HackGit
前往频道在 Telegram
The channel was created for cybersecurity specialists. • Offensive Security • RedTeam • Malware Research • BugBounty • OSINT • etc Disclaimer: t.me/hackgit/2082 Donations - Ads: t.me/hackgit/5423
显示更多📈 Telegram 频道 HackGit 的分析概览
频道 HackGit (@hackgit) 英语 语言赛道中的 是活跃参与者。目前社区聚集了 21 579 名订阅者，在 技术与应用 类别中位列第 4 526，并在 美国 地区排名第 1 853 位。
📊 受众指标与增长动态
自 невідомо 创建以来，项目保持高速增长，吸引了 21 579 名订阅者。
根据 02 三月, 2025 的最新数据，频道保持稳定运转。过去 30 天订阅人数变化为 19，过去 24 小时变化为 0，整体触达仍然可观。
- 认证状态： 未认证
- 互动率 (ER)： 平均受众互动率为 0%。内容发布后 24 小时内通常能获得 N/A% 的反应，占订阅者总量。
- 帖子覆盖： 每篇帖子平均可获得 0 次浏览，首日通常累积 0 次浏览。
- 互动与反馈： 受众积极参与，单帖平均反应数为 0。
📝 描述与内容策略
作者将该频道定位为表达主观观点的平台：
“The channel was created for cybersecurity specialists.
• Offensive Security
• RedTeam
• Malware Research
• BugBounty
• OSINT
• etc
Disclaimer:
t.me/hackgit/2082
Donations - Ads:
t.me/hackgit/5423”
凭借高频更新（最新数据采集于 11 十一月, 2026），频道始终保持新鲜度与高覆盖。分析显示受众积极互动，使其成为 技术与应用 类别中的关键影响点。
21 579
订阅者
无数据24 小时
-37 天
+1930 天
帖子存档
21 579
OffensiveNim
Experiments in weaponizing Nim for implant development and general offensive operations.
https://github.com/byt3bl33d3r/OffensiveNim
21 579
Apache APISIX Remote Code Execution (CVE-2022-24112) Exploit
An attacker can abuse the batch-requests plugin to send requests to bypass the IP restriction of Admin API. A default configuration of Apache APISIX (with default API key) is vulnerable to remote code execution. When the admin key was changed or the port of Admin API was changed to a port different from the data panel, the impact is lower. But there is still a risk to bypass the IP restriction of Apache APISIX's data panel.
There is a check in the batch-requests plugin which overrides the client IP with its real remote IP. But due to a bug in the code, this check can be bypassed.
https://github.com/M4xSec/Apache-APISIX-CVE-2022-24112
21 579
Amsi-Bypass-Powershell
This repo contains some Antimalware Scan Interface (AMSI) bypass / avoidance methods i found on different Blog Posts.
Most of the scripts are detected by AMSI itself. So you have to find the trigger and change the signature at the part via variable/function renaming, string replacement or encoding and decoding at runtime. Alternatively obfuscate them via ISESteroids and or Invoke-Obfuscation to get them working. You can also take a look at my blog post about manually changing the signature to get a valid bypass again.
https://github.com/S3cur3Th1sSh1t/Amsi-Bypass-Powershell
Source:
https://i.blackhat.com/Asia-22/Friday-Materials/AS-22-Korkos-AMSI-and-Bypass.pdf
21 579
IDiagnosticProfileUAC
Just another UAC bypass using auto-elevated COM object Virtual Factory for DiagCpl (12C21EA7-2EB8-4B55-9249-AC243DA8C666).
This COM object can be used to create instance of DiagnosticProfile (D0B7E02C-E1A3-11DC-81FF-001185AE5E76) COM object which exposes SaveDirectoryAsCab method that can be used to move arbitrary file in system32 directory.
This PoC copy user specified dll to C:\Windows\System32\wow64log.dll and trigger MicrosoftEdgeUpdate service by creating instance of Microsoft Edge Update Legacy On Demand COM object (A6B716CB-028B-404D-B72C-50E153DD68DA) which run in SYSTEM context and will load wow64log.dll.
https://github.com/Wh04m1001/IDiagnosticProfileUAC
Research:
https://halove23.blogspot.com/2021/03/google-update-service-being-scum.html
21 579
Black Widow
A collection of Script for Red Team & Incidence Response
https://github.com/Johnng007/Black-Widow
21 579
Async DNS Brute
A Python 3.5+ tool that uses asyncio to brute force domain names asynchronously.
https://github.com/blark/aiodnsbrute
21 579
node-Tor
Javascript open source implementation of the Tor protocol (The Onion Router) on server side and inside browsers
https://github.com/Ayms/node-Tor
21 579
Magisk
Magisk is a suite of open source software for customizing Android, supporting devices higher than Android 5.0.
Features:
▫️ MagiskSU: Provide root access for applications
▫️ Magisk Modules: Modify read-only partitions by installing modules
▫️ MagiskBoot: The most complete tool for unpacking and repacking Android boot images
▫️ Zygisk: Run code in every Android applications' processes
https://github.com/topjohnwu/Magisk
21 579
Androguard
Reverse engineering and pentesting of Android applications.
Features:
▫️ DEX, ODEX
▫️ APK
▫️ Android's binary xml
▫️ Android resources
▫️ Disassemble DEX/ODEX bytecodes
▫️ Basic Decompiler for DEX/ODEX files
https://github.com/androguard/androguard
21 579
node-Tor
Javascript open source implementation of the Tor protocol The Onion Router on server side and inside browsers
https://github.com/Ayms/node-Tor
#privacy #tor #js
21 579
Hunter
Pentesting Assistant: Information Gathering And More.
▫️ A easy to use pentesting toolkit for information gathering and more
▫️ Written with Python 3.10.4 for Linux
https://github.com/Keyj33k/Hunter-Toolkit
21 579
Spring4shell CVE-2022-22965
A python implementation of CVE-2022-22965 that provides a prompt to the user in the style of an ssh session.
This script is designed to be easy to understand and execute, with both readability and accessbility - depending on the user's choice. Designed for exploiting the vulnerability on tomcat servers.
The fileDateFormat field on the server will be set and unset as part of the script which allows the exploit to be run multiple times. Cleanup may be required.
https://github.com/p1ckzi/CVE-2022-22965
Research:
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-22965
