HackGit

​​MSRX6BT MSRX6(BT) is the First Bluetooth Smallest Magnetic Card Reader Writer Encoder. It offers a card reading writing solution for ISO 7811-6 formats. It is Powered by USB directly. It doesn't need an external power adapter. It has built-in chargeable battery. This enables it to be portable. It is a perfect card writer for people who often travel and move around. It works with all major operating systems such as Windows, Mac Computers and iOS, Android mobile phone and tablet. Buy online: 🛒 https://amzn.to/3UOoKdY 🛒 https://ali.ski/6FB4Q9 #usb #card #reader

​​emailGPT emailGPT is a quick and easy interface to generate emails with ChatGPT. To try it out, click the "Open in Streamlit" button above, or click here. https://github.com/lucasmccabe/emailGPT

​​Nosey Parker Find secrets in textual data Nosey Parker is a command-line tool that finds secrets and sensitive information in textual data. It is useful both for offensive and defensive security testing. Key features: ▫️ It supports scanning files, directories, and the entire history of Git repositories ▫️ It uses regular expression matching with a set of 60 patterns chosen for high signal-to-noise based on experience and feedback from offensive security engagements ▫️ It groups matches together that share the same secret, further emphasizing signal over noise ▫️ It is fast: it can scan at hundreds of megabytes per second on a single core, and is able to scan 100GB of Linux kernel source history in less than 5 minutes on an older MacBook Pro https://github.com/praetorian-inc/noseyparker

​​Aikido Wiper The wiper is implemented only for the vulnerabilities found in the Windows Defender, Windows Defender for Endpoint and SentinelOne EDR. ▫️ Windows Defender & Windows Defender for Endpoint - CVE-2022-37971 ▫️ TrendMicro Apex One - CVE-2022-45797 ▫️ Avast Antivirus & AVG Antivirus - CVE-2022-4173 https://github.com/SafeBreach-Labs/aikido_wiper

​​r4ven Track User's Smartphone/Pc Ip And Gps Location. The tool hosts a fake website which uses an iframe to display a legit website and, if the target allows it, it will fetch the Gps location (latitude and longitude) of the target along with IP Address and Device Information. https://github.com/spyboy-productions/r4ven

​​DCOMPotato Exploit collection for some Service DCOM Object local privalege escalation vulnerability (by SeImpersonatePrivilege abuse). https://github.com/zcgonvh/DCOMPotato

​​Hacking Stellar Hacking Stellar is an open-source e-book on Stellar, the decentralized payment network, which allows financial institutions, businesses, and individuals around the world to transact quickly and reliably. This online book introduces you to Stellar with lots of practical examples using the command-line client, Lumen, and moves on to building complete applications using the Javascript and Go libraries. https://github.com/0xfe/hacking-stellar

RedditC2 Abusing Reddit API to host the C2 traffic, since most of the blue-team members use Reddit, it might be a great way to make the traffic look legit. https://github.com/kleiton0x00/RedditC2

​​fireproxng fireproxng is a refresh of the widely loved fireprox. The original fireprox project appears to be mostly unchanged and I assume most organizations have transitioned to maintaining an internal version of the tool. We need fireprox to enable continuous penetration testing and would like to open up the updated version of the tool to the public. https://github.com/Sprocket-Security/fireproxng

​​DynamicLabs Creating lab environments for testing and learning red teaming/simulated attack techniques can be hard and time consuming. Dynamic Labs is an open source tool aimed at red teamers and pentesters for the quick deployment of flexible, transient and cloud-hosted lab environments. Its simple configuration files abstract the complexities of building realistic corporate environments with common vulnerabilities. For example, complex Active Directory multi-domain and multi-forest environments, user endpoints, Windows/Linux servers, databases, web applications, simple vulberabilities and convoluted attack paths can be deployed in minutes. Dynamic Labs ships with easily customisable lab templates, ready for deployment. https://github.com/ctxis/DynamicLabs

​​Quickstart Quark Script In this tutorial, we will learn how to install and run Quark Script with a very easy example. We show how to detect CWE-798 in ovaa.apk. https://github.com/quark-engine/quark-script

​​CVE-2022-25765 pdfkit Exploit Reverse Shell pdfkit <0.8.6 command injection shell. The package pdfkit from 0.0.0 are vulnerable to Command Injection where the URL is not properly sanitized. (Tested on ver 0.8.6) - CVE-2022-25765 https://github.com/CyberArchitect1/CVE-2022-25765-pdfkit-Exploit-Reverse-Shell #cve

​​IoT Hacking Resources A list of hacking/security resources that are focused on #IoT https://github.com/daniellowrie/IoT-Hacking-Resources

​​Pylirt Python Linux Incident Response Toolkit With this application, it is aimed to accelerate the incident response processes by collecting information in linux operating systems. https://github.com/anil-yelken/pylirt

​​CVE-2022-2414-Proof-Of-Concept A flaw was found in pki-core. Access to external entities when parsing XML documents can lead to XML external entity (XXE) attacks. This flaw allows a remote attacker to potentially retrieve the content of arbitrary files by sending specially crafted HTTP requests. https://github.com/amitlttwo/CVE-2022-2414-Proof-Of-Concept

​​InfosecHouse Tools & Resources for Cyber Security Operations A curated list of many tools and resources for both offensive and defensive security teams. https://github.com/InfosecHouse/InfosecHouse

​​pingtunnel Test possible data exfiltration through ping requests. https://github.com/5f0ne/pingtunnel

​​cbrutekrag Penetration tests on SSH servers using dictionary attacks. Written in C. https://github.com/matricali/cbrutekrag #pentesting #redteam

​​Klyda The Klyda project has been created to aid in quick credential based attacks against online web applications. Klyda supports the use from simple password sprays, to large multithreaded dictionary attacks. Klyda is a new project, and I am looking for any contributions. Any help is very appreciated. Klyda offers simple, easy to remember usage; however, still offers configurability for your needs: ▫️ Mulithreaded tasks ▫️ Combine wordlists for larger scale attacks ▫️ Blacklisting data to narrow down results ▫️ Limit thread speed for sneaky purposes https://github.com/Xeonrx/Klyda

​​ronin-vulns ronin-vulns is a Ruby library for blind vulnerability testing. It currently supports testing for Local File Inclusion (LFI), Remote File Inclusion (RFI), SQL injection (SQLi), reflective Cross Site Scripting (XSS), and Server Side Template Injection (SSTI), and Open Redirects. https://github.com/ronin-rb/ronin-vulns