HackGit

​​Windows10 - Custom Kernel Signers Load self-signed drivers without TestSigning or disable DSE. https://github.com/HyperSine/Windows10-CustomKernelSigners #windows #drivers #rootkit

​​CVE-2022-39197 critical Cobalt Strike bug could lead to RCE attacks. https://github.com/burpheart/cve-2022-39197 Details: https://securityonline.info/cve-2022-39197-critical-cobalt-strike-bug-could-lead-to-rce-attacks/ #cve

​​RustChain This tool is a simple PoC of how to hide memory artifacts using a ROP chain in combination with hardware breakpoints. The ROP chain will change the main module memory page's protections to N/A while sleeping (i.e. when the function Sleep is called). For more detailed information about this memory scanning evasion technique check out the original project Gargoyle. x64 only. https://github.com/Kudaes/RustChain

​​ManualRsrcDataFetching Get your data from the resource section manually, with no need for windows apis https://github.com/ORCx41/ManualRsrcDataFetching t.me/hackgit

​​Leonidas This is the repository containing Leonidas, a framework for executing attacker actions in the cloud. It provides a YAML-based format for defining cloud attacker tactics, techniques and procedures (TTPs) and their associated detection properties. https://github.com/WithSecureLabs/leonidas

​​BufferOverflowKiller v1.0 A tool for buffer overflow attacks https://github.com/baimao-box/BufferOverflowKiller

​​FakeBurpCert Burp suite Certificate modification tool. This tool is used to modify or add information that is not included in the dynamically generated certificates in PortSwiggers Burp Suite. Currently working: ▫️ Modification of CN ▫️ Set the serial number ▫️ Set the date of the certificate ▫️ Modification or add a SAN (Subject Alternative Name). ▫️ Add an OCSP URI. https://github.com/raise-isayan/FakeCert

​​TheScrapper Scrape emails, phone numbers and social media accounts from a website. You can use the found information to gather more information or just find ways to contact the site. https://github.com/champmq/TheScrapper t.me/hackgit

​​ShotDroid v2 Pentesting tool for android. There are 3 tools that have their respective functions: Android Files: Get files from Android directory, internal and external storage (Images, Videos, Whatsapp, ..) Android Keylogger: Android Keylogging Keyboard + Reverse Shell. Take Face Webcam: Take face shot from the target phone's front camera and PC webcam. Features: ▫️ Hide apps in android files. ▫️ Custom android directory. ▫️ For Android Keylogger -> you can see it here: Simple-keyboard or LokiBoard. ▫️ Automatic html template in take face webcam. ▫️ Custom html or custom your html folder in take face webcam tool. ▫️ etc. https://github.com/kp300/shotdroid

​​Paybag Create metasploit payload easily using Paybag https://github.com/Deadpool2000/Paybag

​​LockBit-Black-Builder https://github.com/3xp0rt/LockBit-Black-Builder LockBit ransomware builder leaked online by “angry developer” https://www.bleepingcomputer.com/news/security/lockbit-ransomware-builder-leaked-online-by-angry-developer-/

​​AzureAttackKit Collection of Azure Tools to Pull down for Attacking an Env from a windows machine or Cloudshell. https://github.com/ZephrFish/AzureAttackKit t.me/hackgit

RFID Field Detector Tiny, portable dual-frequency RFID field detector. Completely passive - no batteries required - allowing for rapid identification of RFID presence. With this RFID Detector you can find out frequency and duty cycle of any passive LF (125kHz) / HF (13.56 MHz) reader! ▫️ LF coil has high Q, high sensitivity and long luminescence distance using 6-layer plate technology. ▫️ HF uses a diode voltage doubler circuit, high sensitivity, long luminous distance. ▫️ LF and HF are placed in the smallest volume without weakening, to ensure the best performance in small size. ▫️ Using epoxy resin to drop glue craft, ten years is like a new, waterproof and moistureproof, wear-resisting and fall-resistant, can carry. Buy online: 🛒 https://ali.ski/zpMpKN #rfid

​​graphw00f GraphQL Server Fingerprinting. https://github.com/dolevf/graphw00f t.me/hackgit

​​CVE-2022-38577 ProcessMaker - User Profile Privilege Escalation https://github.com/sornram9254/CVE-2022-38577-Processmaker #cve

​​Bluffy A utility which was used in experiments to bypass Anti-Virus products (statically) by formatting shellcode into realistic looking data formats. So far, we implemented: ▫️ UUID ▫️ CLSID ▫️ SVG ▫️ CSS ▫️ CSV https://github.com/preemptdev/bluffy

​​JuicyPotatoNG Just another Windows Local Privilege Escalation from Service Account to System. https://github.com/antonioCoco/JuicyPotatoNG Details: https://decoder.cloud/2022/09/21/giving-juicypotato-a-second-chance-juicypotatong/

​​FilelessRemotePE Loading Fileless Remote PE from URI to memory with argument passing and ETW patching and NTDLL unhooking and No New Thread technique. https://github.com/D1rkMtr/FilelessRemotePE