HackGit

ORICO HDD/SSD Docking Station This docking station compatible with 2.5 inch or 3.5 inch HDD/SSD up to 16TB per bay, provide a more convenient way of transmitting data between your hard drive and computer through an available USB port. Support standalone clone, no need to connect with computer, which is more convenient.Built-in indicator and prompt tone to show the progress of clone. Support Windows/Linux/Mac and other major systems on the market, and it is applicable to computer, smart TV, PS4 and etc.. Original controller and years experience of designing storage devices make it stable. Support 10TB single disk storage; Designed with overload detection and multiple protections, keep your data safe. Tool-free, easy to plug Vertical heat dissipation, convenient to plug, no over heat, more smooth. Buy online: 🛒 https://ali.ski/X9Ipg #station #hdd #orico

breakcyserver ▫️ Kill EDR services by killing all the opened handles of the EDR process. ▫️ Bypass PPL by abussing some Process Explorer drivers functionalities. ▫️ Bypass ObRegisterCallbacks implementation by abussing Process Explorer driver functionalities. https://github.com/waawaa/breakcyserver

​​CVE-2022-31061 PoC for GLPI CVE-2022-31061 A Proof of Concept for GLPI >= 9.3.0 and < 10.0.2 - Unauthenticated SQL injection on login page https://github.com/Vu0r1-sec/CVE-2022-31061 #cve #poc

​​CustomXMLPart A PoC weaponising Custom XML parts for stealthily hiding malware code inside of Office document structures. https://github.com/mgeeky/CustomXMLPart Backdooring Office Structures. Part 2: Payload Crumbs In Custom Parts: https://mgeeky.tech/payload-crumbs-in-custom-parts/

​​Catspin Catspin is basically a AWS proxy tool, which rotates its IP every request. It is based on Amazons API Gateway and uses the 'X-Forward-To' header. Catspin can be used to for web-discovery and bypass IP-based blocks or slowdowns naturally. It can be chained with most tools from burp-scanner to gobuster, dirsearch, wfuzz, and various Typo3 or Wordpress-Scanner, etc. Basically, if you throw a HTTP Get at it, catspin can probably handle it. https://github.com/rootcathacking/catspin Research: https://www.rootcat.de/blog/catspin_july22/

​​EntropyFix A tool to reduce the entropy of your payload, It works By adding null bytes, in an ordered sequence: every 10 bytes it adds 5 null bytes. https://gitlab.com/ORCA000/entropyfix

​​Chisel-Strike A .NET XOR encrypted cobalt strike aggressor implementation for chisel to utilize faster proxy and advanced socks5 capabilities. https://github.com/m3rcer/Chisel-Strike

​​BlackStone Project v1.0 BlackStone project or "BlackStone Project" is a tool created in order to automate the work of drafting and submitting a report on audits of ethical hacking or pentesting. In this tool we can register in the database the vulnerabilities that we find in the audit, classifying them by internal, external audit or wifi, in addition, we can put your description and recommendation, as well as the level of severity and effort for its correction. This information will then help us generate in the report a criticality table as a global summary of the vulnerabilities found. We can also register a company and, just by adding its web page, the tool will be able to find subdomains, telephone numbers, social networks, employee emails... https://github.com/micro-joan/BlackStone

​​BlestSploit BlestSploit Framework, Blest Boyz ekibinden Exploits, Payloads, Posts ve Daha Fazlası gibi yayınlanmış modüllerle bir framework! https://github.com/G00Dway/BlestSploit

​​Fuzzable Framework for Automating Fuzzable Target Discovery with Static Analysis https://github.com/ex0dus-0x/fuzzable

​​PwnSpoof Generates realistic spoofed log files for common web servers with customisable attack scenarios. The idea behind the pwnSpoof application is to: ▫️ Provide a quick CTF style training environment ▫️ Create unique logs every run ▫️ Test threat hunting in IIS, Apache and NGINX logs https://github.com/punk-security/pwnspoof

​​Natac Portable HDD K390 Portable HDD is USB 3.0 interface external hard drive which equipped with AES 256-bit hardware encryption. It has independent keypad so you can input your password on the device directly instead of inputting it through computer. Connect the device with data line, no need to set up, plug and play directly; Connecting to an apple computer, no need to format the HDD, transfer the data freely. Capacity: 500G, 1TB, 2TB (optional) Buy online: 🛒 https://ali.ski/QSk-w #portable #hdd #usb #aaes

​​ADDS_Tool Active Directory Domain Services Tool. Windows Command shell program that is a wrapper for ADDS toolset: - DSQUERY - DSGET - DSADD - DSMOD - DSMOVE Features: ▫️ Main Menu ▫️ Settings Menu ▫️ Logs ▫️ Search Universal ▫️ Search User ▫️ Search Group ▫️ Search Computer ▫️ Search Server ▫️ Search OU https://github.com/DavidGeeraerts/ADDS_Tool

​​Exif Looter ExifLooter finds geolocation on all image urls and directories also integrates with OpenStreetMap. https://github.com/aydinnyunus/exifLooter

​​Wifi-Brute A tool to crack a wifi password with a help of wordlist. This may take long to crack a wifi depending upon number of passwords your wordlist contains. I've make it as fast as possible https://github.com/Cyber-Dioxide/Wifi-Brute

​​Public penetration testing reports Curated list of public penetration test reports released by several consulting firms and academic security groups. https://github.com/juliocesarfort/public-pentesting-reports

​​PCredz This tool extracts Credit card numbers, NTLM(DCE-RPC, HTTP, SQL, LDAP, etc), Kerberos (AS-REQ Pre-Auth etype 23), HTTP Basic, SNMP, POP, SMTP, FTP, IMAP, etc from a pcap file or from a live interface. https://github.com/snovvcrash/PCredz

​​Logsensor A Powerful Sensor Tool to discover login panels, and POST Form SQLi Scanning Features: ▫️ login panel Scanning for multiple hosts ▫️ Proxy compatibility (http, https) ▫️ Login panel scanning are done in multiprocessing https://github.com/Mr-Robert0/Logsensor

​​XSSER Cross Site "Scripter" is an automatic -framework- to detect, exploit and report XSS vulnerabilities in web-based applications. https://github.com/Xcod3bughunt3r/xsser

​​JSubFinder Tool writtin in golang to search webpages & javascript for hidden subdomains and secrets in the given URL. Developed with BugBounty hunters in mind JSubFinder takes advantage of Go's amazing performance allowing it to utilize large data sets & be easily chained with other tools. https://github.com/ThreatUnkown/jsubfinder