HackGit
الذهاب إلى القناة على Telegram
The channel was created for cybersecurity specialists. • Offensive Security • RedTeam • Malware Research • BugBounty • OSINT • etc Disclaimer: t.me/hackgit/2082 Donations - Ads: t.me/hackgit/5423
إظهار المزيد📈 نظرة تحليلية على قناة تيليجرام HackGit
تُعد قناة HackGit (@hackgit) في القطاع اللغوي الإنكليزية لاعباً نشطاً. يضم المجتمع حالياً 21 579 مشتركاً، محتلاً المرتبة 4 526 في فئة التكنولوجيات والتطبيقات والمرتبة 1 853 في منطقة الولايات المتحدة.
📊 مؤشرات الجمهور والحراك
منذ تأسيسه في невідомо، حقق المشروع نمواً سريعاً وجمع 21 579 مشتركاً.
بحسب آخر البيانات بتاريخ 02 مارس, 2025، تحافظ القناة على نشاط مستقر. خلال آخر 30 يوماً تغيّر عدد الأعضاء بمقدار 19، وفي آخر 24 ساعة بمقدار 0، مع بقاء الوصول العام مرتفعاً.
- حالة التحقق: غير موثّقة
- معدل التفاعل (ER): يبلغ متوسط تفاعل الجمهور 0%. وخلال أول 24 ساعة من النشر يحصد المحتوى عادةً N/A% من ردود الفعل نسبةً إلى إجمالي المشتركين.
- وصول المنشورات: يحصل كل منشور على متوسط 0 مشاهدة. وخلال اليوم الأول يجمع عادةً 0 مشاهدة.
- التفاعلات والاستجابة: يتفاعل الجمهور بانتظام؛ متوسط التفاعلات لكل منشور يبلغ 0.
📝 الوصف وسياسة المحتوى
يصف المؤلف القناة بأنها مساحة للتعبير عن الآراء الذاتية:
“The channel was created for cybersecurity specialists.
• Offensive Security
• RedTeam
• Malware Research
• BugBounty
• OSINT
• etc
Disclaimer:
t.me/hackgit/2082
Donations - Ads:
t.me/hackgit/5423”
بفضل وتيرة التحديث المرتفعة (أحدث البيانات بتاريخ 11 نوفمبر, 2026) تحافظ القناة على حداثتها ومستوى وصول مرتفع. وتُظهر التحليلات تفاعلاً نشطاً من الجمهور، ما يجعلها نقطة تأثير مهمة ضمن فئة التكنولوجيات والتطبيقات.
21 579
المشتركون
لا توجد بيانات24 ساعات
-37 أيام
+1930 أيام
أرشيف المشاركات
21 579
Dumpscan
Command-line tool to extract and dump secrets from kernel and Windows Minidump formats
https://github.com/daddycocoaman/dumpscan
@HackGit
21 579
Rönd
A lightweight container for distributed security policy evaluation.
Features:
▫️ Allow or reject request
▫️ Query generation during the request flow
▫️ Response body patching
https://github.com/rond-authz/rond
@HackGit
21 579
Awesome Hacker Search Engines
Search engines for different tasks: search exploits, attack surfaces, certificates, leaks credentials, source code repos and much more.
https://github.com/edoardottt/awesome-hacker-search-engines
#osint #infosec #cybersecurity
21 579
Cerbos
Painless access control for cloud-native applications
Cerbos helps you super-charge your authorization implementation by writing context-aware access control policies for your application resources.
Author access rules using an intuitive YAML configuration language, use your Git-ops infrastructure to test and deploy them and, make simple API requests to the Cerbos PDP to evaluate the policies and make dynamic access decisions.
https://github.com/cerbos/cerbos
@HackGit
21 579
PEResourceInject
A way to avoid using VirtualAllocEx/WriteProcessMemory to inject shellcode into a process. You need access to modify the target executable.
▫️ Write shellcode to the target's .rsrc as a bitmap using the UpdateResource APIs
▫️ Spawn the exe suspended
▫️ Calculate the shellcode location by parsing the PE header
▫️ VirtualProtectEx to RX
▫️ Get/SetThreadContext to execute
https://github.com/Wra7h/PEResourceInject
@HackGit
21 579
PoW Shield
Project dedicated to fighting #DDoS and spam with proof of work, featuring an additional WAF. Docker images are available for rapid and lightweight deployment.
Features:
▫️ Web Service Structure
▫️ Proxy Functionality
▫️ PoW Implementation
▫️ Dockerization
▫️ IP Blacklisting
▫️ Rate-limiting
▫️ Unit Testing
▫️ WAF Implementation
▫️ Multi-Instance Syncing (Redis)
https://github.com/RuiSiang/PoW-Shield
@HackGit
21 579
Repost from Pentesting Shop
DSTIKE WIFI Duck
This open source project aims to provide a user-friendly tool to learn about keystroke injection attacks. A microcontroller acts as a USB keyboard that is programmable over WiFi. It’s using the Ducky Script language that Hak5 introduced with the USB Rubber Ducky.
A keyboard is trusted by most operating systems by default, which enables for a variety of attacks. Humans might not type very fast, but an automated device like this can. It can open a terminal and mess with your computer in a matter of a milliseconds!
Spacehuhn has a lot of interesting projects, WiFi duck is a new version different from old WiFi ducky. For more details please check. Schematic pdf.
What makes it special?
▫️ 4MB Flash ESP-WROOM-02
▫️ Atmega32u4
▫️ IIC connection between ESP8266 and Atmega32u4
▫️ RGB LED
▫️ DIP Switch for different mode:
▫️ Arduino Flash Mode: 10101010
▫️ ESP8266 Flash Mode: 01011101
▫️ Work Mode: 10101101
🛒 https://bit.ly/3ngEDLR
#wifi #duck
21 579
CVE-2022-34305
Apache Tomcat Cross-Site Scripting Vulnerability
https://github.com/zeroc00I/CVE-2022-34305
#exploit
21 579
nim-loader
WIP shellcode loader in nim with EDR evasion techniques
https://github.com/adamsvoboda/nim-loader
@HackGit
21 579
ADFSRelay
This repository includes two utilities NTLMParse and #ADFSRelay. NTLMParse is a utility for decoding base64-encoded NTLM messages and printing information about the underlying properties and fields within the message.
Examining these NTLM messages is helpful when researching the behavior of a particular NTLM implementation. ADFSRelay is a proof of concept utility developed while researching the feasibility of NTLM relaying attacks targeting the ADFS service.
This utility can be leveraged to perform NTLM relaying attacks targeting ADFS. We have also released a blog post discussing ADFS relaying attacks in more detail [1].
https://github.com/praetorian-inc/ADFSRelay
Relaying to ADFS Attacks
https://www.praetorian.com/blog/relaying-to-adfs-attacks
21 579
kernel-mii
Cobalt Strike Beacon Object File foundation for kernel exploitation using CVE-2021-21551.
This is a Cobalt Strike (CS) Beacon Object File (BOF) which exploits CVE-2021-21551. It only overwrites the beacon process token with the system process token. But this BOF is mostly just a good foundation for further kernel exploitation via CS.
https://github.com/tijme/kernel-mii
#cobalt #cve
21 579
tlsx
A fast and configurable TLS grabber focused on TLS based data collection and analysis.
Features:
▫️ Fast And fully configurable TLS Connection
▫️ Multiple Modes for TLS Connection
▫️ Multiple TLS probes
▫️ Auto TLS Fallback for older TLS version
▫️ Pre Handshake TLS connection (early termination)
▫️ Customizable Cipher / SNI / TLS selection
▫️ TLS Misconfigurations
▫️ HOST, IP, URL and CIDR input
▫️ STD IN/OUT and TXT/JSON output
https://github.com/projectdiscovery/tlsx
21 579
Repost from Pentesting News
ldeep
In-depth LDAP enumeration utility.
https://github.com/franc-pentest/ldeep
Usage Example:
Enumerate ACEs on AdminSDHolder object
$ ldeep ldap -s 'ldap://10.10.13.37' -d megacorp -u j.doe -p 'Passw0rd!' -b 'CN=System,DC=megacorp,DC=local' sddl AdminSDHolder | jq '.[].nTSecurityDescriptor.DACL.ACEs[] | select(.Type | contains("Allowed")) | .SID + " :: " + .Type'
Convert SID to name
$ ldeep ldap -s 'ldap://10.10.13.37' -d megacorp -u j.doe -p 'Passw0rd!' from_sid <SID>#ad #ldap
21 579
EMUX
The EMUX Firmware Emulation Framework is a collection of scripts, kernels and filesystems to be used with QEMU to emulate ARM and MIPS Linux IoT devices. EMUX is aimed to facilitate IoT research by virtualising as much of the physical device as possible. It is the closest we can get to an actual IoT VM.
Devices successfully emulated with EMUX so far:
▫️ Damn Vulnerable ARM Router
▫️ Damn Vulnerable MIPS Router (Little Endian) [NEW!]
▫️ Damn Vulnerable MIPS Router (Big Endian) [NEW!]
▫️ Trivision NC227WF Wireless IP Camera
▫️ Tenda AC15 Wi-Fi Router (Github Docs)
▫️ Archer C9 Wi-Fi Router
https://github.com/therealsaumil/emux
@HackGit
21 579
ExtractedDefender
Just an attempt to group extracted data from Defender for research purposes.
https://github.com/HackingLZ/ExtractedDefender
@HackGit
21 579
firefucks.py
This is a tool for patching Firefox Web Browser into allowing unsigned addons.
Can be used as an apt hook.
Mozilla, requiring extensions signing and signing in and getting 2FA for AMO is not nice. 🖕🔥
This tool has been created as a response to:
▫️ will of Mozilla to disallow unsigned extensions in regular builds of Firefox;
▫️ will of Mozilla to disallow WebExtensions Experiments in regular builds of Firefox;
▫️ will of Mozilla to require authentication on AMO in order to sign extensions;
▫️ unwillingness of devs of some distros to provide "Developer Edition" builds of Firefox.
https://github.com/KOLANICH-tools/firefucks.py
@HackGit
21 579
AuthCov
Web app authorisation coverage scanning.
AuthCov crawls your web application using a Chrome headless browser while logged in as a pre-defined user. It intercepts and logs API requests as well as pages loaded during the crawling phase.
In the next phase it logs in under a different user account, the "intruder", and attempts to access each of one of the API requests or pages discovered previously. It repeats this step for each intruder user defined. Finally it generates a detailed report listing the resources discovered and whether or not they are accessible to the intruder users.
https://github.com/authcov/authcov
@HackGit
21 579
Norimaci
"Norimaci" is a simple and lightweight malware analysis sandbox for macOS. This tool was inspired by "Noriben". Norimaci uses the features of OpenBSM or Monitor.app to monitor macOS system activity instead of Sysinternals Process Monitor (procmon).
Norimaci consists of 3 Python scripts.
▫️ norimaci.py : Main script
▫️ openbsmconv.py : OpenBSM audit log converter
▫️ monitorappconv.py : Monitor.app data converter
OpenBSM is a framework to audit activities on macOS. Please see their web site for details.
Monitor.app is a free tool which is made by FireEye. Please see their web site for details.
https://github.com/mnrkbys/norimaci
@HackGit
21 579
TrelloC2
Simple C2 over Trello's API (Proof-of-Concept)
https://github.com/secmode/TrelloC2
@HackGit
