HackGit

​​SharpImpersonation A User Impersonation tool - via Token or Shellcode injection. This was a learning by doing project from my side. Well known techniques are used to built just another impersonation tool with some improvements in comparison to other public tools. https://github.com/S3cur3Th1sSh1t/SharpImpersonation The code base was taken from: https://github.com/0xbadjuju/Tokenvator A blog post for the intruduction can be found here: https://s3cur3th1ssh1t.github.io/SharpImpersonation-Introduction/ #windows #privesc #elevation #impersonation #token #shellcode #dotnet

​​pwncat A post-exploitation platform for Linux targets. It started out as a wrapper around basic bind and reverse shells and has grown from there. It streamlines common red team operations while staging code from your attacker machine, not the target. pwncat used to only support Linux, but there has been a lot of work recently to support multiple platforms. Currently, there is alpha support for Windows targets. Please see the latest documentation for details on how to use pwncat with a Windows target. pwncat intercepts the raw communication with a remote shell and allows the user to perform automated actions on the remote host including enumeration, implant installation and even privilege escalation. After receiving a connection, pwncat will setup some common configurations for working with remote shells. ▫️ Disable history in the remote shell ▫️ Normalize shell prompt ▫️ Locate useful binaries (using which) ▫️ Attempt to spawn a pseudo-terminal (pty) for a full interactive session https://github.com/calebstewart/pwncat

​​WSee A CDN Domain Fronting Tool or Websocket Discovery. Should work on any CDN but more focused on CloudFlare and CloudFront CDN. This tool uses several way to make sure any endpoint can fall under specific protocol, indicated via 101 statuses. This tool also can be used for Bug Hunters to find any delicate domain related to CDN behind Endpoint. https://github.com/MC874/wsee

​​All in One Recon Tool A easy-to-use python tool to perform dns recon, subdomain enumeration and much more The purpouse of this tool is helping bug haunters and pentesters during reconnaissance https://github.com/D3Ext/AORT

​​Evil Cat An open-source FPS hacking framework. You can plug your favorite games into the framework. https://github.com/zouxianyu/evil-cat t.me/hackgit

​​Sniffle A Sniffer For Bluetooth 5 And 4.X LE. Sniffle is a sniffer for Bluetooth 5 and 4.x (LE) using TI CC1352/CC26x2 hardware. Features: ▫️ Support for BT5/4.2 extended length advertisement and data packets ▫️ Support for BT5 Channel Selection Algorithms #1 and #2 ▫️ Support for all BT5 PHY modes (regular 1M, 2M, and coded modes) ▫️ Support for sniffing only advertisements and ignoring connections ▫️ Support for channel map, connection parameter, and PHY change operations ▫️ Support for advertisement filtering by MAC address and RSSI ▫️ Support for BT5 extended advertising (non-periodic) ▫️ Support for capturing advertisements from a target MAC on all three primary advertising channels using a single sniffer. This makes connection detection nearly 3x more reliable than most other sniffers that only sniff one advertising channel. ▫️ Easy to extend host-side software written in Python ▫️ PCAP export compatible with the Ubertooth https://github.com/nccgroup/Sniffle

​​GPUSleep Move CS beacon to GPU memory when sleeping. GPUSleep moves the beacon image to GPU memory before the beacon sleeps, and move it back to main memory after sleeping. The idea is to hook HeapAlloc and Sleep. Encrypt (XOR) the heap allocated by the beacon and move all PE sections + heap segments to GPU memory using nvcuda.dll imports. https://github.com/oXis/GPUSleep Details: https://oxis.github.io/GPUSleep/

​​Screen Crab The Screen Crab is a stealthy video man-in-the-middle implant. This covert inline screen grabber sits between HDMI devices - like a computer and monitor, or console and television - to quietly capture screenshots. Perfect for sysadmins, pentesters and anyone wanting to record what's on a screen. Buy online: 🛒 https://ali.ski/BpZHm7 #hdmi #mitm #video

​​Codecepticon Codecepticon is a .NET application that allows you to obfuscate C#, VBA/VB6 (macros), and PowerShell source code, and is developed for offensive security engagements such as Red/Purple Teams. What separates Codecepticon from other obfuscators is that it targets the source code rather than the compiled executables, and was developed specifically for AV/EDR evasion https://github.com/Accenture/Codecepticon

​​Awesome AV/EDR/XDR Bypass Tips The purpose of this repository is to gather as many techniques and tools as possible to circumvent AVs, EDRs and XDRs so that it can help you throughout your pentest. https://github.com/MrEmpy/Awesome-AV-EDR-XDR-Bypass t.me/hackgit

​​CVE-2022-34721 Windows Internet Key Exchange (IKE) Protocol Extension Remote Code Execution https://github.com/78ResearchLab/PoC/tree/main/CVE-2022-34721 #cve

Microsoft Teams C2 — Covert Attack Chain Utilizing GIFShell Seven different insecure design elements/vulnerabilities present in Microsoft Teams, can be leveraged by an attacker, to execute a reverse shell between an attacker and victim, where no communication is directly exchanged between an attacker and a victim, but is entirely piped through malicious GIFs sent in Teams messages, and Out of Bounds (OOB) lookups of GIFs conducted by Microsoft’s own servers. This unique C2 infrastructure can be leveraged by sophisticated threat actors to avoid detection by EDR and other network monitoring tools. Particularly in secure network environments, where Microsoft Teams might be one of a handful of allowed, trusted hosts and programs, this attack chain can be particularly devastating. https://github.com/bobbyrsec/Microsoft-Teams-GIFShell Details: https://medium.com/@bobbyrsec/gifshell-covert-attack-chain-and-c2-utilizing-microsoft-teams-gifs-1618c4e64ed7 t.me/hackgit

​​Heroinn A cross platform C2/post-exploitation framework implementation by Rust. Features: ▫️ GUI ▫️ Interactive PTY shell ▫️ System infomations collect ▫️ File manager support with resume broken transfer and largefile ▫️ Support Win10+(Windows Server 2019+) & Linux & BSD & OSX ▫️ Multiple communication protocols (TCP & HTTP & reliable UDP) https://github.com/b23r0/Heroinn #Donate t.me/hackgit🍻»»»

​​Cliws Lightweight interactive bind/reverse PTY shell implementation by Rust. Features: ▫️ WebSocket ▫️ Full pty support: VIM, SSH, readline, Ctrl+X ▫️ Auto set terminal window size. ▫️ Reverse connection / Bind port ▫️ Support Win10+(Windows Server 2019+) & Linux & BSD & OSX https://github.com/b23r0/cliws t.me/hackgit

​​Talon Talon is a 3rd party agent for Havoc written in C. It's very minimalistic and it's meant to show how to work with the Havoc service api. Talon.py is the script that handles callbacks, register reqeuest and tasks by interacting with the Havoc service api. https://github.com/HavocFramework/Talon t.me/hackgit

​​Joern Open-source code analysis platform for C/C++/Java/Binary/Javascript/Python/Kotlin based on code property graphs. https://github.com/joernio/joern

​​hacktricks The page where you will find each hacking trick/technique/whatever I have learnt from CTFs, real life apps, reading researches, and news. https://github.com/carlospolop/hacktricks t.me/hackgit

​​RevSuit A Flexible and Powerful #Reverse #Connection Platform RevSuit is a flexible and powerful reverse connection platform designed for receiving connection from target host in penetration. It currently supports HTTP, DNS, RMI, MySQL and FTP protocols. https://github.com/Li4n0/revsuit

​​CloudFox It’s an open source CLI tool created to help pentester's and other offensive security professionals find exploitable attack paths in cloud infrastructure. https://github.com/BishopFox/cloudfox

​​SilentCryptoMiner A free silent (hidden) native cryptocurrency miner capable of mining ETH, ETC, XMR, RTM and much more, with many features suited for mining silently. https://github.com/UnamSanctam/SilentCryptoMiner #Donate t.me/hackgit🍻»»»