HackGit

​​RHM: Robot Hacking Manual The Robot Hacking Manual (RHM) is an introductory series about cybersecurity for robots, with an attempt to provide comprehensive case studies and step-by-step tutorials with the intent to raise awareness in the field and highlight the importance of taking a security-first1 approach. The material available here is also a personal learning attempt and it's disconnected from any particular organization. Content is provided as is and by no means I encourage or promote the unauthorized tampering of robotic systems or related technologies. https://github.com/vmayoral/robot_hacking_manual

​​PHPGGC A library of unserialize() payloads along with a tool to generate them, from command line or programmatically. https://github.com/ambionics/phpggc

​​USB Ninja USB Ninja is an information security and penetration testing tool that looks and functions just like a regular USB cable (both power and data) until a wireless remote control triggers it to deliver your choice of attack payload to the host machine. In essence, USB Ninja is the next step in the evolution of BadUSB, embedding the attack in the USB cable itself. Emulating keyboard and mouse actions, payloads can be completely customized and can be highly targeted. Undetectable by firewalls, AV software (depending on payload of course) or visual inspection, the USB Ninja is an ideal tool for penetration testers, police and government. Wireless trigger device for the USB Ninja. Can trigger two different payloads via toggle buttons. Accepts RP-SMA antennas if you want greater distances for remote payload triggering. Documentation: https://usbninja.com/help/ Buy online: 🛒 Cable https://ali.ski/IjDEv4 🛒 Bluetooth Remote https://ali.ski/aVNHh #usb #badusb #cable

​​Fast Google Dorks Scan The #OSINT project, the main idea of which is to collect all the possible Google dorks search combinations and to find the information about the specific web-site: common admin panels, the widespread file types and path traversal. The 100% automated. https://github.com/IvanGlinkin/Fast-Google-Dorks-Scan

​​Cloudmare Cloudmare is a simple tool to find the origin servers of websites protected by Cloudflare, Sucuri, or Incapsula with a misconfiguration DNS. https://github.com/mrh0wl/Cloudmare

​​GHunt (v2) GHunt is an offensive Google framework, designed to evolve efficiently. It's currently focused on #OSINT, but any use related with Google is possible. Features: ▫️ CLI usage and modules ▫️ Python library usage ▫️ Fully async ▫️ JSON export ▫️ Browser extension to ease login https://github.com/mxrch/GHunt

​​MSI Dump A tool that analyzes malicious MSI installation packages, extracts files, streams, binary data and incorporates YARA scanner. ▫️ Quickly determine whether file is suspicious or not. ▫️ List all MSI tables as well as dump specific records ▫️ Extract Binary data, all files from CABs, scripts from CustomActions ▫️ scan all inner data and records with YARA rules ▫️ Uses file/MIME type deduction to determine inner data type https://github.com/mgeeky/msidump

​​Vultriever Vulnerability scoring with Nmap A small tool that allows you to convert to Excel and JSON formats the results of using the #Nmap scanner in conjunction with the built-in Vulners snap-in. It was created to automate the process of inventory of open ports and running network services on the server and scoring of existing vulnerabilities determined based on the versions of the software used. Implemented the use of Vultriever from the terminal and as an imported module in native Python scripts. In the process, Vultriever collects and provides the following information about the server in a structured form: ▫️ Server IP address ▫️ Network port number ▫️ Network port status ▫️ Protocol used by the network port ▫️ Network service operating on the network port and its version ▫️ Vulnerability CVE-identifier ▫️ Vulnerability rating ▫️ URL-link to the description of the vulnerability on the platform Vulners.com https://github.com/MalwareHunters/vultriever

​​Overlord – Red Teaming Automation Overlord provides a python-based console CLI which is used to build Red Teaming infrastructure in an automated way. The user has to provide inputs by using the tool’s modules (e.g. C2, Email Server, HTTP web delivery server, Phishing server etc.) and the full infra / modules and scripts will be generated automatically on a cloud provider of choice. Currently supports AWS and Digital Ocean. The tool is still under development and it was inspired and uses the Red-Baron Terraform implementation found on Github. https://github.com/qsecure-labs/overlord A demo infrastructure was set up in our blog post: https://qsecure.com.cy/resources/publications/overlord/. For the full documentation of the tool visit the Wiki tab at: https://github.com/qsecure-labs/overlord/wiki.

​​HashDB A community-sourced library of hashing algorithms used in malware. https://github.com/OALabs/hashdb

​​Bash malware This is a collection of beautified and commented samples of malware implemented as shell (mostrly Bash) scripts. Each directory contains the original version of the sample and the beautified version that I prepared. There is also an associated blog post for each sample providing more details: AWFULSHRED https://github.com/0xjet/bash-malware

​​open-pdf-sign The open-pdf-sign CLI application allows to easily sign PDF files from the commandline. Signatures can be invisible or visible, and visible signatures can be customized. Features: ▫️ Visible PDF signature in PDF (multi language support) ▫️ Invoke via CLI or via starting a server ▫️ Supported Signature type: PAdES ▫️ Supported Signature profiles: → BASELINE-B → BASELINE-T → To be evaluated: BASELINE-LT, BASELINE-LTA https://github.com/open-pdf-sign/open-pdf-sign

​​axiom Axiom is a dynamic infrastructure framework to efficiently work with multi-cloud environments, build and deploy repeatable infrastructure focussed on offensive and defensive security. https://github.com/pry0cc/axiom

​​SEH Helper A Binary Ninja helper for exploring structured exception handlers in PEs. https://github.com/EliseZeroTwo/SEH-Helper

​​URLClassLoader hot jar swapping The following example code shows the ability to hot jar swap an already loaded JAR-file and get code execution by abusing the fact that inner classes still access the JAR file when invoked, as long as the inode does not change. https://github.com/fransr/hot-jar-swapping-urlclassloader

​​blockchain hacker toolkit the resources in this repository are from my own research, which is intermittent and boundless. therefore, no guarantees, no promises; use it at your own risk. https://github.com/go-outside-labs/blockchain-hacking

​​subrut Subrut is the super fast tool for brute forcing subdomains. From arg2u with. https://github.com/arg2u/subrut

​​IHKEY Ransomware IHKEY is a complete #Ransomware project built while I was learning about malwares For encryption I used AES for encrypt files and RSA for encrypt the Private key along with IV The Ransomware demonstrate how hackers can built there own Ransomware for encrypt files on windows systems https://github.com/moe-ih/IHkey

​​Owlyshield An AI antivirus written in Rust Owlyshield is an open-source AI-driven #antivirus engine written in Rust. Static analysis as performed by AV is only able to detect known threats, explaining why hackers are adapting so quickly and ransom attacks surging. We provide an embedded behavioural analysis AI that is able to detect and kill ransomwares in their very early execution. https://github.com/SitinCloud/Owlyshield

​​If you like what we do support us! 🥷 https://www.buymeacoffee.com/HackGit TON:

UQAAZ1BFX5OsybSryoFunzyJN3F7oKWMbZNPlwMTcVK8mEzA

BTC:

1987zNaVX53v7tzpKRRde84uXbDYjuNykL