HackGit

​​GoMeetPhish Google Meet Phishing Template For Gophish https://github.com/Polem4rch/GoMeetPhish #phishing #googlemeet #gophish

​​VolatileDataCollector During my Incident Response engagements, I have realized that dumping volatile data is always done bad (or at least in a way different than the best one). Additionally, the data is never in the same format, which makes the analysis harder (if not impossible) to automate. It dumps: ▫️ OS details (user name, machine name, version) ▫️ Process details (PID, name, PPID, path, cmdline, Thread count, iocount, times) ▫️ Loaded DLLs ▫️ Drivers ▫️ Environment ▫️ Root certs (thumbnail and name, for user and machine) ▫️ Open handles (open files, open registry entries etc.) ▫️ ARP cache ▫️ IP configuration ▫️ DNS cache ▫️ Active TCP/IP connections (addresses, ports, PID, time of establishing) ▫️ Active logons ▫️ Kernel memory https://github.com/gtworek/VolatileDataCollector

​​DNS Reaper Sub-domain takeover tool, but with an emphasis on accuracy, speed and the number of signatures in our arsenal! We can scan around 50 subdomains per second, testing each one with over 50 takeover signatures. This means most organisations can scan their entire DNS estate in less than 10 seconds. https://github.com/punk-security/dnsReaper

​​Black-Dragon An Advanced Automation Tool For Web-Recon Developed For Linux Systems. It's A Tool To Automate The Web Reconnaissance Proccess, Which Make It Easier To Gather Informations About Your Target. This Tool Will Help You In Your Bug Hunting Or Web Penetration Testing Operation Because It Not Only Gather Informations About The Target, But Also It Arranges All These Information In A Structed Way Which Makes You Analyse The Data In A Good Way. https://github.com/Cyber-Guy1/BlackDragon

​​Frogy Subdomain enumeration script. It's unique in the way it is built upon. Using the combination of different subdomain enumeration tools and logic this script tries to identify more subdomains and TLDs in recon. Features: ▫️ Horizontal subdomain enumeration ▫️ Vertical subdomain enumeration ▫️ Resolving subdomains to IP ▫️ Identifying live web applications ▫️ Identifying web applications with login portals enabled https://github.com/iamthefrogy/frogy

​​CreateProcess A small PoC that creates processes in Windows https://github.com/helpsystems/CreateProcess Creating Processes Using System Calls: https://www.coresecurity.com/core-labs/articles/creating-processes-using-system-calls

​​shellfirm shellfirm will intercept any risky patterns (predefined or user's custom additions) and will immediately prompt a small challenge that will double verify your action, think of it as a captcha for your terminal. https://github.com/kaplanelad/shellfirm #linux

​​Overload DDOS Tool (Layer 7). https://github.com/7zx/overload

Cybersecurity-Resources A Library of various cybersecurity resources https://github.com/Nickyie/Cybersecurity-Resources

​​MARA MARA is a proof of concept tool waiting for shell execution with associated pty/tty using netlink socket to sniff user's terminal, as a static binary it works well with in memory execution using DEGU. Concept behind this project comes from emptymonkey method of mitm a terminal ( look at shelljack project ) to intercept and log user session (including ssh session passwd sudo su passwords etc.) https://github.com/io-tl/Mara

​​Notify Notify is a Go-based assistance package that enables you to stream the output of several tools (or read from a file) and publish it to a variety of supported platforms. Features: ▫️ Supports for Slack / Discord / Telegram ▫️ Supports for Pushover / Email / Teams ▫️ Supports for File / Pipe output ▫️ Supports Line by Line / Bulk Post ▫️ Supports using Single / Multiple providers ▫️ Supports Custom Web-hooks ▫️ Supports Custom data formatting https://github.com/projectdiscovery/notify

sectools The Offensive Security Python Toolbox A Python native library containing lots of useful functions to write efficient scripts to hack stuff. https://github.com/p0dalirius/sectools

​​AzurePolicyTestFramework A CLI tool to test Azure Policy relying on Terraform + Golang https://github.com/microsoft/AzurePolicyTestFramework

​​CallStack-Spoofer A simple tool that will make it harder to find your code by stackwalker or other stack analyze. This works both in the kernel-mode and in the user-mode. Safe with runtime exceptions. https://github.com/Barracudach/CallStack-Spoofer

​​Proxify Swiss Army Knife Proxy for rapid deployments. Supports multiple operations such as request/response dump, filtering and manipulation via DSL language, upstream HTTP/Socks5 proxy. Additionally, a replay utility allows to import the dumped traffic (request/responses with correct domain name) into BurpSuite or any other proxy by simply setting the upstream proxy to proxify. ▫️ Intercept / Manipulate HTTP/HTTPS & NON-HTTP traffic ▫️ Invisible & Thick clients traffic proxy support ▫️ TLS MITM support with client/server certificates ▫️ HTTP and SOCKS5 support for upstream proxy ▫️ Traffic Match/Filter and Replace DSL support ▫️ Full traffic dump to file (request/responses) ▫️ Native embedded DNS server ▫️ Plugin Support to decode specific protocols (e.g XMPP/SMTP/FTP/SSH/) ▫️ Proxify Traffic replay in Burp https://github.com/projectdiscovery/proxify

​​NimicStack NimicStack is the pure Nim implementation of Call Stack Spoofing technique to mimic legitimate programs. Whole project is based on the PoC shared by WithSecure Labs https://github.com/frkngksl/NimicStack

​​SilentHound Quietly enumerate an Active Directory Domain via LDAP parsing users, admins, groups, etc. This will create an isolated virtual environment with dependencies needed for the project. To use the project you can either open a shell in the virtualenv with pipenv shell or run commands directly with pipenv run. https://github.com/layer8secure/SilentHound #ad

​​RPCRecon Tool in Bash to carry out a basic enumeration and extract the most relevant information from an Active Directory via rpcclient. This utility will allow us to obtain the following information from a Domain: ▫️ Domain Users ▫️ Domain Users with their description ▫️ Domain Admin Users ▫️ Domain Groups ▫️ Domains within the network https://github.com/m4lal0/RPCrecon

​​Bitwarden Directory Connector The Bitwarden Directory Connector is a a desktop application used to sync your Bitwarden enterprise organization to an existing directory of users and groups. Supported directories: ▫️ Active Directory ▫️ Any other LDAP-based directory ▫️ Azure Active Directory ▫️ G Suite (Google) ▫️ Okta https://github.com/bitwarden/directory-connector

​​Jazzer Coverage-guided, in-process fuzzing for the JVM Jazzer is a coverage-guided, in-process fuzzer for the JVM platform developed by Code Intelligence. It is based on libFuzzer and brings many of its instrumentation-powered mutation features to the JVM. The JVM bytecode is executed inside the fuzzer process, which ensures fast execution speeds and allows seamless fuzzing of native libraries. https://github.com/CodeIntelligenceTesting/jazzer