HackGit

​​apt-get update hook Gain persistence through apt-get update Every time user tries sudo apt-get update command we gain root access if we set a listener first an alternative to /metasploit-framework/blob/master/modules/exploits/linux/local/apt_package_manager_persistence.rb https://github.com/0bfxgh0st/apt-get_update_hook

​​PywerView Remotely interacts with ldap server. Also included with mini interactive console with auto completion. Alternative for the awesome original PowerView script. Most of the modules used in PowerView are available in this project ( some of the flags are changed ). Interesting Features: ▫️ Embeded user session ▫️ Mini PywerView console to make you feel like home when using PowerView in Powershell ▫️ Auto-completer, so no more memorizing commands ▫️ Cross-Domain interactions (might or might not work) Maybe more? https://github.com/aniqfakhrul/PywerView #ad #Python

iscsicpl_bypassUAC iscsicpl autoelevate DLL Search Order hijacking UAC Bypass 0day The iscsicpl.exe binary is vulnerable to a DLL Search Order hijacking vulnerability when running 32bit Microsoft binary on a 64bit host via SysWOW64. The 32bit binary, will perform a search within user %Path% for the DLL iscsiexe.dll. This can be exploited using a Proxy DLL to execute code via "iscsicpl.exe" as autoelevate is enabled. This exploit has been tested against the following versions of Windows desktop: ▫️ Windows 11 Enterprise x64 (Version 10.0.22000.739). ▫️ Windows 8.1 Professional x64 (Version 6.3.9600). https://github.com/hackerhouse-opensource/iscsicpl_bypassUAC

​​XSS Payload List Cross-site scripting works by manipulating a vulnerable web site so that it returns malicious JavaScript to users. When the malicious code executes inside a victim's browser, the attacker can fully compromise their interaction with the application. https://github.com/AmoloHT/XSS-Payload

Unit README: Red Vs. Blue Team Project Assessment, Analysis, and Hardening of a vulnerable system. This report includes a Red Team Security Assessment, a Blue Team Log Analysis, and Hardening and Mitigation Strategies. https://github.com/Maximus-Meridius-SC/Project-2-Red-Team-vs.-Blue-Team

​​social-media-hacker-list These are apps and projects made by unaffiliated developers. This list features alternative clients, SDKs, tools, bots and datasets to improve or build upon the default user experience across various social media platforms. Also included are solutions that repurpose social media platforms and their content in elevated ways. No dead or broken projects - all apps in this list are checked automatically weekly for OK response and will be removed following failure. Open source projects must not be archived and must show recent commit activity (<= 12 months) to be included. No sketchy extensions that must be run in dev mode. https://github.com/MobileFirstLLC/social-media-hacker-list

CVE-2022-26135 https://github.com/safe3s/CVE-2022-26135 #cve #poc

Fingerprint Encryption USB Flash Drive Keep your data private with Eaget's FU60 fingerprint encryption USB 3.0 flash drive. It's the perfect way of taking your important files with you while keeping it safe from your curious friends or coworkers. The AES 265 encryption algorithm provides absolute security for your data, while its ICE fingerprint chip prevents anyone except you from accessing it. The USB 3.0 interface lets you transfer your information at tremendous speed and provides a more stable connection, and its high-quality zinc housing gives it a much longer service life. Features: ▫️ Eaget FU60 fingerprint encryption USB 3.0 flash drive ▫️ Lets you take your data with you while keeping it safe ▫️ Fingerprint sensor gives you exclusive access ▫️ AES 265 encryption algorithm for additional security ▫️ Durable housing and slim, pocket-friendly design Specifications: ▫️ Interface: USB 3.0 ▫️ Capacity: 32G/64G/128GB ▫️ System compatibility: Windows 10/8/7/Vista/XP; Linux; MacOS ▫️ Size: 63,2 x 20,2 x 8,6mm ▫️ Weight: 20g ▫️ Chip: ICE Buy online: 🛒 https://ali.ski/f4fQel #usb #drive #fingerprint

​​microsoft-rpc-fuzzing-tools A tool that lists all open #SMB #pipes remotely in live mode. With this you can easily see which pipes will open when starting services. https://github.com/p0dalirius/microsoft-rpc-fuzzing-tools

​​CVE-2022-26134 Confluence Pre-Auth RCE. In affected versions of Confluence Server and Data Center, an OGNL injection vulnerability exists that would allow an unauthenticated attacker to execute arbitrary code on a Confluence Server or Data Center instance. The affected versions are from 1.3.0 before 7.4.17, from 7.13.0 before 7.13.7, from 7.14.0 before 7.14.3, from 7.15.0 before 7.15.2, from 7.16.0 before 7.16.4, from 7.17.0 before 7.17.4, and from 7.18.0 before 7.18.1. https://github.com/AmoloHT/CVE-2022-26134 #cve

Retbleed Arbitrary Speculative Code Execution with Return Instruction. https://github.com/comsec-group/retbleed Research: https://comsec.ethz.ch/research/microarch/retbleed

​​Code Signing Certificate Cloning Attack A Powershell script that signs input Executable file with fake Microsoft code-signing certificate to demonstrate risks of cloned-certificate sign attacks. https://github.com/mgeeky/Penetration-Testing-Tools/tree/master/red-teaming/Self-Signed%20Threat Research: https://posts.specterops.io/code-signing-certificate-cloning-attacks-and-defenses-6f98657fc6ec

​​Project-Whis Advanced HTTP Botnet / #Remote Admin Tool written in GoLANG mainly. The Server (C2) is Cross-Platform and can be run on Windows, Linux, MacOS, Etc. once compiled for it. Supported Clients for Windows, Linux and Android Based Systems. The user Frontend is written in HTML, CSS3, JavaScript while using Bootstrap4 and Font Awesome frameworks. https://github.com/SaturnsVoid/Project-Whis

macOS-Security-and-Privacy-Guide This guide is a collection of techniques for improving the security and privacy of a modern Apple Macintosh computer ("MacBook") running a recent version of macOS (formerly known as "OS X"). This guide is targeted to power users who wish to adopt enterprise-standard security, but is also suitable for novice users with an interest in improving their privacy and security on a Mac. https://github.com/drduh/macOS-Security-and-Privacy-Guide

Argos This script will automatically set up an #OSINT workstation starting from a Ubuntu OS. Features: ▫️ Multi-User support with roles of admin and user ▫️ Graphs and visual interaction with listeners and agents ▫️ Password length requirements ▫️ 2FA Authentication using Google MFA ▫️ Websocket API Calls https://github.com/SOsintOps/Argos

​​CRAXplusplus (CRAX++) Being inspired by AFL++, the exploit generator CRAX++ is CRAX with x86_64 ROP techniques, s2e 2.0 upgrade, code selection, I/O states, dynamic ROP, and more. Given a x86_64 binary program and a PoC input, our system leverages dynamic symbolic execution (i.e. concolic execution) to collect the path constraints determined by the PoC input, add exploit constraints to the crashing states, and query the constraint solver for exploit script generation. Our system supports custom exploitation techniques and modules with the aim of maximizing its extensibility. We implement several binary exploitation techniques in our system, and design two ROP payload chaining algorithms to build ROP payload from multiple techniques. https://github.com/SQLab/CRAXplusplus

​​Nzyme WiFi Defense System. The nzyme project uses #WIFI adapters in monitor mode to scan the frequencies for suspicious behavior, specifically rogue access points and known WiFi attack platforms. Each recorded wireless frame is parsed and optionally sent to a Graylog log management system for long-term storage that allows you to perform forensics and incident response. Ever wondered what to do if you catch a malicious wireless actor? With nzyme, you will be able to reconstruct what happened, who was targeted, and who was successfully compromised. https://github.com/lennartkoopmann/nzyme