HackGit

​​Invoke-Obfuscation PowerShell v2.0+ compatible PowerShell command and script obfuscator. https://github.com/danielbohannon/Invoke-Obfuscation

Multi frequency 280mhz-868mhz duplicator SMG-233 Multi frequency 280mhz-868mhz duplicator Liftmaster BFT FAAC V2 CAME, SOMMER ▫️ A replacement for remotes with fixed and rolling codefrequency from 280 to 868 MHz ▫️ Up to 4 different remotes in ONE! Every button can be programmed as a replacement for a different brand, sousing only one transmitter you can control up to 4 devices from different producers. ▫️ Universal multi is a replacement for fixed and rolling code remotes with the frequency from 280 to 868 MHz ▫️ Dimensions: 7x 2.5 x 1cm(L X W X H) ▫️ Auto scan Frequency 280-868Mhz Buy online: 🛒 https://ali.ski/EH5qCt #duplicator

​​MsfMania Command line tool developed in Python that is designed to bypass antivirus software on Windows and Linux/Mac in the future. https://github.com/G1ft3dC0d3/MsfMania

​​CMSeeK CMS Detection and Exploitation suite - Scan WordPress, Joomla, Drupal and over 180 other CMSs Functions: ▫️ Basic CMS Detection of over 170 CMS ▫️ Drupal version detection Advanced Wordpress Scans: ▫️ Detects Version ▫️ User Enumeration ▫️ Plugins Enumeration ▫️ Theme Enumeration ▫️ Detects Users (3 Detection Methods) ▫️ Looks for Version Vulnerabilities and much more! Advanced Joomla Scans: ▫️ Version detection ▫️ Backup files finder ▫️ Admin page finder ▫️ Core vulnerability detection ▫️ Directory listing check ▫️ Config leak detection ▫️ Various other checks Modular bruteforce system: ▫️ Use pre made bruteforce modules or create your own and integrate with it https://github.com/Tuhinshubhra/CMSeeK #web #wordpress #joomla #drupal #cms #best

​​ysoserial.net A proof-of-concept tool for generating payloads that exploit unsafe .NET object deserialization. https://github.com/pwntester/ysoserial.net

​​Merlin Post-exploit Command & Control (C2) tool, also known as a Remote Access Tool (RAT), that communicates using the HTTP/1.1, HTTP/2, and HTTP/3 protocols. HTTP/3 is the combination of HTTP/2 over the Quick UDP Internet Connections (QUIC) protocol. This tool was the result of my work evaluating HTTP/2 in a paper titled Practical Approach to Detecting and Preventing Web Application Attacks over HTTP/2. Merlin is also my first attempts at learning Golang. https://github.com/MythicAgents/merlin Docs: https://merlin-c2.readthedocs.io/en/latest/index.html #redteam

​​RedNixOS NixOS 'distro' for security enthusiasts RedNixOS aims to be a Kali-like Linux distribution built around NixOS, tailored for security researchers, pen-testers, red teamers and infosec enthusiasts. Simply put, this project is a pre-made NixOS config. Therefore, it's merely required to build the .iso file yourself. Furthermore, RedNixOS includes large amounts preinstalled software, as defined in packages.nix file, which you can accommodate to your needs. By default, RedNixOS uses the Zen kernel, which might achieve better performance. Additionally, certain networking and security features are enabled, such as: ▫️ sudo only for the wheel group ▫️ AppArmor ▫️ lockKernelModules ▫️ a firewall with straightforward default configuration https://github.com/redcode-labs/RedNixOS Wiki: https://github.com/redcode-labs/RedNixOS/wiki

​​SMBaloo A CVE-2020-0796 (aka "SMBGhost") exploit for Windows ARM64. https://github.com/msuiche/smbaloo #cve

RESim Reverse engineering using a full system simulator. RESim is a dynamic system analysis tool that provides detailed insight into processes, programs and data flow within networked computers. RESim simulates networks of computers through use of the Simics'[1] platform’s high fidelity models of processors, peripheral devices (e.g., network interface cards), and disks. The networked simulated computers load and run targeted software copied from images extracted from the physical systems being modeled. ▫️ Dynamic analysis by instrumenting simulated hardware using Simics ▫️ Trace process trees, system calls and individual programs ▫️ Reverse execution to selected breakpoints and events ▫️ Integrated with IDA Pro(tm) debugging client ▫️ Ghidra plugins for use with the Ghidra debugger ▫️ Fuzz with a customized AFL, injecting directly into simulated memory https://github.com/mfthomps/RESim

Raider Web Authentication Testing Framework. Features: ▫️ Unlimited authentication steps ▫️ Unlimited inputs/outputs for each step ▫️ Ability to conditionally decide the next step ▫️ Running arbitrary operations when receiving the response ▫️ Easy to write custom operations and plugins https://github.com/OWASP/raider Wiki: https://docs.raiderauth.com/en/latest/

​​NinjaDroid Simple tool to reverse engineering #Android APK packages. https://github.com/rovellipaolo/NinjaDroid

Confuser A tool to detect Dependency Confusion vulnerabilities. It allows scanning packages.json files, generating and publishing payloads to the NPM repository, and finally aggregating the callbacks from vulnerable targets. https://github.com/doyensec/confuser Dependency Confusion: https://blog.doyensec.com//2022/07/21/dependency-confusion.html

SVF Static tool that enables scalable and precise interprocedural dependence analysis for C/C++ programs https://github.com/svf-tools/SVF

​​Dorks collections list https://github.com/cipher387/Dorks-collections-list #dork

​​SQLI Dorks Generator This is simple script for generate dorks list for sql injection https://github.com/Zold1/sqli-dorks-generator #sql #dork

​​DiagTrackEoP Just another way to abuse SeImpersonate privilege. https://github.com/Wh04m1001/DiagTrackEoP

​​WackerA #WPA3 dictionary cracker. A set of scripts to help perform an online dictionary attack against a WPA3 access point. Wacker leverages the wpa_supplicant control interface to control the operations of the supplicant daemon and to get status information and event notifications ultimately helping speedup connection attempts during brute force attempts. https://github.com/blunderbuss-wctf/wacker

​​H4Rpy Automated #WPA/WPA2 PSK attack tool. H4Rpy provides a clean interface for automated cracking of WPA/WPA2 PSK networks. h4rpy enables monitor mode on the selected wireless interface, scans the wireless space for access points, tries to capture WPA/WPA2 4-way handshake for the access point, and starts a dictionary attack on the handshake. It is also possible to send disassociate packets to clients associated with the access point. https://github.com/MS-WEB-BN/h4rpy