HackGit

​​Evil Crow RF V2 Evil Crow RF V2 is a radiofrequency hacking device for pentest and Red Team operations, this device operates in the following radiofrequency bands: ▫️ 300Mhz-348Mhz ▫️ 387Mhz-464Mhz ▫️ 779Mhz-928Mhz ▫️ 2.4GHz Evil Crow RF V2 has two CC1101 radiofrequency modules, these modules can be configured to transmit or receive on different frequencies at the same time. Additionally, Evil Crow RF V2 has a NRF24L01 module for other attacks. Evil Crow RF V2 allows the following attacks: ▫️ Signal receiver ▫️ Signal transmitter ▫️ Replay attack ▫️ URH parse ▫️ Mousejacking Repository: https://github.com/joelsernamoreno/EvilCrowRF-V2 Buy online: 🛒 https://ali.ski/nQuGD #radio #rf

​​pynipper-ng A configuration security analyzer for network devices. The goal of this tool is check the vulnerabilities and misconfigurations of routers, firewalls and switches reporting the issues in a simple way. This tool is based on nipper-ng, updated and translated to Python. The project wants to improve the set of rules that detect security misconfigurations of the network devices using multiple standard benchmarks (like CIS Benchmark) and integrate the tool with APIs (like PSIRT Cisco API) to scan known vulnerabilities. https://github.com/syn-4ck/pynipper-ng

​​Geogramint #OSINT Geolocalization tool for Telegram Geogramint is an OSINT tool that uses Telegram's API to find nearby users and groups. Inspired by Tejado's Telegram Nearby Map, which is no longer maintained, it aims to provide a more user-friendly alternative. Geogramint only finds Telegram users and groups which have activated the nearby feature. Per default it is deactivated. The tool is fully supported on Windows and partially supported on Mac OS and Linux distributions. https://github.com/Alb-310/Geogramint

​​PrintNightmare (CVE-2021-34527) This version of the PrintNightmare exploit is heavily based on the code created by Cube0x0, with the following features: ▫️ Ability to target multiple hosts. ▫️ Built-in SMB server for payload delivery, removing the need for open file shares. ▫️ Exploit includes both MS-RPRN & MS-PAR protocols (define in CMD args). ▫️ Implements @gentilkiwi's UNC bypass technique. https://github.com/m8sec/CVE-2021-34527 Exploiting PrintNightmare (CVE-2021–34527) https://infosecwriteups.com/exploiting-printnightmare-cve-2021-34527-10c6e0f5b83f #cve

​​pre2k Pre2k is a tool to query for the existence of pre-windows 2000 computer objects which can be leveraged to gain a foothold in a target domain as discovered by TrustedSec's @Oddvarmoe. Pre2k can be ran from an uanuthenticated context to perform a password spray from a provided list of recovered hostnames (such as from an RPC/LDAP null bind) or from an authenticated context to perform a targeted or broad password spray. Users have the flexibility to target every machine or to stop on the first successful authentication as well as the ability to request and store a valid TGT in .ccache form in their current working directory. https://github.com/garrettfoster13/pre2k

​​Paranoid Paranoid project checks for well known weaknesses on cryptographic artifacts such as public keys, digital signatures and general pseudorandom numbers. This library contains implementations and optimizations of existing work found in the literature. The existing work showed that the generation of these artifacts was flawed in some cases. The following are some examples of publications the library is based on. https://github.com/google/paranoid_crypto

​​DDoS-Ripper DDos Ripper a Distributable Denied-of-Service (#DDOS) attack server that cuts off-targets or surrounding infrastructure in a flood of Internet traffic. DDoS attacks achieve effectiveness using multiple compromised computer systems as a source of attack traffic. Search engines may include computers and other #network resources such as #IoT devices. From a higher level, the DDOS attack is like an unexpected traffic jam stuck on a highway, preventing regular traffic from reaching its destination. https://github.com/palahsu/DDoS-Ripper

​​Banana PI M2 Zero Like the Raspberry Pi Zero W, this little computer has 512MB of RAM, a microSD card slot, a mini HDMI port, and built-in 802.11b/g/n WiFi and Bluetooth. It has two micro USB ports (one of which is only used for power), and a camera connector. And the computer features a 40-pin expansion header. But while Raspberry Pi’s smallest, cheapest computer as a single-core Broadcom BCM2835 ARM11 processor (the same chip used in the original Raspberry Pi), the Banana Pi version has a quad-core Allwinner H2+ ARM Cortex-A7 processor with ARM Mali-400MP2 graphics. In other words, the 2.4″ x 1.2″ computer is about the same size and shape as the Raspberry Pi Zero W, but for a few bucks more you get a model that should offer significantly better performance. On the other hand, you get less official and unofficial support, since Banana Pi products aren’t as popular and don’t have the same kind of user base as Raspberry Pi’s devices. That said, you can already download Debian 9 for the Banana Pi M2 Zero, and it’s possible that other operating systems developed for similar hardware will run on the single-board computer. If you’re looking for a cheap PC that you can use as a desktop computer, there are probably better options. But this could be an interesting base for a handheld game console or terminal, a smart speaker, network attached storage device, or security system, or other DIY gadget. Wiki: https://wiki.banana-pi.org/Banana_Pi_BPI-M2_ZERO Buy online: 🛒 https://ali.ski/_mPUE #banana #minipc #kali #zero

​​EXE TO PDF Exploit Builder Make completely undetected payload by turning it into PDF. No macros. Software is protected, obfuscated and encrypted with Military 256AES Encryption. No VMs/VPSs(RDPs) supported! https://github.com/luci61/Exe-to-pdf

​​dBmonster With dBmonster you are able to scan for nearby WiFi devices and track them trough the signal strength (dBm) of their sent packets (sniffed with TShark). These dBm values will be plotted to a graph with matplotlib. It can help you to identify the exact location of nearby WiFi devices (use a directional WiFi antenna for the best results) or to find out how your self made antenna works the best (antenna radiation patterns). https://github.com/90N45-d3v/dBmonster

​​How To Secure A Linux Server An evolving how-to guide for securing a Linux server that, hopefully, also teaches you a little about security and why it matters. This guides purpose is to teach you how to secure a Linux server. https://github.com/imthenachoman/How-To-Secure-A-Linux-Server #linux #cybersecurity

​​JWT Re-auth Burp plugin to cache authentication tokens from an "auth" URL, and then add them as headers on all requests going to a certain scope. The plugin allows settings to be sent to it via context menus from various menus. This includes using an entire captured request to acquire new authentication tokens. https://github.com/nccgroup/jwt-reauth

​​Evil Win Windows Reverse TCP Shell for Hacking and Pentesting. https://github.com/i-am-unbekannt/Evil-Win

​​Redpanda Redpanda is a streaming platform for mission critical workloads. Kafka® compatible, No Zookeeper®, no JVM, and no code changes required. Use all your favorite open source tooling - 10x faster. https://github.com/redpanda-data/redpanda

​​urless This is a tool used to de-clutter a list of URLs. https://github.com/xnl-h4ck3r/urless

​​Bunkerweb A web server based on the notorious NGINX and focused on security. It integrates into existing environments (Linux, Docker, Swarm, Kubernetes, …) to make your web services "secure by default" without any hassle. The security best practices are automatically applied for you while keeping control of every setting to meet your use case. Features: ▫️ HTTPS support with transparent Let's Encrypt automation ▫️ State-of-the-art web security : HTTP security headers, prevent leaks, TLS hardening, ... ▫️ Integrated ModSecurity WAF with the OWASP Core Rule Set ▫️ Automatic ban of strange behaviors based on HTTP status code ▫️ Apply connections and requests limit for clients ▫️ Block bots by asking them to solve a challenge (e.g. : cookie, javascript, captcha, hCaptcha or reCAPTCHA) ▫️ Block known bad IPs with external blacklists and DNSBL https://github.com/bunkerity/bunkerweb

​​Hermes Hermes is a macOS agent written in Swift 5 designed for red team operations. Features: ▫️ Cross-compiling macOS payloads from Ubuntu using Darling ▫️ Ability to load and execute JXA scripts in-memory ▫️ Various macOS situational awareness techniques ▫️ Upload/download ▫️ Full file system access (ls, mv, cp, mkdir, cd, etc.) https://github.com/MythicAgents/hermes

​​Eraser Cleaning up Images from Kubernetes Nodes. Eraser helps Kubernetes admins remove a list of non-running images from all Kubernetes nodes in a cluster. https://github.com/Azure/eraser

​​Elkeid Elkeid is a support cloud-native and base linux host security(Intrusion detection and risk identification) solution. https://github.com/bytedance/Elkeid

​​CVE-2022-37042 Zimbra CVE-2022-37042 Nuclei weaponized template shell path: /public/formatter.jsp https://github.com/aels/CVE-2022-37042 #cve #nuclei