HackGit

​​DynamicSyscalls This is a library written in .net resolves the syscalls dynamically (Has nothing to do with hooking/unhooking) https://github.com/Shrfnt77/DynamicSyscalls

​​PurpleCloud Terraform code generator to create different Azure security labs. For full documentation visit: https://www.purplecloud.network https://github.com/iknowjason/PurpleCloud

​​LDAP Relay Scan A tool to check Domain Controllers for LDAP server protections regarding the relay of NTLM authentication. https://github.com/zyn3rgy/LdapRelayScan #ad #ldap #scan #tools

​​Subdomain enumeration Based on my last live stream created a deep enumeration of subdomain https://github.com/Virdoexhunter/Subenum_deep_subdomain_enumeration

​​SharpGmailC2 Our Friendly Gmail will act as Server and implant will exfiltrate data via smtp and will read commands from C2 (Gmail) via imap protocol. https://github.com/reveng007/SharpGmailC2 Demo: https://youtu.be/6SoKeeEUKfA

​​wa-tunnel HTTP Tunneling through Whatsapp This is a Baileys based piece of code that lets you tunnel TCP data through two Whatsapp accounts. This can be usable in different situations, for example network carriers that give unlimited whatsapp data or airplanes where you also get unlimited social network data. It's using Baileys since it's a WS based multi-device whatsapp library and therefore could be used in android in the future, using Termux for example. The idea is to use it with a proxy setup on the server like this: [Client (restricted access) -> Whatsapp -> Server -> Proxy -> Internet] Apologizes in advance since Javascript it's not one of my primary coding languages :/ https://github.com/aleixrodriala/wa-tunnel #Donate t.me/hackgit🍻»»»

​​Gaiated An addon to exploit potential open traces of Google ID (GaiaID). https://github.com/Seeraiwer/gaiated #OSINT

​​nse-exchange Nmap NSE scripts to check against exchange vulnerability (CVE-2022-44228). NSE scripts check most popular exposed services on the Internet. It is basic script which checks if virtual patching works. https://github.com/Diverto/nse-exchange #cve #nmap

​​💰 Donate If you like the channel please support us ❣️ https://www.buymeacoffee.com/HackGit BTC:

1987zNaVX53v7tzpKRRde84uXbDYjuNykL

TON:

UQAAZ1BFX5OsybSryoFunzyJN3F7oKWMbZNPlwMTcVK8mEzA

USDT – ERC20❗️:

0x1e7fa9e9c42f71e6d155aca39951f23355178163

You can buy crypto here Every donation gives us the motivation to do better and more content! #donate #support

​​CVE-2022-41352 Zimbra Unauthenticated RCE is an arbitrary file write vulnerability in Zimbra mail servers due to the use of a vulnerable cpio version. https://github.com/Cr4ckC4t/cve-2022-41352-zimbra-rce t.me/hackgit

​​CVE-2022-3949 XSS in Simple Cashiering System Simple Cashiering System is vulnerable to Cross Site Scripting (XSS) - a malicious actor can change the fullname of a compromised user to a XSS Payload and whenever a admin visits the user-tab or the sales tab (and looks into sales made by the malicious actor) the payload is triggered. This can lead to session takeover because the cookie does not have an HttpOnly Flag. https://github.com/maikroservice/CVE-2022-3949

​​Triton A dynamic binary analysis library. It provides internal components that allow you to build your program analysis tools, automate reverse engineering, perform software verification or just emulate code. ▫️ Dynamic symbolic execution ▫️ Dynamic taint analysis ▫️ AST representation of the x86, x86-64, ARM32 and AArch64 ISA semantic ▫️ Expressions synthesis ▫️ SMT simplification passes ▫️ Lifting to LLVM as well as Z3 and back ▫️ SMT solver interface to Z3 and Bitwuzla ▫️ C++ and Python API https://github.com/jonathansalwan/Triton

​​TTexplore library that performs path exploration on binary code using symbolic execution. https://github.com/JonathanSalwan/ttexplore

​​cve-2022-31898 Exploit POC code for CVE-2022-31898, a command injection for GL-iNet routers with firmware below 3.215. https://github.com/gigaryte/cve-2022-31898 #cve #poc

​​Bomber bomber is an application that scans SBOMs for security vulnerabilities. So you've asked a vendor for an Software Bill of Materials (SBOM) for one of their closed source products, and they provided one to you in a JSON file... now what? The first thing you're going to want to do is see if any of the components listed inside the SBOM have security vulnerabilities, and what kind of licenses these components have. This will help you identify what kind of risk you will be taking on by using the product. Finding security vulnerabilities and license information for components identified in an SBOM is exactly what bomber is meant to do. bomber can read any JSON or XML based CycloneDX format, or a JSON SPDX or Syft formatted SBOM, and tell you pretty quickly if there are any vulnerabilities. https://github.com/devops-kung-fu/bomber

​​Fzf A general-purpose command-line fuzzy finder. It's an interactive Unix filter for command-line that can be used with any list; files, command history, processes, hostnames, bookmarks, git commits, etc. Pros: ▫️ Portable, no dependencies ▫️ Blazingly fast ▫️ The most comprehensive feature set ▫️ Flexible layout ▫️ Batteries included https://github.com/junegunn/fzf fzf - command line fuzzy finder: https://www.youtube.com/watch?v=qgG5Jhi_Els

​​CJMCU BadUSB with MicroSD This is one of the last developments related to rubberducky or badusb devices. This device is based on the ATMEGA32U4 microprocessor which is able to emulate many USB modes like HID, used for injecting key presses to the target system. The main processor is based on Arduino Leonardo R3 development board and the improvement is that a microSD card slot is included to allow storing many different payloads. The microSD card has to be FAT32 formatted in order to be recognized. Repository: https://github.com/asciiterminal/CJMCU_ATMEGA32U4_BADUSB Buy online: 🛒 https://bit.ly/3HV8UJM (ali) 🛒 https://amzn.to/3TEuC9i (amazon) #usb #badusb #atmega32u4

​​Awesome IDA, Ghidra, x64DBG & OllyDBG plugins A curated list of IDA x64DBG and OllyDBG plugins. IDA is a powerful disassembler and debugger that allows to analyze binary, it also includes a decompiler. X64DBG is an open-source x64/x32 debugger for Windows. OllyDbg is a 32-bit assembler level analysing debugger for Windows. https://github.com/fr0gger/awesome-ida-x64-olly-plugin t.me/hackgit

​​Web3 Decoder Web3 Decoder is a Burp Suite Extension that helps to analyze what is going on with the operations involving smart contracts of the web3. This is mainly JSON-RPC calls to Ethereum Nodes, and nodes of other compatible networks (like Polygon, Arbitrum, BSC...) https://github.com/nccgroup/web3-decoder t.me/hackgit