HackGit

​SharpWnfSuite This is the repository for Windows Notification Facility (WNF) tools. https://github.com/daem0nc0re/SharpWnfSuite Research: https://www.youtube.com/watch?v=MybmgE95weo

​Forbidden Bypass 4xx HTTP response status codes. Based on PycURL. Script uses multithreading, and is based on brute forcing so might have some false positives. Script uses colored output. Results will be sorted by HTTP response status code ascending, content length descending, and ID ascending. To filter out false positives, check each content length manually with the provided cURL command. If it does not results in bypass, just ignore all other results with the same content length. https://github.com/ivan-sincek/forbidden

​offensive-azure Collection of offensive tools targeting Microsoft Azure written in Python to be platform agnostic. The current list of tools can be found below with a brief description of their functionality. https://github.com/blacklanternsecurity/offensive-azure #redteam

tpmee TPMEavesEmu will help to exploit weak implementation of library or program that used TPM. This tool allow to: ▫️ identify the wrong configuration of the PCR ▫️ extract secrets release with TPM_CC_UNSEAL ▫️ get a privilege access on Linux Operating System due to a weak implementation of automatic decrytion program. https://github.com/quarkslab/tpmee

​SSH PuTTY login bruteforcer The ssh-putty-brute.ps1 is a wrapper script which uses PuTTY clients (either putty.exe or plink.exe) to perform SSH login bruteforce attacks. https://github.com/InfosecMatter/SSH-PuTTY-login-bruteforcer See the main article for detailed description: https://www.infosecmatter.com/ssh-brute-force-attack-tool-using-putty-plink-ssh-putty-brute-ps1/

​HopLa All the power of PayloadsAllTheThings, without the overhead. This extension adds autocompletion support and useful payloads in #Burp Suite to make your intrusion easier. Feel free to improve with your payloads ! ❤️ https://github.com/synacktiv/HopLa

Codewarrior Just another tool for static code analysis. Features: ▫️ Code search by regex pattern ▫️ Resources to custom rules ▫️ HTTPd view with web socket resources ▫️ Recursive scan ▫️ Syntax highlight by programming language https://github.com/CoolerVoid/codewarrior

Awesome-RedTeam-Cheatsheet https://github.com/RistBS/Awesome-RedTeam-Cheatsheet #redteam

​PSBettercap Control multiple Bettercap nodes through REST API. Features: ▫️ Control multiple Bettercap nodes through REST API ▫️ Runs in Windows and Linux (pwsh) ▫️ Change wifi adapter, channel(s), ttl per node ▫️ Saves individual node settings ▫️ Save GPS location with accesspoint ▫️ Generate KML file ▫️ Generate csv File ▫️ Save and resume sessions https://github.com/MelroyB/PSBettercap

#Follina Exploiter_CLI Exploit Microsoft Zero-Day Vulnerability Follina (CVE-2022-30190) https://github.com/Hrishikesh7665/Follina_Exploiter_CLI

​raptor_waf Raptor is a Web application firewall made in C that uses DFA to block SQL injection, Cross-site scripting, and path traversal. https://github.com/CoolerVoid/raptor_waf Research: http://funguscodes.blogspot.com.br/

​CloudGraph Free open-source universal GraphQL API and Cloud Security Posture Management (CSPM) tool for AWS, Azure, GCP, and K8s. With CloudGraph you get: ▫️ Free and effortless compliance checks (i.e. Azure CIS 1.3.1, GCP CIS 1.2, AWS CIS 1.2, AWS CIS 1.3, AWS CIS 1.4, AWS PCI 3.2.1, AWS NIST 800-53 Rev. 4) ▫️ Type-Safe asset inventories for all of your resources in all of your cloud environments ▫️ Automatically generated documentation and query validation - know if your query is valid before you send it! ▫️ Full resource data including relationships between resources so you can understand context ▫️ Historical snapshots of your data over time ▫️ A single endpoint to query all of your cloud data at once (i.e. get AWS + GCP data in the same query, or compare AWS stage with AWS prod) ▫️ Enhanced billing data (AWS only) ▫️ Enhanced CloudWatch data (AWS EC2 only) https://github.com/cloudgraphdev/cli

​Cansina Web Content Discovery Application. It is well known Web applications don't publish all their resources or public links, so the only way to discover these resources is requesting for them and check the response. Cansina duty is to help you making requests and filtering and inspecting the responses to tell apart if it is an existing Features: ▫️ Data persistence with sqlite database ▫️ Optional output in CSV format ▫️ Multithreading ▫️ Multiextension ▫️ Custom headers ▫️ Multiple wordlists from directories ▫️ Content detection ▫️ Filter results by size ▫️ Filter results by content ▫️ URL pattern (***) to interpolate strings ▫️ SSL support ▫️ Proxy support ▫️ Basic Authentication ▫️ Cookie jar ▫️ Resuming ▫️ Path recursion ▫️ Persistent connections ▫️ Complementary tools https://github.com/deibit/cansina

​Converting C# Tools to PowerShell In this post, we will be looking at how we can make our own PowerSharpPack by learning how to convert ANY C# tool into a PowerShell script ourselves. This is useful in cases where we want to modify a specific tool’s default behavior, use a tool that hasn’t already been converted for us, or use a custom tool that we develop ourselves. https://github.com/S3cur3Th1sSh1t/PowerSharpPack Research: https://icyguider.github.io/2022/01/03/Convert-CSharp-Tools-To-PowerShell.html

​Stratus Red Team Stratus Red Team is "Atomic Red Team™" for the cloud, allowing to emulate offensive attack techniques in a granular and self-contained manner. https://github.com/DataDog/stratus-red-team

​STIG Manager STIG Manager is an API and Web client for managing the assessment of Information Systems for compliance with security checklists published by the United States (U.S.) Defense Information Systems Agency (DISA). STIG Manager supports DISA checklists distributed as either a Security Technical Implementation Guide (STIG) or a Security Requirements Guide (SRG). For many deployments, our official Docker image is a good choice. https://github.com/NUWCDIVNPT/stig-manager

​collisions Hash collisions and exploitations https://github.com/corkami/collisions

​How to open a safe A vulnerability allows opening electronic safes from the Sentry Safe and Master Lock company without any pin code. https://github.com/H4ckd4ddy/bypass-sentry-safe

Nim DInvoke D/Invoke implementation in Nim https://github.com/S3cur3Th1sSh1t/Nim_DInvoke

​Pwnbolt Lightweight browser exploit tool to inject JS https://github.com/SysKeyyy/Pwnbolt