HackGit

​​BEE·bot OSINT automation for hackers. BBOT is a recursive, modular #OSINT framework written in Python. It is capable of executing the entire OSINT process in a single command, including subdomain enumeration, port scanning, web screenshots (with its gowitness module), vulnerability scanning (with nuclei), and much more. BBOT currently has over 50 modules and counting. https://github.com/blacklanternsecurity/bbot

​​PXEThief A set of tooling that can extract passwords from the Operating System Deployment functionality in Microsoft Endpoint Configuration Manager https://github.com/MWR-CyberSec/PXEThief

​​TOP TOP All bugbounty pentesting CVE-2022- POC Exp Things https://github.com/hktalent/TOP #cve

​​EIGRPWN routeinject.py - tool for route injection in the EIGRP domain. helloflooding.py - tool for exploitation a DoS attack, flooding with EIGRP "Hello" messages. When flooding "Hello" messages, fake EIGRP neighbors are generate routingtableoverflow.py - this script causes an overflow of the routing table of the EIGRP router by generating fake routes at high speed. https://github.com/in9uz/EIGRPWN

​​PyBotNet A Python framework for building remote control, botnet , trojan or backdoor with Telegram or other control panels https://github.com/onionj/pybotnet Documentation: https://onionj.github.io/pybotnet/ #Donate @HackGit

​​Father A short LD_PRELOAD rootkit for Linux. It's designed to be used in a competition environment, and has various standard features: ▫️ Network hiding ▫️ File hiding ▫️ Process hiding ▫️ Local privilege escalation ▫️ Remote accept() hook backdoor ▫️ Time/logic bomb component ▫️ GnuPG signature interception ▫️ Anti-detection https://github.com/mav8557/Father

cve-2022-27255 https://github.com/infobyte/cve-2022-27255/tree/main/exploits_nexxt #cve #exploit

​​BladeRF 2.0 Micro xA4 The bladeRF 2.0 micro is the next-generation 2x2 MIMO, 47MHz to 6GHz frequency range, off-the-shelf USB 3.0 Software Defined Radio (SDR) that is easy and affordable for students and RF enthusiasts to explore wireless communications, yet provides a powerful waveform development platform expected by industry professionals. Support is available for Linux, macOS, and Windows. The bladeRF libraries, utilities, firmware, and platform HDL are released under open source licenses, and schematics are available online. The FPGA and USB 3.0 peripheral controller are programmable using vendor-supplied tools and SDKs that are available online, free of charge. Car Hacking Part 3: Rolljam Attack: https://scare.rocks/2022/01/27/Car-Hacking-Part-3-Rolljam-Attack.html bladeRF Source: https://github.com/Nuand/bladeRF Buy online: 🛒 https://ali.ski/ng8Ljx #radio #bladerf #sdr

​​ropr ropr is a blazing fast multithreaded ROP Gadget finder https://github.com/Ben-Lichtman/ropr

​​AVML A portable volatile memory acquisition tool for Linux. AVML is an X86_64 userland volatile memory acquisition tool written in Rust, intended to be deployed as a static binary. AVML can be used to acquire memory without knowing the target OS distribution or kernel a priori. No on-target compilation or fingerprinting is needed. Features: ▫️ Save recorded images to external locations via Azure Blob Store or HTTP PUT ▫️ Automatic Retry (in case of network connection issues) with exponential backoff for uploading to Azure Blob Store ▫️ Optional page level compression using Snappy. ▫️ Uses LiME output format (when not using compression). https://github.com/microsoft/avml

​​HiPHP BackDoor to control php-based sites. A BackDoor to control php-based sites hiphp can be controlled by sending commands, files, and tokens to the site using the http/https protocol. After copying the HIPHP_HOLE_CODE and placing it in any php file on the target website, you will have permissions to enter it, read all files, delete and even upload new files to it. Also, this back door is password protected. https://github.com/yasserbdj96/hiphp

​​bugstropics Hunting Bugs in the Tropics This is a repo with the slides used in my presentation "Hunting Bugs in the Tropics" at DEFCON30. It includes the Python script used to calculate the support password based on the private key obtained by breaking Aruba support's EC public key, due to its weak size (64 bits). This allows you to break out of the subshell on these devices, and obtain a full root shell. https://github.com/dozernz/bugstropics

​​ParamFirstCheck ParamFirstCheck identifies in a list of urls those containing the top 25 of the most vulnerable parameters to SQLi, LFI, RCE and Open redirect https://github.com/mathis2001/ParamFirstCheck #Donate @HackGit

​​IvorySQL Продвинутый, полнофункциональный, Oracle совместимый PostgreSQL с открытым исходным кодом. Обязуется всегда оставаться на 100% совместимым и полностью заменяющим последнюю версию PostgreSQL. В IvorySQL добавлен переключатель compatible_db для переключения между режимами совместимости с Oracle и PostgreSQL. Одной из основных особенностей IvorySQL является процедурный язык PL/iSQL, который поддерживает синтаксис Oracle PL/SQL и пакеты в стиле Oracle. IvorySQL импортировала и усовершенствовала расширение Orafce, чтобы добавить поддержку многочисленных функций совместимости с Oracle, включая встроенные пакеты, типы данных и функции преобразования. https://github.com/IvorySQL/IvorySQL #oracle #postgresql #db

​​nDPI Система захвата и анализа трафика для глубокого инспектирования пакетов, созданная на основе OpenDPI nDPI позволяет определять в трафике используемые протоколы уровня приложения, анализируя характер сетевой активности без привязки к сетевым портам (например если пользователь пытается скрыть используемый VPN пуская его по нестандартному порту) Всего поддерживаются определения около 300 протоколов и приложений, от OpenVPN, Tor, QUIC, SOCKS, BitTorrent и IPsec до Telegram, Viber, WhatsApp, PostgreSQL и обращений к Gmail, Office 365, Google Docs и YouTube. Имеется декодировщик серверных и клиентских SSL-сертификатов, позволяющий определить протокол (например, Citrix Online и Apple iCloud), используя сертификат шифрования. Поддерживается анализ в режиме реального времени. Вы можете использовать nDPI для выборочной блокировки выбранного интернет-трафика. https://github.com/ntop/nDPI/ #soft #infosec #cybersecurity

​​Negoexrelayx Negoex relaying tool Toolkit for abusing Kerberos PKU2U and NegoEx. Requires impacket It is recommended to install impacket from git directly to have the latest version available. https://github.com/morRubin/NegoExRelay

​​Sysax-multi-server-ssh-username-exploit Sysax <= 5.53 SSH Username BoF Pre Auth RCE https://github.com/M4fiaB0y/Sysax-multi-server-ssh-username-exploit

​​POC-of-CVE-2022-36271 This is working POC of CVE-2022-36271 https://github.com/SaumyajeetDas/POC-of-CVE-2022-36271 #cve #poc

​​Evading Detection: A Beginner's Guide to Obfuscation Defenders are constantly adapting their security to counter new threats. Our mission is to identify how they plan on securing their systems and avoid being identified as a threat. This is a hands-on class to learn the methodology behind malware delivery and avoiding detection. This workshop explores the inner workings of Microsoft's Antimalware Scan Interface (AMSI), Windows Defender, and Event Tracing for Windows (ETW). We will learn how to employ obfuscated malware using Visual Basic (VB), PowerShell, and C# to avoid Microsoft's defenses. Students will learn to build AMSI bypass techniques, obfuscate payloads from dynamic and static signature detection methods, and learn about alternative network evasion methods. ▫️ Understand the use and employment of obfuscation in red teaming. ▫️ Demonstrate the concept of least obfuscation. ▫️ Introduce Microsoft's Antimalware Scan Interface (AMSI) and explain its importance. ▫️ Demonstrate obfuscation methodology for .NET payloads. https://github.com/BC-SECURITY/Beginners-Guide-to-Obfuscation

​​Meerkat Meerkat is collection of PowerShell modules designed for artifact gathering and reconnaisance of Windows-based endpoints without requiring a pre-deployed agent. Use cases include incident response triage, threat hunting, baseline monitoring, snapshot comparisons, and more. https://github.com/TonyPhipps/Meerkat