HackGit

​​NixImports A .NET malware loader, using API-Hashing and dynamic invoking to evade static analysis. https://github.com/dr4k0nia/NixImports #malware #cybersecurity #infosec

​​Introduction to macOS - TCC TCC (Transparency, Consent and Control) is a macOS mechanism aimed at protecting sensitive information. This includes access to user's private files (e.g. files on the Desktop), access to the camera and the microphone, location services access and many more. Interestingly, TCC protects those even against root-level attacks. https://github.com/yo-yo-yo-jbo/macos_tcc #cybersecurity #infosec #pentesting

​​Ransomchats Here you'll find #ransomware negotiations normalised as JSON files. Ransomware negotiations are usually not shared widely, limiting the understanding of the process. This project aims at changing that, in a respectful manner for the victims of cyberattacks: chats are anonymized as long as the victim hasn't been publicly disclosed, either by the attackers or in the media. https://github.com/Casualtek/Ransomchats #cybersecurity #infosec

​​File Archiver In The Browser Two sample phishing templates that can be used with .zip domains to emulate a file archiver in the browser. https://github.com/mrd0x/file-archiver-in-the-browser File Archiver In The Browser: https://mrd0x.com/file-archiver-in-the-browser/ #infosec #pentesting #redteam

​​DSTIKE D&B Watch (V4) A unique wearable device that combines the functionalities of a Deauther and BadUSB. It features an ESP8266 module with enhanced signal search capabilities and the addition of an Atmega32u4 chip (Arduino Leonardo), allowing for BadUSB attacks. The watch offers various programmable buttons for executing different commands and can be reprogrammed using the Arduino IDE. It also includes solder pads for connecting the ESP8266 with the Atmega32u4, enabling additional functionalities like the Wi-Fi Duck. The battery has been upgraded to 1000mAh, providing longer usage time, and the watch comes with a durable silicone strap. With a redesigned 3D case and the inclusion of a bottom acrylic board for protection, the watch boasts an improved design. Charging can be done through two USB ports, although it is advised not to charge simultaneously. Experience the power of deauthentication and bad USB attacks in this feature-rich wearable device. Buy online: 🛒 https://bit.ly/4315RJO 🛒 https://amzn.to/43g5CuF #badusb #dstike #watch #esp8266

​​HSTS Parser A tool to parse Firefox and Chrome HSTS databases into #forensic artifacts! https://github.com/thebeanogamer/hstsparser #cybersecurity #infosec

​​interactsh Open-source tool for detecting out-of-band interactions. It is a tool designed to detect vulnerabilities that cause external interactions. https://github.com/projectdiscovery/interactsh #pentesting #redteam #bugbounty

​​Stryker app Stryker is a new generation mobile pentest application. It will help you to test your networks and devices for common vulnerabilities without special skills and knowledge. And also provides you to add your expolits and new features! https://github.com/stryker-project/app #infosec #pentesting #redteam

​​MaccaroniC2 A proof-of-concept Command & Control framework that utilizes the powerful AsyncSSH Python library which provides an asynchronous client and server implementation of the SSHv2 protocol and use PyNgrok wrapper for ngrok integration. https://github.com/CalfCrusher/MaccaroniC2 #infosec #pentesting #redteam

​​Clash A rule-based tunnel in Go. https://github.com/Dreamacro/clash #infosec #privacy

​​KeeFarce Reborn A standalone DLL that exports databases in cleartext once injected in the KeePass process. https://github.com/d3lb3/KeeFarceReborn #infosec #pentesting #redteam

​​Postman It is designed to perform #OSINT recognition on a target for pentesting, bugbounty and more, in order to get the maximum information from the requests left by developers on the Postman public workspaces. https://github.com/boringthegod/postmaniac #cybersecurity #infosec

​​LogFileParser Parser for $LogFile on NTFS. https://github.com/jschicht/LogFileParser #cybersecurity #infosec

​​NIMOS Analysis of syscall sequence pattern from exploit codes for advanced system call sequence filtering for enhanced container security https://github.com/sominsong/NIMOS #cybersecurity #infosec

​​Qmap A distributed network mapper/security scanner. https://github.com/qadron/qmap #cybersecurity #infosec

​​pwntools - CTF toolkit Pwntools is a CTF framework and exploit development library. Written in Python, it is designed for rapid prototyping and development, and intended to make exploit writing as simple as possible. https://github.com/Gallopsled/pwntools #infosec #pentesting #CTF

​​AEM-List Start fuzzing paths and endpoints. https://github.com/clarkvoss/AEM-List/blob/main/paths #infosec #pentesting #bugbounty

​​sc2elf Simple dotnet Native AOT app that uses LibObjectFile to convert shellcode to ELF. https://github.com/Dump-GUY/sc2elf #infosec #cybersecurity #pentesting

​​Bug Bounty Platforms A community-powered collection of all known bug bounty platforms, vulnerability disclosure platforms, and crowdsourced security platforms currently active on the Internet. https://github.com/disclose/bug-bounty-platforms #infosec #pentesting #bugbounty