripts for bug bounty. https://github.com/daffainfo/Oneliner-Bugbounty

​oncall Developer-friendly incident response with brilliant Slack integration. ▫️ Collect and analyze alerts from multiple monitoring systems ▫️ On-call rotations based on schedules ▫️ Automatic escalations ▫️ Phone calls, SMS, Slack, Telegram notifications https://github.com/grafana/oncall

OSIPs This script scans every file from a given folder recursively, extracts every IPv4 and IPv6 address, filters out the public IP addresses and then queries these IPs against TOR relays, WhoIs service and Location service. It outputs 4 files: a CSV file and a JSON file with all details of the IP addresses, a CSV file containing an index of every found IP address and a KML file with all the locations gathered. Features: ▫️ Parses any number of files in a single run ▫️ Can also be run for a single input file ▫️ Extracts all unique valid IPv4 and IPv6 addresses (correctly comparing two addresses, even if they are written differently) ▫️ Collects publicly available Who Is information for all public IP addresses ▫️ Queries all public IP addresses against TOR relays ▫️ Collects geographical location information for all public IP addresses ▫️ Can be run with command line parameters in non-interactive mode for easy integration in other scripts ▫️ Can be run without parameters and the input values can be provided interactively ▫️ Allows user to select what steps to perform or exclude ▫️ Verbosely outputs information to console at every step that it performs ▫️ Exports all IP addresses details in both a CSV file and a JSON file ▫️ Exports a KML file that can be easily loaded on top of a map ▫️ Keeps an index of all found IP addresses in a separate CSV file for easy traceback https://github.com/ciprianster/OSIPs

​mailMeta A forensic tool to make analysis of email headers easy to aid in the quick discovery of the attacker. mailMeta is a python based forensic tool which reads through the email headers from the email file and extracts crucial information to identify if the email is legitimate. What are the advantages of using mailMeta? Have you ever heared of email hacking or sophisticated email crimes where a spoofed email is sent to the victim and the victim trusts this email based on the email address which is infact fake. These email contains mallicious links which can be used to extract some information or install some malware or backdoors on your device. So, in order to avoid you from this mailMeta comes to your rescue. Here I have added instructions on how to download the email from the file and then pass it to the mailMeta executable. It then parses the headers and informs you if the mail is genuine or not. Whenever you are suspicious about an email be sure to check it once here. It can save you in most of the scenarios. If anyone has some ideas/updates feel free to open an issue or create a pull request. What are the information revealed by the mailMeta? mailMeta parses the following headers: ▫️ Message-ID ▫️ SPF-Record ▫️ DKIM-Record ▫️ DMARC-Record ▫️ Spoofed Email detection based on the above headers ▫️ IP-Address of the sender ▫️ Service Provider used for sending the email ▫️ Content-Type ▫️ Data and Time ▫️ Subject https://github.com/gr33nm0nk2802/mailMeta