HackGit

​​Dumpscan Command-line tool to extract and dump secrets from kernel and Windows Minidump formats https://github.com/daddycocoaman/dumpscan @HackGit

Rönd A lightweight container for distributed security policy evaluation. Features: ▫️ Allow or reject request ▫️ Query generation during the request flow ▫️ Response body patching https://github.com/rond-authz/rond @HackGit

​​Awesome Hacker Search Engines Search engines for different tasks: search exploits, attack surfaces, certificates, leaks credentials, source code repos and much more. https://github.com/edoardottt/awesome-hacker-search-engines #osint #infosec #cybersecurity

​​Cerbos Painless access control for cloud-native applications Cerbos helps you super-charge your authorization implementation by writing context-aware access control policies for your application resources. Author access rules using an intuitive YAML configuration language, use your Git-ops infrastructure to test and deploy them and, make simple API requests to the Cerbos PDP to evaluate the policies and make dynamic access decisions. https://github.com/cerbos/cerbos @HackGit

PEResourceInject A way to avoid using VirtualAllocEx/WriteProcessMemory to inject shellcode into a process. You need access to modify the target executable. ▫️ Write shellcode to the target's .rsrc as a bitmap using the UpdateResource APIs ▫️ Spawn the exe suspended ▫️ Calculate the shellcode location by parsing the PE header ▫️ VirtualProtectEx to RX ▫️ Get/SetThreadContext to execute https://github.com/Wra7h/PEResourceInject @HackGit

PoW Shield Project dedicated to fighting #DDoS and spam with proof of work, featuring an additional WAF. Docker images are available for rapid and lightweight deployment. Features: ▫️ Web Service Structure ▫️ Proxy Functionality ▫️ PoW Implementation ▫️ Dockerization ▫️ IP Blacklisting ▫️ Rate-limiting ▫️ Unit Testing ▫️ WAF Implementation ▫️ Multi-Instance Syncing (Redis) https://github.com/RuiSiang/PoW-Shield @HackGit

Shellcode Reflective DLL Injection (sRDI) https://github.com/memN0ps/srdi-rs

​​DSTIKE WIFI Duck This open source project aims to provide a user-friendly tool to learn about keystroke injection attacks. A microcontroller acts as a USB keyboard that is programmable over WiFi. It’s using the Ducky Script language that Hak5 introduced with the USB Rubber Ducky. A keyboard is trusted by most operating systems by default, which enables for a variety of attacks. Humans might not type very fast, but an automated device like this can. It can open a terminal and mess with your computer in a matter of a milliseconds! Spacehuhn has a lot of interesting projects, WiFi duck is a new version different from old WiFi ducky. For more details please check. Schematic pdf. What makes it special? ▫️ 4MB Flash ESP-WROOM-02 ▫️ Atmega32u4 ▫️ IIC connection between ESP8266 and Atmega32u4 ▫️ RGB LED ▫️ DIP Switch for different mode: ▫️ Arduino Flash Mode: 10101010 ▫️ ESP8266 Flash Mode: 01011101 ▫️ Work Mode: 10101101 🛒 https://bit.ly/3ngEDLR #wifi #duck

​​CVE-2022-34305 Apache Tomcat Cross-Site Scripting Vulnerability https://github.com/zeroc00I/CVE-2022-34305 #exploit

​​nim-loader WIP shellcode loader in nim with EDR evasion techniques https://github.com/adamsvoboda/nim-loader @HackGit

​​ADFSRelay This repository includes two utilities NTLMParse and #ADFSRelay. NTLMParse is a utility for decoding base64-encoded NTLM messages and printing information about the underlying properties and fields within the message. Examining these NTLM messages is helpful when researching the behavior of a particular NTLM implementation. ADFSRelay is a proof of concept utility developed while researching the feasibility of NTLM relaying attacks targeting the ADFS service. This utility can be leveraged to perform NTLM relaying attacks targeting ADFS. We have also released a blog post discussing ADFS relaying attacks in more detail [1]. https://github.com/praetorian-inc/ADFSRelay Relaying to ADFS Attacks https://www.praetorian.com/blog/relaying-to-adfs-attacks

​​kernel-mii Cobalt Strike Beacon Object File foundation for kernel exploitation using CVE-2021-21551. This is a Cobalt Strike (CS) Beacon Object File (BOF) which exploits CVE-2021-21551. It only overwrites the beacon process token with the system process token. But this BOF is mostly just a good foundation for further kernel exploitation via CS. https://github.com/tijme/kernel-mii #cobalt #cve

​​tlsx A fast and configurable TLS grabber focused on TLS based data collection and analysis. Features: ▫️ Fast And fully configurable TLS Connection ▫️ Multiple Modes for TLS Connection ▫️ Multiple TLS probes ▫️ Auto TLS Fallback for older TLS version ▫️ Pre Handshake TLS connection (early termination) ▫️ Customizable Cipher / SNI / TLS selection ▫️ TLS Misconfigurations ▫️ HOST, IP, URL and CIDR input ▫️ STD IN/OUT and TXT/JSON output https://github.com/projectdiscovery/tlsx

​​ldeep In-depth LDAP enumeration utility. https://github.com/franc-pentest/ldeep Usage Example: Enumerate ACEs on AdminSDHolder object

$ ldeep ldap -s 'ldap://10.10.13.37' -d megacorp -u j.doe -p 'Passw0rd!' -b 'CN=System,DC=megacorp,DC=local' sddl AdminSDHolder | jq '.[].nTSecurityDescriptor.DACL.ACEs[] | select(.Type | contains("Allowed")) | .SID + " :: " + .Type'

Convert SID to name

$ ldeep ldap -s 'ldap://10.10.13.37' -d megacorp -u j.doe -p 'Passw0rd!' from_sid <SID>

#ad #ldap

​​EMUX The EMUX Firmware Emulation Framework is a collection of scripts, kernels and filesystems to be used with QEMU to emulate ARM and MIPS Linux IoT devices. EMUX is aimed to facilitate IoT research by virtualising as much of the physical device as possible. It is the closest we can get to an actual IoT VM. Devices successfully emulated with EMUX so far: ▫️ Damn Vulnerable ARM Router ▫️ Damn Vulnerable MIPS Router (Little Endian) [NEW!] ▫️ Damn Vulnerable MIPS Router (Big Endian) [NEW!] ▫️ Trivision NC227WF Wireless IP Camera ▫️ Tenda AC15 Wi-Fi Router (Github Docs) ▫️ Archer C9 Wi-Fi Router https://github.com/therealsaumil/emux @HackGit

ExtractedDefender Just an attempt to group extracted data from Defender for research purposes. https://github.com/HackingLZ/ExtractedDefender @HackGit

​​firefucks.py This is a tool for patching Firefox Web Browser into allowing unsigned addons. Can be used as an apt hook. Mozilla, requiring extensions signing and signing in and getting 2FA for AMO is not nice. 🖕🔥 This tool has been created as a response to: ▫️ will of Mozilla to disallow unsigned extensions in regular builds of Firefox; ▫️ will of Mozilla to disallow WebExtensions Experiments in regular builds of Firefox; ▫️ will of Mozilla to require authentication on AMO in order to sign extensions; ▫️ unwillingness of devs of some distros to provide "Developer Edition" builds of Firefox. https://github.com/KOLANICH-tools/firefucks.py @HackGit

​​AuthCov Web app authorisation coverage scanning. AuthCov crawls your web application using a Chrome headless browser while logged in as a pre-defined user. It intercepts and logs API requests as well as pages loaded during the crawling phase. In the next phase it logs in under a different user account, the "intruder", and attempts to access each of one of the API requests or pages discovered previously. It repeats this step for each intruder user defined. Finally it generates a detailed report listing the resources discovered and whether or not they are accessible to the intruder users. https://github.com/authcov/authcov @HackGit

​​Norimaci "Norimaci" is a simple and lightweight malware analysis sandbox for macOS. This tool was inspired by "Noriben". Norimaci uses the features of OpenBSM or Monitor.app to monitor macOS system activity instead of Sysinternals Process Monitor (procmon). Norimaci consists of 3 Python scripts. ▫️ norimaci.py : Main script ▫️ openbsmconv.py : OpenBSM audit log converter ▫️ monitorappconv.py : Monitor.app data converter OpenBSM is a framework to audit activities on macOS. Please see their web site for details. Monitor.app is a free tool which is made by FireEye. Please see their web site for details. https://github.com/mnrkbys/norimaci @HackGit

​​TrelloC2 Simple C2 over Trello's API (Proof-of-Concept) https://github.com/secmode/TrelloC2 @HackGit