HackGit

​​CVE-2022-36200 FiberHome VDSL2 Modem HG150-Ub_V3.0 (PTCL) - Admin Credentials are submitted in the URL https://github.com/afaq1337/CVE-2022-36200 #cve

​​Vulnerable-Soap-Service It is a vulnerable SOAP web service. It is a lab environment created for people who want to improve themselves in the field of web penetration testing. Features: It contains the following vulnerabilities. ▫️ LFI ▫️ SQL Injection ▫️ Informaion Disclosure ▫️ Command Inejction ▫️ Brute Force ▫️ Deserialization https://github.com/anil-yelken/Vulnerable-Soap-Service t.me/hackgit

​​jscythe jscythe abuses the node.js inspector mechanism in order to force any node.js/electron/v8 based process to execute arbitrary javascript code, even if their debugging capabilities are disabled. https://github.com/evilsocket/jscythe t.me/hackgit

​​Commit Stream commit-stream drinks commit logs from the Github event firehose exposing the author details (name and email address) associated with Github repositories in real time. #OSINT / Recon uses for Redteamers / Bug bounty hunters: ▫️ Uncover repositories which employees of a target company is commiting code (filter by email domain) ▫️ Identify repositories belonging to an individual (filter by author name) ▫️ Chain with other tools such as trufflehog to extract secrets in uncovered repositories. Defenders may find the tool useful to discover repositories that employees are committing intellectual property to. https://github.com/robhax/commit-stream t.me/hackgit

​​0xdork Google dorking tool. Google hacking, also named Google dorking, is a hacker technique that uses Google Search and other Google applications to find security holes in the configuration and computer code that websites are using. Google dorking could also be used for OSINT(Open Source Intelligence). https://github.com/rly0nheart/oxdork @HackGit

​​Microsoft-eventlog-mindmap Microsoft eventlog mindmap provides an overview on well-known Microsoft products and solutions, as well as their auditing capacities. It enables defenders to enhance visibility on monitored environments for purposes like: ▫️ Log collection (eg: into a SIEM) ▫️ Threat hunting ▫️ Incident response ▫️ Forensic ▫️ Troubleshooting https://github.com/mdecrevoisier/Microsoft-eventlog-mindmap @HackGit

​​Shellcrypt A single-file cross-platform quality of life tool to obfuscate a given shellcode file and output in a useful format for pasting directly into your source code. https://github.com/iilegacyyii/Shellcrypt @HackGit

​​DARKARMY A Collection Of Penetration Testing Tools, you will have every script that a hacker needs. https://github.com/D4RK-4RMY/DARKARMY @HackGit

​​Cyber-Sploit A framework like a metasploit containg a variety of modules for pentesting or ethical hacking. This repo willl be updated and new modules will be added time to time. This framwork is still under development phase. Those who are intrested for adding new modules can contribute. Mostly modules are written in Python, others may be aded with time (Ruby, GoLang). https://github.com/Cyber-Dioxide/Cyber-Sploit @HackGit

​​netbox NetBox is the leading solution for modeling and documenting modern networks. By combining the traditional disciplines of IP address management (IPAM) and datacenter infrastructure management (DCIM) with powerful APIs and extensions, NetBox provides the ideal "source of truth" to power network automation. Available as open source software under the Apache 2.0 license, NetBox is employed by thousands of organizations around the world. https://github.com/netbox-community/netbox Demo: https://demo.netbox.dev/

​​GrabAccess A tool for bypassing Windows login passwords and Bitlocker. https://github.com/Push3AX/GrabAccess t.me/hackgit 🥷🏼

​​Ermir Ermir is an Evil/Rogue RMI Registry, it exploits unsecure deserialization on any Java code calling standard RMI methods on it (list()/lookup()/bind()/rebind()/unbind()). https://github.com/hakivvi/ermir t.me/hackgit

​​CVE-2022-38555 Linksys E1200 buffer overflow vulnerability https://github.com/xxy1126/Vuln/tree/main/1 #cve

​​pyWhat The easiest way to identify anything Imagine this: You come across some mysterious text 🧙‍♂️ 0x52908400098527886E0F7030069857D2E4169EE7 or dQw4w9WgXcQ and you wonder what it is. What do you do? Well, with what all you have to do is ask what "0x52908400098527886E0F7030069857D2E4169EE7" and what will tell you! what's job is to identify what something is. Whether it be a file or text! Or even the hex of a file! What about text within files? We have that too! what is recursive, it will identify everything in text and more! https://github.com/bee-san/pyWhat @HackGit

​​Awesome Cryptography A curated list of #cryptography resources and links. https://github.com/sobolevn/awesome-cryptography/ @HackGit

​​Hackers No Hashing Randomizing API Hashes to Evade Cobalt Strike Shellcode Detection. If you utilise API hashing in your malware or offensive security tooling. Try rotating your API hashes. This can have a significant impact on detection rates and improve your chances of remaining undetected by AV/EDR. https://github.com/matthewB-huntress/APIHashReplace Research: https://www.huntress.com/blog/hackers-no-hashing-randomizing-api-hashes-to-evade-cobalt-strike-shellcode-detection #maldev #evasion #hinvoke #cobaltstrike #redteam

​​Inumaki Shell generator for CTFs! inumaki! is a command-line tool written in python which helps remove the tedium of common capture-the-flag 'shell searching'. https://github.com/cr-0w/inumaki @HackGit

Proxmark 3 RDV4 "BlueShark" The Proxmark 3 is a dedicated, highly-capable multi-tool for RFID analysis, providing reading, writing, analysis, snooping, replaying, emulation, modulation, demodulation, decoding, encoding, decryption, encryption for any RFID system operating in the 125KHz, 134KHz and 13.56MHz frequencies. The Proxmark 3 RDV4 "BlueShark" Standalone Kit brings integrated, wireless standalone functionality to the Proxmark 3 RDV 4: ▫️ Standalone Mode ▫️ Offline sniffing ▫️ Offline reading & simulation Built with penetration testers in mind, this upgrade consists of: ▫️ Bluetooth 2.0 EDR module ▫️ Rechargeable polymer lithium-ion Battery module ▫️ Aluminium case + heatsink ▫️ Tempered glass cover The high-grade aluminium case not only protects against bumps, scratches and shock, but also acts as a heat-sink, providing increased performance and read/write ranges for the Proxmark. Backward compatible with all Proxmark 3 RDV4 devices, and fully integrated into the official RDV 4 Github Codebase allows for: ▫️ Full Standalone Mode support ▫️ Full High-speed Bluetooth support Proxmark3 RDV4 + BlueShark : Connect with Kali Linux: https://www.youtube.com/watch?v=27_9D6vpClE Repository: https://github.com/RfidResearchGroup/proxmark3 Buy online: 🛒 https://ali.ski/9-8qYo #rfid #PentestingShop

​​Vision This script analyses the Nmap XML scanning results, parses each CPE context and correlates to search CVE on NIST. You can use that to find public vulnerabilities in services. https://github.com/CoolerVoid/Vision2 @HackGit

​​Elevator Allows to bypass the UAC and spawn an elevated process with full administrator privileges. https://github.com/Kudaes/Elevator @HackGit