HackGit

​​CVE-2021-39144 VMware Cloud Foundation RCE vulnerability via XStream ▫️ VMware Cloud Foundation contains an unauthenticated remote code execution vulnerability via XStream open source library. ▫️ VMware has evaluated the severity of this issue to be in the Critical severity range with a maximum CVSSv3 base score of 9.8 https://github.com/b3wT/CVE-2021-39144-XSTREAM-RCE #cve #exploit

​​stager_libpeconv A basic meterpreter protocol stager using the libpeconv library by hasherezade for reflective loading https://github.com/tothi/stager_libpeconv

​​Fugu15 Fugu15 is a semi-untethered permasigned jailbreak for iOS 15. It contains a code-signing bypass, kernel exploit, kernel PAC bypass and PPL bypass. Additionally, it can be installed via Safari, i.e. a computer is not required, except for a Web Server that hosts Fugu15. Please note that Fugu15 does not support tweaks (no tweak injection library). https://github.com/pinauten/Fugu15

​​Blocksec CTFs A curated list of blockchain security Wargames, Challenges, and Capture the Flag (CTF) competitions and solution writeups. https://github.com/blockthreat/blocksec-ctfs

​​APTRS APTRS (Automated Penetration Testing Reporting System) is an automated reporting tool in Python and Django. The tool allows Penetration testers to create a report directly without using the Traditional Docx file. It also provides an approach to keeping track of the projects and vulnerabilities. https://github.com/Anof-cyber/APTRS

​​The Encrypted Reaper This is a program that takes a binary file and encrypts the shellcode inside using the encryption method that you desire and spits out the files to better help assist in your loader development. The program will give you the files needed to hide your encrypted shellcode inside of the resource section of the PE. It also gives you the encryption keys for decrypting at runtime when needed as well as the iv for the AES option. https://github.com/ItsCyberAli/EncryptedReaper

​​dProtect dProtect is an extension of Proguard with enhanced code obfuscation features. While Proguard is known for obfuscating symbols (package names, class names, ...) and optimizing Java/Kotlin code, dProtect brings code obfuscation for Java and Kotlin on the top of Proguard. https://github.com/open-obfuscator/dProtect Details: https://obfuscator.re/dprotect/

​​DeleteShadowCopies Deleting Shadow Copies In Pure C++ After Looking at some of the leaked ransomware code, i noticed that (at least for the samples i've seen), that the ransomware is using wmic or vssadmin via command line to delete shadow copies, so out of curiosity i had to look for something else, and thus this repo (so im not helping ransomware authers) ... https://github.com/ORCx41/DeleteShadowCopies

​​Kscan Simple Asset Mapping Tool kscan is an asset mapping tool that can perform port scanning, TCP fingerprinting, and banner capture for specified assets, and obtain as much port information as possible without sending more packets. It can perform automatic brute force cracking on scan results and is the first open-source RDP brute force cracking tool on the go platform. https://github.com/lcvvvv/kscan Details: https://securityonline.info/kscan-simple-asset-mapping-tool/

​​O-MVLL O-MVLL (in reference to O-LLVM) is a LLVM-based obfuscator driven by a Python API and by new LLVM pass manager. O-MVLL can be used with the Android NDK and an iOS toolchain but it only supports the AArch64 architecture. For the details, you can checkout the documentation: obfuscator.re/omvll https://github.com/open-obfuscator/o-mvll

​​iMonitor iMonitor (Endpoint Behavior Analysis System) is a endpoint behavior monitoring and analysis software based on iMonitorSDK. Provides monitoring of system behaviors such as processes, files, registry, and networks. Support extensions and scripts, you can easily customize and add more functions. It can be used for virus analysis, software reverse engineering, intrusion detection, EDR, etc. https://github.com/wecooperate/iMonitor

​​The greatest Aliexpress 11.11 sale of the year! AliExpress, a leading global retailer, is offering amazing deals for the 2022 edition of its popular 11 11 sales event coming up from November 1 and November 12, 2022. As usual there will be a Pre-Sale before the main event. AliExpress 11 11 sale 2022 promises great discounts (up to 70% off) on multiple product categories from mobile phones and Electronics to Fashion and Beauty products. See Deals Add your Favourites to Cart 📌 Most of the deals on AliExpress 11 11 sale are limited in stock, which means your ability to snap them up will depend on how fast you can complete your order. You can add any item you like into the cart thereby cutting out one step in buying process. That way on the D-Day, you just have to order the product. So, this is a good time to preview some of the available deals and start adding them the cart. Checkout Featured Deals. #sale

​​GeCko WebShell Backdoor ▫️ Bypass 403 ▫️ Bypass 404 ▫️ Bypass LiteSpeed ▫️ Bypass 500 https://github.com/MadExploits/Gecko

​​S3cret Scanner Hunting For Secrets Uploaded To Public S3 Buckets https://github.com/Eilonh/s3crets_scanner t.me/hackgit

​​ext remover Bookmarklet exploit that can force-disable extensions installed on Chrome https://github.com/3kh0/ext-remover

​​ETWMonitor Windows notifier tool that detects RDP, SMB end RPC connections by monitoring ETW event logs https://github.com/Processus-Thief/ETWMonitor #cybersecurity

​​Betrayal Gratuitous ARP Injector It is a modification of ARP spoofing. The script will shout at the entire channel segment that your computer is the default gateway by sending Gratuitous ARP messages. Gratuitous ARP is a special ARP frame that sends out an announcement that a new binding of MAC address and IP address has occurred. This can be used by an attacker to conduct an MTIM attack, run a script against the router's IP address. The scanner waits for the following arguments as input: ▫️ network interface (--interface) ▫️ your MAC Address (--mac) ▫️ IP address of gateway (--gateway) https://github.com/in9uz/Betrayal

​​Offensive-Snippets https://github.com/0xAbdullah/Offensive-Snippets t.me/hackgit

​​Kyubi A tool to discover Nginx alias traversal misconfiguration. https://github.com/shibli2700/Kyubi Details: https://www.acunetix.com/vulnerabilities/web/path-traversal-via-misconfigured-nginx-alias/