HackGit

​​malware-ioc This repository contains indicators of compromise (IOCs) of our various investigations. https://github.com/prodaft/malware-ioc

​​Ticwatch Pro 3 Smart watch with official Kali NetHunter support. What is Kali NetHunter? Kali NetHunter is an Android ROM overlay that turns an ordinary phone into the ultimate Mobile Penetration Testing Platform. Now it's available for your smartwatch with some limitations. The overlay includes a custom kernel, a Kali Linux chroot, an accompanying Android application, which allows for easier interaction with various security tools and attacks. Beyond the penetration testing tools arsenal within Kali Linux, NetHunter also supports several additional classes, such as HID Keyboard Attacks, BadUSB attacks, WPS attacks, and much more. NetHunter is an open-source project developed by Offensive Security and the community. Installing NetHunter On the TicWatch Pro 3: https://www.kali.org/docs/nethunter/installing-nethunter-on-the-ticwatch-pro3/ Buy online: 🛒 https://amzn.to/3RC7PeT 🛒 https://ali.ski/Zu0T3 #watch #kali #ticwatch

​​CTFs CTF Cheat Sheet + Writeups / Files for some of the Cyber CTFs that I've done. https://github.com/Adamkadaban/CTFs

​​Tajimari The Open Source and Pure C++ Packer for eXecutables. https://github.com/caizhe666/Tajimari

​​Winevt logs analysis (Remote connections) Simple script for the purpose of finding remote connections to Windows machine and ideally some public IPs. It checks for some EventIDs regarding remote logins and sessions. https://github.com/georgi-i/winevt_logs_analysis #cybersecurity #infosec

​​Shellcode-Hide Simple shellcode Loader , Encoders (base64 - custom - UUID - IPv4 - MAC), Encryptors (AES), Fileless Loader (Winhttp, socket) https://github.com/TheD1rkMtr/Shellcode-Hide

​​Anti-Forensics A Repository to Track Anti-Forensic Techniques This list is built based on the response of the #DFIR community and the techniques we currently cover in our Anti-Forensics course. https://github.com/ashemery/Anti-Forensics

​​swagger2burp Convert Swagger openapi.json file to burp suite request files. https://github.com/bolbolabadi/swagger2burp

​​CVE-2022-44268 Arbitrary File Read PoC - PNG generator. https://github.com/voidz0r/CVE-2022-44268 #cve #poc

​​Flipper Zero BadUsb script collection To begin using the scripts, please carefully read the "readme.md" file provided with each script. This file contains important information on how to use the script safely. Keep in mind that some scripts may potentially harm your system, so be cautious and do not run unfamiliar scripts on your personal computer. To test scripts, it is recommended to use a virtual machine for safety. https://github.com/UNC0V3R3D/Flipper_Zero-BadUsb Flipper Zero is available for purchase on Amazon: https://t.me/PentestingShop #pentesting #redteam #hackers

​​CA Optics Azure AD Conditional Access Gap Analyzer is a solution for scanning gaps that might exist within complex Azure Active Directory Conditional Access Policy setups. https://github.com/jsa2/caOptics

​​opainject iOS tool to inject a dylib into a process using both shellcode and ROP methods. (By default ROP method is used, it's superior to the shellcode method in every way but I started with the shellcode method and decided to leave it in). Tested on iOS 14 and 15 (yes you heard that right, but this is actually useless without some sort of PMAP trust level bypass as the dylib will just be mapped as R-- and the process will crash). https://github.com/opa334/opainject

​​Red_Team_Code_Snippets A disorganized repository of code snippets that I have found useful in getting the hang of new languages in the context of Red Team operations. Some of this code will be referenced in other products and is retained here for ease of access. https://github.com/0xTriboulet/Red_Team_Code_Snippets

​​POC A public collection of POCs & Exploits for the vulnerabilities I discovered https://github.com/jhftss/POC

​​PlumHound BloodHoundAD Report Engine for Security Teams Released as Proof of Concept for Blue and Purple teams to more effectively use BloodHoundAD in continual security life-cycles by utilizing the BloodHoundAD pathfinding engine to identify Active Directory security vulnerabilities resulting from business operations, procedures, policies and legacy service operations. PlumHound operates by wrapping BloodHoundAD's powerhouse graphical Neo4J backend cypher queries into operations-consumable reports. Analyzing the output of PlumHound can steer security teams in identifying and hardening common Active Directory configuration vulnerabilities and oversights. https://github.com/PlumHound/PlumHound

​​ReverseSocks5 Single executable reverse socks5 proxy written in Golang. https://github.com/Acebond/ReverseSocks5

​​Halmos Symbolic Bounded Model Checker for Ethereum Smart Contracts Bytecode https://github.com/a16z/halmos Details: https://a16zcrypto.com/symbolic-testing-with-halmos-leveraging-existing-tests-for-formal-verification/

​​Dyld-DeNeuralyzer A simple set of POCs to demonstrate in-memory loading of Mach-O's. ▫️ Method 1 - Patch up dyld for in-memory loading of Mach-O bundles. ▫️ Method 2 - Use a custom in-memory loader for loading Mach-O bundles. https://github.com/xpn/DyldDeNeuralyzer