HackGit

​​BlueMap An Interactive Exploitation Toolkit for Azure. BlueMap helps penetration testers and red teamers to perform Azure auditing, discovery & enumeration, and exploitation in interactive mode that saves complex opsec and overhead that usually exists in Azure penetration testing engagements. https://github.com/SikretaLabs/BlueMap

​​VulnerableCode VulnerableCode is a free and open database of open source software package vulnerabilities because open source software vulnerabilities data and tools should be free and open source themselves: we are trying to change this and evolve the status quo in a few other areas! ▫️ Vulnerability databases have been traditionally proprietary even though they are mostly about free and open source software. ▫️ Vulnerability databases also often contain a lot of lesser value data which means a lot of false positive signals that require extensive expert reviews. ▫️ Vulnerability databases are also mostly about vulnerabilities first and software package second, making it difficult to find if and when a vulnerability applies to a piece of code. VulnerableCode focus is on software package first where a Package URL is a key and natural identifier for packages; this is making it easier to find a package and whether it is vulnerable. https://github.com/nexB/vulnerablecode

​​ProcInjectShellcode Process Injection using Windows SYSCALLS. https://github.com/nixpal/ProcInjectSyscall

​​SpyGuard SpyGuard is a forked and enhanced version of TinyCheck, developed by the same author when he was working at Kaspersky. SpyGuard's main objective is to detect signs of compromise by monitoring network flows transmitted by a device. As it uses WiFi, SpyGuard can be used against a wide range of devices, such as smartphones, laptops, IOTs or workstations. To do its job, the analysis engine of SpyGuard is using Indicators of Compromise (IOCs), anomaly detection and is supported by Suricata. https://github.com/SpyGuard/SpyGuard

​​AzureADAssessment Tooling for assessing an Azure AD tenant state and configuration. https://github.com/AzureAD/AzureADAssessment

​​ShellWasp Tool to faciliate creating shellcode utilizing syscalls The Assembly generated by ShellWasp is compact in size. Additionally, as many people have automatic Windows update, it may be desirable to select only more recent OS builds, rather than every possible one, and this helps reduce size as well. Users can easily and quickly rearrange syscalls in shellcode. ShellWasp only supports Windows 7/10/11 at the moment, as a desing choice. It is easy to select desired Windows releases via config file or UI. Changes can also be saved to the to config. https://github.com/Bw3ll/ShellWasp

​​Awesome Hacking A curated list of awesome Hacking. Inspired by awesome-machine-learning For a list of free hacking books available for download, go here https://github.com/carpedm20/awesome-hacking

​​SDTO-realworld-subdomains A repository to host the subdomain wordlists from my blog "What I learnt from reading 217 subdomain takeover bug reports" https://github.com/iamNynan/SDTO-realworld-subdomains

​​Tiny-XSS-Payloads A collection of short XSS payloads that can be used in different contexts. https://github.com/terjanq/Tiny-XSS-Payloads Demo: https://tinyxss.terjanq.me/

​​scalpel 🗡 Scalpel is a command line scanner that can deeply parse parameters in HTTP requests to generate more accurate http messages based on Poc. Currently, HTTP passive proxy mode is supported for scanning. Users can customize POC, and we can also expose the POC repository on Github. https://github.com/StarCrossPortal/scalpel/wiki

​​PowerView.py This is an alternative for the awesome original PowerView script. Most of the modules used in PowerView are available in this project. https://github.com/aniqfakhrul/powerview.py #ad #powerview #python #tools

​​Image Rat You can control andeoid mobile send image (jpg, png), Image Rat Support android 12 https://github.com/pro-rat/IMAGE-RAT

​​CVE-2021-43657 This is a reference/POC for CVE-2021-43657 This vulnerability was found when i was playing with the open source software which is responsible for Employee Task Management System. https://github.com/c0n5n3d/CVE-2021-43657 #cve

​​Volumiser Volumiser is a command line tool and interactive console GUI for listing, browsing and extracting files from common virtual machine hard disk image formats. The tool was written to combat a regular problem where massive 100G+ disk images are often hard to work with or exfiltrate when performing red team operations. Whilst the tool was created for offensive operations, the tool also has benefits outside of it's original intended purpose. https://github.com/CCob/Volumiser

​​Awesome TLS This extension hijacks Burp's HTTP/TLS stack and allows you to spoof any browser fingerprint in order to make it more powerful and less prone to fingerprinting by all kinds of WAFs. It does this without resorting to hacks, reflection or forked Burp Suite Community code. All Java code in this repository only leverages Burp's Extender API. https://github.com/sleeyax/burp-awesome-tls

​​Shennina Shennina is an automated host exploitation framework. The mission of the project is to fully automate the scanning, vulnerability scanning/analysis, and exploitation using Artificial Intelligence. Shennina is integrated with Metasploit and Nmap for performing the attacks, as well as being integrated with an in-house Command-and-Control Server for exfiltrating data from compromised machines automatically. https://github.com/mazen160/shennina

​​S-ADB ▫️ Console shell for Android Debug Bridges. ▫️ More Functionality and more speedy. ▫️ Partial change of colors. ▫️ Partial translated to english The software may have errors, we will fix it later. https://github.com/krakodjaba/S-ADB

​​Harriet Harriet was inspired by the Charlotte C++ shellcode loader. This tool uses AES encryption and function/variable obfuscation to get around AV and Windows Defender. Most of the code was taken from the Sektor 7 Malware Development Essentials course. All credit goes to reenz0h and @Sektor7net. I wrote this mainly as a way to get a quick undetected executable for testing and to not have to switch over to a Windows VM every five seconds for compiling. https://github.com/assume-breach/Home-Grown-Red-Team/tree/main/Harriet

​​WhacAMole WhacAMole is a program that analyzes processes in memory in an integral way, detecting and alerting of anomalies related to malware and presenting and saving in files all the relevant information for verification, correlation or analysis, as well as dumping memory regions, processes and suspicious modules. To achieve this, it analyzes not only the anomalies of the memory regions of the processes and the modules they load, but it also analyzes in depth all the memory space in use by the process. At this moment, WhacAMole is capable of identifying 67 alerts related to malicious behavior or that can only be due to malware. It shows more than 70 properties of the processes, memory and modules, comparing many of their attributes read in memory with those that appear in the corresponding file on disk, partially disassembles suspicious memory regions and partially disassembles exported functions that have been modified in memory for analysts to conduct their own investigations. https://github.com/ignacioj/WhacAMole