HackGit

​​spraycharles Low and slow password spraying tool, designed to spray on an interval over a long period of time. https://github.com/Tw1sm/spraycharles #infosec #pentesting #redteam

​​April UART SD logger The April logger is a versatile data logger designed for logging serial data from your projects. It supports high-capacity microSD cards and offers the option to transfer logs to a remote server via WiFi. Based on the ESP32 C3 chip, it features WiFi and USB support. The board can be easily programmed via the Type-C USB connector. Additionally, it comes with a DS1302 RTC module for real-time information. The logger provides a user-friendly experience with its preloaded firmware and offers flexible power options, including 3.3V, 5V, and USB. The board also includes a button for programming and logging configuration can be easily managed through the config.json file. Buy online: 🛒 https://bit.ly/43x3gaF #USB #logger #ESP32 #wifi

​​PhoneInfoga Information gathering framework for phone numbers. https://github.com/sundowndev/PhoneInfoga #OSINT #infosec #recon #best

​​OSINT-SPY Performs #OSINT scan on email/domain/ip_address/organization using OSINT-SPY. It can be used by Data Miners, Infosec Researchers, Penetration Testers and cyber crime investigator in order to find deep information about their target. https://github.com/SharadKumar97/OSINT-SPY #cybersecurity #infosec #pentesting

​​NODESUB A command-line tool for finding subdomains in bug bounty programs. It supports various subdomain enumeration techniques and provides flexible options for customization. https://github.com/pikpikcu/nodesub #infosec #pentesting #bugbounty

​​NekoClient It appears that the attacker behind CurseForge's June 2023 malware incident posted a deobfuscated version of their malware by accident. https://github.com/clrxbl/NekoClient #infosec #pentesting #redteam

​​Ransomware Map Map tracking #ransomware ecosystem, by OCD World Watch team. https://github.com/cert-orangecyberdefense/ransomware_map #cybersecurity #infosec

​​horQRux By splitting a #QR code into 7 fragments, we may physically split and distribute a #secret into the real world. For example by printing the QR fragments onto transparent paper and handing them out to multiple people. https://github.com/jzck/horqrux

​​KRBTGS A post-exploitation option for #CobaltStrike to retrieve a working TGT for the current user that Beacon is running as, or impersonating. https://github.com/realoriginal/krbtgs #infosec #pentesting #redteam

​​Banshee Experimental Windows x64 Kernel Rootkit. https://github.com/eversinc33/Banshee #infosec #pentesting #redteam

​​Threat hunting/detecting using KQL queries A repository of KQL queries focused on threat hunting and threat detecting for Microsoft Sentinel & Microsoft 365 Defender. https://github.com/cyb3rmik3/KQL-threat-hunting-queries #cybersecurity #infosec

​​DCMB Dont Call Me Back - Dynamic kernel callback resolver. https://github.com/GetRektBoy724/DCMB #cybersecurity #infosec

​​ZIP Domains Welcome to our project dedicated to providing up-to-date data on newly registered .zip domains. With the recent introduction of the .zip top-level domain (TLD) by Google, concerns have arisen within the community regarding potential attack vectors associated with this TLD. To address these concerns and ensure the safety of internet users, we have initiated this workflow aimed at gathering comprehensive information about .zip domains as they are registered. https://github.com/trickest/zip #cybersecurity #infosec

​​CVE-2023-32353 Local privilege escalation via iTunes in Windows. https://github.com/86x/CVE-2023-32353-PoC #cve #cybersecurity #infosec

​​proXXy A super simple multithreaded proxy scraper; scraping & checking ~50k HTTP, HTTPS, SOCKS4, & SOCKS5 proxies. https://github.com/Atropa-Solanaceae/proXXy #privacy #infosec #pentesting

​​IndoXploit-Shell https://github.com/flux10n/IndoXploit-WebShell #infosec #pentesting #redteam

​​CVE-2023-2283 Authentication bypass vulnerability in libssh, which, under certain conditions, may enable a remote attacker to gain unauthorized access to another user’s account via ssh login. https://github.com/github/securitylab/tree/1786eaae7f90d87ce633c46bbaa0691d2f9bf449/SecurityExploits/libssh/pubkey-auth-bypass-CVE-2023-2283 #cybersecurity #infosec

​​Shellcode PageSplit Splitting and executing shellcode across multiple pages. https://github.com/x0reaxeax/PageSplit #infosec #pentesting #redteam

​​UTopia A tool for automatically generating fuzz drivers from unit tests. https://github.com/Samsung/UTopia #cybersecurity #infosec

​​BypassNeo-reGeorg Anti-kill version Neo-reGeorg. https://github.com/r00tSe7en/BypassNeo-reGeorg #infosec #pentesting #redteam