HackGit
前往频道在 Telegram
The channel was created for cybersecurity specialists. • Offensive Security • RedTeam • Malware Research • BugBounty • OSINT • etc Disclaimer: t.me/hackgit/2082 Donations - Ads: t.me/hackgit/5423
显示更多📈 Telegram 频道 HackGit 的分析概览
频道 HackGit (@hackgit) 英语 语言赛道中的 是活跃参与者。目前社区聚集了 21 579 名订阅者，在 技术与应用 类别中位列第 4 526，并在 美国 地区排名第 1 853 位。
📊 受众指标与增长动态
自 невідомо 创建以来，项目保持高速增长，吸引了 21 579 名订阅者。
根据 02 三月, 2025 的最新数据，频道保持稳定运转。过去 30 天订阅人数变化为 19，过去 24 小时变化为 0，整体触达仍然可观。
- 认证状态： 未认证
- 互动率 (ER)： 平均受众互动率为 0%。内容发布后 24 小时内通常能获得 N/A% 的反应，占订阅者总量。
- 帖子覆盖： 每篇帖子平均可获得 0 次浏览，首日通常累积 0 次浏览。
- 互动与反馈： 受众积极参与，单帖平均反应数为 0。
📝 描述与内容策略
作者将该频道定位为表达主观观点的平台：
“The channel was created for cybersecurity specialists.
• Offensive Security
• RedTeam
• Malware Research
• BugBounty
• OSINT
• etc
Disclaimer:
t.me/hackgit/2082
Donations - Ads:
t.me/hackgit/5423”
凭借高频更新（最新数据采集于 03 三月, 2025），频道始终保持新鲜度与高覆盖。分析显示受众积极互动，使其成为 技术与应用 类别中的关键影响点。
21 579
订阅者
无数据24 小时
-37 天
+1930 天
帖子存档
21 579
cicd-goat
Deliberately vulnerable CI/CD environment. Hack CI/CD pipelines, capture the flags. 🚩
The CI/CD Goat project allows engineers and security practitioners to learn and practice CI/CD security through a set of 10 challenges, enacted against a real, full blown CI/CD environment. The scenarios are of varying difficulty levels, with each scenario focusing on one primary attack vector.
https://github.com/cider-security-research/cicd-goat
21 579
DebugOff Library
The goal of this library is to make both static and dynamic (debugging) analysis more difficult.
https://github.com/0xor0ne/debugoff
21 579
ayakurume
WIP developer only iOS 15 jailbreak for checkm8 devices (Apple A8-A11) full rootfs r/w (fakefs), tweak injection etc...
https://github.com/dora2-iOS/ayakurume
21 579
xmlgraphics-batik
Batik is a Java based toolkit for applications which handle images in the Scalable Vector Graphics (SVG) format for various purposes, such as viewing, generation or manipulation.
https://github.com/apache/xmlgraphics-batik
21 579
AV|Ator
AviAtor Ported to NETCore 5 with an updated UI
A backdoor generator utility, which uses cryptographic and injection techniques in order to bypass AV detection.
More specifically:
▫️ It uses AES encryption in order to encrypt a given shellcode.
▫️ Generates an executable file which contains the encrypted payload.
▫️ The shellcode is decrypted and injected to the target system using various injection techniques.
https://github.com/Ch0pin/AVIator
21 579
PS5 SDK
An SDK to build payloads/ELF files compatible with the loader in the PS5 WebKit+Kernel Exploit chain.
https://github.com/PS5Dev/PS5SDK
21 579
CVE−2022-3602
This document and repository is a write-up of CVE−2022-3602, a punycode buffer overflow issue in OpenSSL. It's an "anti-POC" (the issue does not appear to exploitable) intended for folks who maintain their own OpenSSL builds and for compiler maintainers.
There is a seperate CVE in the same release, CVE-2022-3786, which also leads to buffer overflows but an attacker can't control the content in that case. There is no reproduction for that issue here, but that issue can lead to a Denial of Service due to crash.
Crashes and Buffer overfllows are never good and if you are using OpenSSL 3.0.x, it is prudent to update as soon as possible.
https://github.com/colmmacc/CVE-2022-3602
#cve #poc
21 579
MCP-PoC
Brought to you con amor from VXUG Black Mass 2022.
This research project served to help me learn more about file system minifilter drivers and how a malicious actor may leverage a vulnerable driver to patch callbacks for minifilters. In my research, I discovered previous research by Aviad Shamriz which helped me immensely in my endeavor.
https://github.com/alfarom256/MCP-PoC
21 579
Repost from Pentesting Shop
Walkie Talkie BAOFENG
I’ve come across many walkie-talkies from different brands, and one manufacturer that I love the most is Baofeng. They produce high-quality yet cheap devices that are good even for kids just starting to understand wireless communication.
But this radio is also suitable for professionals, for example, you can intercept or jam other frequencies, eavesdrop on police conversations.
How To Unlock A New Baofeng UV-5R - Easy UV5R Jailbreak Hack To Transmit On GMRS & Other Frequencies: https://www.youtube.com/watch?v=2sg3RJf1ZEA
How To Use A Baofeng UV-5R As A Police, Fire, Emergency Scanner - NO SOFTWARE - Keypad Programming: https://www.youtube.com/watch?v=GoVZ_8f3jPU
Don't forget, it's on sale now and you can buy walkie-talkies on Aliexpress for only $26.30
UV-5R:
🛒 https://ali.ski/mqpFu (ali)
🛒 https://amzn.to/3DrdUUx (amazon)
UV-9R:
🛒 https://ali.ski/_sihk (ali)
🛒 https://amzn.to/3Ds9Y5V (amazon)
#radio
21 579
undetected_chromedriver
Optimized Selenium Chromedriver patch which does not trigger anti-bot services like Distill Network / Imperva / DataDome / Botprotect.io Automatically downloads the driver binary and patches it.
https://github.com/ultrafunkamsterdam/undetected-chromedriver
21 579
MITRE ATT&CK version 12.0
Updates Techniques, Groups, and Software for Enterprise, Mobile, and ICS
https://github.com/mitre/cti/releases/tag/ATT%26CK-v12.0
Web:
https://attack.mitre.org/versions/v12
21 579
EventLogging
Automation scripts to deploy Windows Event Forwarding, Sysmon, and custom audit policies in an AD environment
https://github.com/blackhillsinfosec/EventLogging
21 579
Phishing campaigns
Below are analysis/reports on APT grouping phishing campaigns that contain a phishing email. In most cases, APT group attack reports do not contain examples of emails, this prompted me to create a repository in which there will be analysis/reports that will definitely contain a phishing email. Gradually, this list will be replenished. Contributing is welcome. For reliability, each link was duplicated via webarchive
https://github.com/wddadk/Phishing-campaigns
21 579
2022 OpenSSL vulnerability - CVE-2022-3602
Operational information about the recently announced vulnerability in OpenSSL 3
https://github.com/NCSC-NL/OpenSSL-2022
21 579
CVE-2022-40146
Apache Batik SSRF to RCE Jar Exploit.
https://github.com/cckuailong/CVE-2022-40146_Exploit_Jar
Details:
https://www.zerodayinitiative.com/blog/2022/10/28/vulnerabilities-in-apache-batik-default-security-controls-ssrf-and-rce-through-remote-class-loading
#cve #exploit
21 579
Legitify
Strengthen the security posture of your GitHub organization!
Detect and remediate misconfigurations, security and compliance issues across all your GitHub assets with ease🔥
https://github.com/Legit-Labs/legitify
Details:
https://www.legitsecurity.com/blog/introducing-legitify
21 579
Ermir
Ermir is an Evil/Rogue RMI Registry, it exploits unsecure deserialization on any Java code calling standard RMI methods on it
(list()/lookup()/bind()/rebind()/unbind()).
https://github.com/hakivvi/ermir21 579
GitHound
A batch-catching, pattern-matching, patch-attacking secret snatcher.
GitHound pinpoints exposed API keys and other sensitive information on GitHub using pattern matching, commit history searching, and a unique result scoring system. Unlike other secret-finding tools, GitHound takes advantage of GitHub's code search feature to search all of GitHub and isn't limited to specific repos, users, or orgs. More information is available in the accompanying blog post.
https://github.com/tillson/git-hound
21 579
Repost from Pentesting Shop
OnePlus smartphones on sale 11.11
OnePlus 10T: 8/128GB
Price: -35% $618.00
OnePlus 10 Pro: 12/256GB
Price: -32% $697.98
OnePlus 9 Pro: 12/256GB
Price: -30% $498.00
OnePlus Ace Pro: 12/256GB
Price: -32% $488.08
OnePlus Nord 2: 12/256GB
Price: -35% $368.00
OnePlus 9: 8/128GB
Price: -30% $358.00
OnePlus 7 Pro: 12/256GB - Kali NetHunter is supported!
Price: -51% $313.60
OnePlus Nord CE 2 Lite: 8/128GB
Price: -35% $278.00
🛒 From OnePlus Official Store with fast free shipping.
#sale
