HackGit

​​TTGO T-Beam ESP32 LoRa The TTGO T-Beam is a long-range wireless capable board supporting LoRa, built around a dual-core ESP32 chip with 4MB of SPI flash onboard, providing both Wi-Fi and Bluetooth LE. The board's LoRa support comes in three different variants, operating at 433MHz, 868MHz, and 915MHz depending on region, with an included SMA antenna. Location tracking is provided by the onboard u-blox NEO-6M GPS module with ceramic antenna, and the board offers 26-pin headers with GPIO, ADC, VP/VN, DAC, touch, SPI, I2C, UART, 2דLoRa” pin, and power signals (5V/3.3V/GND). The board can be programmed using the Arduino development environment, and example code shows you how to both send and receive data via LoRa. The board also includes a battery holder for a 18650 Li-Ion cell. Repository: https://github.com/Xinyuan-LilyGO/LilyGo-LoRa-Series Buy online: 🛒 https://alii.pub/6mgzin 🛒 https://amzn.to/3Z2WUh4 #radio #lora #mesh #ESP32

​​DInvoke Dynamic replacement for PInvoke on Windows. DInvoke contains powerful primitives that may be combined intelligently to dynamically invoke unmanaged code from disk or from memory with careful precision. This may be used for many purposes such as PE parsing, intelligent dynamic API resolution, dynamically loading PE plugins at runtime, process injection, and avoiding API hooks. https://github.com/TheWover/DInvoke

​​Lazarus-Tactic program based on APT38 North Korea-backed hackers tactic that used in targeting security researchers using a malicious Visual Studio project file (vcxproj) to steal their 0days. Once the program runs, it will infect all of your Visual Studio projects https://github.com/ZeroMemoryEx/APT38-0day-Stealer #cybersecurity #infosec #apt

​​XMT XMT is a full-featured C2 framework written in Golang that allows for control, data exfiltration and some other cool functions. Can be used to make full C2 clients/servers with little out-of-the-box changes. ThunderStorm would be an implementation of this. https://github.com/iDigitalFlame/xmt

​​Kraken A modular multi-language webshell. https://github.com/kraken-ng/Kraken #redteam

​​Exploit Writing for OSWE This repository contains a list of useful snippets and tips that pertain to the writing of exploits in the OSWE labs and certification exam. https://github.com/rizemon/exploit-writing-for-oswe

​​Bootlicker A generic UEFI bootkit used to achieve initial usermode execution. It works with modifications. https://github.com/realoriginal/bootlicker #infosec #redteam

​​Amsi-Bypass-Powershell This repo contains some Antimalware Scan Interface (AMSI) bypass / avoidance methods i found on different Blog Posts. Most of the scripts are detected by AMSI itself. So you have to find the trigger and change the signature at the part via variable/function renaming, string replacement or encoding and decoding at runtime. Alternatively obfuscate them via ISESteroids and or Invoke-Obfuscation to get them working. You can also take a look at my blog post about manually changing the signature to get a valid bypass again. https://github.com/S3cur3Th1sSh1t/Amsi-Bypass-Powershell #redteam

​​A Red-Teamer diaries RedTeam/Pentest notes and experiments tested on several infrastructures related to professional engagements. https://github.com/ihebski/A-Red-Teamer-diaries #redteam

​​Throwing Star LAN Tap Pro The Throwing Star LAN Tap Pro is a fully assembled and enclosed Ethernet tap device that requires no power to operate. It is an excellent tool for monitoring 10BASET and 100BASETX networks, providing both RX and TX monitoring capabilities for packet sniffing programs like tcpdump, tshark, and Wireshark. The device features two specially placed capacitors that force 1000BASET networks to negotiate at lower speeds (typically 100BASETX) so that they can be passively monitored. Pentesters can connect the Throwing Star LAN Tap Pro in line with a target network using Ethernet cables, then connect the monitoring ports to one or two monitoring stations. Finally, capture network traffic using your favorite software on the monitoring station(s). It comes in two versions, the Throwing Star LAN Tap (in kit form to assemble) and the Throwing Star LAN Tap Pro (an assembled device). Buy online: 🛒 https://alii.pub/6mfmov #ethernet #tap #sniffing

​​DarkAngel DarkAngel is a fully automatic white hat vulnerability scanner, which can monitor hacker and bugcrowd assets, generate vulnerability reports, screen capture of vulnerability URL, and send enterprise WeChat notifications. https://github.com/Bywalks/DarkAngel

​​WAF Bypass Tool WAF bypass Tool is an open source tool to analyze the security of any WAF for False Positives and False Negatives using predefined and customizable payloads. Check your WAF before an attacker does. WAF Bypass Tool is developed by Nemesida WAF team with the participation of community. https://github.com/nemesida-waf/waf-bypass #cybersecurity

​​SubdomainFinder Find subdomains by searching public certificate records. https://github.com/matthernet/SubdomainFinder #pentesting #bugbounty

​​resym Cross-platform tool that allows browsing and extracting C and C++ type declarations from PDB files. https://github.com/ergrelet/resym

​​Prefsniff A utility to sniff preferences changes to macOS plist files prefsniff is a utility to watch macOS plist files for changes, and then autogenerate the defaults command to apply those changes. Its intended use is to have prefsniff watch a plist file while setting a system or application preference. The resulting defaults command can then be added to a shell script or incorporated into a configuration management system such as Ansible. https://github.com/zcutlip/prefsniff #cybersecurity

​​CGPL CGPL is a packer/loader written in C# with the following feature (planning to make this list bit longer in the future): ▫️ My very own GetProcAddress (parsing PE headers is such a joy) and GetModuleHandle (decided to go for CreateToolhelp32Snapshot) implementation to dinamically fetch the address of the Win32 API I wanted to use. ▫️ AES encryption with a SHA256 derived key (must admit got inspiration from some APT guys) for payload and Win32 api function names (delegates might still drop suspicious strings around, but you can also change those names) ▫️ It does not dare to allocate a memory buffer which is READWRITEEXEC at the same time. https://github.com/oldboy21/CGPL

​​Trackgram Use Instagram location features to track an account. https://github.com/initzerCreations/Tracgram #infosecurity #privacy

​​Artemis A modular web reconnaissance tool and vulnerability scanner based on Karton. https://github.com/CERT-Polska/Artemis #pentesting #bugbounty

​​malpip Tool that creates a malicious pip package that runs your command during installation. https://github.com/thegoodhackertv/malpip #redteam

​​APK-Penetration-testing-Guide The Android Penetration Testing Steps repository is intended for security professionals, penetration testers, developers, and anyone who is interested in understanding the security implications of Android devices. We encourage feedback, suggestions, and contributions from the community to help us keep this repository up-to-date and useful. https://github.com/RajQureshi/APK-Penetration-testing-Guide