HackGit

​​memOptix This Jupyter notebook was created to assist DFIR professionals with triaging Windows memory dumps. https://github.com/blueteam0ps/memOptix

​​TG799VAC-XTREME-17.2-MINT Hacking the router firmware used by (Telia) TG799vac Xtream v17.2-MINT delivered from Technicolor https://github.com/wuseman/TG799VAC-XTREME-17.2-MINT

​​CVE-2022-2650 Brute Force on wger workout application v2.0 https://github.com/HackinKraken/CVE-2022-2650 #cve

​​Raspberry Pi 4 Model B - Miniature Hacking Station! Raspberry Pi 4 Model B was released with specs including either 1 GB, 2 GB, 4 GB, or 8 GB of memory, a Broadcom BCM2711B0 quad-core A72 SoC, a USB Type-C power supply, and dual Micro-HDMI outputs. Performance and hardware changes aside, the Pi 4 Model B runs Kali Linux just as well, if not better, than its predecessors. It also includes support for Wi-Fi hacking on its internal wireless card. For hackers interested in a cheap Kali Linux computer capable of hacking Wi-Fi without a separate wireless network adapter, the Pi 4 Model B is a great way to run Kali without needing a virtual machine. Thanks to the number of Wi-Fi hacking tools included in Kali Linux, the new Pi 4 Model B represents a complete Ethernet and Wi-Fi hacking kit for beginners. The reasons for using a Raspberry Pi as a hacking computer are many. Previous Raspberry Pi versions have proved that it doesn't take expensive hardware to run tools in Kali Linux. Virtual machines can behave unpredictably, especially when working with Wi-Fi hacking. Plus, it's sometimes more straightforward to run Kali on hardware rather than in a virtual machine. Another advantage to the Raspberry Pi is that it can easily be used in combination with a device like an unmodified iPhone or Android smartphone. If your smartphone supports creating a Wi-Fi hotspot, it's simple to connect the Pi to your hotspot and control it over SSH. If your smartphone can't create a hotspot, the Pi can also host its own Wi-Fi network, allowing you to join the network created by the Pi on your phone and SSH into it on the go. One of the most exciting things about using a Raspberry Pi for hacking is the add-on of the Nexmon firmware. The addition makes it possible to put the built-in Wi-Fi network adapter into monitor mode. That means it's possible to do things like grab WPA handshakes, listen in on Wi-Fi traffic, and execute attacks like WPS-Pixie without needing a separate compatible Wi-Fi network adapter. For someone interested in getting started with Wi-Fi hacking, the Raspberry Pi 4 Model B provides a Kali-supported Wi-Fi network adapter and an onboard computer capable of basic cracking and MiTM attacks in a single package. The increase in speed and power of the Pi 4 Model B make it a more capable networking device as well as a more capable computer. Hack WiFi with a Raspberry Pi and Kali Linux: https://www.youtube.com/watch?v=PqRVo2niA_8 Buy online: 🛒 https://amzn.to/3XXH9Yw 🛒 https://ali.ski/QMVRo #raspberrypi #kali #bord

​​PrintNotifyPotato Another potato, using PrintNotify COM service for lifting rights For Windows 10 - 11 Windows Server 2012 - 2022 https://github.com/BeichenDream/PrintNotifyPotato

​​PwnAI I leverage OpenAI to automate explanations of what malware or suspected malicious code samples are doing https://github.com/NoDataFound/PwnAI

​​teler Real-time HTTP Intrusion Detection teler is an real-time intrusion detection and threat alert based on web log that runs in a terminal with resources that we collect and provide by the community. ❤️ https://github.com/kitabisa/teler

​​SysmonEoP Here is PoC for CVE-2022-41120. I combined arb file delete and limited arb file write to get code execution as NT Authority\System. https://github.com/Wh04m1001/SysmonEoP #cve #poc

​​CallObfuscator Obfuscate (hide) the PE imports from static/dynamic analysis tools. https://github.com/d35ha/CallObfuscator

​​SideLOADR A "simple" script to perform DLL sideloading using Python. https://github.com/Pascal-0x90/sideloadr

FrostByte ▫️ Replace SigFlip.exe with latest .NET version ▫️ Changed .NET assembly executable to RegAsm.exe ▫️ Modify variable names and functions for better evasion ▫️ Modify shellcode callback method to a lesser known technique for evasion ▫️ Encrypt the signatured "tag" used in SigFlip to evade static analysis which gets decrypted at runtime https://github.com/wsummerhill/FrostByte

​​BumbleCrypt A Bumblebee-inspired Crypter The BumbleCrypt is inspired by Bumblebee's crypter, in Bumblebee's case the main Bumblebee DLL is been loaded in the memory and executed in the following way: ▫️ Decrypts and writes the payload in the Heap ▫️ Hooks three NtApi's - NtOpenFile, NtCreateSection and NtMapViewOfSection ▫️ Calls LoadLibraryW("gdiplus.dll") which triggers the inline hooks as the above three API's are been used by LoadLibrary() to load any library. ▫️ The inline hooks and LoadLibrary itself then loads the main Bumblebee DLL in place of "gdiplus.dll" ▫️ At last, the control is been transferred to the exported function "SetPath" of the main Bumblebee DLL https://github.com/knight0x07/BumbleCrypt

​​Windows Privilege Escalation Cheatsheet This cheatsheet is aimed at OSCP aspirants to help them understand the various methods of escalating privilege on Windows-based machines and CTFs with examples. There are multiple ways to perform the same task. We have performed and compiled this list based on our experience. Please share this with your connections and direct queries and feedback to Hacking Articles. https://github.com/Ignitetechnologies/Windows-Privilege-Escalation

​​Kraken SDR Passive Radar Please consult our Passive Radar Wiki page at for more information. https://github.com/mfkiwl/krakensdr_pr

​​scantxt scantxt is a common way to allow/disallow scanning activity. Similar to robots.txt and structured like dmarc with features built-in like ownership verification, notification endpoints and scanner verification. https://github.com/scantxt/scantxt

​​s3-inspector Tool to check AWS S3 bucket permissions. https://github.com/clario-tech/s3-inspector

​​aisploit AI Sploit is a simple hook into the OpenAI platform. Currently it's hardcoded to use their text-davinci-003 model Prior to using this tool you will need to run pip3 install openai (You will also need python3) To run the tool python3 aisploit "<your api key>" "<your search term>" https://github.com/DotNetRussell/aisploit

​​Pen-Andro This Script will automate the process of installing all necessary tools & tasks for Android Pentesting i.e Moving Burpsuite Certificate, Installing Adb frida server, APKs like proxy toggle, proxydroid, adbwifi. https://github.com/raoshaab/Pen-Andro

​​CVE-2022-44721 Crowdstrike Falcon Uninstaller CrowdStrike Falcon is a cloud-powered endpoint detection and response (EDR) and antivirus (AV) solution. On each end-device a kernel level managed sensor is deployed and makes use of the cloud-based capabilities. The sensor can be configured with an uninstall protection. It prevents the uninstallation of CrowdStrike Falcon sensor on the end-device without a one-time generated token. Exploiting this vulnerability allows an attacker with administrative privileges to bypass the token check on Windows end-devices and to uninstall the sensor from the device without proper authorization, effectively removing the device's EDR and AV protection. https://github.com/purplededa/CVE-2022-44721-CsFalconUninstaller

​​kernel_obj_finder Simple script to find objects of a certain size in the Linux kernel https://github.com/chompie1337/kernel_obj_finder