HackGit

​​Ubertooth One The Ubertooth One is an open source 2.4 GHz wireless development platform suitable for Bluetooth experimentation. Commercial Bluetooth monitoring equipment can easily be priced at over $10,000, so the Ubertooth was designed to be an affordable alternative platform for monitoring and development of new BT, BLE, similar and wireless technologies. The Ubertooth One is open source hardware designed in KiCad, and all the hardware specs, design files, and additional information can be found at the repo. The device is designed primarily as an advanced Bluetooth receiver, offering capabilities beyond that of traditional adapters, which allow for it to be used as a BT signal sniffing and monitoring platform. Although the device hardware will accommodate signal broadcasting, the firmware currently only supports receiving and minimal advertising channel transmission features. The Ubertooth One is built around the ARM Cortex-M3 microcontroller and is able to capture and demodulate signals in the 2.4GHz ISM band with a narrow bandwidth of only 1MHz. This includes, but is not limited to: Bluetooth Basic Rate packets, BLE packets, and 802.11 FHSS. Some proprietary 2.4 devices may also be possible. Scan bluetooth low energy devices using mirage and ubertooth: https://www.youtube.com/watch?v=x4iLTbCxsjw Buy online: 🛒 https://amzn.to/3URLBFo 🛒 https://ali.ski/aEpms #bluetooth #usb

​​DNSTake A fast tool to check missing hosted DNS zones that can lead to subdomain takeover. https://github.com/pwnesia/dnstake #Donate t.me/hackgit🍻»»»

​​PHP-info-cookie-stealer Payload generator to exfiltrate user cookies through the PHP info page bypassing the HttpOnly flag during XSS exploitation. https://github.com/HackCommander/PHP-info-cookie-stealer

​​DynamicDotNet A collection of various and sundry code snippets that leverage .NET dynamic tradecraft To showcase offensive and defensive tooling and POCs that leverage .NET dynamic loading, staging, bootstrapping, types, objects, functions, etc. https://github.com/bohops/DynamicDotNet

​​Smart Contract Auditing Heuristics This repository contains some heuristics that can be used when auditing smart contracts to get ideas for vulnerabilities/common pitfalls. The goal of this repository is not to list concrete vulnerabilities (there are already a lot of great resources for that, e.g. prior audit reports or the SWC Registry), but rather general heuristics for pitfalls that I encounter often during audits and that can be applied to many projects. https://github.com/OpenCoreCH/smart-contract-auditing-heuristics

Handle-Ripper Handle hijacking is a technique used in Windows operating systems to gain access to resources and resources of a system without permission. It is a type of privilege escalation attack in which a malicious user takes control of an object handle, which is an identifier that is used to reference a system object, such as a file, a directory, a process, or an event. This allows the malicious user to gain access to resources that should be inaccessible to them. Handle hijacking is a serious threat to system security as it allows a malicious user to access resources and data that should otherwise be protected. It can also be used to inject code into a vulnerable system, allowing the attacker to gain access to information and resources. Handle hijacking techniques are becoming increasingly prevalent as hackers develop more sophisticated methods of exploiting vulnerabilities in Windows systems. As such, it is important that system administrators understand the risks associated with handle hijacking and take proactive measures to protect their systems. https://github.com/ZeroMemoryEx/Handle-Ripper #Donate t.me/hackgit🍻»»»

​​DAB+ Scanner Simple scan of the DAB+ radio band with an RTL-SDR key. We use the tool dab-scanner-rtlsdr which exports the results of its scan. We parse this json to make a table. https://github.com/aerogus/dab-scan

​​xrdp an open source RDP server https://github.com/neutrinolabs/xrdp

​​Technitium DNS Server Self host a DNS server for privacy & security Block ads & malware at DNS level for your entire network! https://github.com/TechnitiumSoftware/DnsServer Site: https://technitium.com/dns/

​​Shadow A jailbreak detection bypass for modern iOS jailbreaks. Please note that Shadow is not designed as an app-specific bypass. Issues mainly in consideration are non-detection related app crashes, regressions from previous versions, and compatibility issues. https://github.com/jjolano/shadow

​​CVE-2022-36537 ZK Framework - Exposure of Sensitive Information to an Unauthorized Actor https://github.com/agnihackers/CVE-2022-36537-EXPLOIT #cve

​​ssh_bruteforcing SSH Brute Forcing Script (Credential Stuffing) https://github.com/davidbombal/ssh_bruteforcing

​​K🔑Logger v3.0.0 Remote persistent 🔑Logger for Windows and Linux Features: ▫️ Logs keys pressed on keyboard ▫️ upload reports in anonfile. ▫️ Works with Linux and Windows. ▫️ Does not require root or admin privlages. https://github.com/De3vil/KLogger

​​CVE-2022-45025 Command injection via PDF import in Markdown Preview Enhanced (VSCode, Atom) https://github.com/yuriisanin/CVE-2022-45025 #cve

​​Fenrir Simple Bash IOC Scanner https://github.com/Neo23x0/Fenrir

​​Lexar® JumpDrive® Fingerprint F35 USB 3.0 Flash Drive Fingerprint authentication with the Lexar 32GB JumpDrive Fingerprint F35 USB 3.0 flash drive! It gives you an extra layer of security for accessing your important documents, and further protects your data against attempts at unauthorized access. You can save up to 10 fingerprint IDs, ensuring only a select few have access to your files. To set up, just plug the Lexar JumpDrive Fingerprint F35 into your PC or laptop and use the included application to set up passwords, fingerprints and manage your allowed users. Each unique fingerprint is saved for access to the secure partition of the drive. To access, place your finger on the drive. Once the light flashes, you are ready to go. This drive also includes 256-bit AES encryption for an additional layer of protection. Buy online: 🛒 https://amzn.to/3ULVggY #flash #drive #usb

​​Codon high-performance, zero-overhead, extensible Python compiler using LLVM https://github.com/exaloop/codon

​​SLib Sanbox Evasion Library in C# Slib is a C# library that contains various checks to try to identify if a computer is a sandbox or not. https://github.com/Aetsu/SLib

​​IATelligence IATelligence is a Python script that extracts the Import Address Table (IAT) from a PE file and uses OpenAI's GPT-3 model to provide details about each Windows API imported by the file. The script also searches for related MITRE ATT&CK techniques and explains how the API could potentially be used by attackers. It also displays the hashes of the file and estimates the cost of the GPT-3 requests. IATelligence is a proof of concept for using GPT-3 for malware analysis and quickly assessing the behavior of a malware based on its IAT. https://github.com/fr0gger/IATelligence