HackGit

​​Aigo Aigo 32GB USB3.0 USB flash drive L8302 write protection, anti-virus intrusion, anti-error deletion, high-speed read and write. Buy online: 🛒 https://bit.ly/3OO056F #usb #flash

​​ClickJacker Full Automation Clickjacking Vulnerability Scanner https://github.com/bughuntar/ClickJacker

​​CVE-2022-0441 WordPress Plugin MasterStudy LMS 2.7.5 - Unauthenticated Admin Account Creation https://github.com/biulove0x/CVE-2022-0441 Research: https://www.exploit-db.com/exploits/50752 https://www.youtube.com/watch?v=SI_O6CHXMZk #cve

​​CVE-2021-25003 WordPress Plugin WPCargo < 6.9.0 - Unauthenticated RCE https://github.com/biulove0x/CVE-2021-25003 Research: https://wpscan.com/vulnerability/5c21ad35-b2fb-4a51-858f-8ffff685de4a #exploit

Database-Leak Kumpulan Data Yang Berhasil Dibobol Hacker Dan Disebar KePublik Halaman Ini Hanya Sekedar Sharing2 saja https://github.com/Zusyaku/Database-Leak

​​AIS-catcher A multi-platform AIS receiver. AIS receiver for RTL SDR dongles, Airspy R2, Airspy Mini, Airspy HF+, HackRF, SDRplay and SoapySDR https://github.com/jvde-github/AIS-catcher

​​Krane Kubernetes RBAC static Analysis & visualization tool. Krane is a simple #Kubernetes RBAC static analysis tool. It identifies potential security risks in K8s RBAC design and makes suggestions on how to mitigate them. Krane dashboard presents the current RBAC security posture and lets you navigate through its definition. Features: ▫️ RBAC Risk rules - Krane evaluates a set of built-in RBAC risk rules. These can be modified or extended with a set of custom rules. ▫️ Portability - Krane can run in one of the following modes: ✔️Locally as a CLI or docker container. ✔️ ️In CI/CD pipelines as a step action detecting potential RBAC flaws before it gets applied to the cluster. ✔️As a standalone service continuously analyzing the state of RBAC within a Kubernetes cluster. ▫️ Reporting - Krane produces an easy to understand RBAC risk report in a machine-readable format. ▫️ Dashboard - Krane comes with a simple Dashboard UI helping you understand in-cluster RBAC design. The dashboard presents a high-level overview of RBAC security posture and highlights detected risks. It also allows for further RBAC controls inspection via faceted tree and graph network views. ▫️ Alerting - It will alert on detected medium and high severity risks via its Slack integration. ▫️ RBAC in the Graph - Krane indexes the entirety of Kubernetes RBAC in a local Graph database which makes any further ad-hoc interrogating of RBAC data easy, with arbitrary CypherQL queries. https://github.com/appvia/krane

​​Cutter Cutter is a free and open-source reverse engineering platform powered by rizin. It aims at being an advanced and customizable reverse engineering platform while keeping the user experience in mind. Cutter is created by reverse engineers for reverse engineers. https://github.com/rizinorg/cutter

​​GC2 A Command And Control Application That Allows An Attacker To Execute Commands On The Target Machine Using Google Sheet And Exfiltrate Data Using Google Drive. This program has been developed in order to provide a command and control that does not require any particular set up (like: a custom domain, VPS, CDN, ...) during Red Teaming activities. Features: ▫️ Command execution using Google Sheet as a console ▫️ Download files on the target using Google Drive ▫️ Data exfiltration using Google Drive https://github.com/looCiprian/GC2-sheet

​​Cerbos Painless access control for cloud-native applications Cerbos helps you super-charge your authorization implementation by writing context-aware access control policies for your application resources. Author access rules using an intuitive YAML configuration language, use your Git-ops infrastructure to test and deploy them and, make simple API requests to the Cerbos PDP to evaluate the policies and make dynamic access decisions. https://github.com/cerbos/cerbos

​​Mageni The Vulnerability Scanning Platform. Mageni is the Automated All-in-One platform for vulnerability scanning, assessment, and management, compliance testing, system hardening, penetration testing, security audits, IT inventory, and more. Audience: ▫️ PenTester ▫️ Cybersecurity Professionals ▫️ SOC Analyst ▫️ Chief Information Security Officer ▫️ Security Researchers ▫️ Auditors ▫️ Red Team ▫️ Malware Analyst ▫️ Business owners ▫️ System Administrators ▫️ Developers ▫️ And anyone concerned about cybersecurity and vulnerabilities https://github.com/mageni/mageni

dart-shellcode A PoC executing #shellcode in Dart. This project shows that Dart can be used in Red teaming and Implant development (e.g. a C2 framework can be written 100% in dart) Security products are not good at analyzing Dart, and they won't be anytime soon, so this will probably stay FUD for a long time. https://github.com/kensh1ro/dart-shellcode

0day #0day Exploit. https://github.com/flux10n/0day

​​LicheePi Zero The LicheePi Zero is a lovely, tiny, single-board computer, running on the ubiquitous and low-cost Allwinner V3S platform. Extremely cheap single-board computers have exploded in popularity in recent years, even beyond the (in)famous Raspberry Pi. Other, smaller manufacturers have popped up, designing simple SBCs around inexpensive ARM SoCs. For hobbyists and hackers that want a more hands-on and challenging experience than you’d find with a Raspberry Pi, these cheap SoCs are a great hobby project and weekend adventure. Documentation: https://zee2.github.io/2020/01/18/licheepi-zero/ Video: https://youtu.be/DZtOqQQ893M Buy online: 🛒 https://bit.ly/3u7QzDL #pi #pc #mini

​​SharpWSUS Today, we’re releasing a new tool called SharpWSUS. This is a continuation of existing WSUS attack tooling such as WSUSPendu and Thunder_Woosus. It brings their complete functionality to .NET, in a way that can be reliably and flexibly used through command and control (C2) channels, including through PoshC2. https://github.com/nettitude/SharpWSUS Research: https://labs.nettitude.com/blog/introducing-sharpwsus/

​​Codesys_V2_Vulnerability Commonly existing PLC Supply Chain Threats: Multiple critical vulnerabilities in Codesys Runtime (CVE-2022-31805, CVE-2022]-31806, CVE-2022-32137) https://github.com/ic3sw0rd/Codesys_V2_Vulnerability #cve

​​AADInternals AADInternals toolkit - PowerShell module containing tools for administering and hacking Azure AD / Office 365 https://github.com/Gerenios/AADInternals Research: http://o365blog.com/aadinternals #ad #powershell