HackGit

​​gpu poisoning hide the payload inside the gpu memory. after my older repo, in which i used the thread description to hide the payload, i wanted to find new way, so now im using nividia gpu memory using cuda api's to allocate, write, and free when there is no need for the payload to be found in memory. https://gitlab.com/ORCA000/gp

​​ChopHound Some scripts for dealing with any challenges that might arise when importing (large) JSON datasets into BloodHound. https://github.com/bitsadmin/chophound Blog post: https://blog.bitsadmin.com/blog/dealing-with-large-bloodhound-datasets #ad #bloodhound #cypher

​​Intrigue Core Framework for discovering attack surface. It discovers security-relevant assets and exposures within the context of projects and can be used with a human-in-the-loop running individual tasks, and/or automated through the use of workflows. With a flexible entity model and an incredibly deep enrichment system, it is the most full-featured attack surface discovery framework of its kind. https://github.com/intrigueio/intrigue-core @HackGit

​​Parsec Open source Dropbox-like file sharing with full client encryption! Parsec allows you to easily share your work and data in the cloud in total privacy thanks to end-to-end cryptographic security. Features: ▫️ Works as a virtual drive on you computer. You can access and modify all the data stored in Parsec with your regular softwares just like you would on your local hard-drive. ▫️ Never lose any data. Synchronization with the remote server never destroy any data, hence you can browse data history and recover from any point in time. ▫️ Client-side cryptographic security. Data and metadata are only visible by you and the ones you choose to share with. ▫️ Cryptographic signature. Each modification is signed by it author making trivial to identify modifications. ▫️ Cloud provider agnostic. Server provides connectors for S3 and swift object storage. ▫️ Simplified enrollment. New user enrollment is simple as sharing a link and a token code. https://github.com/Scille/parsec-cloud Homepage: https://parsec.cloud Documentation: https://parsec-cloud.readthedocs.org

​​FuzzSSH Free software tool created to detect #SSH (protocol) vulnerabilities. https://github.com/epsylon/fuzzssh @HackGit

osi.ig Open Source Information Instagram ▫️ The Instagram OSINT Tool gets a range of information from an Instagram account that you normally wouldn't be able to get from just looking at their profile The information includes: ▫️ [ profile ] : user id, followers / following, number of uploads, profile img URL, business enum, external URL, joined Recently, etc ▫️ [ tags & mentions ] : most used hashtags and mentioned accounts ▫️ [ email ] : if any email is used anywhere it'll be displayed ▫️ [ posts ] : accessability caption, location, timestamp, caption, picture url, etc ✔️ ( yet not working correctly with posts instagram marks as 'sensitive cotent' ) https://github.com/th3unkn0n/osi.ig @HackGit

​​BadUSB with MicroSD This is one of the last developments related to rubberducky or badusb devices. This device is based on the ATMEGA32U4 microprocessor which is able to emulate many USB modes like HID, used for injecting key presses to the target system. The main processor is based on Arduino Leonardo R3 development board and the improvement is that a microSD card slot is included to allow storing many different payloads. The microSD card has to be FAT32 formatted in order to be recognized. You can find the firmware and firmware instructions here as well as watch the video. Buy online: 🛒 https://bit.ly/3HV8UJM #usb #badusb

​​IYPS A password strength test app with strength, estimated crack times, warnings and suggestions to help make better passwords. Features: ▫️ Fully open source ▫️ Material design ▫️ Completely offline ▫️ No permissions needed ▫️ Works on Android 6.0 and above devices ▫️ Supports both light and dark theme ▫️ No ads ▫️ No collection of personal data ▫️ Supported languages: English, Dutch, French, German, Italian, Japanese https://github.com/the-weird-aquarian/IYPS @HackGit

​​Fuzzuli A url fuzzing tool that aims to find critical backup files by creating a dynamic wordlist based on the domain. https://github.com/musana/fuzzuli @HackGit

​​kernel-mii Cobalt Strike Beacon Object File foundation for kernel exploitation using CVE-2021-21551. This is a #Cobalt Strike (CS) Beacon Object File (BOF) which exploits CVE-2021-21551. It only overwrites the beacon process token with the system process token. But this BOF is mostly just a good foundation for further kernel exploitation via CS. https://github.com/NorthwaveSecurity/kernel-mii @HackGit

​​Scout URL fuzzer and spider for discovering undisclosed VHOSTS, files and directories on a web server. https://github.com/liamg/scout @HackGit

Chrome-Android-and-Windows-0day-RCE-SBX https://github.com/emredavut/Chrome-Android-and-Windows-0day-RCE-SBX Research: https://blog.google/threat-analysis-group/new-campaign-targeting-security-researchers/

​​Zena Stored #XSS to #RCE #Exploit #POC Exploit POC for Rocket Software's Zena application v. 4.2.1 - Stored XSS to RCE CVE-2021-45025 CVE-2021-45026 POC Process: ▫️ Logs into Zena's webconfig page using default credentials ▫️ Drops Stored XSS payload ▫️ Payload needs to be triggered by someone navigating to the webconfig page ▫️ Triggered payload uses REST API backend of Zena to find an agent and build a Task for that agent ▫️ Task is then triggered for agent thus executing the specified command https://github.com/JetP1ane/Zena CookieMonsteRCE - XSS to RCE Exploitation in Zena 4.2.1 https://phoenix-sec.io/2022/06/17/Zena-CookieMonsteRCE.html #exploit

​​Dismember Dismember is a command-line toolkit for Linux that can be used to scan the memory of all processes (or particular ones) for common secrets and custom regular expressions, among other things. It will eventually become a full /proc toolkit. https://github.com/liamg/dismember @HackGit

Astra Astra finds urls, endpoints, aws buckets, api keys, tokens, etc from a given url/s. It combines the paths and endpoints with the given domain and gives full URL. We can use it on js, html, etc files. Astra uses asynchronous method to fetch URLs using python's aiohttp and asyncio. Its a combination of linkfinder and secretfinder. Uses Regex's from linkfinder, secretfinder and nuclei templates. Although None of them worked exactly because python's regex r way different. So basically everyone of them is modified by me. https://github.com/Sachin-v3rma/Astra @HackGit

​​Sealighter Easy ETW Tracing for Security Research Features: ▫️ Subscribe to multiple ETW and WPP Providers at once ▫️ Automatically parse events into JSON without needing to know format ▫️ Robust Event filtering including filter chaining and filter negation ▫️ Output to Standard out, File, or Windows Event Log (to be ingested by other tools) ▫️ Get event stack traces ▫️ Configurable Buffering many events in a time period into one with a count, to reduce the number of events generated https://github.com/pathtofile/Sealighter

​​A Few Ways to Get TrustedInstaller Privileges GetTrustedInstaller Make an executable run with TrustedInstaller permissions under SYSTEM account. https://github.com/rara64/GetTrustedInstaller NtObjectManager This module adds a provider and cmdlets to access the NT object manager namespace. Example. Apply TrustedInstaller impersonation token to the current PowerShell process:

Install-Module -Name NtObjectManager -Confirm:$false
Restart-Service TrustedInstaller
$procId = (Get-Process TrustedInstaller).Id
$token = Get-NtTokenFromProcess -ProcessId $procId
$current = Get-NtThread -Current -PseudoHandle
$ctx = $current.Impersonate($token)
$impToken = Get-NtToken -Impersonation
$impToken.Groups

https://github.com/googleprojectzero/sandbox-attacksurface-analysis-tools/tree/main/NtObjectManager #localsystem #trustedinstaller

resolvers.txt Fresh list of periodically validated public #DNS resolvers. https://github.com/janmasarik/resolvers @HackGit

DoD Cyber Crime Center (DC3) https://github.com/dod-cyber-crime-center @HackGit

ShoMon ShoMon is a Shodan alert feeder for TheHive written in GoLang. With version 2.0, it is more powerful than ever! https://github.com/KaanSK/shomon @HackGit