HackGit
الذهاب إلى القناة على Telegram
The channel was created for cybersecurity specialists. • Offensive Security • RedTeam • Malware Research • BugBounty • OSINT • etc Disclaimer: t.me/hackgit/2082 Donations - Ads: t.me/hackgit/5423
إظهار المزيد📈 نظرة تحليلية على قناة تيليجرام HackGit
تُعد قناة HackGit (@hackgit) في القطاع اللغوي الإنكليزية لاعباً نشطاً. يضم المجتمع حالياً 21 579 مشتركاً، محتلاً المرتبة 4 526 في فئة التكنولوجيات والتطبيقات والمرتبة 1 853 في منطقة الولايات المتحدة.
📊 مؤشرات الجمهور والحراك
منذ تأسيسه في невідомо، حقق المشروع نمواً سريعاً وجمع 21 579 مشتركاً.
بحسب آخر البيانات بتاريخ 02 مارس, 2025، تحافظ القناة على نشاط مستقر. خلال آخر 30 يوماً تغيّر عدد الأعضاء بمقدار 19، وفي آخر 24 ساعة بمقدار 0، مع بقاء الوصول العام مرتفعاً.
- حالة التحقق: غير موثّقة
- معدل التفاعل (ER): يبلغ متوسط تفاعل الجمهور 0%. وخلال أول 24 ساعة من النشر يحصد المحتوى عادةً N/A% من ردود الفعل نسبةً إلى إجمالي المشتركين.
- وصول المنشورات: يحصل كل منشور على متوسط 0 مشاهدة. وخلال اليوم الأول يجمع عادةً 0 مشاهدة.
- التفاعلات والاستجابة: يتفاعل الجمهور بانتظام؛ متوسط التفاعلات لكل منشور يبلغ 0.
📝 الوصف وسياسة المحتوى
يصف المؤلف القناة بأنها مساحة للتعبير عن الآراء الذاتية:
“The channel was created for cybersecurity specialists.
• Offensive Security
• RedTeam
• Malware Research
• BugBounty
• OSINT
• etc
Disclaimer:
t.me/hackgit/2082
Donations - Ads:
t.me/hackgit/5423”
بفضل وتيرة التحديث المرتفعة (أحدث البيانات بتاريخ 03 مارس, 2025) تحافظ القناة على حداثتها ومستوى وصول مرتفع. وتُظهر التحليلات تفاعلاً نشطاً من الجمهور، ما يجعلها نقطة تأثير مهمة ضمن فئة التكنولوجيات والتطبيقات.
21 579
المشتركون
لا توجد بيانات24 ساعات
-37 أيام
+1930 أيام
أرشيف المشاركات
21 579
CVE-2022–34718
TCP/IP RCE Vulnerability (CVE-2022–34718) PoC Restoration and Analysis.
https://github.com/numencyber/VulnerabilityPoC
Details:
https://medium.com/@numencyberlabs/analysis-and-summary-of-tcp-ip-protocol-remote-code-execution-vulnerability-cve-2022-34718-8fcc28538acf
#cve #poc
21 579
Get-AppLockerEventlog
This script will parse all the channels of events from the win-event log to extract all the log relatives to AppLocker. The script will gather all the important pieces of information relative to the events for forensic or threat-hunting purposes, or even in order to troubleshoot. Here are the logs we fetch from win-event:
▫️ EXE and DLL,
▫️ MSI and Script,
▫️ Packaged app-Deployment,
▫️ Packaged app-Execution.
https://github.com/RomaissaAdjailia/Get-AppLockerEventlog
#Donate t.me/hackgit🍻»»»
21 579
DragonCastle
A PoC that combines AutodialDLL lateral movement technique and SSP to scrape NTLM hashes from LSASS process.
Upload a DLL to the target machine. Then it enables remote registry to modify AutodialDLL entry and start/restart BITS service. Svchosts would load our DLL, set again AutodiaDLL to default value and perform a RPC request to force LSASS to load the same DLL as a Security Support Provider. Once the DLL is loaded by LSASS, it would search inside the process memory to extract NTLM hashes and the key/IV.
https://github.com/mdsecactivebreach/DragonCastle
21 579
Background
A phishing framework for OAuth 2.0 device code authentication grant flow
https://github.com/dunderhay/phishsticks
21 579
L2Fuzz
A stateful fuzzer to detect vulnerabilities in Bluetooth BR/EDR Logical Link Control and Adaptation Protocol (L2CAP) layer.
https://github.com/haramel/l2fuzz
21 579
Redshift-jdbc file write RCE
In Amazon AWS Redshift JDBC Driver (aka amazon-redshift-jdbc-driver or redshift-jdbc42) with the newest version, the loggerFile properties does not check the file suffix,which a knowledgeable attacker with control over the JDBC URL can use to create a jsp webshell and achieve remote code execution.
https://github.com/p1n93r/redshift-jdbc-RCE
t.me/hackgit
21 579
UbSym
A unit-based symbolic execution method for detecting memory corruption vulnerabilities in executable codes
https://github.com/SoftwareSecurityLab/UbSym
21 579
RePulsar
This is a PoC implementation of an SMB backdoor based on our own research into the Windows kernel and the SMB mechanism. Since this is just a PoC, there is no special functionality. In the future, it is planned to support the basic functionality:
▫️ Arbitrary read/write memory
▫️ Shellcode execution
▫️ Etc.
https://github.com/APT64/RePulsar
21 579
EvilSmurf2
Project Description: Finding Bluetooth Vulnerabilities and Methods of Exploitation/Weaponization as well as Mitigation/Prevention
This repository serves as storage as well as a collaborating area for C code developed and written by the group Deep Blue Devs (DBD)
https://github.com/joshuar49/EvilSmurf2
21 579
eJPT-Notes
eLearnSecurity Junior Penetration Tester
Collection of notes to prepare for the eLearnSecurity eJPT certification exam.
https://github.com/grumpzsux/eJPT-Notes
21 579
Wapiti
A web vulnerability scanner written in Python.
Features:
▫️ Generates vulnerability reports in various formats (HTML, XML, JSON, TXT, CSV).
▫️ Can suspend and resume a scan or an attack (session mechanism using sqlite3 databases).
▫️ Can give you colors in the terminal to highlight vulnerabilities.
▫️ Different levels of verbosity.
▫️ Fast and easy way to activate/deactivate attack modules.
▫️ Adding a payload can be as easy as adding a line to a text file.
▫️ Configurable number of concurrent tasks to perform HTTP requests.
https://github.com/wapiti-scanner/wapiti
Website:
https://wapiti-scanner.github.io/
#scanner #best
21 579
PENTESTING-BIBLE
Explore more than 2156 hacking articles saved over time as PDF. BROWSE HISTORY.
https://github.com/blaCCkHatHacEEkr/PENTESTING-BIBLE
t.me/hackgit
21 579
ShoMon
A Shodan alert feeder for TheHive written in GoLang. With version 2.0, it is more powerful than ever!
https://github.com/KaanSK/shomon
21 579
The JSON Web Token Toolkit v2
jwt_tool.py is a toolkit for validating, forging, scanning and tampering JWTs (JSON Web Tokens).
Its functionality includes:
▫️ Checking the validity of a token
▫️ Testing for known exploits:
→ (CVE-2015-2951) The alg=none signature-bypass vulnerability
→ (CVE-2016-10555) The RS/HS256 public key mismatch vulnerability
→ (CVE-2018-0114) Key injection vulnerability
→ (CVE-2019-20933/CVE-2020-28637) Blank password vulnerability
→ (CVE-2020-28042) Null signature vulnerability
▫️ Scanning for misconfigurations or known weaknesses
▫️ Fuzzing claim values to provoke unexpected behaviours
▫️ Testing the validity of a secret/key file/Public Key/JWKS key
▫️ Identifying weak keys via a High-speed Dictionary Attack
▫️ Forging new token header and payload contents and creating a new signature with the key or via another attack method
▫️ Timestamp tampering
▫️ RSA and ECDSA key generation, and reconstruction (from JWKS files)
...and lots more!
https://github.com/ticarpi/jwt_tool
t.me/hackgit
21 579
ghoulbond
System Utility , Scanner and OSINT tool.
https://github.com/hitesh22rana/ghoulbond
21 579
ethereum-exploit
Analysis of the major exploits that took place on the Ethereum blockchain
https://github.com/MikeSpa/ethereum-exploit
21 579
s3cXSSer
This extension will help you to detect GET/POST based XSS vulnerability in any website easily
https://github.com/s3c-krd/s3cXSSer
t.me/hackgit
21 579
CVE-2022-42045
We discovered an Arbitrary code injection in Zemana amsdk.sys kernel-mode driver, a part of Zemana Antimalware SDK. The vulnerability allows to inject an arbitrary code into the one of the driver code sections and then to execute it with kernel-mode privileges (local privileges escalation from admin to kernel mode). This vulnerability could be used, for example, to disable Driver Signature Enforcement and then to install unsigned kernel-mode drivers.
https://github.com/ReCryptLLC/CVE-2022-42045
#cve
