HackGit

​​Smersh A pentest oriented collaborative tool used to track the progress of your company's missions and generate rapport. https://github.com/CMEPW/Smersh

​​SQLiDetector Simple python script that helps you to detect SQL injection "Error based" by sending multiple requests with 9 payloads and checking for 152 regex patterns for different databases. https://github.com/eslam3kl/SQLiDetector

GPD Pocket Modular mini laptop for work and gaming. The GPD Pocket 3 is a small but versatile mini-laptop computer with an 8 inch display that supports pen and touch input, a swivel hinge that lets you fold the screen down over the keyboard for use in tablet mode, a backlit keyboard that’s just big enough for touch typing, and support for up to an Intel Core i7-1195G7 processor. There’s also a highly unusual feature: a modular design that lets you swap out one of the USB ports for other I/O options. Read more: https://telegra.ph/GPD-Pocket-3-mini-laptop-review-8-inch-screen-modular-ports-convertible-design-08-02 Buy online: 🛒 https://ali.ski/x_Nol #gpd #laptop #minipc

​​dc-sonar Analyzing AD domains for security risks related to user accounts https://github.com/ST1LLY/dc-sonar #ad #redteam

​​MalwareApiLibrary Сollection of apis used for malware development : StringManagementLib : manage strings, string hashes, and others WinApiManagementLib : replacement of GetModuleHandle and GetProcAddress functions https://github.com/MalwareApiLib/MalwareApiLibrary

​​arpmess Deny internet access and sniff your local network by performing arp spoofing attacks. https://github.com/avan-pra/arpmess

​​SSTImap Automatic #SSTI detection tool SSTImap is a penetration testing software that can check websites for Code Injection and Server-Side Template Injection vulnerabilities and exploit them, giving access to the operating system itself. This tool was developed to be used as an interactive penetration testing tool for SSTI detection and exploitation, which allows more advanced exploitation. https://github.com/vladko312/SSTImap

​​al-khaser A PoC "malware" application with good intentions that aims to stress your anti-malware system. It performs a bunch of common malware tricks with the goal of seeing if you stay under the radar. https://github.com/LordNoteworthy/al-khaser

​​Investigator An online handy-recon tool. A web-based handy-recon tool that uses different Google Dorking techniques and some open-source services to find juicy information about target websites. It helps you quickly check and gather information about the target domain name. https://github.com/abhijithb200/investigator Online tools: https://abhijithb200.github.io/investigator/

​​PR-DNSd Passive-Recursive DNS daemon. https://github.com/korc/PR-DNSd

​​PwnDoc PwnDoc is a pentest reporting application making it simple and easy to write your findings and generate a customizable Docx report. The main goal is to have more time to Pwn and less time to Doc by mutualizing data like vulnerabilities between users. https://github.com/pwndoc/pwndoc

​​Purpose There are many guides and cheatsheets out there that mention the commands needed to implement pivoting, althought, they tend to be confusing and many of them lack a few important notes about what is really happening during the process. This is an attempt to make a clear guide focused on the use of pivoting in penetration testings / CTF challenges. https://github.com/t3l3machus/pentest-pivoting #pentesting

​​Cloudsplaining AWS IAM Security Assessment tool that identifies violations of least privilege and generates a risk-prioritized HTML report. https://github.com/salesforce/cloudsplaining

​​ATLAS ATLAS is an analysis description of malware or kill-chain. Malware is a combination of techniques crafted for a purpose. With an ATLAS rule, these techniques and capabilities are like LEGO pieces. In this way, it tries to help malware researchers to focus single piece at a time and nothing more. ATLAS interpretation of the rule does the rest. It also removes the language boundaries. Different pieces can be written in other script languages. https://github.com/MALWARE-ATLAS/ATLAS #malware

​​speedbump A TCP proxy written in Go which allows for simulating variable network latency. https://github.com/kffl/speedbump

​​Security Flash Drive This USB 3.0 Flash Drive offers AES 256-bit encryption and password physical protection as well as supports resetting, wiping and auto lock function to effectively protect your files. High Security: With built-in chip adopting AES 256-bit advanced algorithm, it effectively prevents brute-force attack. Safer Design: Press button to input password to unlock U disk, without leaving trace on computer. Reset & Wipe Function: When inputting passwords wrongly up to 10 times, the U disk will reset automatically and wipe all data off it. High-speed transmission: USB 3.0 interface offers transmitting rate up to 5Gbps (theoretically), shortening time of transmitting files. Auto Lock: It supports locking automatically when not plugging into PC in 30s after unlock or when pulling out from PC. Buy online: 🛒 https://ali.ski/wSGYwG #usb #drive #flash

​​ApacheTomcatScanner A python script to scan for Apache Tomcat server vulnerabilities. Features: ▫️ Multithreaded workers to search for Apache tomcat servers. ▫️ Multiple target source possible: ▫️ Retrieving list of computers from a Windows domain through an LDAP query to use them as a list of targets. ▫️ Reading targets line by line from a file. ▫️ Reading individual targets (IP/DNS/CIDR) from -tt/--target option. ▫️ Custom list of ports to test. ▫️ Tests for /manager/html access and default credentials. ▫️ List the CVEs of each version with the --list-cves option https://github.com/p0dalirius/ApacheTomcatScanner

​​Anubis Anubis is a #subdomain enumeration and information gathering tool. Anubis collates data from a variety of sources, including HackerTarget, DNSDumpster, x509 certs, VirusTotal, Google, Pkey, Sublist3r, Shodan, Spyse, and NetCraft. Anubis also has a sister project, AnubisDB, which serves as a centralized repository of subdomains. https://github.com/jonluca/Anubis

​​Quasar Free, Open-Source Remote Administration Tool for Windows Quasar is a fast and light-weight remote administration tool coded in C#. The usage ranges from user support through day-to-day administrative work to employee monitoring. Providing high stability and an easy-to-use user interface, Quasar is the perfect remote administration solution for you. Features: ▫️ TCP network stream (IPv4 & IPv6 support) ▫️ Fast network serialization (Protocol Buffers) ▫️ Compressed (QuickLZ) & Encrypted (TLS) communication ▫️ UPnP Support ▫️ Task Manager ▫️ File Manager ▫️ Startup Manager ▫️ Remote Desktop ▫️ Remote Shell ▫️ Remote Execution ▫️ System Information ▫️ Registry Editor ▫️ System Power Commands (Restart, Shutdown, Standby) ▫️ Keylogger (Unicode Support) ▫️ Reverse Proxy (SOCKS5) ▫️ Password Recovery (Common Browsers and FTP Clients) ... and many more! https://github.com/quasar/Quasar #rat #remote

​​CVE-2022-2185 A collection of proof-of-concept exploit scripts written by the STAR Labs team for various CVEs that they discovered or found by others. https://github.com/star-sg/CVE #cve