HackGit

​​RootKits List Download This is the list of all rootkits found so far on github and other sites. https://github.com/d30sa1/RootKits-List-Download #infosec #pentesting #redteam

​​APTRS Automated Penetration Testing Reporting System is an automated reporting tool in Python and Django. The tool allows Penetration testers to create a report directly without using the Traditional Docx file. It also provides an approach to keeping track of the projects and vulnerabilities. https://github.com/JapneetRajput/RedTeaming #cybersecurity #infosec #pentesting

​​CVE-2022-23808 phpMyAdmin Exploit https://github.com/dipakpanchal456/CVE-2022-23808 #cve #infosec #pentesting

​​CVE-2023-28231 DHCP Server Remote Code Execution impact: 2008 R2 SP1 до Server 2019 https://github.com/glavstroy/CVE-2023-28231 #cybersecurity #infosec #cve

Awesome Red Teaming This list is for anyone wishing to learn about Red Teaming but do not have a starting point. https://github.com/AnLoMinus/RedTeam/tree/main/Awesome#-initial-access #infosec #pentesting #redteam

​​Parallels Desktop VM Escape This repository contains an exploit for a Parallels Desktop vulnerability which has been assigned CVE-2023-27326. This vulnerability allows local attackers to escalate privileges on affected installations of Parallels Desktop. https://github.com/Malwareman007/CVE-2023-27326 #infosec #cve #pentesting

​​SSHLog A free, source-available Linux daemon written in C++ and Python that passively monitors #OpenSSH servers via eBPF to:👇 https://github.com/sshlog/agent

​​Viper A powerful graphical tool designed for intranet penetration testing. It utilizes commonly-used tactics and technologies, including anti-virus software bypass, intranet tunneling, file management, and command line functions. With over 80 integrated modules, Viper covers all aspects of resource development, execution, persistence, privilege escalation, defense evasion, credential access, discovery, lateral movement, and collection. Its goal is to improve red team engineers' attack efficiency, simplify operation, and reduce technical barriers. Viper also supports running the native msfconsole in the browser and multi-person collaboration, making it an ideal tool for infosec professionals, pentesters, and red team members. https://github.com/FunnyWolf/Viper/blob/master/README_EN.md #infosec #pentesting #redteam

​​SecureBootPolicyTools Take back control of Windows Code Integrity, no exploits or patching required! Requires that you control your own Platform Key (PK). https://github.com/Wack0/SecureBootPolicyTools #cybersecurity #infosec

​​GroovyWaiter Enumeration tool for developer heavy networks with many Jenkins instances. https://github.com/AnubisSec/GroovyWaiter #cybersecurity #infosec

​​DRAKVUF Sandbox Automated hypervisor-level malware analysis system. https://github.com/CERT-Polska/drakvuf-sandbox #malware #cybersecurity #infosec

​​Red Team Toolkit Open-Source Django Offensive Web-App which is keeping the useful offensive tools used in the red-teaming together. https://github.com/signorrayan/RedTeam_toolkit #infosec #pentesting #redteam

​​OFFSEC-PowerShell Favorite Offensive Security Scripts. https://github.com/IAMinZoho/OFFSEC-PowerShell #cybersecurity #infosec

​​Tangled WinExec This repository is for investigation of Windows process execution techniques. Most of PoCs are given a name corresponding to the technique. https://github.com/daem0nc0re/TangledWinExec #infosec #pentesting #redteam

​​Tiktok SSL Pinning Bypass Bypass Tiktok SSL pinning on Android devices. https://github.com/Eltion/Tiktok-SSL-Pinning-Bypass #infosec

​​Hpc Offensive Security https://github.com/aqeebhussain122/hpc-offensive-security #infosec

​​Red Team Research Collection of PoC and offensive techniques used by the BlackArrow Red Team. https://github.com/blackarrowsec/redteam-research #infosec #pentesting #redteam

​​THM Offensive Security https://github.com/revanmalang/THM-Offensive-Security #infosec

​​RedTeam-Resources https://github.com/J0hnbX/RedTeam-Resources #osint #redteam

​​yataf Simple tool to analyze a files/urls content - it was primarily created to analyze the content of a javascript file against a given set of regular expressions. The main goal is to give you an idea if a files content might be of interest. This means that yataf tries to find secrets in the content as well as potential endpoints. https://github.com/Damian89/yataf #cybersecurity #infosec