HackGit

​​VX-API Collection of various malicious functionality to aid in malware development. https://github.com/vxunderground/VX-API #infosec #malware

​​CloudGPT Vulnerability scanner for AWS customer managed policies using #ChatGPT https://github.com/ustayready/cloudgpt #cybersecurity #infosec

​​D/Invoke Dynamically invoke arbitrary unmanaged code from managed code without P/Invoke. https://github.com/rasta-mouse/DInvoke Details: https://offensivedefence.co.uk/posts/dinvoke-105 #infosec #pentesting #redteam

​​Raspberry Pi Zero 2 W A powerful and compact single-board computer with a quad-core 64-bit Arm Cortex-A53 CPU clocked at 1GHz. Its upgraded Raspberry Pi RP3A0 system-in-package integrates a Broadcom BCM2710A1 die with 512MB of LPDDR2 SDRAM, providing a significant boost in performance. It also features 2.4GHz 802.11 b/g/n wireless LAN, Bluetooth 4.2, and Bluetooth Low Energy support, as well as a MicroSD card slot, CSI-2 camera connector, USB On-The-Go port, mini HDMI port, and an unpopulated footprint for a HAT-compatible 40-pin GPIO header. The Zero 2 requires a 5V 2.5A power supply and runs on the Raspberry Pi Operating System. With Kali Linux installed, it can be used for various projects, including hacking and penetration testing. Buy online: 🛒 https://amzn.to/3UKSKsL 🛒 https://alii.pub/6ob0tf #board #raspberry #kali

​​Tiny-XSS-Payloads A collection of tiny XSS Payloads that can be used in different contexts. https://github.com/terjanq/Tiny-XSS-Payloads Web: https://tinyxss.terjanq.me #infosec #pentesting #bugbounty

​​WAFW00F Allows one to identify and fingerprint Web Application Firewall (WAF) products protecting a website. https://github.com/EnableSecurity/wafw00f #infosec #pentesting #redteam

​​Warpgate A smart SSH, HTTPS and MySQL bastion host for Linux that doesn't need special client apps. • Set it up in your DMZ, add user accounts and easily assign them to specific hosts and URLs within the network. • Warpgate will record every session for you to view (live) and replay later through a built-in admin web UI. • Not a jump host - forwards your connections straight to the target instead. • Native 2FA and SSO support (TOTP & OpenID Connect) • Single binary with no dependencies. • Written in 100% safe Rust. https://github.com/warp-tech/warpgate #cybersecurity #infosec

​​ESP32Marauder A suite of WiFi/Bluetooth offensive and defensive tools for the #ESP32 https://github.com/justcallmekoko/ESP32Marauder #cybersecurity #infosec

​​WhatWaf WhatWaf is an advanced firewall detection tool who's goal is to give you the idea of "There's a WAF?". WhatWaf works by detecting a firewall on a web application, and attempting to detect a bypass (or two) for said firewall, on the specified target. https://github.com/Ekultek/WhatWaf #cybersecurity #infosec

​​Social Media #OSINT https://github.com/cqcore/Social-Media-OSINT #infosecurity

​​OSTIF Security Work and Manual Reviews facilitated by Open Source Technology Improvement Fund, aka OSTIF https://github.com/ostif-org/OSTIF #cybersecurity #infosec

​​Internet of Vulnerable Things The results of my small term paper on the topic of the Internet of Vulnerable Things and the exploit for CVE-2022-48194. https://github.com/otsmr/internet-of-vulnerable-things #cybersecurity #infosec

​​vBulletin Exploits CVE-2023-25135: Pre-authentication RCE. https://github.com/ambionics/vbulletin-exploits Details: https://www.ambionics.io/blog/vbulletin-unserializable-but-unreachable #cve #infosec #exploit

​​MobSF Mobile Security Framework is an automated, all-in-one mobile application (Android/iOS/Windows) pen-testing, malware analysis and security assessment framework capable of performing static and dynamic analysis. https://github.com/MobSF/Mobile-Security-Framework-MobSF #cybersecurity #infosec #pentesting

​​Discover Custom bash scripts used to automate various penetration testing tasks including recon, scanning, enumeration, and malicious payload creation using Metasploit. For use with Kali Linux. https://github.com/leebaird/discover #infosec #pentesting #redteam

​​Exegol Community-driven hacking environment, powerful and yet simple enough to be used by anyone in day to day engagements. Exegol is the best solution to deploy powerful hacking environments securely, easily, professionally. Exegol fits pentesters, CTF players, bug bounty hunters, researchers, beginners and advanced users, defenders, from stylish macOS users and corporate Windows pros to UNIX-like power users. https://github.com/ThePorgs/Exegol #infosec #pentesting #redteam

GVision A reverse image search app that use Google Cloud Vision API to detect landmarks and web entities from images, helping you gather valuable information quickly and easily. https://github.com/GONZOsint/gvision #OSINT #infosec #infosecurity

​​cve-2020-0688 https://github.com/Ridter/cve-2020-0688 #infosec #pentesting

​​DynamicFinder A DLL sideloading utility. DynamicFinder will search every running process for DLL sideloading opportunities. https://github.com/SecurityAndStuff/DynamicFinder #infosec #pentesting #redteam

RoboDroid A cutting-edge software tool designed to simplify the process of managing (and very soon also deploying) Android machines for usage in Cyber Range environments. With RoboDroid, users can easily set up and customize pre-defined behaviors for their Android machines, allowing them to create complex cyber attack scenarios and test their defenses against a wide range of threats. https://github.com/cybersecsi/robodroid #cybersecurity #infosec #android