HackGit

​​Nim DLL Sideloading This repo allows you to easily generate Nim DLLs you can use sideloading/proxy loading. If you're unfamiliar with what DLL sideloading is, take a gander at this blog post. https://github.com/byt3bl33d3r/NimDllSideload

​​AmsiHooker Hookers are cooler than patches. simple eicar test sample but you know what to do with it lmao. first hooks amsi, pushes eicar through, then disables hook and does it again. https://github.com/jfmaes/AmsiHooker

​​Frigate NVR With Realtime Object Detection for IP Cameras A complete and local NVR designed for Home Assistant with AI object detection. Uses OpenCV and Tensorflow to perform realtime object detection locally for IP cameras. https://github.com/blakeblackshear/frigate

​​AWESOME-Azure-Policy A curated list of AWESOME blogs, videos, tutorials, code, tools, scripts... anything which can help you learn Azure Policy and quickly get started with designing, planning, and implementing governance controls to your resources. https://github.com/globalbao/awesome-azure-policy

​​Pywirt Python Windows Incident Response Toolkit With this application, it is aimed to accelerate the incident response processes by collecting information in windows operating systems via winrm. https://github.com/anil-yelken/pywirt

​​Wiretap Wiretap is a transparent, VPN-like proxy server that tunnels traffic via WireGuard and requires no special privileges to run. In this diagram, the client has generated and installed a WireGuard configuration file that will route traffic destined for 10.0.0.0/24 through a WireGuard interface. Wiretap is then deployed to the server with a configuration that connects to the client as a WireGuard peer. The client can then interact with resources local to the server as if on the same network. https://github.com/sandialabs/wiretap

​​Bluffy Bluffy is a utility which was used in experiments to bypass Anti-Virus products (statically) by formatting shellcode into realistic looking data formats. https://github.com/preemptdev/bluffy t.me/hackgit

​​proxy-scraper-checker HTTP, SOCKS4, SOCKS5 proxies scraper and checker. ▫️ Asynchronous. ▫️ Uses regex to search for proxies (ip:port format) on a web page, which allows you to pull out proxies even from json without making any changes to the code. ▫️ Supports determining the geolocation of the proxy exit node. ▫️ Can determine if a proxy is anonymous. https://github.com/monosans/proxy-scraper-checker

​​miniupnpd_poc Miniupnpd <=v2.1 read out-of-bounds vulnerability (PoC) https://github.com/b1ack0wl/miniupnpd_poc

​​LocalAdminSharp .NET executable to use when dealing with privilege escalation on Windows to gain local administrator access. This simple tool creates a new user adds it to the local administrator group; if the user exists it will just be added to the admin group. You can also edit the code to add a domain user to the local administrator group editing the variable domain. https://github.com/notdodo/LocalAdminSharp

​​s3-buckets-finder PHP tool to brute force Amazon S3 bucket and test permissions. https://github.com/gwen001/s3-buckets-finder

​​Notus Scanner Notus Scanner detects vulnerable products in a system environment. The scanning method is to evaluate internal system information. It does this very fast and even detects currently inactive products because it does not need to interact with each of the products. https://github.com/greenbone/notus-scanner

impacket This is a fork specifically maintained for The Exegol Project but it can be used outside of Exegol as well. This is a fork of the official Impacket project. It aims at being a quicker on the merge of pull requests and other community contributions. See this as a bleeding-edge version maintained by lover of Impacket. https://github.com/ThePorgs/impacket

​​Ethical Hacking Labs This is a collection of tutorials and labs made for ethical hacking students, cybersecurity students, network and sys-admins. These tutorials accompany the resources of CEH content and different resources across the internet. https://github.com/Samsar4/Ethical-Hacking-Labs

Stowaway Stowaway is a Multi-hop proxy tool for security researchers and pentesters. Users can easily proxy their network traffic to intranet nodes (multi-layer),break the restrction and manipulate all the nodes that under your control XD Features: ▫️ More user-friendly interaction, support command auto-completion/search history ▫️ Obvious node topology ▫️ Clear information display of nodes ▫️ Active/Passive connection between nodes ▫️ Support reconnection between nodes ▫️ Nodes can be connected through socks5 proxy ▫️ Nodes can be connected through ssh tunnel ▫️ TCP/HTTP can be selected for inter-node traffic ▫️ Multi-hop socks5 traffic proxy forwarding, support UDP/TCP, IPV4/IPV6 ▫️ Nodes can access arbitrary host via ssh ▫️ Remote shell ▫️ Upload/download files ▫️ Port local/remote mapping ▫️ Port Reuse ▫️ Open/Close all the services arbitrarily ▫️ Authenicate each other between nodes ▫️ Traffic encryption with AES-256-GCM ▫️ Compared with v1.0, the file size is reduced by 25% ▫️ Multiple platforms support(Linux/Mac/Windows/MIPS/ARM) https://github.com/lz520520/Stowaway/blob/master/README_EN.md

​​AzureGraph AzureGraph is an Azure AD information gathering tool over Microsoft Graph. Thanks to Microsoft Graph technology, it is possible to obtain all kinds of information from Azure AD, such as users, devices, applications, domains and much more. This application, allows you to query this data through the API in an easy and simple way through a PowerShell console. Additionally, you can download all the information from the cloud and use it completely offline. https://github.com/JoelGMSec/AzureGraph

​​Awesome On-Chain Forensic HandBook In this article I will tell you exactly how I investigate crypto hacks and security incidents, and describe methodology: Link https://github.com/OffcierCia/On-Chain-Investigations-Tools-List

​​misp-dashboard A dashboard showing live data and statistics from the ZMQ feeds of one or more MISP instances. The dashboard can be used as a real-time situational awareness tool to gather threat intelligence information. The misp-dashboard includes a gamification tool to show the contributions of each organisation and how they are ranked over time. The dashboard can be used for SOCs (Security Operation Centers), security teams or during cyber exercises to keep track of what is being processed on your various MISP instances. https://github.com/MISP/misp-dashboard

​​meg meg is a tool for fetching lots of URLs but still being 'nice' to servers. It can be used to fetch many paths for many hosts; fetching one path for all hosts before moving on to the next path and repeating. You get lots of results quickly, but non of the individual hosts get flooded with traffic. https://github.com/tomnomnom/meg

​​Domain Hunter Domain name selection is an important aspect of preparation for penetration tests and especially Red Team engagements. Commonly, domains that were used previously for benign purposes and were properly categorized can be purchased for only a few dollars. Such domains can allow a team to bypass reputation based web filters and network egress restrictions for phishing and C2 related tasks. This Python based tool was written to quickly query the Expireddomains.net search engine for expired/available domains with a previous history of use. It then optionally queries for domain reputation against services like Symantec Site Review (BlueCoat), IBM X-Force, and Cisco Talos. The primary tool output is a timestamped HTML table style report. Features: ▫️ Retrieve specified number of recently expired and deleted domains (.com, .net, .org) from ExpiredDomains.net ▫️ Note: You will need credentials from expireddomains.net for full functionality ▫️ Retrieve available domains based on keyword search from ExpiredDomains.net ▫️ Perform reputation checks against the Symantec WebPulse Site Review (BlueCoat), IBM x-Force, and Cisco Talos ▫️ Sort results by domain age (if known) and filter for reputation ▫️ Text-based table and HTML report output with links to reputation sources and Archive.org entry https://github.com/threatexpress/domainhunter