HackGit

URLHunter A recon tool that allows searching on URLs that are exposed via shortened services. https://github.com/utkusen/urlhunter

​​Terra OSINT Tool on Twitter and Instagram. ▫️ Install it and write your login/password in credentials ▫️ Launch (python3 terra.py <username>) ▫️ Type command "followers emails" ▫️ Wait. Long time. ▫️ Get list of users's followers emails (from bio) https://github.com/xadhrit/terra

​​PDFCrack An Advanced tool to Crack Any Password Protected PDF file. A very user friendly script especially for noob hackers. Features: ▫️ Crack Any PDF password protected file with different Techniques. ▫️ This script will install required tool automatically. ▫️ U can Use Your Own Custom Wordlist in order to crack password. ▫️ Also U can Use Default wordlist as well as own wordlist in Hash Attack. ▫️ Very Fast To Crack Any Password Protected File. ▫️ More Features will be added in Future IA! https://github.com/machine1337/pdfcrack

​​Purpose Password generator based on keywords and commonly used creation patterns. psudohash is a password list generator for orchestrating brute force attacks. It imitates certain password creation patterns commonly used by humans, like substituting a word's letters with symbols or numbers, using char-case variations, adding a common padding before or after the word and more. It is keyword-based and highly customizable. https://github.com/t3l3machus/psudohash

​​Randy This is a pre-authenticated RCE exploit for Inductive Automation Ignition that impacts versions <= 8.1.16. We failed to exploit the bugs at Pwn2Own Miami 2022 because we had a sloppy exploit and no debug environment, but since then we have found the time and energy to improve it! https://github.com/sourceincite/randy #exploit #RCE

​​blindssl Disable SSL certificate verification using eBPF https://github.com/citronneur/blindssl

​​BackBag Lab\VM Small enough to carry on your back (Backpack) 🎒💻. There are also times where I just need an ubuntu server or a win10 instance with a specific set of tools and not a whole environment. This project caters for such cases. https://github.com/Humoud/BackBag-Lab-VM

ElectroMagnetic Mining Array (EMMA) Framework for capturing and attacking traces of electromagnetic radiation emitted by an electronic device, in order to obtain encryption keys or other sensitive data. Detect syscall hooking using eBPF. https://github.com/pathtofile/bpf-hookdetect

​​ReoSploit A Tool that Finds, Enumerates, and #exploits Reolink Cameras. Features: ▫️ Scanning Networks for Reolink Devices. ▫️ Listening to Network Traffic for Reolink credentials and sessions. ▫️ Generating #api Tokens from Credentials. ▫️ Enumerating the device for users, hardware information, firmware information, etc. ▫️ Taking a Photo through the Camera and saving it. ▫️ Streaming Live Video ▫️ DOSing the Device's Video Feed & Web Page ▫️ Toggling Infrared Capabilities ▫️ Toggling Recording Capabilities https://github.com/spicesouls/reosploit

DrvMon Advanced driver monitoring utility. Driver monitor is an advanced driver monitoring utility created first in 2010 by hFireF0x (EP_XOFF) and myself. We kept it private for many years, as it still works well today. Given the last update to the code was in 2017, I see no reason as to why not to make it open source for all. It works on Windows 7 - Windows 10 version 10.0.19044.1766 (last version I tested on). https://github.com/Fyyre/DrvMon

​​Twosint Python tool that automates the process of Twitter #OSINT investigation using twint. Made for: ▫️ Penetration testers/Ethical hackers ▫️ IT students that are looking for something cool to search. ▫️ OSiNT investigators (This tool is a MUST for you! It makes the job much more faster and efficient!) ▫️ Journalists who are looking for more information on a specific celebrity or person https://github.com/falkensmz/tw1tter0s1nt

​​rga ripgrep, but also search in PDFs, E-Books, Office documents, zip, tar.gz, etc. rga is a line-oriented search tool that allows you to look for a regex in a multitude of file types. rga wraps the awesome ripgrep and enables it to search in pdf, docx, sqlite, jpg, movie subtitles (mkv, mp4), etc. https://github.com/phiresky/ripgrep-all

​​BeaconHunter Behavior based monitoring and hunting tool built in C# leveraging ETW tracing. Blue teamers can use this tool to detect and respond to potential #Cobalt Strike beacons. Red teamers can use this tool to research ETW bypasses and discover new processes that behave like beacons. Beacon implants injected in a benign process live in a thread with a Wait:DelayExecution state (probably related to Cobalt Strike's sleep). Find all processes that contain a thread in a Wait:DelayExecution state. Then, leverage ETW tracing to specifically monitor suspicious thread activity: ▫️ HTTP/HTTPS callbacks ▫️ DNS queries ▫️ File system (cd,ls,upload,rm) ▫️ Process termination (kill) ▫️ Shell commands (run,execute) ▫️ Score suspicious behavior. Log, display, and take action against them. https://github.com/3lp4tr0n/BeaconHunter

​​Packet Squirrel The Packet Squirrel is a stealthy pocket-sized man-in-the-middle. This Ethernet multi-tool is designed to give you covert remote access, painless packet captures, and secure VPN connections with the flip of a switch. Simple Scripting Language: Combining the power of bash, loads of familiar Linux tools, and the simplicity of Ducky Script – writing payloads is quick and easy. With commands like NETMODE, setting up transparent network bridges, NAT, VPNs and even MAC address cloning is simple. Plus there’s a growing library of payloads ready to download in addition to the VPN tunneling, packet capturing and DNS spoofing payloads pre-loaded. Multi-Payload Select: Flick the switch to select a payload and effortlessly perform advanced attacks, quietly log data, or secure all connections over a VPN with instant feedback from the multi-color LED. Buy online: 🛒 https://ali.ski/FqOrG #lan #mitm #ethernet

​​HawkScan Security Tool for Reconnaissance and Information Gathering on a website. (#python 3.x). Features: ▫️ Test backup/old file on all the files found (index.php.bak, index.php~ ...) ▫️ Check header information ▫️ Check DNS information ▫️ Check email in the website and in same time if emails leaked (report) ▫️ CMS detection + version and vulns ▫️ Backup system (if the script stopped, it take again in same place) ▫️ WAF detection and Response error to WAF + Testing bypass it ▫️ Check Github ▫️ Option --exclude to exclude page, code error, bytes ▫️ Option rate-limit if app is unstable (--timesleep) ▫️ Check in waybackmachine ▫️ Check if DataBase firebaseio existe and accessible ▫️ Search S3 buckets in source code page ▫️ Testing if it's possible scanning with "localhost" host ▫️ Try differents bypass for 403 code error ▫️ JS parsing and analysis (option --js) ▫️ Check Google Dork ▫️ Check Host IP ▫️ Auto resize relative to window ▫️ Check backup domain name (ex: www.domain.com/domain.zip) ▫️ Check socketio connection ▫️ Notify when scan completed (Only work on Linux) https://github.com/c0dejump/HawkScan

ANTI-AV shellcode, support msf https://github.com/b1gcat/anti-av

​​BFAC Burp Extension for BFAC (Advanced Backup-File Artifacts Testing for Web-Applications) Backup files are too often overlooked by web application auditors. With the objective of democratizing the backup file tests and integrating these tests into the most used tool for web auditors, SEC-IT auditors worked on the integration of the BFAC checks as a BurpSuite plugin. BFAC is an automated tool that checks for backup artifacts that may disclose the web-application's source code. The artifacts can also lead to leakage of sensitive information, such as passwords, directory structure, etc. https://github.com/sec-it/BFAC-Burp-Extension #burp

​​Investigator An online handy-recon tool. A web-based handy-recon tool that uses different Google Dorking techniques and some open-source services to find juicy information about target websites. It helps you quickly check and gather information about the target domain name. https://abhijithb200.github.io/investigator/ #google #dork

​​Trufflehog Find Credentials All Over The Place https://github.com/trufflesecurity/trufflehog