HackGit

​​Introduction to injection and hooking • ASLR on Windows • Process mitigations against RWX pages • Known DLLs • Multithreaded environments • Secure C coding styles https://github.com/yo-yo-yo-jbo/injection_and_hooking_intro #cybersecurity #infosec #inject

​​passivedns A network sniffer that logs all DNS server replies for use in a passive DNS setup. https://github.com/gamelinux/passivedns #cybersecurity #infosec #pentesting

​​Nali An offline tool for querying #IP #geographic information and CDN provider. https://github.com/zu1k/nali/blob/master/README_en.md#install

​​ShadowClone ShadowClone allows you to distribute your long running tasks dynamically across thousands of serverless functions and gives you the results within seconds where it would have taken hours to complete. You can make full use of the Free Tiers provided by cloud providers and supercharge your mundane cli tools with shadow clone jutsu (Naruto style)! https://github.com/fyoorer/ShadowClone #infosec #recon #bugbounty

​​File-Smuggling It adopts HTML smuggling technique, leverages HTML5 and JavaScript to embed encoded file into HTML file, when user runs the JavaScript code in browser, it decodes the embedded payload, which, in turn, assembles the target file on the destination device. This is a self-contained HTML app, handy, supports Windows, Mac, Linux and mobile. https://github.com/eddiechu/File-Smuggling #cybersecurity #infosec

​​HackRF One + Portapack H2 Mayhem The HackRF is an exceptionally capable software defined radio (SDR) transceiver, but naturally you need to connect it to a computer to actually do anything with it. So the PortaPack was developed to turn it into a stand-alone device with the addition of a touchscreen LCD, a few buttons, and a headphone jack. With all the hardware in place, it’s just a matter of installing a firmware capable enough to do some proper RF hacking on the go. Enter MAYHEM, an evolved fork of the original PortaPack firmware that the developers claim is the most up-to-date and feature packed version available. Without ever plugging into a computer, this firmware allows you to receive, decode, and re-transmit a dizzying number of wireless protocols. From firing off the seating pagers at a local restaurant to creating a fleet of phantom aircraft with spoofed ADS-B transponders, MAYHEM certainly seems like it lives up to the name. Detailed blog post about installing and using MAYHEM on the HackRF/PortaPack, complete with a number of real-world examples that show off just a handful of possible applications for the project. Jamming cell phones, sending fake pager messages, and cloning RF remotes is just scratching the surface of what’s possible. Example of use: exploitation of a Honda vulnerability Honda's Remote Keyless System (CVE-2022-27254) Firmware to open any and all Tesla vehicle charging ports in range! Buy online: 🛒 https://bit.ly/3AEBFHS #radio #RF #SDR

​​LastCall Injection PoC The idea is to inject shellcode into another process and stomp the instructions of it's ExitProcess(). So when ExitProcess is called, the thread will be redirected to the shellcode instead of exiting. https://gist.github.com/Wra7h/0bfa02ccd236fa300f11ea656580381a #infosec #pentesting #redteam

​​DCVC2 This multi operating system compatible tool was created to leverage Discord's voice channels for command and control operations. This tool operates entirely over the Real-Time Protocol (RTP) primarily leveraging DiscordGo and leaves no pesky traces behind in text channels. It is a command line based tool meaning all operations will occur strictly from the terminal on either Windows/Linux/OSX. https://github.com/3NailsInfoSec/DCVC2 #infosec #pentesting #redteam

​​direct-syscall A simple direct syscall wrapper written in C++ with compatibility for x86 and x64 programs. https://github.com/linux-pe/direct-syscall #infosec #pentesting #redteam

​​ReverseKit A comprehensive toolkit designed to aid reverse engineers in the process of dynamic RE. With a wide range of features and functionalities, it provides an easy-to-use interface and helps you intercept, analyze, and manipulate code and data during runtime. https://github.com/zer0condition/ReverseKit #cybersecurity #infosec #reverse

​​DIANA Credential Recovery Framework. https://github.com/tijldeneut/diana #infosec #pentesting #redteam

​​KaliPurple SOC in AWS This project is a cost effective solution for launching a Security Operations Center (SOC) in AWS using Kali Linux and Purple Team tools. https://github.com/ZoccoCss/kalisoc #cybersecurity #infosec

​​Dorky Command-line tool that searches GitHub and GitLab for matches in organization names, repository names, and usernames based on a list of input words. This tool can be helpful in identifying potential targets for security assessments, finding interesting projects, and discovering new organizations and users on GitHub and GitLab. https://github.com/codingo/dorky #infosec #pentesting #bugbounty

​​ARP Spoofing Defender A project designed to protect local networks from ARP Spoofing attacks. ARP Spoofing Defender provides mechanisms to detect such attacks and protect the network from them. https://github.com/Untouchable17/ARP-Spoofing-Defender #cybersecurity #infosec

​​PyMeta Pymeta will search the web for files on a domain to download and extract metadata. This technique can be used to identify: domains, usernames, software/version numbers and naming conventions. https://github.com/m8sec/pymeta #cybersecurity #infosec #pentesting

​​InviZzzible A tool for assessment of your virtual environments in an easy and reliable way. It contains the most recent and up to date detection and evasion techniques as well as fixes for them. https://github.com/CheckPointSW/InviZzzible #malware #cybersecurity #infosec

​​Bin-Finder Detect EDR's exceptions by inspecting processes' loaded modules. https://github.com/Kudaes/Bin-Finder #infosec #pentesting #redteam

​​Buzzer A fuzzer toolchain that allows to write eBPF fuzzing strategies. A Fuzzing strategy is a way to generate random eBPF Programs and then validate that they don't have unexpected behaviour. https://github.com/google/buzzer #cybersecurity #infosec #pentesting

​​GPT4free - use ChatGPT, for free!! This repository offers reverse-engineered third-party APIs for GPT-4/3.5, sourced from various websites. You can simply download this repository, and use the available modules, which are designed to be used just like OpenAI's official package. Unleash ChatGPT's potential for your projects, now! https://github.com/xtekky/gpt4free #cybersecurity #infosec

​​DroneSploit This CLI framework is based on sploitkit and is an attempt to gather hacking techniques and exploits especially focused on drone hacking. For the ease of use, the interface has a layout that looks like Metasploit. https://github.com/dhondta/dronesploit #infosec #pentesting #redteam