HackGit

​​NFCGate NFCGate is an Android application meant to capture, analyze, or modify NFC traffic. It can be used as a researching tool to reverse engineer protocols or assess the security of protocols against traffic modifications. On-device capture: Captures NFC traffic sent and received by other applications running on the device. Relay: Relays NFC traffic between two devices using a server. One device operates as a "reader" reading an NFC tag, the other device emulates an NFC tag using the Host Card Emulation (HCE). Replay: Replays previously captured NFC traffic in either "reader" or "tag" mode. Clone: Clones the initial tag information (e.g. ID). pcapng export of captured NFC traffic, readable by Wireshark. https://github.com/nfcgate/nfcgate

Rekono Rekono combines other hacking tools and its results to execute complete pentesting processes against a target in an automated way. The findings obtained during the executions will be sent to the user via email or Telegram notifications and also can be imported in Defect-Dojo if an advanced vulnerability management is needed. Moreover, Rekono includes a Telegram bot that can be used to perform executions easily from anywhere and using any device. Features: ▫️ Combine hacking tools to create pentesting processes ▫️ Execute pentesting processes ▫️ Execute pentesting tools ▫️ Review findings and receive them via email or Telegram notifications ▫️ Use Defect-Dojo integration to import the findings detected by Rekono ▫️ Execute tools and processes from Telegram Bot ▫️ Wordlists management https://github.com/pablosnt/rekono #Donate @HackGit

​​OpenArk OpenArk is an open source anti-rookit(ARK) tool for Windows. Ark is Anti-Rootkit abbreviated, it aimmed at reversing/programming helper and also users can find out hidden malwares in the OS. More and more powerful features will be supported in future. https://github.com/BlackINT3/OpenArk

RPCMon A GUI tool for scanning RPC communication through Event Tracing for Windows (ETW). The tool was published as part of a research on RPC communication between the host and a Windows container. https://github.com/cyberark/RPCMon

​​Vulmap Vulmap is an open-source online local vulnerability scanner project. It consists of online local vulnerability scanning programs for Windows and Linux operating systems. These scripts can be used for defensive and offensive purposes. It is possible to make vulnerability assessments using these scripts. Also, they can be used for privilege escalation by pentesters/red teamers. Vulmap can be used to, scan vulnerabilities on the localhost, see related exploits, and download them. Scripts basically, scan the localhost to gather installed software information and ask vulmon.com API if there are any vulnerabilities and exploits related to installed software. If vulnerabilities exist, Vulmap gives CVE ID, risk score, vulnerability's detail link, if exists related exploit ids, and exploit titles. Exploits can be downloaded with Vulmap also. https://github.com/vulmon/Vulmap #Donate @HackGit

​​CVE-2022-33318 Paracosme - Remote Code Execution in ICONICS Genesis64. https://github.com/0vercl0k/paracosme #cve

EtwSessionHijacking A Poc on blocking Procmon from monitoring network events. https://github.com/ORCx41/EtwSessionHijacking

​​Tangled WinExec This repository is for investigation of Windows process execution techniques. Most of PoCs are given a name corresponding to the technique. https://github.com/daem0nc0re/TangledWinExec

​​CVE-2022-22715 In February 2022, Microsoft patched the vulnerability I used in TianfuCup 2021 for escaping Adobe Reader sandbox, assigned CVE-2022-22715. The vulnerability existed in Named Pipe File System nearly 10 years since the AppContainer was born. We called it "Windows Dirty Pipe". https://github.com/k0keoyo/my_vulnerabilities/tree/master/CVE-2022-22715 #cve #poc

​​Masky A python library providing an alternative way to remotely dump domain users' credentials thanks to an ADCS. A command line tool has been built on top of this library in order to easily gather PFX, NT hashes and TGT on a larger scope. This tool does not exploit any new vulnerability and does not work by dumping the LSASS process memory. Indeed, it only takes advantage of legitimate Windows and Active Directory features (token impersonation, certificate authentication via kerberos & NT hashes retrieval via PKINIT). A blog post was published to detail the implemented technics and how Masky works. https://github.com/Z4kSec/Masky #ad #adcs #lsass #redteam

​​BYOB BYOB is an open-source post-exploitation framework for students, researchers and developers. It includes features such as: ▫️ Command & control server with intuitive user-interface ▫️ Custom payload generator for multiple platforms ▫️ 12 post-exploitation modules https://github.com/malwaredllc/byob

​​QCSuper QCSuper is a tool communicating with Qualcomm-based phones and modems, allowing to capture raw 2G/3G/4G radio frames, among other things. It will allow you to generate PCAP captures of it using either a rooted Android phone, an USB dongle or an existing capture in another format. https://github.com/P1sec/QCSuper

​​BotPEASS Use this bot to monitor new CVEs containing defined keywords and send alerts to Slack and/or Telegram. https://github.com/carlospolop/BotPEASS

​​XSS Exploitation Tool A penetration testing tool that focuses on the exploit of Cross-Site Scripting vulnerabilities. ▫️ Exfiltrate input field data ▫️ Exfiltrate cookies ▫️ Keylogging ▫️ Display alert box ▫️ Redirect user https://github.com/Sharpforce/XSS-Exploitation-Tool

​​DSTIKE Deauther Watch Deauther Watch is still an ESP8266 development board, but you can wear it like a smartwatch. It comes installed with the latest ESP8266 Deauther software. With this software, you can perform different attacks to test WiFi networks. Please note that the ESP8266 does only support 2.4GHz. You can also use it to develop your own software. It is simple to use, just like any other ESP8266 development board. FAQ \ WiKi \ Software: https://github.com/SpacehuhnTech/esp8266_deauther Firmware Burning tool: https://github.com/nodemcu/nodemcu-flasher Hardware: https://github.com/lspoplove/Deauther-Project Video tutorial: https://www.youtube.com/watch?v=TMvpJiE8Yy8 Quick product upgrade tutorial: 1. Download CP2102 driver 2. Download the firmware 3. Download nodemcu-flasher 4. Click the gear to select the corresponding binfile. The programming mode selects DOUT. The rate selects 961200. Click Flash start and wait for the progress bar to reach the end and then power on. Buy online: 🛒 https://ali.ski/0n0Cab #dstike #watch #esp8266

​​Clouditor Community Edition Clouditor is a tool which supports continuous cloud assurance. Its main goal is to continuously evaluate if a cloud-based application (built using, e.g., Amazon Web Services (AWS) or Microsoft Azure) is configured in a secure way and thus complies with security requirements defined by, e.g., Cloud Computing Compliance Controls Catalogue (C5) issued by the German Office for Information Security (BSI) or the Cloud Control Matrix (CCM) published by the Cloud Security Alliance (CSA). https://github.com/clouditor/clouditor

Jawbreaker A Python obfuscator written in Python3, using double encoding in base16, base32, base64, HTTP requests and the Hastebin API. https://github.com/billythegoat356/Jawbreaker