HackGit
前往频道在 Telegram
The channel was created for cybersecurity specialists. • Offensive Security • RedTeam • Malware Research • BugBounty • OSINT • etc Disclaimer: t.me/hackgit/2082 Donations - Ads: t.me/hackgit/5423
显示更多📈 Telegram 频道 HackGit 的分析概览
频道 HackGit (@hackgit) 英语 语言赛道中的 是活跃参与者。目前社区聚集了 21 579 名订阅者，在 技术与应用 类别中位列第 4 526，并在 美国 地区排名第 1 853 位。
📊 受众指标与增长动态
自 невідомо 创建以来，项目保持高速增长，吸引了 21 579 名订阅者。
根据 02 三月, 2025 的最新数据，频道保持稳定运转。过去 30 天订阅人数变化为 19，过去 24 小时变化为 0，整体触达仍然可观。
- 认证状态： 未认证
- 互动率 (ER)： 平均受众互动率为 0%。内容发布后 24 小时内通常能获得 N/A% 的反应，占订阅者总量。
- 帖子覆盖： 每篇帖子平均可获得 0 次浏览，首日通常累积 0 次浏览。
- 互动与反馈： 受众积极参与，单帖平均反应数为 0。
📝 描述与内容策略
作者将该频道定位为表达主观观点的平台：
“The channel was created for cybersecurity specialists.
• Offensive Security
• RedTeam
• Malware Research
• BugBounty
• OSINT
• etc
Disclaimer:
t.me/hackgit/2082
Donations - Ads:
t.me/hackgit/5423”
凭借高频更新（最新数据采集于 11 十一月, 2026），频道始终保持新鲜度与高覆盖。分析显示受众积极互动，使其成为 技术与应用 类别中的关键影响点。
21 579
订阅者
无数据24 小时
-37 天
+1930 天
帖子存档
21 579
Repost from Pentesting News
FwHunt Community Scanner
Tools for analyzing UEFI firmware and checking UEFI modules with FwHunt rules.
https://github.com/binarly-io/fwhunt-scan
21 579
StegoCracker
Stego is an open-source and free steganography tool that lets you hide your secret message in an image or audio file. You will not notice any change in the image or audio file. However, your secret message will be inside the original image or audio file.
https://github.com/W1LDN16H7/StegoCracker
21 579
qBitMF (qBittorrent-MultiFace)
qBitMF is a docker container that runs qBittorrent over multiple VPN (or other) interfaces simultaneously. This is an example of a "multiface" torrent client, multiface being a portmanteau of "multiple" and "interface".
https://github.com/qBitMF/qBitMF
21 579
sauron
Sauron is a minimalistic cross-platform malware scanner with non-blocking realtime filesystem monitoring using YARA rules, written in Rust.
https://github.com/evilsocket/sauron
21 579
EDRSandBlast
EDRSandBlast is a tool written in C that weaponize a vulnerable signed driver to bypass EDR detections (Kernel callbacks and ETW TI provider) and LSASS protections. Multiple userland unhooking techniques are also implemented to evade userland monitoring.
As of release, combination of userland (--usermode) and Kernel-land (--kernelmode) techniques were used to dump LSASS memory under EDR scrutiny, without being blocked nor generating "OS Credential Dumping"-related events in the product (cloud) console. The tests were performed on 3 distinct EDR products and were successful in each case.
https://github.com/wavestone-cdt/EDRSandblast/tree/DefCon30Release
21 579
ApiHashing
just a stable replacement, that is fast and efficient.
▫️ no imported functions
▫️ easy to use
▫️ compile time seed / string hashes (different hashes everybuild with no need to change anything)
▫️ saves the module handle by hash, for the next possible api, so that it wont search for the module in peb, but by hash in our map
▫️ handles forwarded functions
https://github.com/ORCx41/ApiHashing
#Donate @HackGit
21 579
RATata
A simple python RAT to setup and use.
It works with a third-party #API so you don't have to open ports of your Wi-Fi box.
Tools:
▫️ execute bash commands
▫️ download files
▫️ inject python scripts
Characteristics:
▫️ auto run on computer boot
▫️ hash a score of 9/70 on virus total, but can easily put to 0 with a crypter
https://github.com/loTus04/RATata
21 579
secureCodeBox
A kubernetes based, modularized toolchain for continuous security scans of your software project. Its goal is to orchestrate and easily automate a bunch of security-testing tools out of the box.
https://github.com/secureCodeBox/secureCodeBox
21 579
Siembol
An open-source, real-time Security Information & Event Management tool based on big data technologies, providing a scalable, advanced security analytics framework.
Siembol provides a scalable, advanced security analytics framework based on open-source big data technologies. Siembol normalizes, enriches, and alerts on data from various sources, which allows security teams to respond to attacks before they become incidents.
https://github.com/G-Research/siembol
21 579
WpCrack Tool
A tool used to force login into the WordPress CMS web application and is built in the Python programming language.
Features:
▫️ Very fast login
▫️ Use of HTTP proxies
▫️ Multithreading or Multiprocessor
https://github.com/22XploiterCrew-Team/WpCrack
#Donate @HackGit
21 579
Determining AD domain name via NTLM Auth
If you have nmap (http-ntlm-info) unable to determine the FQND of an Active Directory domain via OWA, for example due to Citrix NetScaler or other SSO solutions, do it manually!
1.
curl -I -k -X POST -H 'Authorization: NTLM TlRMTVNTUAABAAAAB4IIogAAAAAAAAAAAAAAAAAAAAAKANc6AAAADw==' -H 'Content-Length: 0' https://autodiscover.exmaple.com/ews
2. echo 'TlRMTVNTUAACAAAADAAMAD...' | python2 ./ntlmdecoder.py
https://gist.github.com/aseering/829a2270b72345a1dc42
#ntlm #auth #sso #tricks #pentest21 579
Matos
An open-source cloud security tool for analyzing multi-cloud infrastructure security.
▫️ Discover cloud assets (e.g. virtual machines, storage, databases, disks, and containers), and gather configuration and metadata of all the assets in the cloud environment.
▫️ Assess the configurations of your cloud assets to help identify misconfiguration, non-conformance to best practices and compliance standards.
▫️ Provides out-of-the-box Ansible scripts to remediate problems efficiently.
▫️ Support multi-cloud environment - Amazon Web Services (AWS), Google Cloud Platform (GCP) and Microsoft Azure cloud service providers.
https://github.com/cloudmatos/Matos
21 579
email-header-analyzer
E-Mail header analyzer is a tool written in flask for parsing email headers and converting them to a human readable format and it also can:
▫️ Identify hop delays.
▫️ Identify the source of the email.
▫️ Identify hop country.
https://github.com/cyberdefenders/email-header-analyzer
21 579
CallMeWin32kDriver
Load your driver like win32k.sys
https://github.com/gmh5225/CallMeWin32kDriver
21 579
Repost from Pentesting Shop
Raspberry Pi Pico
Raspberry Pi Pico is a tiny, fast, and versatile board built using RP2040, the flagship microcontroller.
From light displays and IoT devices to signage and manufacturing processes, Raspberry Pi Pico gives you the power to control countless home, hobby, and industrial operations.
Programmable in C and MicroPython, Pico is adaptable to a vast range of applications and skill levels, and getting started is as easy as dragging and dropping a file.
More experienced users can take advantage of Raspberry Pi Pico's rich peripheral set, including SPI, I2C, and eight Programmable I/O (PIO) state machines for custom peripheral support.
Make a cheap but powerful USB Rubber Ducky with a Raspberry Pi Pico: https://github.com/dbisu/pico-ducky
Buy online:
🛒 https://ali.ski/ur1YN3
#raspberrypi #pico #rp2040
21 579
Nuclei Zimbra:)
Release of CVE-2022-37042 Zimbra Authentication Bypass Causing RCE Non-Destructive Vulnerability Detection Template.
https://github.com/projectdiscovery/nuclei-templates/pull/5134/files
#cve #nuclei
21 579
ScanReflectedXSS - Nuclei
This script allows to find XSS vulnerabilities with nuclei, taking advantage of this resource in its maximum analysis capacity.
In the community I have not seen XSS Fuzzing with nuclei in general, only focused on exploitations by CVE
https://github.com/HernanRodriguez1/ScanReflectedXSS
21 579
VLANPWN
DoubleTagging.py - This tool is designed to carry out a VLAN Hopping attack. As a result of injection of a frame with two 802.1Q tags, a test ICMP request will also be sent.
DTPHijacking.py - A script for conducting a DTP Switch Spoofing/Hijacking attack. Sends a malicious DTP-Desirable frame, as a result of which the attacker's machine becomes a trunk channel. The impact of this attack is that you can bypass the segmentation of VLAN networks and see all the traffic of VLAN networks.
https://github.com/in9uz/VLANPWN
21 579
