HackGit

​​CVE-2023-23410 Windows HTTP.sys EoP Vulnerability. https://github.com/numencyber/Vulnerability_PoC/tree/main/CVE-2023-23410 #cve #poc #infosec

​​KeePwn A python tool to automate KeePass discovery and secret extraction. https://github.com/Orange-Cyberdefense/KeePwn #infosec #pentesting #redteam

​​PatrOwl Open Source, Free and Scalable Security Operations Orchestration Platform. https://github.com/Patrowl/PatrowlDocs #cybersecurity #infosec

​​al-khaser A PoC "malware" application with good intentions that aims to stress your anti-malware system. It performs a bunch of common malware tricks with the goal of seeing if you stay under the radar. https://github.com/LordNoteworthy/al-khaser #malware #infosec #pentesting

​​DeepSecrets A better tool for secret scanning. DeepSecrets expands classic regex-search approaches with semantic analysis, dangerous variable detection, and more efficient usage of entropy analysis. Code understanding supports 500+ languages and formats and is achieved by lexing and parsing - techniques commonly used in SAST tools. https://github.com/avito-tech/deepsecrets #infosec #pentesting #bugbounty

​​PSBits A keylogger/sniffer for the on-screen-keyboard? Sure, ETW is happy to help here with {4F768BE8-9C69-4BBC-87FC-95291D3F9D0C} Enjoy the C source code, and the compiled exe, as usual 👇 https://github.com/gtworek/PSBits/tree/master/ETW #infosec #pentesting #redteam

​​Mini532 The Mini532 NFC RFID Card Copier Reader Writer Duplicator is a compact device that allows you to copy and write IC cards with ease. The device is made with high-end PC material that is tougher than ordinary ABS, and features a durable stainless steel housing. It comes with a TYPE-C interface that supports positive and negative insertion for more convenience, and is compatible with Android phones and computers. The device can read and write UID, CUID, UFUID, and FUID, but cannot copy rolling codes. The package includes an OTG converter, PCR532.APP, and a UID card and buckle. The computer software is compatible with the international PN532 software. As a VIP member, you can use the device and software for free forever. Buy online: 🛒 https://bit.ly/422KjeT #NFC #RFID #Reader

CVE-2023-1585 & CVE-2023-1587 Avast Anti-Virus privileged arbitrary file create on virus quarantine (CVE-2023-1585 and CVE-2023-1587). https://github.com/the-deniss/Vulnerability-Disclosures/tree/main/CVE-2023-1585%20%26%20CVE-2023-1587/ Details: https://the-deniss.github.io/posts/2023/04/26/avast-privileged-arbitrary-file-create-on-quarantine.html #cve #poc #exploit #cybersecurity #infosec

​​BlockOpenHandle Block any Process to open HANDLE to your process , only SYTEM is allowed to open handle to your process, with that you can avoid remote memory scanners. https://github.com/TheD1rkMtr/BlockOpenHandle #cybersecurity #infosec

​​dploot dploot is Python rewrite of SharpDPAPI written un C# by Harmj0y, which is itself a port of DPAPI from Mimikatz by gentilkiwi. It implements all the DPAPI logic of these tools, but this time it is usable with a python interpreter and from a Linux environment. https://github.com/zblurx/dploot #infosec #pentesting #redteam

​​PassMute A multi featured Password Transmutation/Mutator Tool. https://github.com/HITH-Hackerinthehouse/PassMute #infosec #pentesting #redteam

​​GhostTrack Useful tool to track location or mobile number, so this tool can be called osint or also information gathering. https://github.com/HunxByts/GhostTrack #OSINT #cybersecurity #infosec

​​KingOfBugBounty Our main goal is to share tips from some well-known bughunters. Using recon methodology, we are able to find subdomains, apis, and tokens that are already exploitable, so we can report them. We wish to influence Onelinetips and explain the commands, for the better understanding of new hunters.. 👑 https://github.com/KingOfBugbounty/KingOfBugBountyTips #infosec #cybersecurity #bugbounty

​​Awesome GPT + Security A curated list of awesome security tools, experimental case or other interesting things with LLM or GPT. https://github.com/cckuailong/awesome-gpt-security #cybersecurity #infosec #pentesting

​​uncover A go wrapper using APIs of well known search engines to quickly discover exposed hosts on the internet. It is built with automation in mind, so you can query it and utilize the results with your current pipeline tools. https://github.com/projectdiscovery/uncover #OSINT #recon #bugbounty

​​auditpolCIS CIS Benchmark testing of Windows SIEM configuration This is an application for testing the configuration of Windows Audit Policy settings against the CIS Benchmark recommended settings. https://github.com/SevenStones/auditpolCIS #cybersecurity #infosec

​​Clairvoyance Obtain GraphQL API schema even if the introspection is disabled. https://github.com/nikitastupin/clairvoyance #infosec #pentesting #bugbounty

​​PortEx A Java library for static malware analysis of Portable Executable files. Its focus is on PE malformation robustness, and anomaly detection. PortEx is written in Java and Scala, and targeted at Java applications. https://github.com/struppigel/PortEx #malware #cybersecurity #infosec

​​Kubestroyer A Golang exploitation tool that aims to take advantage of Kubernetes clusters misconfigurations. The tool is scanning known Kubernetes ports that can be exposed as well as exploiting them. https://github.com/Rolix44/Kubestroyer #infosec #pentesting #cybersecurity

​​KubeStalk KubeStalk is a tool to discover Kubernetes and related infrastructure based attack surface from a black-box perspective. This tool is a community version of the tool used to probe for unsecured Kubernetes clusters around the internet during Project Resonance - Wave 9. https://github.com/redhuntlabs/kubestalk #cybersecurity #infosec