HackGit

​​Google Drive audit These scripts perform actions around public Google Drive files. https://gitlab.com/regrello-public/google-drive-audit

​​code-inspector Java code inspector for web vulnerability scan. https://github.com/4ra1n/code-inspector

​​T95-H616-Malware "Pre-Owned" malware in ROM on T95 Android TV Box https://github.com/DesktopECHO/T95-H616-Malware

​​SUDO_KILLER A tool to identify and exploit sudo rules' misconfigurations and vulnerabilities within sudo for linux privilege escalation. https://github.com/TH3xACE/SUDO_KILLER #linux #sudo

​​Alfa AWUS036ACHM This adapter looks like a basic everday wifi adapter but it is not! I have tested many adapters and this adapter has the longest range of any modern dual band adapter that I have tested. If you need long range or an adapter that can run 24/7/365 and never miss a beat, this adapter is worth a look. Don't buy it for speed as it is a AC600 adapter, but if looking for range, great AP mode support, great monitor mode support and reliability, take a look. My opinion is that this adapter is the single best adapter available for use with Kali Linux or other distros used for pen testing and security analysis. Compared to the Alfa AWUS036ACH, the Alfa AWUS036ACHM has better range, costs less and is supported with in-kernel drivers making it the better choice for Linux users. It comes with the required USB2 cable and a clip that allows you to mount the adapter in various locations. Overall, the Alfa AWUS036ACHM is a solid performer. Highly recommended. Buy online: 🛒 https://amzn.to/3W9BkW3 #alfa #wifi #adapter

​​WPAxFuzz A full-featured open-source Wi-Fi fuzzer https://github.com/efchatz/WPAxFuzz

​​CVE-2022-3656 Imperva #RedTeam recently revealed a vulnerability called CVE-2022-3656 that affects more than 2.5 billion users of Google #Chrome and Chromium-based browsers. https://github.com/momika233/CVE-2022-3656 #cve

​​project-amber WebKit+Kernel exploit chain for all actual PS Vita firmwares https://github.com/RealYoti/project-amber

​​stackplz This work on eBPF for reversing on Android. https://github.com/SeeFlowerX/stackplz

sast-scan Scan is a free open-source security tool for modern DevOps teams. With an integrated multi-scanner based design, Scan can detect various kinds of security flaws in your application, and infrastructure code in a single fast scan without the need for any remote server. Scan is purpose built for workflow integration with nifty features such as automatic build breaker, results baseline and PR summary comments. Scan products are open-source under a GNU https://github.com/ShiftLeftSecurity/sast-scan

​​iocextract This library extracts URLs, IP addresses, MD5/SHA hashes, email addresses, and YARA rules from text corpora. It includes some encoded and "defanged" IOCs in the output, and optionally decodes/refangs them. https://github.com/InQuest/python-iocextract

​​slither Slither is a Solidity static analysis framework written in Python 3. It runs a suite of vulnerability detectors, prints visual information about contract details, and provides an API to easily write custom analyses. Slither enables developers to find vulnerabilities, enhance their code comprehension, and quickly prototype custom analyses. https://github.com/crytic/slither

​​nuclearpond Nuclear Pond is a utility leveraging Nuclei to perform internet wide scans for the cost of a cup of coffee. ▫️ Output results to your terminal, as json, or to an S3 ▫️ Specify threads and parallel invocations in any desired number of batches ▫️ Specify any Nuclei arguments just like you would locally ▫️ Specify a single host or from a file ▫️ Run the http server to take scans from the API ▫️ Run the http server to the status of the scans ▫️ Query findings through Athena for searching https://github.com/DevSecOpsDocs/nuclearpond

​​symbiote Camera Hacking https://github.com/hasanfirnas/symbiote

​​Binwalk Binwalk is a fast, easy to use tool for analyzing, reverse engineering, and extracting firmware images. https://github.com/ReFirmLabs/binwalk

Secret Handshake A prototype malware C2 channel using x509 certificates over mTLS I always wondered if threat actors ever used x509 certificates as part of their C2 communication, not to encrypt the network traffic but to actually embed the C2 communication in the x509 cert. After searching for something like this in the wild for 5 years I finally decided to just code it myself to see if it's possible...it is https://github.com/jconwell/secret_handshake #malware

​​Python parser for #Cobalt Strike stagers Use parse_stager_config.py to search a file for Cobalt Strike stager shellcode. If shellcode is found, it will be extracted in JSON format. https://github.com/stairwell-inc/cobalt-strike-stager-parser

​​Microsoft Activation Scripts (MAS) A Windows and Office activator using HWID / KMS38 / Online KMS activation methods, with a focus on open-source code and fewer antivirus detections. https://github.com/massgravel/Microsoft-Activation-Scripts

​​Black-Tool Install the tools and start hacking Attacking https://github.com/mrprogrammer2938/Black-Tool

​​Flipper Zero Flipper ZeroFlipper Zero is a portable multi-tool for pentesters and geeks in a toy-like body. It loves hacking digital stuff, such as radio protocols, access control systems, hardware and more. It's fully open-source and customizable, so you can extend it in whatever way you like. Buy online: 🛒 https://amzn.to/3Qyw6la #rfid #nfc