HackGit

​​injectAmsiBypass Cobalt Strike Beacon Object File (BOF) that bypasses AMSI in a remote process with code injection. https://github.com/boku7/injectAmsiBypass

​​CVE-2022-44268 ImageMagick Arbitrary File Read - Payload Generator. https://github.com/duc-nt/CVE-2022-44268-ImageMagick-Arbitrary-File-Read-PoC #cve

CVE-2023-21608 Adobe Acrobat Reader Remote Code Execution Exploit This bug was Use after Free caused during resetForm operation while handling object memory references. https://github.com/hacksysteam/CVE-2023-21608 Details: https://hacksys.io/blogs/adobe-reader-resetform-cagg-rce-CVE-2023-21608 #cve

​​Cortex XDR Config Extractor This tool is meant to be used during #RedTeam Assessments and to audit the XDR Settings. https://github.com/Laokoon-SecurITy/Cortex-XDR-Config-Extractor

​​awesome-authorization A curated list of information and resources about authorization. https://github.com/warrant-dev/awesome-authorization

​​certwatcher CertWatcher is a tool for capturing and tracking certificate transparency logs, using YAML templates and Selenium. The tool helps to detect and analyze phishing sites, and is designed to make it easy to use for security professionals and researchers. https://github.com/drfabiocastro/certwatcher

​​FinGen A #ChatGPT based penetration testing findings generator. https://github.com/Stratus-Security/FinGen #pentesting #bugbounty #redteam #hackers

​​auto-recon Tools for auto enumeration subdomain, dns, host alive. https://github.com/1amkaizen/auto-recon

​​Wise — The international account Join over 13 million people and businesses, in more than 170 countries, who use Wise to send, spend, convert, and receive money internationally. Wise is for anyone — travelers, immigrants, freelancers, organisations — whose money crosses borders. We’re 8x cheaper on average than leading banks. And a lot faster, too. Cheaper and faster money transfers: ▫️ Send money to over 80 countries ▫️ For a super-low fee, you get the real exchange rate, like on Google, for every money transfer • 50% of transfers are instant or arrive within an hour ▫️ Secure your transfers with two-factor authentication A debit card to spend worldwide: ▫️ Spend or withdraw money in more than 200 countries ▫️ If you don’t have the local currency, we’ll auto-convert what you have with the lowest possible price ▫️ Freeze and unfreeze your card, and update your virtual card whenever you like Create your Wise account 💳 #promo

​​DefaScan A python tool that will scrape the internet for your given google dork queries using APIs and alert using the email provied during rutime. https://github.com/RamXtha/DefaScan

​​a_TON_of_privacy A tool for investigating TON network and its NFT https://github.com/aaarghhh/a_TON_of_privacy

​​Wordlister This script generates a custom wordlist based on the specified organization name and source wordlist. The custom wordlist contains combinations of the organization name with each word from the source wordlist and a specified separator character. https://github.com/Zer0Sploit/wordlister

​​Enzyme Enzyme is an jailbreak-free iOS modding framework that allows you to statically patch and hook iOS apps. This repository contains an example using Enzyme. For modifying this, check out the CMakeLists.txt file, the patcher/main.py file, the patcher/bootstrap.asm file, and the src folder. https://github.com/camila314/enzyme

​​tactical-exploitation Modern tactical exploitation toolkit. https://github.com/0xdea/tactical-exploitation

​​Cobalt Strike Beacon Notifier A #Cobalt Strike Beacon Notifier Via #Telegram #Bot. Features: ▫️ Showing the Name of the Current User ▫️ Showing the Computer Name of the Current User ▫️ Showing the Type and Version of the Operating System ▫️ Showing the Type of the Process Exec Name ▫️ Showing the Internal IP of the System ▫️ Showing the Enternal IP of the System https://github.com/lynxbinz/CS-Beacon-Notifier

​​Thanks Mobile Hacker We want to give credit to the creators of the videos we used in our posts. ▫️ t.me/androidMalware ▫️ youtube.com/@mobilehacker ▫️ instagram.com/mobile_hacker0 #video #channel

​​THC's favourite Tips, Tricks & Hacks (Cheat Sheet) A collection of our favourite tricks. Many of those tricks are not from us. We merely collect them. We show the tricks 'as is' without any explanation why they work. You need to know Linux to understand how and why they work. https://github.com/hackerschoice/thc-tips-tricks-hacks-cheat-sheet

​​Dependency-Confusion All About Dependency Confusion Attack, (Detecting, Finding, Mitigating) https://github.com/x1337loser/Dependency-Confusion

​​Cheap BadUSB - Digispark ATtiny85 Arduino board Besides using it as a Rubber Ducky or hardware password vault, you can start your own projects such as POV display, LED lights controller, IoT gadgets, etc. Digispark allows to connect external modules and operate with them such as Bluetooth, motion, temperature sensors, Wi-Fi, etc. Testing 20 most popular mobile phone PINs (based on SANS institute findings) in 6 minutes using Digispark ATtiny85 board 👇 Based on the research, 26% of all phones can be cracked with these 20 four-digit passcodes. Buy online: 🛒 https://amzn.to/3wN80ds 🛒 https://ali.ski/13u_Kq #usb #board #badusb

​​sandfly-entropyscan Entropy scanner for Linux to detect packed or encrypted binaries related to malware. Finds malicious files and Linux processes and gives output with cryptographic hashes. https://github.com/sandflysecurity/sandfly-entropyscan