HackGit

​​shodanIDB A command-line tool to fetch data (open ports, CVEs, CPEs, ...) from Shodan internetDB API. Free to use and no API key required. https://github.com/s4hm4d/shodanidb

​​Awesome Cybersecurity Handbooks A huge chunk of my personal notes since I started playing CTFs and working as a red teamer. These are living documents and I updated or add to them relatively often. https://github.com/0xsyr0/Awesome-Cybersecurity-Handbooks

​​CVE-2022-38374 This repository contains PoC exploit for CVE-2022-38374. https://github.com/azhurtanov/CVE-2022-38374 #cve

​​ShootCutMe LNK files are used on the most modern and advanced APT attacks. LNK files are windows shortcut files. Using a shortcut file you can launch your own commands. I am happy to introduce ShootCutMe a script to create LNK files. Options : ▫️ Fake pdf (Will open a fake Google doc on the browser in kiosk mode to lure the victim and remove suspicions) ▫️ You can choose between different icons (word, Adobe, Excel, PowerPoint, Edge...) ▫️ You can choose what you want to accomplish with the LNK file: download an executable, download and load an executable, execute an executable) Using the LNK file you can drop your first-stage malware and complete your red teaming engagement successfully. https://github.com/Hassan-Al-Achek/shootCutMe

​​PassFiltEx Active Directory Password Filter https://github.com/ryanries/PassFiltEx

​​Phishing Domain Database A Testing Repository for Phishing Domains, Web Sites and Threats. Above are results of Domains that have been tested to be Active, Inactive or Invalid. These Lists update hourly. This is just one of a number of extensive projects dealing with testing the status of harmful domain names and web sites. We test sources of Phishing attacks to keep track of how many of the domain names used in Phishing attacks are still active and functioning. We sort all domains from all sources into one list, removing any duplicates so that we have a clean list of domains to work with. https://github.com/mitchellkrogza/Phishing.Database

​​RITA Real Intelligence Threat Analytics RITA is an open source framework for network traffic analysis. The framework ingests Zeek Logs in TSV format, and currently supports the following major features: ▫️ Beaconing Detection: Search for signs of beaconing behavior in and out of your network ▫️ DNS Tunneling Detection Search for signs of DNS based covert channels ▫️ Blacklist Checking: Query blacklists to search for suspicious domains and hosts https://github.com/activecm/rita

​​go-sherlock Modified GO version of Project Sherlock ▫️ It only accepts one username at a time. ▫️ Super fast with low memory cost. ▫️ Looks up username in about 1000 websites ▫️ To get started, simply, open Terminal or CMD in project directory, then, for example you want to lookup username "johndoe": https://github.com/Longwater1234/go-sherlock #osint #soft #infosec #go

​​sherlock Hunt down social media accounts by username across social networks https://github.com/sherlock-project/sherlock #OSINT #best

​​SweynTooth Unleashing Mayhem over Bluetooth Low Energy SweynTooth captures a family of 18 vulnerabilities across different Bluetooth Low Energy (BLE) software development kits (SDKs) of six major system-on-a-chip (SoC) vendors. The vulnerabilities expose flaws in specific BLE SoC implementations that allow an attacker in radio range to trigger deadlocks, crashes and buffer overflows or completely bypass security depending on the circumstances. (Update) We have also included a testing script to check devices against the BLE KNOB variant. SweynTooth uses the Nordic nRF52840 Dongle to send/receive raw link layer packets to and from the vulnerable peripheral over the air. https://github.com/Matheus-Garbelini/sweyntooth_bluetooth_low_energy_attacks Details: https://asset-group.github.io/disclosures/sweyntooth/

​​mksub Tweet Generate tens of thousands of subdomain combinations in a matter of seconds https://github.com/trickest/mksub

​​Murphysec MurphySec CLI is used for detecting vulnerable dependencies from the command-line, and also can be integrated into your CI/CD pipeline. ▫️ Analyze dependencies being used by your project, including direct and indirect dependencies ▫️ Detect known vulnerabilities in project dependencies https://github.com/murphysecurity/murphysec

​​Kestrel Kestrel is a threat hunting language aiming to make cyber threat hunting fast by providing a layer of abstraction to build reusable, composable, and shareable hunt-flow. https://github.com/opencybersecurityalliance/kestrel-lang

​​DevOps Roadmap 2022. This is a step by step guide on how to become a #DevOps engineer, with links to relevant learning resources. https://github.com/milanm/DevOps-Roadmap

​​suidPWN Speeding up identifying which binaries with a SUID flag may lead to root access https://github.com/Ha-L0/suidPWN

​​sar-interference-tracker Many military radars interfere with open source satellite imagery when they're turned on. A new tool lets anyone monitor when and where these radars are deployed. This repository contains the source code for this tool. https://github.com/bellingcat/sar-interference-tracker

​​OWASP Maryam OWASP Maryam is a modular open-source framework based on OSINT and data gathering. It is designed to provide a robust environment to harvest data from open sources and search engines quickly and thoroughly. https://github.com/saeeddhqan/Maryam #OSINT

​​DSTIKE Deauther Watch V3 Deauther Watch is still an ESP8266 development board, but you can wear it like a smartwatch. It comes installed with the latest ESP8266 Deauther software. With this software, you can perform different attacks to test WiFi networks. Please note that the ESP8266 does only support 2.4GHz. You can also use it to develop your own software. It is simple to use, just like any other ESP8266 development board. Here is a quick demonstrations of how to deauthenticate clients from a wifi network using a watch 👇 Buy online: 🛒 https://amzn.to/3VrjHRE 🛒 https://ali.ski/06IaoW #dstike #watch #esp8266

​​CVE-2022-41923 Workaround for CVE-2022-41923: Privilege Management Vulnerability https://github.com/grails/GSSC-CVE-2022-41923 #cve