HackGit

​​CVE-2023-2825 On May 23, 2023 GitLab released version 16.0.1 which fixed a critical vulnerability, CVE-2023-2825, affecting the Community Edition (CE) and Enterprise Edition (EE) version 16.0.0. The vulnerability allows unauthenticated users to read arbitrary files through a path traversal bug. It was discovered by pwnie on HackerOne through the bug bounty program. https://github.com/Occamsec/CVE-2023-2825 #cve #cybersecurity #infosec

​​CVE-2020-0683 Original Poc sent to MSRC. Assigned to CVE-2020-0683 - Windows Installer Elevation of Privilege. https://github.com/padovah4ck/CVE-2020-0683 #cve #cybersecurity #infosec

​​codeexplain.nvim A nvim plugin Powered by GPT4ALL for Real-time Code Explanation and Vulnerability Detection (no internet necessary). https://github.com/mthbernardes/codeexplain.nvim #cybersecurity #infosec

​​LOOBins Living Off the Orchard: macOS Binaries (LOOBins) is designed to provide detailed information on various built-in "living off the land" macOS binaries and how they can be used by threat actors for malicious purposes. https://github.com/infosecB/LOOBins Web: https://www.loobins.io/ #infosec #cybersecurity #blueteam

​​Top25 Parameter For basic researches, top 25 vulnerability parameters that can be used in automation tools or manual #recon. https://github.com/lutfumertceylan/top25-parameter #infosec #pentesting #bugbounty

​​Logger++ A multithreaded logging extension for #BurpSuite. In addition to logging requests and responses from all Burp Suite tools, the extension allows advanced filters to be defined to highlight interesting entries or filter logs to only those which match the filter. https://github.com/nccgroup/LoggerPlusPlus #infosec #pentesting #bugbounty

​​s3reverse The format of various s3 buckets is convert in one format. for #bugbounty and security testing. https://github.com/hahwul/s3reverse #cybersecurity #infosec

​​Jira-Scan Provide a list of websites to test with out the http or https and this will test each one for the SSRF vun. https://github.com/random-robbie/Jira-Scan #infosec #pentesting #bugbounty

​​ROPfuscator ROPfuscator is a fine-grained code obfuscation framework for LLVM-supported languages using ROP (return-oriented programming). ROPfuscator obfuscates a program at the assembly code level by transforming regular instructions into ROP chains, thwarting our natural conception of normal control flow. https://github.com/ropfuscator/ropfuscator #cybersecurity #infosec

​​Geekworm PiKVM-A3 Kit for Raspberry Pi 4 Open-source KVM Over IP The PiKVM-A3 kit is designed and based on Raspberry Pi 4B, also support Raspberry Pi 3B/3B+, but since Pi3 without OTG interface, when PiKVM-A3 is used with Pi3, OTG analog keyboard and mouse cannot be used. PiKVM is a very powerful and Open Source Software which allows for a remote connection via your Raspberry Pi to turn on/off or restart your computer, configure the UEFI/BIOS, and even reinstall the OS using the Virtual CD-ROM or Flash Drive. You can use your remote keyboard and mouse or PiKVM can simulate a keyboard, mouse, and a monitor, which are then presented in a web browser as if you were working on a remote system directly. It's true hardware-level access with no dependency on any remote ports, protocols or services! (KVM - Keyboard Video Mouse.) Buy online: 🛒 https://amzn.to/3MVtVIt 🛒 https://bit.ly/3MTxmPI #raspberry #pikvm #remote #board #minipc

​​GitFive #OSINT tool to investigate GitHub profiles. https://github.com/mxrch/GitFive #cybersecurity #infosec

monitor_subdomains Monitor your target continuously for new subdomains using Discord! https://github.com/faiyazahmad07/monitor_subdomains #infosec #pentesting #bugbounty

​​Hunt3r Hunt3r aims to simplify domain recognition by trying to combine three things: • Speed of scans • Accuracy of results • Ease of use of the data https://github.com/EasyRecon/Hunt3r #bugbounty #infosec #pentesting

​​Win32 app isolation repo Win32 app isolation is a new security feature on Windows that helps contain the damage and safeguard user privacy choices in the event of an application compromise. Win32 app isolation is built on the foundation of AppContainers, which offer a security boundary, and components that virtualize resources and provide brokered access to other resources. This repo contains the documentation and tools to help you isolate your applications. https://github.com/microsoft/win32-app-isolation #cybersecurity #infosec

​​Depix A tool for recovering passwords from pixelized screenshots. https://github.com/beurtschipper/Depix #cybersecurity #infosec

CVE-2023-2859 Stored HTML injection in folderName affecting Admin in TeamPass <3.0.9 https://github.com/mnqazi/CVE-2023-2859 #cve #cybersecurity #infosec

​​Chrome Cookie Stealer (and injector) Steal/Inject Chrome cookies over the DevTools (--remote-debugging-port) protocol. https://github.com/magisterquis/chromecookiestealer #infosec #pentesting #redteam

​​userefuzz User-Agent, X-Forwarded-For and Referer SQLI Fuzzer made with python. Works on linux and unix based systems. https://github.com/root-tanishq/userefuzz #infosec #pentesting #bugbounty

​​Ransomware Notes This is a collection of various #ransomware notes from the past to the present. https://github.com/threatlabz/ransomware_notes #cybersecurity #infosec

​​Offensive-Rust https://github.com/winsecurity/Offensive-Rust #infosec #pentesting #redteam