HackGit

​​CVE-2022-2602 This repository contains exploits for CVE-2022-2602. There are two versions of it: ▫️ Exploit using userfaultfd technique. ▫️ Exploit using inode locking technique. https://github.com/LukeGix/CVE-2022-2602 #cve

​​cloud-dns-integrity-checker Checks the integrity of your Cloud DNS managed zones in your organization https://github.com/binxio/cloud-dns-integrity-checker

​​ASKJoe AskJoe is a tool that utilizes ChatGPT to assist researchers wanting to use Ghidra as their malware analysis tool. With its capabilities, ChatGPT highly simplifys the practice of reverse engineering, allowing researchers to better detect and mitigate threats. https://github.com/securityjoes/ThreatResearch

​​Network Scanner Universal Network Scanner is a multi-brand ultra-fast network discovery tool based on multicast and broadcast discovery. This network discovery scanner is implemented based on a flexible framework to ease implementation of any vanilla discovery IP protocol such as SSDP/UPnP, mDNS, proprietary discovery protocols, etc. https://github.com/julienblitte/UniversalScanner

​​ServerlessRedirector Serverless Redirector in various cloud vendors for red teaming https://github.com/KINGSABRI/ServerlessRedirector

​​Project Discovery Recon This tool is nothing by itself, but in interaction with the necessary tools you can draw interesting results. https://github.com/mustafaakalin/ProjectDiscoveryRecon

​​EvilWfshbr CVE-2022-42046 Proof of Concept of wfshbr64.sys local privilege escalation https://github.com/kkent030315/CVE-2022-42046

​​Mail Log Manipulation Exploit script to get RCE by using LFI and Mail log poisoning https://github.com/Ananthavijay/Mail-log-Manipulation

Simple DNSCrypt A simple management tool to configure dnscrypt-proxy on windows based systems https://github.com/bitbeans/SimpleDnsCrypt

​​dnscrypt-proxy A flexible DNS proxy, with support for modern encrypted DNS protocols such as DNSCrypt v2, DNS-over-HTTPS, Anonymized DNSCrypt and ODoH (Oblivious DoH). ▫️ dnscrypt-proxy documentation ← Start here ▫️ DNSCrypt project home page ▫️ Discussions ▫️ DNS-over-HTTPS and DNSCrypt resolvers ▫️ Server and client implementations ▫️ DNS stamps ▫️ FAQ https://github.com/DNSCrypt/dnscrypt-proxy #DNS #privacy

​​WiFi Pineapple Mark VII by Hak5 The Hak5 WiFi Pineapple is a highly advanced WiFi auditing and MITM platform. The original "RougeAP" device - the WiFi Pineapple provides an end-to-end workflow to bring WiFi clients from their trusted network to your rouge network. Hak5's latest generation V7 brings sees updates in three key area: performance, management tools and framework upgrades. The PineAP suite is a cross-platform control panel for the WiFi Pineapple devices, providing fine-grained control over all elements of your audit. The elegance of the WiFi Pineapple Platform is in its simplicity. Previously onerous, inefficient and prone to collateral damage - WiFi Auditing and Offensive Operations are now highly targeted, covert and very simple. Advanced mitm attacks: Perfectly mimicks target networks, allowing for seamless client capture via the highly targeted deAuth mechanisms. Once captured, all standard network vectors are available: DNSSpoofing, Packet Capture, etc. Wifi reconnaissance: Covertly discover, visualise and map WiFi networks and client hierarchies. Build lists of existing networks, and even client historical SSID connections. Continuously scan, add notes, filter clients, networks, logs and more. Automated wifi infiltration: Capture and pipe WiFi Encryption credentials in pcap / hashcat or JTR formats. WEP, WPA & WPA Enterprise. Highly targeted, highly covert: Keep your "Get Out of Jail Free" letter firmly in your pocket. The PineAP suite allows for fine-grained, highly targeted actions, ensuring no detection and no collateral damage. Buy online: 🛒 https://amzn.to/3Wpnpfo 🛒 https://ali.ski/_jqbke #wifi #network

​​bloodyAD bloodyAD is an Active Directory privilege escalation swiss army knife This tool can perform specific LDAP/SAMR calls to a domain controller in order to perform #AD privesc. bloodyAD supports authentication using cleartext passwords, pass-the-hash, pass-the-ticket or certificates and binds to LDAP services of a domain controller to perform AD privesc. It is designed to be used transparently with a SOCKS proxy. https://github.com/CravateRouge/bloodyAD

​​Guide to Bug Bounty Hunting If you are beginning bug bounty hunting, you will need to know that it will take time to learn the bug hunting skills. You need to have the patience and determination to continue hunting even though you might not see successful results quickly. The bug bounty field is crowded and competitive, hence you will require hardwork, dedication, lateral thinking to persist on. Hunting is about learning and acting noob all the time. Everyone starts from somewhere. https://github.com/bobby-lin/study-bug-bounty

​​HExHTTP Header Exploitation HTTP Features: ▫️ Check CPDoS ▫️ Localhost header ▫️ Ngninx - Envoy - Apache ▫️ CND Analysis https://github.com/c0dejump/HExHTTP

​​Hardened malloc This is a security-focused general purpose memory allocator providing the malloc API along with various extensions. It provides substantial hardening against heap corruption vulnerabilities. The security-focused design also leads to much less metadata overhead and memory waste from fragmentation than a more traditional allocator design. It aims to provide decent overall performance with a focus on long-term performance and memory usage rather than allocator micro-benchmarks. It offers scalability via a configurable number of entirely independent arenas, with the internal locking within arenas further divided up per size class. https://github.com/GrapheneOS/hardened_malloc

​​CredzCheckr Testing default web credentials. https://github.com/c0dejump/CredzCheckr

Android Kernel Exploitation The objective of this workshop is to get started with kernel vulnerability analsysis and exploitation in Android platform. https://github.com/cloudfuzz/android-kernel-exploitation

​​GD-Thief Red Team tool for exfiltrating files from a target's Google Drive that you(the attacker) has access to, via the Google Drive API. This includes includes all shared files, all files from shared drives, and all files from domain drives that the target has access to. https://github.com/antman1p/GD-Thief

​​BrakTooth ESP32 BR/EDR Active Sniffer/Injector Simple "Monitor mode" for Bluetooth Classic. Sniff or inject BR/EDR Baseband packets in ESP32 BT connections. https://github.com/Matheus-Garbelini/esp32_bluetooth_classic_sniffer