HackGit

​​ContainerSSH An SSH Server that Launches Containers in Kubernetes and Docker. https://github.com/ContainerSSH/ContainerSSH #remote

​​SpoolTrigger Weaponizing for privileged file writes bugs with PrintNotify Service. https://github.com/sailay1996/SpoolTrigger

​​Juicy-Potato A Privilege Escalation tool, from a Windows Service Accounts to NT AUTHORITY\SYSTEM. https://github.com/k4sth4/Juicy-Potato

​​Mango An user interactive Powershell program to search for possible privilege escalation vectors on windows. https://github.com/SxNade/Mango

​​C_SYSCALLS Single stub direct and indirect syscalling with runtime SSN resolving for windows. Features: ▫️ Single stub ▫️ One single line for all your syscalls ▫️ Direct or indirect sycalls ▫️ x86_64, WOW64 and x86 native support https://github.com/janoglezcampos/c_syscalls

​​Massayo A small proof-of-concept Rust library which removes AV/EDR hooks in a given system DLL https://github.com/thiagopeixoto/massayo

​​EyeBinder A free silent (hidden) open-source native file binder. Features: ▫️ Native or Managed - Builds the final executable as a native (C) or a managed (.NET C#) 32-bit file depending on choice ▫️ Silent - Drops and executes (if enabled) files without any visible output unless the bound program has one ▫️ Multiple files - Supports binding any amount of files ▫️ Compatible - Supports all tested Windows version (Windows 7 to Windows 11) and all file types ▫️ Windows Defender exclusions - Can add exclusions into Windows Defender to ignore any detections from the bound files ▫️ Icon/Assembly - Supports adding an Icon and/or Assembly Data to the built file ▫️ Fake Error - Supports displaying a fake error message when file is originally started https://github.com/TeamDarkAnon/EyeBinder

​​YARD Stick One Bundle YARD Stick One is a sub-1 GHz wireless transceiver controlled directly from your computer. It uses the same radio circuit as the popular IM-Me. The radio functions that are possible by customizing IM-Me firmware are now at your fingertips when you attach YARD Stick One to a computer via USB. YARD Stick One (Yet Another Radio Dongle) comes with RfCat firmware installed, courtesy of atlas. RfCat allows you to control the wireless transceiver from an interactive Python shell or your own program running on your computer. YARD Stick One also has CC Bootloader installed, so you can upgrade RFCat or install your own firmware without any additional programming hardware. For open source design files and additional information, visit the repository. Includes: ▫️ One ANT700 telescopic antenna – a 50 ohm antenna suitable for radio frequencies between 300 MHz and 1100 MHz. ▫️ 3d printed case specific to the YARD Stick One. Features: ▫️ SMA connector for external antennas ▫️ Receive amplifier for improved sensitivity ▫️ Transmit amplifier for higher output power ▫️ Flat RF performance across the entire CC1111 operating frequency range (281-361 MHz, 378-481 MHz, 749-962 MHz) ▫️ Low pass filter for elimination of harmonics when operating in the 800 and 900 MHz bands ▫️ Antenna port power control for compatibility with antenna port accessories designed for HackRF One ▫️ GoodFET-compatible expansion and programming header Buy online: 🛒 https://ali.ski/Ig6SQd #radio #usb

🛑 Warning All links leading to https://satoshidisk.com are 99% likely to be scam❗️ Be warned ❗️

​​CVE-2022-37706 A reliable exploit + write-up to elevate privileges to root. (Tested on Ubuntu 22.04). https://github.com/MaherAzzouzi/CVE-2022-37706-LPE-exploit #cve #exploit

​​CVE-2022-32548-RCE-POC DrayTek unauthenticated remote code execution vulnerability (CVE-2022-32548) in /cgi-bin/wlogin.cgi via username field https://github.com/rftg1000/CVE-2022-32548-RCE-POC #cve #poc

​​Redeye Redeye is a great platform that any #redteam should have - It covers all aspects of red team engagement - Whether it is to organize all sort of data, create a timeline of the engagement and much more! https://github.com/redeye-framework/Redeye

​​CVE-2022-36804-POC A critical vulnerability (CVE-2022-36804) in Atlassian Bitbucket Server and Data Center could be exploited by unauthorized attackers to execute malicious code on vulnerable instances. https://github.com/CEOrbey/CVE-2022-36804-MASS-RCE #cve #poc

​​WES-NG Windows Exploit Suggester - Next Generation. A tool based on the output of Windows' systeminfo utility which provides the list of vulnerabilities the OS is vulnerable to, including any exploits for these vulnerabilities. Every Windows OS between Windows XP and Windows 11, including their Windows Server counterparts, is supported. At the BITSADMIN blog an in-depth article on WES-NG is available: Windows Security Updates for Hackers. https://github.com/bitsadmin/wesng #Donate t.me/hackgit🍻

​​Invoke-DLLClone Invoke-DllClone combines two projects called Koppeling and Invoke-MetaTwin. Invoke-DllClone can copy metadata and the AuthenticodeSignature from a source binary and into a target binary It also uses koppeling to clone the export table from a refference dll onto a malicious DLL post-build using NetClone Finally, it also supports random fake signatures using LazySign logic. https://github.com/jfmaes/Invoke-DLLClone

​​CVE-2022-25260 JetBrains Hub pre-auth semi-blind server-side request forgery (SSRF) https://github.com/yuriisanin/CVE-2022-25260 #cve #poc

​​leaky-paths A collection of special paths linked to major web CVEs, known juicy APIs, misconfigurations.. etc. These could be used for web-content discovery as a way to find quick wins. Update: I have removed all the other sub-list files and kept everything consolidated on "all-files". This would be much better to remove confusion and keep it all-in-one. https://github.com/ayoubfathi/leaky-paths

​​Sandbox Scryer The Sandbox Scryer is an open-source tool for producing threat hunting and intelligence data from public sandbox detonation output The tool leverages the MITRE ATT&CK Framework to organize and prioritize findings, assisting in the assembly of IOCs, understanding attack movement and in threat hunting By allowing researchers to send thousands of samples to a sandbox for building a profile that can be used with the ATT&CK technique, the Sandbox Scryer delivers an unprecedented ability to solve use cases at scale. The tool is intended for cybersecurity professionals who are interested in threat hunting and attack analysis leveraging sandbox output data. The Sandbox Scryer tool currently consumes output from the free and public Hybrid Analysis malware analysis service helping analysts expedite and scale threat hunting. https://github.com/PayloadSecurity/Sandbox_Scryer CrowdStrike Introduces Sandbox Scryer: A Free Threat-Hunting Tool for Generating MITRE ATT&CK and Navigator Data: https://www.crowdstrike.com/blog/sandbox-scryer

​​Physmem2profit Physmem2profit can be used to create a minidump of a target host's LSASS process by analysing physical memory remotely. The intention of this research is to propose an alternative approach to credential theft and create a modular framework that can be extended to support other drivers that can access physical memory. Physmem2profit generates a minidump (.dmp) of LSASS that can be further analyzed with Mimikatz. The tool does not require Cobalt Strike but should work fine over beacon with a SOCKS proxy. https://github.com/WithSecureLabs/physmem2profit t.me/hackgit

​​PwnTools CTF framework and exploit development library. Written in Python, it is designed for rapid prototyping and development, and intended to make exploit writing as simple as possible. https://github.com/Gallopsled/pwntools t.me/hackgit