HackGit

​​NotProxyShellHunter Check for NotProxyShell CVE-2022-40140 & CVE-2022-41082 https://github.com/mr-r3b00t/NotProxyShellHunter #cve

​​Joomla! 1.6/1.7/2.5 - Privilege Escalation Vulnerability A Python script to create an administrator account on Joomla! 1.6/1.7/2.5 using a privilege escalation vulnerability Features: ▫️ Admin user creation on vulnerable Joomla versions ▫️ Supports HTTP/HTTPS, self-signed certificates and weak TLS cipher suites ▫️ Step by step explanation on how to RCE with this admin account https://github.com/p0dalirius/Joomla-1.6-1.7-2.5-Privilege-Escalation-Vulnerability

​​zBuster Bash script for CTF automating basic enumeration. A bash script built to automate the process of portscanning, vhosts finding, services enumeration and basic directory brute-forcing. Tools: ▫️ Rustscan ▫️ Nmap ▫️ Smbclient & Smbmap & crackmapexec ▫️ Wpscan ▫️ Gobuster ▫️ Gospider https://github.com/zAbuQasem/zBuster

​​REAVE WIP post-exploitation framework tailored for hypervisors. Reave follows a traditional listener/agent model, where the user may set up multiple listeners of various flavors that accept any number of agents, each agent intended to be executed on a hypervisor host. Automatic enumeration of hypervisor hosts, including: ▫️ What guest systems are installed ▫️ What network shares are mounted (NFS/iSCSI) ▫️ What local users are associated ▫️ What domain the hypervisor is a part of ▫️ What data stores exist on the physical system Modular payloads supporting capabilities such as: ▫️ Exfiltration: of datastores, files, virtual disks. ▫️ Persistence: Adding, modifying, deleting local users, installing SSH keys and reverse shells ▫️ Enumeration: Further network scanning, etc. https://github.com/Psmths/reave #Donate t.me/hackgit🍻»»»

​​CVE Sandbox :: jQuery UI CVE Collection of jQuery UI XSS Payloads https://github.com/cve-sandbox/jquery-ui

​​Above Sniff-based Network Vulnerability Scanner This script is based on a sniff of network traffic. At the moment it supports the following protocols: ▫️ DTP (Dynamic Trunking Protocol) ▫️ CDP (Cisco Discovery Protocol) ▫️ LLDP (Link Layer Discovery Protocol) ▫️ OSPF (Open Shortest Path First) ▫️ EIGRP (Enhanced Interior Gateway Routing Protocol) ▫️ VRRP (Virtual Router Redundancy Protocol) ▫️ STP (Spanning Tree Protocol) ▫️ LLMNR (Link Local Multicast Name Resolution) ▫️ NBT-NS (NetBIOS Name Service) THE SCANNER DOES NOT CREATE ANY NOISE ON THE NETWORK. After the scanner finishes sniffing a certain protocol, it will display some information about the protocol itself, the impact of the attack and which tool for the attack can be used. Over time, based on your issues, this parameter will improve 👇 https://github.com/in9uz/Above #Donate t.me/hackgit🍻»»»

​​CVE-2022-41218 This vulnerability is a race condition vulnerability that occurs in drivers/media/dvb-core/dmxdev.c. Therefore, a race condition may occur in the usb device driver using this dmxdev. This vulnerability could be used to trigger 3 UAFs. https://github.com/V4bel/CVE-2022-41218

​​Vulnerable-Flask-App It is a vulnerable Flask Web App. It is a lab environment created for people who want to improve themselves in the field of web penetration testing. https://github.com/anil-yelken/Vulnerable-Flask-App

CVE-2022-30206 This is the PoC for CVE-2022-30206. https://github.com/Malwareman007/CVE-2022-30206 #cve

​​RITM This is a Python implementation of the man-in-the-middle attack described by Charlie Clark (@exploitph) in his post, New Attack Paths? AS Requested Service Tickets, and demonstrated in his proof-of-concept, Roast in the Middle. https://github.com/Tw1sm/RITM

ObfLoader MAC, IPv4, UUID shellcode Loaders and Obfuscators to obfuscate the shellcode and using some native API to converts it to its binary format and loads it. Use the python scripts to obfuscate your shellcode in bin file. https://github.com/D1rkMtr/ObfLoader t.me/hackgit

​​Utkuici - Nessus Automation Today, with the spread of information technology systems, investments in the field of cyber security have increased to a great extent. Vulnerability management, penetration tests and various analyzes are carried out to accurately determine how much our institutions can be affected by cyber threats. With Tenable Nessus, the industry leader in vulnerability management tools, an IP address that has just joined the corporate network, a newly opened port, exploitable vulnerabilities can be determined, and a python application that can work integrated with Tenable Nessus has been developed to automatically identify these processes. Features: ▫️ Finding New IP Address ▫️ Finding New Port ▫️ Finding New Exploitable Vulnerability https://github.com/anil-yelken/Nessus-Automation

​​KICS Find security vulnerabilities, compliance issues, and infrastructure misconfigurations early in the development cycle of your infrastructure-as-code with KICS by Checkmarx. KICS stands for Keeping Infrastructure as Code Secure, it is open source and is a must-have for any cloud native project. Supported Platforms 👇 https://github.com/Checkmarx/kics

​​KMS-Vault A bash script for managing secrets encrypted / decrypted via AWS KMS. This script is designed for encrypting things like yaml keys or other small pieces of data https://github.com/AWSToolbox/kms-vault t.me/hackgit

​​AsStrongAsFuck Free C# console obfuscation engine. Help me by improving the obfuscator! https://github.com/Charterino/AsStrongAsFuck

​​Sandworm Easy auditing & sandboxing for your JavaScript dependencies worm. https://github.com/sandworm-hq/sandworm-js

​​Photon Incredibly fast crawler designed for OSINT. Features: ▫️ URLs (in-scope & out-of-scope) ▫️ URLs with parameters (example.com/gallery.php?id=2) ▫️ Intel (emails, social media accounts, amazon buckets etc.) ▫️ Files (pdf, png, xml etc.) ▫️ Secret keys (auth/API keys & hashes) ▫️ JavaScript files & Endpoints present in them ▫️ Strings matching custom regex pattern ▫️ Subdomains & DNS related data https://github.com/s0md3v/Photon

​​wptsextensions.dll Exploiting DLL hijacking of the task scheduler. https://github.com/phackt/wptsextensions.dll

​​palera1n Experimental iOS 15 Jailbreak is out now https://github.com/palera1n/palera1n

​​Exploit-Development-Tools A bunch of my exploit development helper tools, that I've developed over time and used, collected in one place. Gathered mostly from my (gists) and/or HDD. https://github.com/mgeeky/Exploit-Development-Tools t.me/hackgit