HackGit

​​CVE-2022-33980 Apache Commons RCE can use url,dns,script key-words to connect any server https://github.com/HKirito/CVE-2022-33980 #cve #RCE

​​DashOverride This is a pre-authenticated RCE exploit for VMware vRealize Operations Manager (vROPS) that impacts versions <= 8.6.3.19682901. https://github.com/sourceincite/DashOverride #exploit #RCE

​​SCMKit Source Code Management Attack Toolkit - SCMKit is a toolkit that can be used to attack SCM systems. SCMKit allows the user to specify the SCM system and attack module to use, along with specifying valid credentials (username/password or API key) to the respective SCM system. Currently, the SCM systems that SCMKit supports are GitHub Enterprise, GitLab Enterprise and Bitbucket Server. The attack modules supported include reconnaissance, privilege escalation and persistence. SCMKit was built in a modular approach, so that new modules and SCM systems can be added in the future by the information security community. https://github.com/xforcered/SCMKit

​​Hydroxide General purpose pen-testing tool for games on the Roblox engine https://github.com/Upbolt/Hydroxide

​​PSItems A PowerShell module that finds files and directories as well as file and directory information the quick and easy way! The goal of this project is to write simple but (very) fast functions for finding (and perhaps managing) FileSystem Objects and their information. https://github.com/eizedev/PSItems

​​Smart Chip Reader Support: DNIE, ATM, IC, ID, CAC, SIM, smart card, intelligent card, tax card, and bank card. Applicable for SIM card and CAC card. Support touch chip card operations, such as online banking digital signature, for ActivClient, for AKO, for OWA, for DKO, for JKO, for NKO, for BOL, for GKO, for Marinenet, for AF Portal, for Pure Edge Viewer, for ApproveIt, for DCO, for DTS, for LPS, and for Disa Enterprise Email. Buy online: 🛒 https://ali.ski/rZafy #reader #card

​​D.RDynamicShellcode Download & Run Dynamic Shellcode : it reads the shellcode from a url (has to be downloadable) locate it in a RWX section in memory and run it, useful for people looking for a shellcode as a 1st stage https://gitlab.com/ORCA000/d.rdynamicshellcode

​​UnamDownloader A free silent downloader A free silent (hidden) open-source downloader (binder) that can be built as a native C file or a managed (.NET C#) file. A downloader is essentially the same as a binder although it downloads the files instead of storing them in memory, you can also see my UnamBinder for a normal file binder. https://github.com/UnamSanctam/UnamDownloader

​​Gobuster A tool used to brute-force: ▫️ URIs (directories and files) in web sites. ▫️ DNS subdomains (with wildcard support). ▫️ Virtual Host names on target web servers. ▫️ Open Amazon S3 buckets https://github.com/OJ/gobuster

​​DefectDojo DefectDojo is a security orchestration and vulnerability management platform. DefectDojo allows you to manage your application security program, maintain product and application information, triage vulnerabilities and push findings to systems like JIRA and Slack. DefectDojo enriches and refines vulnerability data using a number of heuristic algorithms that improve with the more you use the platform. https://github.com/DefectDojo/django-DefectDojo Demo: https://demo.defectdojo.org/

​​SprayingToolkit A set of Python scripts/utilities that tries to make password spraying attacks against Lync/S4B & OWA a lot quicker, less painful and more efficient. https://github.com/byt3bl33d3r/SprayingToolkit

​​Shhhloader A SysWhispers/GetSyscallStub Shellcode Loader that is currently a Work in Progress. It takes raw shellcode as input and compiles a C++ stub that uses syscalls to try and bypass AV/EDR. The included python builder will work on any Linux system that has Mingw-w64 installed. Features: ▫️ 7 Different Shellcode Execution Methods (ModuleStomping, QueueUserAPC, ProcessHollow, EnumDisplayMonitors, RemoteThreadContext, RemoteThreadSuspended, CurrentThread) ▫️ PPID Spoofing ▫️ Block 3rd Party DLLs ▫️ GetSyscallStub & SysWhispers2 ▫️ Obfuscator-LLVM (OLLVM) Support ▫️ Automatic DLL Proxy Generation ▫️ Syscall Name Randomization ▫️ Store Shellcode as English Word Array ▫️ XOR Encryption with Dynamic Key Generation ▫️ Sandbox Evasion via Loaded DLL, Domain, User, Hostname, and System Enumeration See below video demonstrating the Module Stomping shellcode injection technique executed via DLL Proxying with Windows Defender fully enabled. As seen in the video, the Obfuscator-LLVM and English word list options were also utilized to help evade detection: 👇 https://github.com/icyguider/Shhhloader

​​LDAP Monitor Monitor creation, deletion and changes to LDAP objects live during your pentest or system administration! With this tool you can quickly see if your attack worked and if it changed LDAP attributes of the target object. https://github.com/p0dalirius/LDAPmonitor

​​Pingtunnel A tool that send TCP/UDP traffic over ICMP. https://github.com/esrrhs/pingtunnel

​​Puwr Easily expand your attack surface on a local network by discovering more hosts, via SSH. Using a machine running a SSH service, Puwr uses a given subnet range to scope out IP's, sending back any successful ping requests it has. This can be used to create a pivoting attack from a compromised machine, by returning you hosts you couldn't normally discover from your own device. Open ports can then be probed on these discovered devices, to find a gateway into attacking more devices. https://github.com/Xeonrx/Puwr

​​TamperingSyscalls This is a 2 part novel project consisting of argument spoofing and syscall retrival which both abuse EH in order to subvert EDRs. This project consists of both of these projects in order to provide an alternative solution to direct syscalls. https://github.com/rad9800/TamperingSyscalls #edr #evasion #maldev #syscall #tampering

​​MNSPlusTrasher The best and only MNS+ "hacktool" available MNSPlusTrasher is designed to show flaws in MNS+ which is used by most schools in Rhineland-Palatinate, Germany https://github.com/basti564/MNSPlusTrasher

​​CVE-2022-31101 Exploit for PrestaShop bockwishlist module 2.1.0 SQLi (CVE-2022-31101) https://github.com/karthikuj/CVE-2022-31101 #cve #exploit

​​BlueHound BlueHound is an open-source tool that helps blue teams pinpoint the security issues that actually matter. By combining information about user permissions, network access and unpatched vulnerabilities, BlueHound reveals the paths attackers would take if they were inside your network It is a fork of NeoDash, reimagined, to make it suitable for defensive security purposes. To get started with BlueHound, check out our introductory video and blog post. https://github.com/zeronetworks/BlueHound #blueteam

​​BootMii loader This repository contains the public release of the source code for the BootMii stub loader. https://github.com/fail0verflow/bootmii