HackGit

​​NetWatch A real-time network monitoring tool that tracks established connections and sends email alerts if the threshold is exceeded, ensuring secure and efficient network performance. ▫️ Encrypted email password for added security ▫️ Threshold for number of connections can be set by the administrator ▫️ Sends an email alert if the number of established connections exceeds the set threshold ▫️ Monitors network activity continuously and provides real-time information on established connections ▫️ User-friendly and easy to use https://github.com/viehgroup/NetWatch

​​F5-BIG-IP-Scanner Scanner scans for servers on shodan and checks to see if they are vulnerable. https://github.com/gotr00t0day/F5-BIG-IP-SCANNER

​​Email Vulnerablity Checker v1.0.0 Verify whether the domain is vulnerable to spoofing by Email-vulnerablity-checker ▫️ This tool will automatically tells you if the domain is email spoofable or not ▫️ you can do single and multiple domain input as well (for multiple domain checker you need to have text file with domains in it) https://github.com/BLACK-SCORP10/Email-Vulnerablity-Checker

​​SoulExtraction A windows driver library for extracting cert information in windows drivers. https://github.com/gmh5225/Driver-SoulExtraction

​​D1rkSleep Improved version of EKKO that Encrypts only Image Sections. Sleep obfuscation technique that uses CreateTimerQueueTimer Win32 API. https://github.com/TheD1rkMtr/D1rkSleep #redteam

​​CallStackMasker A PoC implementation for dynamically masking call stacks with timers. This repository demonstrates a PoC technique for dynamically spoofing call stacks using timers. Prior to our implant sleeping, we can queue up timers to overwrite its call stack with a fake one and then restore the original before resuming execution. Hence, in the same way we can mask memory belonging to our implant during sleep, we can also mask the call stack of our main thread. https://github.com/Cobalt-Strike/CallStackMasker Details: https://www.cobaltstrike.com/blog/behind-the-mask-spoofing-call-stacks-dynamically-with-timers/

​​pyOneNote pyOneNote is a lightweight python library to read OneNote files. The main goal of this parser is to allow cybersecurity analyst to extract useful information from OneNote files. https://github.com/DissectMalware/pyOneNote

​​Spark Spark is a free, safe, open-source, web-based, cross-platform and full-featured RAT (Remote Administration Tool) that allow you to control all your devices via browser anywhere. https://github.com/XZB-1248/Spark #redteam

​​BeagleBone Black The BeagleBone Black is a low-cost, community-supported ARM-based development platform aimed at developers and hobbyists. The BeagleBone Black runs a 1GHz Cortex-A8 CPU and includes hardware-based floating point and 3D acceleration; while much lower-powered than a desktop or laptop system, its affordability makes it an excellent option for a tiny Linux system. The BeagleBone Black provides a microSD card slot for mass storage and if that device is bootable, will use it in preference to the board’s “burned-in” Angstrom or Debian operating system. By default, the Kali Linux BeagleBone Black image contains the kali-linux-default metapackage similar to most other platforms. If you wish to install extra tools please refer to our metapackages page. Buy online: 🛒 https://amzn.to/3JXPIy6 🛒 https://alii.pub/6lz457 #kali #board #ARM

​​Lepus A tool for enumerating subdomains, checking for subdomain takeovers and perform port scans - and boy, is it fast! https://github.com/gfek/Lepus #pentesting #bugbounty

​​kdmp-parser A Windows kernel dump C++ parser library with Python 3 bindings. https://github.com/0vercl0k/kdmp-parser

​​OneForAll A powerful subdomain integration tool https://github.com/shmilylty/OneForAll/blob/master/docs/en-us/README.md #pentesting #bugbounty

​​Grepmarx Application Security Platform Grepmarx is a web application providing a single platform to quickly understand, analyze and identify vulnerabilities in possibly large and unknown code bases. https://github.com/Orange-Cyberdefense/grepmarx

​​DCToolbox A PowerShell toolbox for Microsoft 365 security fans. This PowerShell module contains a collection of tools for Microsoft 365 security tasks, Microsoft Graph functions, Azure AD management, Conditional Access, zero trust strategies, attack and defense scenarios, etc. https://github.com/DanielChronlund/DCToolbox Details: https://danielchronlund.com/2023/02/09/microsoft-365-data-exfiltration-attack-and-defend/

​​DDoS-Protection-Lite Anti-DDoS-Lite (Anti-Crawler app) is a small PHP app to protect your site against DDoS attack. https://github.com/CleanTalk/anti-ddos-lite

​​Mr Steal Yo Crypto CTF Solidity CTF challenges for mrstealyocrypto.xyz (foundry) A set of challenges to learn offensive security of smart contracts. Featuring interesting challenges loosely (or directly) inspired by real world exploits. https://github.com/0xToshii/mr-steal-yo-crypto-ctf-foundry

​​KEV Checker A basic Python program to check Cybersecurity & Infrastructure Security Agency (CISA) Known Exploited Vulnerabilities (KEV) Catalog https://github.com/santosomar/kev_checker

​​HWSyscalls New method to execute indirect syscalls using HWBP, HalosGate and a synthetic trampoline on kernel32 with HWBP. https://github.com/Dec0ne/HWSyscalls

​​CSAF Validator A Python-based program used to validate a Common Security Advisory Framework (CSAF) JSON file against the CSAF 2.0 schema. https://github.com/santosomar/csaf_validator