HackGit

​​Ping Castle Cloud Ping Castle Cloud is a tool designed to assess quickly the AzureAD security level with a methodology based on risk assessment and a maturity framework. It does not aim at a perfect evaluation but rather as an efficiency compromise. It is inspired from the Ping Castle project https://github.com/vletoux/PingCastleCloud #ad

Mangle Mangle is a tool that manipulates aspects of compiled executables (.exe or DLL). Mangle can remove known Indicators of Compromise (IoC) based strings and replace them with random characters, change the file by inflating the size to avoid EDRs, and can clone code-signing certs from legitimate files. In doing so, Mangle helps loaders evade on-disk and in-memory scanners. https://github.com/optiv/Mangle

​​Dirble Fast directory scanning and scraping tool. Dirble is a website directory scanning tool for Windows and Linux. It's designed to be fast to run and easy to use. Features: ▫️ Cookies ▫️ Custom Headers ▫️ Extensions and prefixes ▫️ HTTP basic auth ▫️ Listable directory detection and scraping ▫️ Save output to file ▫️ Save output in XML and JSON formats ▫️ Proxy support ▫️ Recursion ▫️ Status code blacklisting and whitelisting ▫️ Threading ▫️ Request throttling ▫️ Detect not found code of each directory based on response code and length ▫️ Ability to provide a list of URLs to be scanned ▫️ User agents ▫️ Scanning with GET, POST or HEAD requests ▫️ Exclude ranges of response lengths from the output https://github.com/nccgroup/dirble

xhunter Android Penetration Tool (RAT for Android) There are many great Android RAT available on GitHub; however, I didn't find one that really suited my needs so I created this enhanced one. I want to create a RAT so amazing that it'll be the last one you ever need -- I think this is it. Here's why: The main reason, I did started on this project is to simplify the problem of connection between attacker and victim.[Eliminated all port forwarding and over the internet issues] Followed by, I wanted to have control over victims using smartphone📱 with a simple UI app rather then a pc💻 or remote virtual machine🖥 with command line interface. Features: ▫️ Real time ▫️ receive any file or folder from target device ▫️ bind with other apps ▫️ fetch all whatsapp messages ▫️ fetch all whatsapp contacts ▫️ receive all target message ▫️ send sms with target device to any number ▫️ recive all target contacts ▫️ receive list of all installedd apps in target device https://github.com/anirudhmalik/xhunter

NodeJS Ransomware This is a proof-of-concept Node.js #ransomware. https://github.com/EL-MTN/Ransomware

CVE-2022-32119 Arox-Unrestricted-File-Upload https://github.com/JC175/CVE-2022-32119 #cve #exploit

​​Sliver GUI client. Features: ▫️ You can click on stuff! ▫️ Sandboxed JavaScript scripting engine (with built-in script editor) ▫️ i18n Language Support (French, Spanish, Japanese, Chinese) https://github.com/BishopFox/sliver-gui

Salus - SBOM Tool The SBOM tool is a highly scalable and enterprise ready tool to create SPDX 2.2 compatible SBOMs for any variety of artifacts. https://github.com/microsoft/sbom-tool

​​Oralyzer Open Redirection Analyzer. Simple #python script, capable of identifying the open redirection vulnerability on a website. It does that by fuzzing the URL i.e. provided as the input. Features: ▫️ Improved DOM XSS detection mechanism ▫️ Test multiple parameters in one run ▫️ CRLF Injection Detection https://github.com/r0075h3ll/Oralyzer

​​Awesome Privacy Large data-hungry corporations dominate the digital world but with little, or no respect for your privacy. Migrating to open-source applications with a strong emphasis on security will help stop corporations, governments, and hackers from logging, storing or selling your personal data. https://github.com/Lissy93/awesome-privacy Website: https://awesome-privacy.xyz/

Датчик открытия Xiaomi Aqara Датчик Aqara Door Sensor уведомит вас об открытии/закрытии окон и дверей и отправит уведомление на ваш телефон через приложение MiHome. Он также включает подсветку или сигнализацию при открывании дверей/окон. Обе части крепятся на клейкую ленту - нет необходимости делать лишние отверстия. Одна часть устанавливается на подвижную часть - окно/дверь, а вторая на раму/косяк. При расхождении двух частей сработает сигнализация и вам на телефон придёт оповещение. Помимо этого есть множество вариантов сценариев. Например, очиститель воздуха перестанет работать при открытом окне. Или в комнате будет загораться свет при открытии двери. Яндекс.Маркет: 🛒 https://bit.ly/3o5oFVv #xiaomi #sensor

​​ProcessGhosting Small POC for process ghosting This is a C# implementation of the original Process Ghosting written in C Original #POC. For easier understanding, the target file name and path have been hardcoded. https://github.com/dosxuz/ProcessGhosting Understanding Process Ghosting in detail https://dosxuz.gitlab.io/post/processghosting/

​​Pretender Cross-platform tool to obtain a machine-in-the-middle position inside Windows networks. https://github.com/RedTeamPentesting/pretender Introducing pretender - your new sidekick for relaying attacks https://blog.redteam-pentesting.de/2022/introducing-pretender

​​RustyTokenManipulation just manipulatin these here tokens yes sir nothing weird. https://github.com/HuskyHacks/RustyTokenManipulation Failing All The Way To Token Manipulation: https://notes.huskyhacks.dev/notes/failing-all-the-way-to-token-manipulation-part-1

​​rbcd-attack Abusing Kerberos Resource-Based Constrained Delegation This repo is about a practical attack against Kerberos Resource-Based Constrained Delegation in a Windows Active Directory Domain. The difference from other common implementations is that we are launching the attack from outside of the Windows Domain, not from a domain joined (usually Windows) computer. The attack is implemented using only Python3 Impacket (and its dependencies). Tested on Arch with up-to-date Impacket (0.9.21 as of writing). https://github.com/tothi/rbcd-attack

​​FAME Recursive acronym meaning “FAME Automates Malware Evaluation”. It is meant to facilitate the analysis of malicious files, leveraging as much knowledge as possible in order to speed up and automate end-to-end analysis. Best case scenario: the analyst drops a sample, waits for a few minutes, and FAME is able to determine the malware family and extract its configuration and IOCs. FAME is a Python application that relies on the following technologies: ▫️ flask for the web framework ▫️ celery for background tasks ▫️ MongoDB (and pymongo) for the database https://github.com/certsocietegenerale/fame

​​Antares Cross-platform #SQL client. Antares is an SQL client based on Electron.js and Vue.js that aims to become a useful tool, especially for developers. Features: ▫️ Multiple database connections at same time. ▫️ Database management (add/edit/delete). ▫️ Full tables management, including indexes and foreign keys. ▫️ Views, triggers, stored routines, functions and schedulers management (add/edit/delete). ▫️ A modern and friendly tab system; keep open every kind of tab you need in your workspace. ▫️ Fake table data filler to generate tons of data for test purpose. ▫️ Query suggestions and auto complete. ▫️ Query history: search through the last 1000 queries. ▫️ SSH tunnel support. ▫️ Manual commit mode. ▫️ Import and export database dumps. https://github.com/antares-sql/antares

​​KubeEye Find various problems on Kubernetes (misconfigs, unhealthy components and more). KubeEye is an audit tool for Kubernetes to discover Kubernetes resources (by OPA ), cluster components, cluster nodes (by Node-Problem-Detector) and other configurations are meeting with best practices, and giving suggestions for modification. KubeEye supports custom audit rules and plugins installation. Through KubeEye Operator, you can view audit results and modify suggestions by the website. https://github.com/kubesphere/kubeeye

​​PCICrash PCIDriverKit PoC for CVE-2022-26763 (exec arbitrary code w/ system privileges). https://github.com/zhuowei/PCICrash Research: https://worthdoingbadly.com/coretrust/

HackRF One + Portapack H2 Mayhem. The HackRF is an exceptionally capable software defined radio (SDR) transceiver, but naturally you need to connect it to a computer to actually do anything with it. So the PortaPack was developed to turn it into a stand-alone device with the addition of a touchscreen LCD, a few buttons, and a headphone jack. With all the hardware in place, it’s just a matter of installing a firmware capable enough to do some proper RF hacking on the go. Enter MAYHEM, an evolved fork of the original PortaPack firmware that the developers claim is the most up-to-date and feature packed version available. Without ever plugging into a computer, this firmware allows you to receive, decode, and re-transmit a dizzying number of wireless protocols. From firing off the seating pagers at a local restaurant to creating a fleet of phantom aircraft with spoofed ADS-B transponders, MAYHEM certainly seems like it lives up to the name. Detailed blog post about installing and using MAYHEM on the HackRF/PortaPack, complete with a number of real-world examples that show off just a handful of possible applications for the project. Jamming cell phones, sending fake pager messages, and cloning RF remotes is just scratching the surface of what’s possible. Example of use: exploitation of a Honda vulnerability Honda's Remote Keyless System (CVE-2022-27254) Buy online: 🛒 https://ali.ski/tvBZB #hackrf #radio #sdr #spoofing