HackGit

​​Awesome Infosec A curated list of awesome #infosec courses and training resources. https://github.com/onlurking/awesome-infosec

​​Android Pentesting & CTF Some besics info about #android #pentesting https://github.com/Dev-Hacks/Android-Pentesting

​​Awesome Red Teaming List of Awesome #RedTeam / Red Teaming Resources This list is for anyone wishing to learn about Red Teaming but do not have a starting point. https://github.com/0xMrNiko/Awesome-Red-Teaming

​​YubiKey The Yubico Security Key is a heavy-duty, tamper-resistant USB and NFC security key designed to protect online accounts against unauthorized access. It supports FIDO2, FIDO U2F, and other protocols, works with a wide range of online services, and is water and shock-resistant. With touch-based authentication, it provides an easy and secure way to protect your online accounts from phishing and account takeovers. Buy online: 🛒 https://amzn.to/3L0xdJL 🛒 https://ali.ski/qAF720 #security #key #usb

​​slowloris Slowloris is basically an HTTP Denial of Service attack that affects threaded servers. It works like this: ▫️ We start making lots of HTTP requests. ▫️ We send headers periodically (every ~15 seconds) to keep the connections open. ▫️ We never close the connection unless the server does so. If the server closes a connection, we create a new one keep doing the same thing. https://github.com/gkbrk/slowloris

​​deepce Docker Enumeration, Escalation of Privileges and Container Escapes (DEEPCE) https://github.com/stealthcopter/deepce #infosec #pentesting

​​Awesome Kubernetes (K8s) Threat Detection A curated list of resources about detecting threats and defending Kubernetes systems. https://github.com/jatrost/awesome-kubernetes-threat-detection #cybersecurity

​​Eval Villain This is a web extension for Firefox that will hook dangerous functions, like eval, and warn you of their use. simplify the reverse engineering or debugging of JavaScript. https://github.com/swoops/eval_villain #pentesting #bugbounty

​​PowerLadon Ladon hacking Scanner for PowerShell, vulnerability/exploit/detection/MS17010/SmbGhost, Brute-Force SMB/IPC/WMI/NBT/SSH/FTP/MSSQL/MYSQL/ORACLE/VNC https://github.com/k8gege/PowerLadon #redteam

​​DarkPhoenix Tool to perform differential fault analysis attack (DFA) on whiteboxes with external encodings. https://github.com/SideChannelMarvels/DarkPhoenix DarkPhoenixAES attack: https://github.com/SideChannelMarvels/Deadpool/tree/master/wbs_aes_nsc2013/DFA #cybersecurity #infosec

​​CVE-2020-2551 How detect CVE-2020-2551 PoC exploit python Weblogic RCE with IIOP https://github.com/hktalent/CVE-2020-2551 #cybersecurity #infosec

​​DarkPhoenix Tool to perform differential fault analysis attack (DFA) on whiteboxes with external encodings. https://github.com/SideChannelMarvels/DarkPhoenix DarkPhoenixAES attack: https://github.com/SideChannelMarvels/Deadpool/tree/master/wbs_aes_nsc2013/DFA #cybersecurity #infosec

​​Awesome apisec A collection of awesome API Security tools and resources. The focus goes to open-source tools and resources that benefit all the community. https://github.com/arainho/awesome-api-security #cybersecurity

​​Sol Fun There's a new token on the block and they use a novel method for minting authorization. It sure would be a shame if someone got infinite mint permission. Your exploit needs to be in the testPoC function in The PoC. You may not use cheatcodes. https://github.com/jtriley-eth/sol-fun

​​CleverJAM Smart jammer based on SDR with frequency hopping https://github.com/jhonnybonny/CleverJAM

​​MLHospital MLHospital is a repo to evaluate inference attacks and the corresponding defenses against machine learning models. Currently we support membership inference attacks and attribute inference attacks. https://github.com/TrustAIResearch/MLHospital

​​Afuzz Afuzz is an automated web path fuzzing tool for the #BugBounty projects. ▫️ Afuzz automatically detects the development language used by the website, and generates extensions according to the language. ▫️ Uses blacklist to filter invalid pages ▫️ Uses whitelist to find content that bug bounty hunters are interested in in the page ▫️ filters random content in the page ▫️ judges 404 error pages in multiple ways ▫️ perform statistical analysis on the results after scanning to obtain the final result. ▫️ support HTTP2 https://github.com/rapiddns/afuzz

​​Lenovo ThinkPad X1 Carbon Gen 9 The ThinkPad X1 Carbon Gen 9 laptop, powered by the Intel® Evo™ platform, boasts exceptional performance, long battery life, and stunning visuals with up to 11th Gen Intel® Core™ i7 vPro® processors. The laptop features an improved Intelligent Thermal Solution to keep it cool under pressure, an updated suite of built-in ThinkShield security solutions for seamless security, and a refined 16:10 display with narrow bezels and powerful Intel® Iris™ Xe graphics for vibrant visuals. The Dolby Atmos® Speaker System and Dolby Voice® improve remote collaboration, and the laptop offers a true smartphone-like experience with speedy WiFi 6 and optional 4G/5G WWAN. Additionally, the ThinkPad X1 Carbon Gen 9 is military-grade tough, having been tested against 12 military-grade requirements and over 200 quality checks. Buy online: 🛒 https://amzn.to/3L2RJcZ #thinkpad #laptop

​​Awesome Penetration Testing A collection of awesome penetration testing and offensive cybersecurity resources. https://github.com/enaqx/awesome-pentest #pentesting

​​XSSHunter The fastest way to set up XSS Hunter to test and find blind cross-site scripting vulnerabilities. https://github.com/trufflesecurity/xsshunter XSSHunter repository is not in a deploy-able state. This fork fixes that. https://github.com/rs-loves-bugs/xsshunter #pentesting #bugbounty #redteam