HackGit

​​Screen Privacy Filter Privacy Filters keep confidential information private. Only persons directly in front of the monitor can see the image on screen; others on either side of them see a darkened screen. Buy online: 🛒 https://ali.ski/-mNAQ #laptop #privacy

​​EvilnoVNC A Ready to go Phishing Platform. Unlike other phishing techniques, EvilnoVNC allows 2FA bypassing by using a real browser over a noVNC connection. In addition, this tool allows us to see in real time all of the victim's actions, access to their downloaded files and the entire browser profile, including cookies, saved passwords, browsing history and much more. https://github.com/JoelGMSec/EvilnoVNC Research: https://darkbyte.net/robando-sesiones-y-bypasseando-2fa-con-evilnovnc/

​​Sim-Ba Sim-Ba is an in-memory PE Loader designed to simulate the behaviour of Bazar Loader. It downloads the payload from C2 URL (http or https) and uses Process Hollowing method to inject downloaded PE into the new process created in suspended state. Process Hollowing is already a well-known and commonly used injection technique by malware developers. Sim-Ba is a modified version of another Process Hollowing repository: idan1288/ProcessHollowing32-64 https://github.com/OccamsXor/sim-ba

​​Win32 Offensive Cheatsheet Win32 and Kernel abusing techniques for pentesters & red-teamers https://github.com/matthieu-hackwitharts/Win32_Offensive_Cheatsheet t.me/hackgit

​​ToRat A Cross Platform Remote Administration tool written in Go using Tor as its transport mechanism currently supporting Windows, Linux, MacOS clients. https://github.com/lu4p/ToRat

​​Siofra A tool designed to identify and exploit DLL hijacking vulnerabilities in Windows programs. It is able to simulate the Windows loader in order to give visibility into all of the dependencies (and corresponding vulnerabilities) of a PE on disk, or alternatively an image file in memory corresponding to an active process. More significantly, the tool has the ability to easily generate DLLs to exploit these types of vulnerabilities via PE infection with dynamic shellcode creation. These infected DLLs retain the code (DllMain, exported functions) as well as the resources of a DLL to seamlessly preserve the functionality of the application loading them, while at the same time allowing the researcher to specify an executable payload to be either run as a separate process or loaded into the target as a module. Additionally, the tool contains automated methods of combining UAC auto-elevation criteria with the aforementioned functionality in order to scan for UAC bypass vulnerabilities. https://github.com/Cybereason/siofra

​​Amlele Backdoor Amlele Backdoor is One-Client Open Source Backdoor/Reverse-Shell For Each Linux And Windows Systems Made In Python3 Which Contains Limited Features. Features: ▫️ Send Commands To A Client ▫️ Capture Screenshot ▫️ Windows Persistence ▫️ Download Files ▫️ Upload Files ▫️ Get The Current Working Directory ▫️ Get The Machine Infos ▫️ Download Files Over Internet https://github.com/amaitou/4ML3L3-Backdoor

​​NetHunt Local network recon tool, ipsweep extension. ▫️ scan address range in local network for active devices ▫️ config port scan for live hosts https://github.com/Keyj33k/NetHunt

BlackHeart A simple python script to demonstrate reverse shell gaining without Microsoft Defender restrictions. https://github.com/CYB3RMX/BlackHeart t.me/hackgit

​​Laika Cross-platform RAT, written in Modern C. A simple cross-platform Remote Access Toolkit stack for educational purposes. It allows encrypted communication across a custom binary protocol. The bot client supports both Windows & Linux environments, while the shell & CNC server specifically target Linux environments. Laika is meant to be small and discreet, Laika believes in hiding in plain sight. https://github.com/CPunch/Laika

​​torsh A tool that simplifies the creation of a reverse shell. It operates over Tor network. This is great for anonymity and also helps with the setup. You don't need to do port forwarding or any other kind of presetup. It just works! Features: ▫️ Creating reverse shell as a Tor hidden service ▫️ End to end Tor connection (no Tor2Web etc...) ▫️ No need for port forwarding ▫️ Easy & Quick to use! https://github.com/pisoj/torsh

​​penelope Penelope is an advanced shell handler. Its main aim is to replace netcat as shell catcher during exploiting RCE vulnerabilities. It works on Linux and macOS and the only requirement is Python >= 3.6. It is a single script, it needs no installation or any 3rd party dependency and hopefully it will stay that way. Among the main features are: ▫️ Auto-upgrade shells to PTY (auto-resize included) ▫️ Logging interaction with the targets ▫️ Download files from targets ▫️ Upload files to targets ▫️ Upload preset scripts to targets ▫️ Spawn shells on multiple tabs and/or hosts ▫️ Maintain X amount of active shells per host no matter what ▫️ Multiple sessions ▫️ Multiple listeners ▫️ Can be imported by python3 exploits and get shell on the same terminal (see Extras) Penelope can work in conjunction with metasploit exploits by disabling the default handler with set DisablePayloadHandler True https://github.com/brightio/penelope t.me/hackgit

​​ReversePowerShell Functions that can be used to gain Reverse Shells with PowerShell. Invoke-ReversePowerShell function can be used to connect to Start-Listener as well as #netcat and Metasploit modules or whatever other listeners you use. This is a PowerShell module meaning it only contains functions/cmdlets to be imported into a PowerShell session. If you wish to execute one of the commands whenever the file is run just add the command you wish to execute to the bottom of the file. https://github.com/tobor88/ReversePowerShell t.me/hackgit

​​HardeningKitty This is the stable version of HardeningKitty from the Windows Hardening Project by Michael Schneider. The stable version of HardeningKitty is signed with the code signing certificate of scip AG. Since this is the stable version, we do not accept pull requests in this repo, please send them to the development repo. HardeningKitty supports hardening of a Windows system. The configuration of the system is retrieved and assessed using a finding list. In addition, the system can be hardened according to predefined values. HardeningKitty reads settings from the registry and uses other modules to read configurations outside the registry. The script was developed for English systems. It is possible that in other languages the analysis is incorrect. Please create an issue if this occurs. https://github.com/scipag/HardeningKitty t.me/hackgit

​​HTTP3-attacks (CVE-2022-30592) The current repository serves the purpose of sharing the scripts we used for educational usage. These attacks were a part of our study, and were tested against 6 different QUIC-enabled servers (IIS, NGINX, LiteSpeed, Cloudflare, H2O, and Caddy) that were configured to communicate with HTTP/3. The http-stream script is the exploit of the CVE-2022-30592 issue that affected lsquic library. This script can also be exploited against Litespeed server. https://github.com/efchatz/HTTP3-attacks #cve

​​EntropyFix A tool to reduce the entropy of your payload, It works By adding null bytes, in an ordered sequence: every 10 bytes it adds 5 null bytes. https://github.com/ORCx41/EntropyFix

​​SentryPeer Protect your SIP Servers from bad actors SentryPeer® is a fraud detection tool. It lets bad actors try to make phone calls and saves the IP address they came from and number they tried to call. Those details can then be used to raise notifications at the service providers network and the next time a user/customer tries to call a collected number, you can act anyway you see fit. https://github.com/SentryPeer/SentryPeer

Doldrums A reverse engineering tool for Flutter apps targetting Android. Concretely, it is a parser and information extractor for the Flutter/Dart Android binary, conventionally named libapp.so, for all Dart version 2.10 releases. When run, it outputs a full dump of all classes present in the isolate snapshot. https://github.com/rscloura/Doldrums

​​pip-audit pip-audit is a tool for scanning Python environments for packages with known vulnerabilities. It uses the Python Packaging Advisory Database (https://github.com/pypa/advisory-database) via the PyPI JSON API as a source of vulnerability reports. This project is maintained in part by Trail of Bits with support from Google. This is not an official Google or Trail of Bits product. https://github.com/pypa/pip-audit