HackGit

​​CVE-2022-45472 The CAE Learning Space Enterprise management software is vulnerable to a DOM Based XSS attack. A DOM Based XSS attack is when a user sends an executed payload to the host and as a result, it modifies the DOM environment in the victim's browser from the original client-side script. This attack was found through manually searching burp requests, running tested parameters through a XSS finder tool called Dalfox, then verifying the DOM of the affected host to view the behavior of the application. https://github.com/nicbrinkley/CVE-2022-45472 #cve

​​wireguard-initramfs Use dropbear over wireguard. Enables wireguard networking during kernel boot, before encrypted partitions are mounted. Combined with dropbear this can enable FULLY ENCRYPTED remote booting without storing key material or exposing ports on the remote network. An Internet connection simply needs to exist that can reach the wireguard server endpoint. Normal dropbear connections and DNS resolution can be used to find wireguard endpoints. This essentially enables the creation of a fully encrypted remote managed node, with the ability to prevent all local access. https://github.com/r-pufky/wireguard-initramfs

​​reconX ReconX It An Automation Script For Bug Bounty Hunter This tool allows you to gather some information that should help you identify what to do next and where to look and save your time ! Features: ▫️ Subdomain enum ▫️ Port scan ▫️ Filter Subdomain and screenshot ▫️ Filter Intrested sub and ports ▫️ Collect ip from shodan ▫️ Find Admin Panels ▫️ Identify Technology ▫️ Parameter Discovery ▫️ Wayback history ▫️ Filter php,jsp,aspx,js file from wayback ▫️ Filter & Scan js file ▫️ Collect Api-Endpoint ▫️ Vulnerability Scan ▫️ Notify system https://github.com/YazeedOliwah/reconX

​​CVE-2022-32060 An arbitrary file upload vulnerability in the Update Branding Settings component of Snipe-IT v6.0.2 allows attackers to execute arbitrary code via a crafted file. We found a vulnerability file upload, when we upload malicious file at Update Branding Settings page. https://github.com/bypazs/CVE-2022-32060 Details: https://grimthereaperteam.medium.com/snipe-it-version-v6-0-2-file-upload-cross-site-scripting-b15becc1a5ea #cve

​​stegoWiper A powerful and flexible active attack for disrupting stegomalware Over the last 10 years, many threat groups have employed stegomalware or other steganography-based techniques to attack organizations from all sectors and in all regions of the world. Some examples are: APT15/Vixen Panda, APT23/Tropic Trooper, APT29/Cozy Bear, APT32/OceanLotus, APT34/OilRig, APT37/ScarCruft, APT38/Lazarus Group, Duqu Group, Turla, Vawtrack, Powload, Lokibot, Ursnif, IceID, etc. https://github.com/mindcrypt/stegowiper

​​Fuzzing Forum This project aims at hosting tutorials, examples, discussions, research proposals, and other resources related to fuzzing. https://github.com/google/fuzzing

​​sniffnet Application to comfortably monitor your network traffic Sniffnet is a simple yet insightful application to let you have a glance into your network traffic in a straightforward and appealing way Multithreaded, cross-platform, reliable. https://github.com/GyulyVGC/sniffnet

​​Zeek An Open Source Network Security Monitoring Tool Zeek (formerly Bro) is the world’s leading platform for network security monitoring. Flexible, open source, and powered by defenders. https://github.com/zeek/zeek Website: https://zeek.org/

​​Bug Bounty Platforms Open-Sourced Collection of Bug Bounty Platforms A ongoing community-powered collection of all known bug bounty platforms, vulnerability disclosure platforms, and crowdsourced security platforms currently active on the Internet. https://github.com/disclose/bug-bounty-platforms

​​Face Recognition Recognize and manipulate faces from Python or from the command line with the world's simplest face recognition library. https://github.com/ageitgey/face_recognition #OSINT

​​Kiwi TCMS Kiwi TCMS is the leading open source test management system for both manual and automated testing. It features bug tracker integration, search pages, powerful access control, test automation framework plugins, visual reports and rich API layer. Our mission is to transform the testing process by making it more organized, transparent & accountable for everyone on your team; to improve engineering productivity and participation in testing. https://github.com/kiwitcms/kiwi

Change-Lockscreen Change-Lockscreen is a tool to trigger network authentications as SYSTEM by changing the Windows lock screen image from the command line to perform privilege escalation attacks such as the one described in the post linked. https://github.com/nccgroup/Change-Lockscreen

​​REcollapse REcollapse is a helper tool for black-box regex fuzzing to bypass validations and discover normalizations in web applications. It can also be helpful to bypass WAFs and weak vulnerability mitigations. For more information, take a look at the REcollapse blog post. The goal of this tool is to generate payloads for testing. Actual fuzzing shall be done with other tools like Burp (intruder), ffuf, or similar. https://github.com/0xacb/recollapse

​​dnssecuritytxt A standard allowing organizations to nominate security contact points and policies via DNS TXT records. https://github.com/disclose/dnssecuritytxt

​​Red-Team-Assessment Important documents for you to start a Red Team management ▫️ Tools ▫️ Law Suit ▫️ Methodologies ▫️ Tips and Tricks https://github.com/CyberSecurityUP/Red-Team-Management

​​TJ-OSINT-Notebook This OSINT Notebook provides an overview of the tools, techniques, and resources that I use for a variety of situations for performing reconaissance and #OSINT operations. This Notebook has helped me in many situations to learn more about OSINT and how to analyze the data that is out there on the internet. Included in the notebook are three templates that you can copy, fill in, or repurpose depending on the information you need to document for the operations you are working on. These case templates helped me keep a track of things I found online depending on the situation that I was assigned to assess. https://github.com/tjnull/TJ-OSINT-Notebook #OSINT

​​osm-finder One of the most prominent tools that assists in geolocating images using openstreetmap data is Overpass Turbo. This requires learning and using the Overpass Query Language and restricts your geolocation abilities to only what's permitted by the query language. This tool attempts to make it easier for researchers to find locations with a simple click-and-drag interface. No need to learn a new query language. It also adds capabilities not present in existing tools, like the ability to search by the angle between roads, power lines, and railways. This tool currently supports all highway, railway, and a couple power line (namely, 'line' and 'minor_line') types. https://github.com/Xetnus/osm-finder The UI is now accessible from anywhere on Netlify: https://osm-finder.netlify.app/

​​RedTeaming_CheatSheet Pentesting / RedTeaming cheatsheet with all the commands and techniques I learned during my learning journey. Will keep it up to date. If you have any recommendations for courses or links or have any questions feel free to dm me on discord. 0xjs#9027 https://github.com/0xJs/RedTeaming_CheatSheet

​​End-to-End Encryption for Mastodon https://github.com/soatok/mastodon-e2ee-specification

451 Corporate Risk Miner 451 Corporate Risk Miner allows a user to navigate over different corporate ownership networks extracted from UK Companies House (UKCH) to identify and visualise those exhibiting risk signatures associated with financial crime. Example risk signatures include: ▫️ Cyclic ownership: measure of network interconnectedness (e.g. Company A owns Company B which owns Company C which owns Company A, or case when the same people direct multiple companies.) ▫️ Links to tax havens: Corporate networks which involve companies/people associated with tax haven or secrecy jurisdictions ▫️ Presence of proxy directors: Proxy directors are entities that have links to more than 50 companies. ▫️ Links to politically-exposed persons (PEPs) ▫️ Links to russian politicians https://github.com/sahanmar/451 #OSINT