HackGit

​​opencti OpenCTI is an open source platform allowing organizations to manage their cyber threat intelligence knowledge and observables. It has been created in order to structure, store, organize and visualize technical and non-technical information about cyber threats. https://github.com/OpenCTI-Platform/opencti

​​PassLock A medium-security password manager that encrypts passwords using Advanced Encryption Standard (AES). Features: ▫️ AES Encryption ▫️ Custom key ▫️ Random encryption type ▫️ random password generator ▫️ Clipboard Copy ▫️ Custom path ▫️ Terminal User Interface ▫️ Process Monitor https://github.com/Akshay-Vs/PassLock

​​SharpNamedPipePTH This project is a C# tool to use Pass-the-Hash for authentication on a local Named Pipe for user Impersonation. You need a local administrator or SEImpersonate rights to use this. https://github.com/S3cur3Th1sSh1t/SharpNamedPipePTH Details: https://s3cur3th1ssh1t.github.io/Named-Pipe-PTH/

​​BloodHound py BloodHound.py is a Python based ingestor for BloodHound, based on Impacket. https://github.com/jazzpizazz/BloodHound.py-Kerberos

monomorph MD5-Monomorphic Shellcode Packer all payloads have the same MD5 hash https://github.com/DavidBuchanan314/monomorph

​​CVE-2022-28282 PoC for CVE-2022-28282 Firefox: heap-use-after-free in DocumentL10n::TranslateDocument https://github.com/Pwnrin/CVE-2022-28282

​​Cifuzz CLI tool that helps you to integrate and run fuzzing based tests into your project https://github.com/CodeIntelligenceTesting/cifuzz

​​CallBackDump Dump lsass process tool that can pass Kaba, nuclear crystal, defender and other anti-software https://github.com/seventeenman/CallBackDump

​​cpplumber Static analysis tool based on clang, which detects source-to-binary information leaks in C/C++ projects https://github.com/ergrelet/cpplumber

​​CrackMapExec A swiss army knife for pentesting networks. A new protocol has been added to CrackMapExec ! You can now try FTP credentials and quickly find FTP with anonymous logon during internal pentest. https://github.com/Porchetta-Industries/CrackMapExec

​​DumpThatLSASS It's Fully Undetectable and bypass almost all the vendors AV/EDRs, it doesn't bypass RunAsPPL Dumping LSASS by Unhooking MiniDumpWriteDump by getting a fresh DbgHelp.dll copy from the disk , plus functions and strings obfuscation, duplicate lsass handle from existed processes. https://github.com/D1rkMtr/DumpThatLSASS

​​Challenges_2022_Public Files + Writeups for DownUnderCTF 2022 Challenges https://github.com/DownUnderCTF/Challenges_2022_Public

​​Cronos PoC for a new sleep obfuscation technique (based on Ekko) leveraging waitable timers to RC4 encrypt the current process and change the permissions from RW to RX to evade memory scanners. https://github.com/Idov31/Cronos

​​DeFiHackLabs Reproduce DeFi hack incidents using Foundry. 66 incidents included. https://github.com/SunWeb3Sec/DeFiHackLabs

​​BHHB View HTTP history exported from Burp Suite Community Edition(CE). https://github.com/adityatelange/bhhb t.me/hackgit

​​RecreateCSDownloadsTree Generation of TOML metadata for recreating directory structures from Cobalt Strike Beacon downloads. https://github.com/EspressoCake/RecreateCSDownloadsTree #cobalt

​​ROCK PI S ROCK Pi S is a Rockchip RK3308 based SBC(Single Board Computer) by Radxa. It equips a 64bits quad core processor, USB, ethernet, wireless connectivity and voice detection engine at the size of 1.7 inch, make it perfect for IoT and voice applications. ROCK Pi S comes in two ram sizes 256MB or 512MB DDR3, and uses uSD card for OS and storage. Optionally, ROCK Pi S can provide on board storage version with 1Gb/2Gb/4Gb/8Gb NAND flash. The Rockchip RK3308 Soc used in ROCK Pi S RK3308 is a high-performance Quad-core application processor designed for intelligent voice interaction, audio input/output processing, and other digital multimedia applications. Embedded rich audio interfaces, such as I2S, PCM, TDM, PDM, SPDIF, HDMI ARC and so on, can meet different audio application development, reduce hardware development complexity and development cost. ▫️ Processor: SoC RK3308 Quad Cortex-A35 ARM 64bits processor @ up to1.3GHz ▫️ RAM: 256MB or 512MB DDR3 ▫️ Storage: MicroSD(TF), optional on board 1/2/4/8Gb NAND flash ▫️ Wireless: 802.11 b/g/n wifi ▫️ Bluetooth: 4.0(rtl8723DS) ▫️ USB: USB2.0 Type-A HOST x1, USB3.0 Type-C OTG x1 ▫️ Ethernet: 100MB ethernet, optional PoE(additional HAT required) ▫️ IO: 26-pin expansion header, I2C x4, PWM x3, SPI x2, UART x3, I2S0 x1, 5V x2, 3.3V x2 ▫️ Power: USB Type-C DC 5V ▫️ Size: 1.7inch square (10x8cm) WiKi: https://wiki.radxa.com/RockpiS Buy online: 🛒 https://ali.ski/lKMipv #minipc #rockpi #pi

githubC2 Abusing Github API to host our C2 traffic, usefull for bypassing blocking firewall rules if github is in the target white list, and in case you don't have C2 infrastructure , now you have a free one. https://github.com/D1rkMtr/githubC2 t.me/hackgit

​​CVE-2022-30206 This is the PoC for CVE-2022-30206. https://github.com/Pwnrin/CVE-2022-30206