HackGit

$donate

​​💰 Donate If you like the channel please support us ❣️ https://www.buymeacoffee.com/HackGit BTC:

1987zNaVX53v7tzpKRRde84uXbDYjuNykL

TON:

UQAAZ1BFX5OsybSryoFunzyJN3F7oKWMbZNPlwMTcVK8mEzA

USDT – ERC20❗️:

0x1e7fa9e9c42f71e6d155aca39951f23355178163

You can buy crypto here Every donation gives us the motivation to do better and more content! #donate #support

​​inject-assembly Execute .NET in an Existing Process This tool is an alternative to traditional fork and run execution for Cobalt Strike. The loader can be injected into any process, including the current Beacon. Long-running assemblies will continue to run and send output back to the Beacon, similar to the behavior of execute-assembly. There are two components of inject-assembly: 1. BOF initializer: A small program responsible for injecting the assembly loader into a remote process with any arguments passed. It uses BeaconInjectProcess to perform the injection, meaning this behavior can be customized in a Malleable C2 profile or with process injection BOFs (as of version 4.5). 2. PIC assembly loader: The bulk of the project. The loader will initialize the .NET runtime, load the provided assembly, and execute the assembly. The loader will create a new AppDomain in the target process so that the loaded assembly can be totally unloaded when execution is complete. Communication between the remote process and Beacon occurs through a named pipe. The Aggressor script generates a pipe name and then passes it to the BOF initializer. https://github.com/kyleavery/inject-assembly

​​shells A script for generating common revshells fast and easy. Especially nice when in need of PowerShell and Python revshells, which can be a PITA getting correctly formated. ▫️ Shows username@computer, above the prompt and working-directory ▫️ Has a partial AMSI-bypass, making some stuff a bit easier ▫️ TCP and UDP ▫️ Windows Powershell and Core Powershell ▫️ Functions for uploading and downloading files. (Using Updog by sc0tfree) ▫️ ngrok can be started/stopped from inside the script ▫️ payloads will be genereated with the ngrok addresses https://github.com/4ndr34z/shells

​​knoxnl This is a python wrapper around the amazing KNOXSS API by Brute Logic. https://github.com/xnl-h4ck3r/knoxnl

​​LOLBAS Living Off The Land Binaries and Scripts The goal of the LOLBAS project is to document every binary, script, and library that can be used for Living Off The Land techniques. https://github.com/LOLBAS-Project/LOLBAS Details: https://lolbas-project.github.io/

​​i2pd i2pd (I2P Daemon) is a full-featured C++ implementation of I2P client. I2P (Invisible Internet Protocol) is a universal anonymous network layer. All communications over I2P are anonymous and end-to-end encrypted, participants don't reveal their real IP addresses. I2P client is a software used for building and using anonymous I2P networks. Such networks are commonly used for anonymous peer-to-peer applications (filesharing, cryptocurrencies) and anonymous client-server applications (websites, instant messengers, chat-servers). I2P allows people from all around the world to communicate and share information without restrictions. Features: ▫️ Distributed anonymous networking framework ▫️ End-to-end encrypted communications ▫️ Small footprint, simple dependencies, fast performance ▫️ Rich set of APIs for developers of secure applications https://github.com/PurpleI2P/i2pd

​​QuickSand Version 2 QuickSand Python Package and Command Line Tool QuickSand is a Python-based analysis framework to analyze suspected malware documents to identify exploits in streams of different encodings or compressions. QuickSand supports documents, PDFs, Mime/Email, Postscript and other common formats. A built-in command line tool can process a single document or directory of documents. QuickSand scans within the decoded streams of documents and PDFs using Yara signatures to identify exploits or high risk active content. https://github.com/tylabs/quicksand

​​shotlooter Shotlooter tool is developed to find sensitive data inside the screenshots which are uploaded to https://prnt.sc/ (via the LightShot software) by applying OCR and image processing methods. https://github.com/utkusen/shotlooter

​​AmsiScanner Scan files with the Anti-Malware Scan Interface (AMSI) and minimize malicious text files and PowerShell scripts to see what the Antivirus is flagging as malicious. Features: ▫️ Scan binary and text files with the installed AV to see if they are malicious. ▫️ Find the smallest subset of text that is still flagged as malicious by the installed AV. ▫️ Find the smallest subset of PowerShell tokens that are still flagged as malicious by the installed AV. ▫️ Encrypt files to mitigate accidental exection and detection by the installed AV. ▫️ Read files encrypted with this utility. https://github.com/pracsec/AmsiScanner Details: https://practicalsecurityanalytics.com/home/tools/amsiscanner/

​​CryptBoard Anonymous encrypted web clipboard and chat Cryptboard.io allows to send text messages and files between multiple devices https://github.com/MihanEntalpo/cryptboard.io Website: https://cryptboard.io/

JustEvadeBro A cheat sheet which will aid you through AMSI evasion. https://github.com/sinfulz/JustEvadeBro

​​GShark Scan for sensitive information easily and effectively The project is based on Go and Vue to build a management system for sensitive information detection. For the full introduction, please refer to articles and videos. For now, all the scans are only targeted to the public environments, not local environments. Features: ▫️ Support multi platforms, including Gitlab, Github, Searchcode, Postman ▫️ Flexible menu and API permission setting ▫️ Flexible rules and filter rules ▫️ Utilize gobuster to brute force subdomain ▫️ Easily used management system https://github.com/madneal/gshark

​​Firefox Decrypt Firefox Decrypt is a tool to extract passwords from profiles of Mozilla (Fire/Water)fox™, Thunderbird®, SeaMonkey® and derivates. It can be used to recover passwords from a profile protected by a Master Password as long as the latter is known. If a profile is not protected by a Master Password, passwords are displayed without prompt. This tool does not try to crack or brute-force the Master Password in any way. If the Master Password is not known it will simply fail to recover any data. https://github.com/unode/firefox_decrypt

​​drv-vuln-scanner Vulnerable driver scanning tool for win64, put drivers to scan in drv/. Finds imports that could be exploited, still requires manual analysis. https://github.com/riesha/drv-vuln-scanner

​​APTAAnomaly Windows event log anomaly detection powered by ATPA technologies This repository contains a velociraptor artifact. It collects windows event log data, learns models from those logs, and uses those models to detect anomalous behavior. https://github.com/APTA-Technologies/APTAAnomaly

​​burp-protobuf-decoder A simple Google Protobuf Decoder for Burp This is a fork of the Burp Suite version of burp-protobuf-decoder with many improvements and a lot of bug fixes 👇 https://github.com/federicodotta/protobuf-decoder

​​Active Directory Integrated DNS dump tool By default any user in Active Directory can enumerate all DNS records in the Domain or Forest DNS zones, similar to a zone transfer. This tool enables enumeration and exporting of all DNS records in the zone for recon purposes of internal networks. https://github.com/dirkjanm/adidnsdump #ad