HackGit

Proxying DLL Loads For Hiding ETWTI Stack Tracing. https://0xdarkvortex.dev/proxying-dll-loads-for-hiding-etwti-stack-tracing/ Proxy-DLL-Loads: https://github.com/paranoidninja/Proxy-DLL-Loads #pentesting #redteam

​​The disclose.io Database (diodb) A true, community-powered, vendor agnostic directory of all known VDP and BBPs, contact details, policy location, preferred languages, and the status of: ▫️ Safeharbor ▫️ Availability rewards, hall of fame, swag ▫️ Disclosure policy https://github.com/disclose/diodb

​​Security Onion 2.3 Security Onion is a free and open platform for threat hunting, enterprise security monitoring, and log management. It includes our own interfaces for alerting, dashboards, hunting, PCAP, and case management. It also includes other tools such as Playbook, osquery, CyberChef, Elasticsearch, Logstash, Kibana, Suricata, and Zeek. https://github.com/Security-Onion-Solutions/securityonion

​​FIR Fast Incident Response is an cybersecurity incident management platform designed with agility and speed in mind. It allows for easy creation, tracking, and reporting of cybersecurity incidents. FIR is for anyone needing to track cybersecurity incidents (CSIRTs, CERTs, SOCs, etc.). It was tailored to suit our needs and our team's habits, but we put a great deal of effort into making it as generic as possible before releasing it so that other teams around the world may also use it and customize it as they see fit. https://github.com/certsocietegenerale/FIR

​​CVE-2022-34689 CryptoAPI spoofing vulnerability The repository contains code for two types of PoCs: one exploiting Chrome v48 and another focusing on the vulnerable MD5 check in crypt32.dll. https://github.com/akamai/akamai-security-research/tree/main/PoCs/CVE-2022-34689 Details: https://www.akamai.com/blog/security-research/exploiting-critical-spoofing-vulnerability-microsoft-cryptoapi #cve #poc

​​CVE-2023-24055 POC and Scanner for CVE-2023-24055. https://github.com/deetl/CVE-2023-24055 #cve

​​EYSOFT Webcam Cover Whether you want to protect your smartphone, laptop or desktop computer, this 5-pack of webcam privacy covers is an excellent choice. The cover is durable and easy to install using the provided double-sided tape. To cover the viewfinder, all you need to do is slide the black circle within the cover to the left. Measuring only 0.022 inches in thickness which will not interfere with closing lid of your laptop. It adheres with double sided tape and can be removed if needed. Moreover, it will sustain through the wear and tear and remain strongly adhesive. Not only suitable for computer, PC, laptops, Mac, iPad, Android tablet and all in one desktop, also can be used in most models of smartphones. Buy online: 🛒 $5.99 https://amzn.to/3Hca2c4 #camera #privacy #covers

​​opencve OpenCVE is a platform used to locally import the list of CVEs and perform searches on it (by vendors, products, CVSS, CWE...). Users subscribe to vendors or products, and OpenCVE alerts them when a new CVE is created or when an update is done in an existing CVE. https://github.com/opencve/opencve

​​Awesome macOS command-line apps! A curated list of fantastically awesome command-line software for macOS. https://github.com/phmullins/awesome-macos-commandline

​​CVE-2022-47966 Scanner CVE-2022-47966 is a critical unauthenticated remote code execution vulnerability affecting at least 24 on-premise ManageEngine products. The vulnerability applies only if SAML SSO is enabled. For some products it also applies if SAML SSO was previously enabled. https://github.com/vonahisec/CVE-2022-47966-Scan #cve

​​Linux Kernel Defence Map Shows the relationships between vulnerability classes, exploitation techniques, bug detection mechanisms, and defence technologies. https://github.com/a13xp0p0v/linux-kernel-defence-map

​​DFIR-Templates Incident Response documents and tooling. https://github.com/chocolatecoat/DFIR-Templates

​​BSidesRoma SecurityBsides Roma Conference Repo https://github.com/SecurityBsidesIT/BSidesRoma

​​CVE-2022-36804 Pre-Auth RCE in Atlassian Bitbucket Server A critical command injection vulnerability was found in multiple API endpoints of the Atlassian Bit bucket Server and Data center. This vulnerability affects all versions of Bitbucket Server and Data Center released before versions <7.6.17, <7.17.10, <7.21.4, <8.0.3, <8.1.2, <8.2.2, and <8.3.1 https://github.com/walnutsecurity/cve-2022-36804 Details: https://walnutsecurity.com/cve-2022-36804-rce-in-bitbucket-server/ #cve #RCE

​​Gank-RECON Subdomains enumeration, various scans and testing of some vulnerabilities. https://github.com/cold-try/Gank-RECON

​​PyCript Pycript is a Burp Suite extension that enables users to encrypt and decrypt requests for manual and automated application penetration testing. It also allows users to create custom encryption and decryption logic using JavaScript and Node.js, allowing for a tailored encryption/decryption process for specific needs. https://github.com/Anof-cyber/PyCript

​​PyBOF Run Beacon Object files through python PyBOF enables Python3 to load Beacon Object Files via bytes and execute a target BOF function in a Python interpreter. https://github.com/rkbennett/pybof

​​SharpStartWebclient Programmatically start WebClient from an unprivileged session to enable that juicy privesc. https://github.com/eversinc33/SharpStartWebclient

​​Binary Ninja HashDB Plugin Binary Ninja plugin for interacting with the OALabs HashDB service. https://github.com/cxiao/hashdb_bn

​​Gato (Github Attack TOolkit) Gato, or GitHub Attack Toolkit, is an enumeration and attack tool that allows both blue teamers and offensive security practitioners to evaluate the blast radius of a compromised personal access token within a GitHub organization. The tool also allows searching for and thoroughly enumerating public repositories that utilize self-hosted runners. GitHub recommends that self-hosted runners only be utilized for private repositories, however, there are thousands of organizations that utilize self-hosted runners. https://github.com/praetorian-inc/gato