HackGit

​​PrChecker Verify if jar have backdoor/others malware's https://github.com/Halqq/PrChecker

​​Linux Kernel Learning This repository is to keep track of my steps learning about the Linux Kernel and Linux Kernel exploitation techniques. I might be adding random notes on various aspects of the Linux kernel, exploits of known vulnerabilities that I write myself as a means of learning (don't expect breakthrough research), tricks that I learn along the way, or just anything that I might want to write down for future reference. https://github.com/ocastejon/linux-kernel-learning t.me/hackgit

​​Expandable Scam-baiting Mail Server This is a open-source scam-baiting mail server for all relevant studies. You can customize your repliers (also called responders in the source code), add your own crawlers for fetching initial scam emails and configure directories and API keys. https://github.com/scambaitermailbox/scambaiter_backend

​​AWUS1900 Alfa AC1900 WiFi Adapter - 1900 Mbps 802.11ac Long-Range Dual Band USB 3.0 Wi-Fi Network Adapter w/4x 5dBi External Dual-Band Antennas Superior Wi-Fi Performance: Equipped with lastest 802.11ac wireless standards, and years of field-proven experiences, ALFA AWUS1900 provides 2.4GHz 600Mbps or 5GHz 1300Mbps Wi-Fi data transfer speeds for outstanding peformance. Giga-Fast 802.11ac Wireless, Better Range & Coverage: AWUS1900 comes with lastest 802.11ac standards with hardware-based WiFi optimization, plus two external high gain antennas, resulting in extra-ordinary signal range. Increased Bandwidth, More Applications: AWUS1900 supports Max. 600Mbps 2.4GHz or 1300Mbps 5GHz wireless access. Making it ideal for large traffic and lag-free HD video streaming for more devices in your living space. Increased Wireless Signal Penetration: With unmatched Wi-Fi signal strength and coverage. AWUS1900 not only has maximum WiFi range, it helps to penetrate walls, and eliminate Wi-Fi dead spots in your living space easily. How to install Alfa AWUS1900 RTL8814AU drivers on Kali Linux 2022 2+ & enable monitor mode: https://www.youtube.com/watch?v=K9mceYeWf8M Linux Driver for USB WiFi Adapters that are based on the RTL8814AU Chipset: https://github.com/morrownr/8814au Buy online: 🛒 https://amzn.to/3flM6Jk #adapter #wifi #alfa

​​Discord Image Token Password Grabber Exploit Cve Get system info (Version, CPU, GPU, RAM, IPs, BSSID, Location, Screen metrics, Installed apps) Chromium browsers (passwords, credit cards, cookies, history, autofill, bookmarks) Firefox browsers (db files, cookies, history, bookmarks) IE/Edge (passwords) Saved wifi networks & scan networks around device (SSID, BSSID) https://github.com/RydeinGG/Discord-Image-Token-Password-Grabber-Exploit-Cve-2022

​​Mitmproxy 9 We’re excited to announce the release of mitmproxy 9, a free and open source interactive HTTPS proxy. This release brings support for raw UDP and DTLS, a new WireGuard proxy mode, and major usability improvements. https://mitmproxy.org/posts/releases/mitmproxy9/ Repository: https://github.com/meitinger/mitmproxy

​​Awesome Embedded and IoT Security A curated list of awesome resources about embedded and IoT security. The list contains software and hardware tools, books, research papers and more. https://github.com/fkie-cad/awesome-embedded-and-iot-security

​​goscan Goscan is a standalone, fast IPv4 TCP scanner I created while learning Golang. I created this project for those times when you need to upload a self contained scanner to a pivot host, because scanning through proxychains is too damn slow! https://github.com/sdcampbell/goscan

​​Nmap for Pentester This cheatsheet was created to assist Red Teamers and Penetration Testers in hunting down vulnerabilities using "Nmap." It is designed such that beginners can understand the fundamentals and professionals can brush up their skills with the advanced options. There are multiple ways to perform all the mentioned tasks, so we've performed them all and compiled this list with our experience. https://github.com/Ignitetechnologies/Nmap-For-Pentester

Patching ETW A ETW patching Walkthrough. Patching Event Tracing for Windows, by overwriting "call ntdll!EtwpEventWriteFull" inside ntdll!EtwEventWrite, the patched call do the actual Event Writing. https://github.com/D1rkMtr/EtwPatching

​​DeployerVPN This repository provides a set of Ansible Playbook for automatic deployment of OpenVPN on servers running Ubuntu 20.04, support for other OS versions such as Ubuntu 18.04 or Debian is planned in the future. VPN can be deployed in Single, Double and Triple nodes. https://github.com/iamDeployer/DeployerVPN t.me/hackgit

​​FeatureRE Code for "Rethinking the Reverse-engineering of Trojan Triggers" https://github.com/RU-System-Software-and-Security/FeatureRE

​​TerraLdr A Payload Loader Designed With Advanced Evasion Features Details: ▫️ no crt functions imported ▫️ syscall unhooking using KnownDllUnhook ▫️ api hashing using Rotr32 hashing algo ▫️ payload encryption using rc4 - payload is saved in .rsrc ▫️ process injection - targetting 'SettingSyncHost.exe' ▫️ ppid spoofing & blockdlls policy using NtCreateUserProcess ▫️ stealthy remote process injection - chunking ▫️ using debugging & NtQueueApcThread for payload execution https://github.com/ORCx41/TerraLdr

​​Syzkaller Unsupervised coverage-guided kernel fuzzer Initially, syzkaller was developed with Linux kernel fuzzing in mind, but now it's being extended to support other OS kernels as well. Most of the documentation at this moment is related to the Linux kernel. For other OS kernels check: Akaros, Darwin/XNU, FreeBSD, Fuchsia, NetBSD, OpenBSD, Windows, gVisor. https://github.com/google/syzkaller

​​Arsenal of AWS Security Tools List of open source tools for AWS security: defensive, offensive, auditing, DFIR, etc. https://github.com/toniblyx/my-arsenal-of-aws-security-tools #aws #security #benchmarks #blueteam

​​ZoneAlarmEoP Exploit for Arbitrary File Move vulnerability in ZoneAlarm AV https://github.com/Wh04m1001/ZoneAlarmEoP

​​AWSGoat A Damn Vulnerable AWS Infrastructure AWSGoat is a vulnerable by design infrastructure on AWS featuring the latest released OWASP Top 10 web application security risks (2021) and other misconfiguration based on services such as IAM, S3, API Gateway, Lambda, EC2, and ECS. AWSGoat mimics real-world infrastructure but with added vulnerabilities. It features multiple escalation paths and is focused on a black-box approach. The project will be divided into modules and each module will be a separate web application, powered by varied tech stacks and development practices. It will leverage IaC through terraform and GitHub actions to ease the deployment process. https://github.com/ine-labs/AWSGoat

​​PowerHub PowerHub is a convenient post exploitation tool for PowerShell which aids a pentester in transferring data, in particular code which may get flagged by endpoint protection. Check out the Wiki! Features: ▫️ Fileless ▫️ Stateless ▫️ Cert pinning ▫️ String "obfuscation" by RC4 encryption ▫️ Choose your AMSI Bypass ▫️ Transparent aliases for in-memory execution of C# programs https://github.com/AdrianVollmer/PowerHub

​​Home-Grown-Red-Team This repo is a resource for various red teaming techniques and tools based on open source software and non-commerical tools. All of the tools and tradecraft on this repo will be geared toward using Raspberry Pis and Raspberry Pi Zero Ws instead of commerical implants like the Rubbery Ducky, BashBunny or Wifi Pineapple. https://github.com/assume-breach/Home-Grown-Red-Team

​​GhostPack-Compiled Binaries Compiled binaries for GhostPack authored by @harmj0y I will try to update them whenever new features/modifications are added to the original repos. https://github.com/r3motecontrol/Ghostpack-CompiledBinaries