HackGit

​​Bugs-feed A Local Hosted Portal Where You Can Search For The Latest News, Videos, CVEs, Vulnerabilities. It's implemented as a PWA application so you can get rid of the explorer and use it as a desktop application. Navigate through different tabs and take a look at the latest bugs or search in all of them at once. It comes with a configuration pane in which you can modify hashtags and video channels to your own belonging. https://github.com/PwnedShell/Bugs-feed

​​rustcat The modern port listener and reverse shell ▫️ Listen on ports. ▫️ Command history & Tab completion. ▫️ Reverse shell. ▫️ UDP mode. ▫️ Colors. ▫️ Everything easy. https://github.com/robiot/rustcat

​​DirtyCred Linux Kernel Exploitation: write DirtyPipe exploit that works on different kernels and ARCHs without code changes. https://github.com/Markakd/DirtyCred

​​Red-Blueteam-party Red Blue team party🎉 is a collection of tools, articles, writeups and useful things for blue and Redteaming. https://github.com/A0RX/Red-Blueteam-party #blueteam

​​Hekate A VMWare Workspace ONE Access Remote Code Execution Exploit. An unauthenticated attacker can trigger a remote code execution as root against the vIDM appliance. Additionally, an attacker can send a specially crafted link to a victim operator that when clicked, can achieve remote code execution as root against the vIDM appliance. https://github.com/sourceincite/hekate Infiltrating VMWare Workspace ONE Access Using a 0-Click Exploit: https://bit.ly/3pj4nIs

​​JNDI-Injection-Exploit-Plus A tool for generating workable JNDI links and provide background services by starting RMI server,LDAP server and HTTP server. Using this tool allows you get JNDI links, you can insert these links into your POC to test vulnerability. https://github.com/cckuailong/JNDI-Injection-Exploit-Plus

​​GL.iNetGL-XE300(Puli) A portable 4G smart router that is perfect for home, business, and IoT solutions. With its OpenWrt-supported feature and large storage compatibility, it is designed for you to develop a DIY IoT project. It also comes with a rechargeable battery, so you can bring it anywhere with you! Apart from its powerful built-in firewall, Puli (GL-XE300) also supports OpenVPN, WireGuard and customized DNS server in order to level up your online security. With our brand-new Web UI 3.0, you can set up VPN server easily and access your files securely and remotely as if you were at home. DNS over TLS is a security protocol for encrypting and wrapping Domain Name System (DNS) queries and answers via the Transport Layer Security (TLS) protocol. It serves to increase user privacy and security by preventing eavesdropping and manipulation of DNS data via man-in-the-middle attacks. OpenWRT SDK for GL.iNet devices: https://github.com/gl-inet/sdk Buy online: 🛒 https://ali.ski/IWwRz #router #portable

​​AceLdr Avoid Memory Scanners. A position-independent reflective loader for Cobalt Strike. Zero results from Hunt-Sleeping-Beacons, BeaconHunter, BeaconEye, Patriot, Moneta, PE-sieve, or MalMemDetect. ▫️ Easy to Use ▫️ Import a single CNA script before generating shellcode. ▫️ Dynamic Memory Encryption ▫️ Creates a new heap for any allocations from Beacon and encrypts entries before sleep. ▫️ Code Obfuscation and Encryption ▫️ Changes the memory containing CS executable code to non-executable and encrypts it (FOLIAGE). ▫️ Return Address Spoofing at Execution ▫️ Certain WinAPI calls are executed with a spoofed return address (InternetConnectA, NtWaitForSingleObject, RtlAllocateHeap). ▫️ Sleep Without Sleep ▫️ Delayed execution using WaitForSingleObjectEx. ▫️ RC4 Encryption ▫️ All encryption performed with SystemFunction032. https://github.com/kyleavery/AceLdr

​​OffensiveVBA In preparation for a VBS AV Evasion Stream/Video I was doing some research for Office Macro code execution methods and evasion techniques. The list got longer and longer and I found no central place for offensive VBA templates - so this repo can be used for such. It is very far away from being complete. If you know any other cool technique or useful template feel free to contribute and create a pull request! Most of the templates in this repo were already published somewhere. I just copy pasted most templates from ms-docs sites, blog posts or from other tools. https://github.com/S3cur3Th1sSh1t/OffensiveVBA

Suborner The Invisible Account Forger. A simple program to create a Windows account you will only know about :) ▫️ Create invisible local accounts without net user or Windows OS user management applications (e.g. netapi32::netuseradd) ▫️ Works on all Windows NT Machines (Windows XP to 11, Windows Server 2003 to 2022) ▫️ Impersonate any existing account after successful authentication through RID Hijacking (even if disabled) Create an invisible machine account with administrative privileges, and without calling that annoying Windows Event Logger! https://github.com/r4wd3r/Suborner Research: https://r4wsec.com/notes/the_suborner_attack/index.html #windows

​​dark-doh.exe public version Purpose: Download files via DoH, or download and execute a shellcode ▫️ Run example: dark-doh.exe file1 download google yourdomain.com ▫️ The supporting python script added. https://github.com/darksh3llRU/dark-doh

​​ParamChanger A tool allowing you to replace the parameters of a list of urls by a payload entered as an argument. https://github.com/mathis2001/ParamChanger

​​IntruderPayloads A collection of Burpsuite Intruder payloads. https://github.com/1N3/IntruderPayloads

​​GraphQL Armor A Dead-simple, yet highly customizable security middleware for Apollo GraphQL servers and Envelop. https://github.com/Escape-Technologies/graphql-armor

​​LibAFL A Framework for Modular and Reusable Fuzzers The fuzzers/ folder contains the variants created for the paper and fuzzers/LibAFL contains the code of LibAFL. The neodiff folder contains the NeoDiff code with the libafl-based implementation. The fuzzbench/ folder contains a snapsot of the fuzzbench repository used in the evaluations with all the variants. Each dockerfile must be adapted by hand to point to a git repository serving the fuzzers/ folder as repository. The original links were removed for the double blind. https://github.com/AFLplusplus/libafl_paper_artifacts Individual experiments can then be runned using the local experiments: https://google.github.io/fuzzbench/running-a-local-experiment

​​Powershell HTTP/S Reverse Shell HTTP-revshell is a tool focused on redteam exercises and pentesters. This tool provides a reverse connection through the http/s protocol. It uses a covert channel to gain control over the victim machine through web requests and thus evade solutions such as IDS, IPS and AV. https://github.com/3v4Si0N/HTTP-revshell #shell #bypass #av #ips #powershell

​​DotDumper An automatic unpacker and logger for DotNet Framework targeting files! This tool has been unveiled at Black Hat USA 2022. The automatic detection and classification of any given file in a reliable manner is often considered the holy grail of malware analysis. The trials and tribulations to get there are plenty, which is why the creation of such a system is held in high regard. When it comes to DotNet targeting binaries, our new open-source tool DotDumper aims to assist in several of the crucial steps along the way: logging (in-memory) activity, dumping interesting memory segments, and extracting characteristics from the given sample. https://github.com/advanced-threat-research/DotDumper

​​NodeMCU Best ESP8266 Wi-Fi Development Board. Open-source, interactive, programmable, low cost, simple, smart, Wi-Fi enabled. The Development Kit, integrates GPIO, PWM, IIC, 1-Wire and ADC all in one board. Power your development in the fastest way combined with NodeMcu Firmware! Hacking Wi-Fi With the ESP8266: https://telegra.ph/Hacking-Wi-Fi-With-the-ESP8266-08-11-2 Buy online: 🛒 https://ali.ski/iPo1p #esp8266 #wifi #nodemcu

​​OFRAK OFRAK (Open Firmware Reverse Analysis Konsole) is a binary analysis and modification platform that combines the ability unpack, analyze, modify, and repack binaries. https://github.com/redballoonsecurity/ofrak

​​Fatebot Fate is IRC botnet, that's mainly used for launch denial of service attacks. Spread by doing scope or random scanning on default SSH and HTTP port. Spread feature of this bot will scan on default SSH and HTTP port. Option about scan feature in this bot is scan on CN, HK, KR and BR network or you can do a random scan or even you can add you own mods, all of these is up to you. This bot will brute-force attack and exploit to the target device, server, etc that's run linux or using mips x32 architecture. The loader will use "wget" or "curl" as a default loader for download the payload from FTP server or any option any server type that you can host the payload not maintionly to be an FTP server. https://github.com/boz3r/Fatebot