HackGit

​​WARF Web Application Reconnaissance Framework WARF is highly customizable and allows you to perform a full scan or individual scan on the target. It accumulates the results and shows them in a powerful DataTable through which you can narrow down your searches. WARF also give you the option to add and save target individually and perform different scans on them. With a Dashboard, you will quickly get the metrics of your activity. WARF confined all your targets together and provide you with a clean and efficient way to search them down with their names. Features: ▫️ Subdomain Enumeration ▫️ Directory BruteForce ▫️ Gather Wayback URLs ▫️ Gather JavaScript URLs ▫️ Extract links from JS files ▫️ Extract API/Secret Keys from JS files ▫️ Supports Background Scan https://github.com/iamnihal/warf

​​LazyCSRF A more useful CSRF PoC generator that runs on Burp Suite. Features: ▫️ Automatically switch to PoC using XMLHttpRequest → In case the parameter is JSON → In case the request is a PUT/PATCH/DELETE ▫️ Support displaying multibyte characters (like Japanese) ▫️ Generating CSRF PoC with Burp Suite Community Edition (of course, it also works in Professional Edition) https://github.com/tkmru/lazyCSRF

​​Ldapper A GoLang tool to enumerate and abuse LDAP. Made simple. Ldapper was created with for use in offensive security engagements for targeted user enumeration, group enumeration, and more. Ldapper uses familiar "net" commands such as "net user" and "net group" to perform all its queries and its output follows the same conventions. Ldapper's user interface operates as a pseudo-interactive shell, where the user can input commands until exited. All traffic goes over the LDAP(S) protocol with a singular bind to help you better blend into the network. Ldapper is proxy aware and supports NTLM authentication with a user's hash. Additionally, this tool can perform modification actions within LDAP. More functionality is planned for later releases, but for now additional supported command functions are: ▫️ Add Domain Computers ▫️ Add/Remove Arbitrary SPNs ▫️ Kerberoast https://github.com/Synzack/ldapper #Donate t.me/hackgit🍻»»»

​​Pax PAdding oracle eXploiter is a tool for exploiting padding oracles in order to: ▫️ Obtain plaintext for a given piece of CBC encrypted data. ▫️ Obtain encrypted bytes for a given piece of plaintext, using the unknown encryption algorithm used by the oracle. This can be used to disclose encrypted session information, and often to bypass authentication, elevate privileges and to execute code remotely by encrypting custom plaintext and writing it back to the server. https://github.com/liamg/pax

​​SCodeScanner SCodeScanner stands for Source Code scanner where the user can scans the source code for finding the Critical Vulnerabilities. The main objective for this scanner is to find the vulnerabilities inside the source code before code gets published in Prod. https://github.com/agrawalsmart7/scodescanner

​​SpyCast A crossplatform mDNS enumeration tool that can work either in active mode by recursively querying services, or in passive mode by only listening to multicast packets. https://github.com/evilsocket/spycast

​​Awesome Command & Control A collection of awesome Command & Control (C2) frameworks, tools and resources for post-exploitation and red teaming assessments. https://github.com/tcostam/awesome-command-control

​​Lab S4U2Self Abuse This lab aims to provide a safe environment to test the S4U2Self abuse exploit https://github.com/OtterHacker/LabS4U2Self

​​Seth Seth is a tool written in Python and Bash to MitM RDP connections by attempting to downgrade the connection in order to extract clear text credentials. It was developed to raise awareness and educate about the importance of properly configured RDP connections in the context of pentests, workshops or talks. The author is Adrian Vollmer (SySS GmbH). https://github.com/SySS-Research/Seth

​​SleepKiller One of common evasion techniques that used by malwares is delays its basically delaying execution of malicious behavior in order to evade sandboxes and analysts, it can be very annoying to wait for the malware to do the full execution also analysing it in sandboxes can give you false result because sandboxes are programmed to simply wait and watch for a period of time this is why i made this program. https://github.com/ZeroMemoryEx/SleepKiller

​​CVE-2022-34729 NorthSea decided to delay the disclosure of this POC for some reason. https://github.com/Pwnrin/CVE-2022-34729

​​ScreenShot a C2 feature , ScreenShot capture , the file output is a png on the current directory named "screen.png" https://github.com/D1rkMtr/ScreenShot

​​dll4shell C++ shellcode launcher A collection of DLL wrappers around various shellcode injection and obfuscation techniques. https://github.com/cepxeo/dll4shell t.me/hackgit

​​LDAPShell A wrapper of ldap_shell.py module which in ntlmrelayx. https://github.com/XiaoliChan/LDAPShell

​​mordor-rs Hell's Gate / Halo's Gate / Tartarus' Gate and FreshyCalls / SysWhispers2 in Rust https://github.com/memN0ps/mordor-rs

​​DLLirant A tool to automatize the DLL Hijacking and DLL Proxying researches on a specified binary. https://github.com/redteamsocietegenerale/DLLirant #Donate t.me/hackgit🍻»»»

​​charlotte c++ fully undetected shellcode launcher. https://github.com/9emin1/charlotte

​​OWASP ZAP Heads Up Display The HUD is an interface that provides the functionality of ZAP directly in the browser. https://github.com/zaproxy/zap-hud

multi-command mimikatz functionality in a CS beacon https://gist.github.com/tothi/2809d548f7407de781892c4f840fdee1