HackGit

​CVE-2022-26937 Windows Network File System Crash PoC https://github.com/omair2084/CVE-2022-26937 #cve

​Fivem-Exec-bypass Safe and practical Exec Bypass. https://github.com/SarnaxLii/Fivem-Exec-bypass

MikroTik Cloud Hosted Router Universal Unpatchable Jailbreak https://github.com/pedrib/PoC/blob/master/tools/mikrotik_jailbreak.py

​Caesium Powerful Java bytecode obfuscator written by sim0n for fun, and released for the public. Currently available mutators: ▫️ Class Folder (Turns classes into folders) ▫️ Control Flow ▫️ Crasher (Will crash almost every GUI based RE tool) ▫️ Local Variable ▫️ Line Number ▫️ Number ▫️ Polymorph ▫️ Reference (invokedynamics) ▫️ String ▫️ Trim (Currently only trims math functions) https://github.com/sim0n/Caesium

​SuspendEventLogBOF Beacon Object File to locate and suspend the threads hosting the Event Log service. Utilizes syscalls via InlineWhispers. https://github.com/nick-frischkorn/SuspendEventLogBOF

​InlineWhispers Dump the LSASS process via the silent process. This implementation use direct syscall genreated with Outflanknl's InlineWhispers. https://github.com/guervild/BOFs/tree/dev/SilentLsassDump #lsass #dump #mimikatz #memory

​WiFi Exploitation Framework A fully offensive framework to the 802.11 networks and protocols with different types of attacks for WPA and WEP, automated hash cracking, bluetooth hacking and much more. Supported attacks: ✔️ Deauthentication Attack ✔️ Authentication Attack ✔️ Beacon Flood Attack ✔️ PKMID Attack ✔️ EvilTwin Attack ✔️ Passive/Stealthy Attack ✔️ Pixie Dust Attack ✔️ Null Pin Attack ✔️ Chopchop Attack ✔️ Replay Attack ✔️ Michael Exploitation Attack ✔️ Caffe-Latte Attack ✔️ Jamming, Reading and Writing bluetooth connections ✔️ GPS Spoofing with HackRF Features: ▫️ Log generator ▫️ WPA/WPA2, WPS and WEP Attacks ▫️ Auto handshake cracking ▫️ Multiple templates for EvilTwin attack ▫️ Check monitor mode and it status ▫️ 2Ghz and 5Ghz attacks ▫️ Custom wordlist selector ▫️ Auto detect requirements ▫️ Bluetooth support (Jamming, Reading, Writing) https://github.com/D3Ext/WEF

​API Security Empire In this repository you will find: Mindmaps, tips & tricks, resources and every thing related to API Security and API Penetration Testing. Our mindmaps and resources are based on OWASP TOP 10 API, our expereince in Penetration testing and other resources to deliver the most advanced and accurate API security and penetration testing resource in the WEB!! https://github.com/Cyber-Guy1/API-SecurityEmpire

​HackDroid Pentesting Using Android. Hackdroid is a collection of pentesting and security related apps for android. The applications are divided into different categories so you can easily download any application from any category and use them for penetration testing and ethical hacking. ▫️ Android Apps: 250+ apps in 20+ categories like wifi, hid, MITM, sniffing, etc. ▫️ OS / Platform: hacking operating system (ROM) and platforms for android. ▫️ Blog: useful articles related to hacking with android. https://github.com/thehackingsage/hackdroid

​VED (Vault Exploit Defense) Linux kernel threat detection and prevention system https://github.com/hardenedvault/ved

​mRemoteNG An open source, multi-protocol, tabbed remote connections manager allowing you to view all of your connections in a simple yet powerful interface. @HackGit The following protocols are supported: ▫️ RDP (Remote Desktop Protocol) ▫️ VNC (Virtual Network Computing) ▫️ SSH (Secure Shell) ▫️ Telnet (TELecommunication NETwork) ▫️ HTTP/HTTPS (Hypertext Transfer Protocol) ▫️ rlogin (Remote Login) ▫️ Raw Socket Connections ▫️ Powershell remoting https://github.com/mRemoteNG/mRemoteNG Website: https://mremoteng.org/ Documentation: https://mremoteng.readthedocs.io/en/latest/ #remote #best

​Learn365 This repository contains all the information shared during my Learn 365 Challenge. Learn 365 is a challenge to keep the learning spirit going on and challenge myself to learn something daily for the whole year, it can be anything from infosec to general life. https://github.com/harsh-bothra/learn365

​Friendzone This is an automated exploit maker that their core is metasploit framework. This program use msfconsole to create exploits and msfconsole to linstener it. Additional Features of v1.0 ▫️ The Friendzone program use the Polymorphic XOR Additive Feedback Encoder Shikata ga nai to encode the payload, this makes it a little more invisible to antivirus. ▫️ This have a default values to make your work even easier. ▫️ Section where it shows previously set values. https://github.com/n0obit4/Friendzone #exploit

​CVE-2022-30023 Authenticated Command Injection on Tenda HG9 Router. https://github.com/Haniwa0x01/CVE-2022-30023 #cve

And don't forget to subscribe to Facebook. https://www.facebook.com/HackGit

Subscribe to our Twitter feed! There are already 500 people there! https://twitter.com/hack_git @HackGit

​Autowasp #Burp Suite extension that integrates Burp issues logging, with OWASP Web Security Testing Guide (WSTG), to provide a streamlined web security testing flow for the modern-day penetration tester! This tool will guide new penetration testers to understand the best practices of web application security and automate OWASP WSTG checks. This README will provide an introduction to the key features of Autowasp, the steps to download and use the tool, and end off by sharing how security researchers and developers can make this tool better! https://github.com/PortSwigger/autowasp

​Crimson Lisp Crimson Lisp is a tool that automates post-exploitation PRIVILEGE ESCALATION & LOOTING phases. It uses many open source tools. Most of them are available for download from GitHub. https://github.com/Karmaz95/crimson_lisp

​PwnShell PwnShell is a tool that will help you get a reverse shell and upload post-exploitation scripts to target machine instead of wasting your time with this regular ctf stuff... just confirm the injection point and feed it to this dumb tool. https://github.com/zAbuQasem/PwnShell