HackGit

​​DistroForensics List of Linux distributions and VM for osint, cybersecurity and digitalforensics + list of software for for virtualisation and applications for creating bootable USB sticks https://github.com/CScorza/DistroForensics

VirusTotalC2 Abusing VirusTotal API to host our C2 traffic, usefull for bypassing blocking firewall rules if VirusTotal is in the target white list , and in case you don't have C2 infrastructure , now you have a free one. https://github.com/D1rkMtr/VirusTotalC2

​​Kubestriker A Blazing fast security auditing tool for kubernetes. Kubestriker performs numerous in-depth checks on Kubernetes infra to identify the security misconfigurations and challenges that DevOps engineers/developers are likely to encounter when using Kubernetes, especially in production and at scale. Kubestriker is Platform agnostic and works equally well across more than one platform such as self-hosted Kubernetes, #Amazon EKS, Azure AKS, Google GKE, etc. Features: ▫️ Scans Self Managed and cloud provider managed Kubernetes infra ▫️ Reconnaissance phase checks for various services or open ports ▫️ Performs automated scans incase of insecure, read-write, or read-only services are enabled ▫️ Performs both authenticated scans and unauthenticated scans ▫️ Scans for a wide range of IAM Misconfigurations in the cluster ▫️ Scans for a wide range of Misconfigured containers ▫️ Scans for a wide range of Misconfigured Pod Security Policies ▫️ Scans for a wide range of Misconfigured Network policies ▫️ Scans the privileges of a subject in the cluster ▫️ Run commands on the containers and streams back the output ▫️ Provides the endpoints of the misconfigured services ▫️ Provides possible privilege escalation details ▫️ Elaborative report with detailed explanation https://github.com/vchinnipilli/kubestriker

​​XClicker Fast GUI auto clicker for Linux. XClicker is an open-source, easy-to-use, feature-rich, blazing fast Autoclicker for Linux desktops using x11. Features: ▫️ Fairly simple layout; ▫️ Safe mode, to protect from unwanted behaviour; ▫️ Autoclick with a specified amount of time between each click; ▫️ Choose mouse button [Left/Right/Middle]; ▫️ Choose click type [Single/Double/Hold]; ▫️ Repeat until stopped or repeat a given amount of times; ▫️ Click on a specified location only; ▫️ Randomize the click interval; ▫️ Specify hold time per click; ▫️ Click while holding hotkey down; ▫️ Start / Stop with a custom hotkey; https://github.com/robiot/xclicker

​​HackTricks Cloud Welcome to the repo where you will find each hacking trick/technique/whatever related to CI/CD & Cloud I have learnt in CTFs, real life environments, and reading researches and news. https://github.com/carlospolop/hacktricks-cloud Website: https://cloud.hacktricks.xyz/ Pentesting Cloud https://github.com/carlospolop/hacktricks-cloud/tree/master/pentesting-cloud Pentesting CI/CD https://github.com/carlospolop/hacktricks-cloud/tree/master/pentesting-ci-cd

​​FaPro Free, Cross-platform, Single-file mass network protocol server simulator FaPro is a Fake Protocol Server tool, Can easily start or stop multiple network services. The goal is to support as many protocols as possible, and support as many deep interactions as possible for each protocol. https://github.com/fofapro/fapro

​​Inceptor Template-Driven AV/EDR Evasion Framework. Modern Penetration Testing and Red Teaming often require bypassing common AV/EDR appliances in order to execute code on a target. With time, defenses are becoming more complex and inherently more difficult to bypass consistently. Inceptor is a tool that can help to automate a great part of this process, hopefully requiring no further effort. Inceptor is a template-based PE packer for Windows, designed to help penetration testers and red teamers to bypass common AV and EDR solutions. Inceptor has been designed with a focus on usability, and to allow extensive user customization. https://github.com/klezVirus/inceptor

​​Python-Honeypot Automated Deception Framework. #OWASP Honeypot is an open-source software in Python language designed for creating honeypots and honeynets in an easy and secure way! https://github.com/OWASP/Python-Honeypot

​​EVA ICS Home and Industrial/Enterprise IoT automation platform. EVA ICS allows the setup of a single IoT/IIoT management node and then easily scales it to its own private ultra-secure automation Cloud, where nodes and components discover each other automatically via the Internet or local communications. https://github.com/alttch/eva3

​​SinMapper usermode driver mapper that forcefully loads any signed kernel driver (legit cert) with a big enough section (example: .data, .rdata) to map your driver over. the main focus of this project is to prevent modern anti-cheats (BattlEye, EAC) from finding your driver and having the power to hook anything and create system threads / callbacks due to being inside of legit memory (signed legit driver). https://github.com/armvirus/SinMapper

​​RoastInTheMiddle Roast in the Middle is a rough proof of concept (not attack-ready) that implements a man-in-the-middle ARP spoof to intercept AS-REQ's to modify and replay to perform a Kerberoast attack. For more information about this attack, read the blog post All Ur AS Are Belong To Us. https://github.com/0xe7/RoastInTheMiddle

​​wafaray Enhance your malware detection with WAF + YARA (WAFARAY) WAFARAY is a LAB deployment based on Debian 11.3.0 (stable) x64 made and cooked between two main ingredients WAF + YARA to detect malicious files (e.g. webshells, virus, malware, binaries) typically trough web functions (upload files). https://github.com/alt3kx/wafaray

​​USB Data Blocker This is a USB data blocker. It is made of aluminum alloy material, durable to use. Physically removed data prevent any kinds of data transfer or sync so that you can charge your device safely with it in public places. Buy online: 🛒 https://ali.ski/Lz1-s #usb

​​Kernelhub Windows Kernel privilege escalation vulnerability collection, with compilation environment, demo GIF map, vulnerability details, executable file https://github.com/Ascotbe/Kernelhub

​​Freeze A payload creation tool used for circumventing EDR security controls to execute shellcode in a stealthy manner. Freeze utilizes multiple techniques to not only remove Userland EDR hooks, but to also execute shellcode in such a way that it circumvents other endpoint monitoring controls. https://github.com/optiv/Freeze

​​CVE-2022-2274 OpenSSL 3.0.4 - bug in the RSA implementation https://github.com/Malwareman007/CVE-2022-2274

​​KnownDllUnhook Replace the .txt section of the current loaded modules from \KnownDlls\ to bypass edrs https://github.com/ORCx41/KnownDllUnhook

​​Nebula Nebula is a Cloud and (hopefully) DevOps Penetration Testing framework. It is build with modules for each provider and each functionality. As of April 2021, it only covers AWS, but is currently an ongoing project and hopefully will continue to grow to test GCP, Azure, Kubernetes, Docker, or automation engines like Ansible, Terraform, Chef, etc. Currently covers: ▫️ S3 Bucket name bruteforce ▫️ IAM, EC2, S3, STS and Lambda Enumeration ▫️ IAM, EC2, STS, and S3 exploitation ▫️ SSM Enumeration + Exploitation ▫️ Custom HTTP User-Agent ▫️ Enumerate Read Privileges (working on write privs) ▫️ Reverse Shell ▫️ No creds Reconnaisance There are currently 67 modules covering: ▫️ Reconnaissance ▫️ Enumeration ▫️ Exploit ▫️ Cleanup ▫️ Reverse Shell https://github.com/gl4ssesbo1/Nebula

​​Rescope A tool geared towards pentesters and bug-bounty researchers, that aims to make life easier when defining scopes for Burp Suite and #OWASP ZAP. Features: ▫️ Define public scope(s) directly from any supported BBaaS (Bug-Bounty-as-a-Service) platform. ▫️ Define private scopes by copy/pasting target definitions from pretty much anywhere. ▫️ Outputs results that are compatible with Burp Suite and Zaproxy for direct import. ▫️ Combine private and public scopes. ▫️ Easily separate excludes from includes. ▫️ Parse multiple scopes to the same result. ▫️ Supports IP-ranges & CIDR. ▫️ Resolves conflicting includes/excludes ▫️ Avoid resources from third-party services such as github.com, gitlab.com, itunes.apple.com, etc. https://github.com/root4loot/rescope