HackGit

​​REcollapse A helper tool for black-box regex fuzzing to bypass validations and discover normalizations in web applications. It can also be helpful to bypass WAFs and weak vulnerability mitigations. For more information, take a look at the REcollapse blog post. The goal of this tool is to generate payloads for testing. Actual fuzzing shall be done with other tools like Burp (intruder), ffuf, or similar. https://github.com/0xacb/recollapse #infosec #pentesting #redteam

​​sh4d0wup Signing-key abuse and update exploitation framework. https://github.com/kpcyrd/sh4d0wup #infosec #pentesting #redteam

​​ETWHash A C# POC that is able to extract NetNTLMv2 hashes of incoming authentications via SMB, by consuming ETW events from the Microsoft-Windows-SMBServer provider {D48CE617-33A2-4BC3-A5C7-11AA4F29619E} https://github.com/nettitude/ETWHash #infosec #pentesting #redteam

​​StackMask This is a PoC of encrypting the stack prior to custom sleeping by leveraging CPU cycles. This is the code of the relevant blog post: Masking the Implant with Stack Encryption https://github.com/WKL-Sec/StackMask #infosec #pentesting #redteam

​​CTFd A Capture The Flag framework focusing on ease of use and customizability. It comes with everything you need to run a CTF and it's easy to customize with plugins and themes. https://github.com/CTFd/CTFd #cybersecurity #infosec #ctf

​​Secbench.js Secbench.js is the first benchmark suite of server-side JavaScript vulnerabilities. This benchmark consists of 600 publicly reported vulnerabilities curated from different advisory databases, such as Snyk, GitHub Advisories, and Huntr.dev. https://github.com/cristianstaicu/SecBench.js #infosec #pentesting #bugbounty

​​LAUREL LAUREL is an event post-processing plugin for auditd(8) that generates useful, enriched JSON-based audit logs suitable for modern security monitoring setups. https://github.com/threathunters-io/laurel #cybersecurity #infosec

​​BunkerWeb A web server based on the notorious NGINX and focused on security. https://github.com/bunkerity/bunkerweb #cybersecurity #infosec

​​CVE-2022-46718 iOS Vulnerability Exposes Sensitive Location Data. https://github.com/biscuitehh/cve-2022-46718-leaky-location #cve #cybersecurity #infosec

​​RESTler RESTler is the first stateful REST API fuzzing tool for automatically testing cloud services through their REST APIs and finding security and reliability bugs in these services. https://github.com/microsoft/restler-fuzzer #cybersecurity #infosec #pentesting

​​ctf-tools This is a collection of setup scripts to create an install of various security research tools. Of course, this isn't a hard problem, but it's really nice to have them in one place that's easily deployable to new machines and so forth. https://github.com/zardus/ctf-tools #cybersecurity #infosec #ctf

​​WhatsApp OSINT Tool Logs online/offline events from ANYONE in the world. https://github.com/jasperan/whatsapp-osint #OSINT #infosec

​​hardCIDR A Linux Bash script to discover the netblocks, or ranges, (in CIDR notation) owned by the target organization during the intelligence gathering phase of a penetration test. This information is maintained by the five Regional Internet Registries (RIRs):👇 • ARIN (North America) • RIPE (Europe/Asia/Middle East) • APNIC (Asia/Pacific) • LACNIC (Latin America) • AfriNIC (Africa) https://github.com/trustedsec/hardcidr #infosec #pentesting #recon

​​RFID Blocker Card Protect your personal data with the most advanced RFID blocker card for your wallet. As contactless card payments become increasingly popular, the risk of fraudsters intercepting our information is on the rise. The RFID Blocking Card is a credit-card-sized tool that can be placed inside a wallet, credit card holder or clip to block electromagnetic signals, ensuring protection against RFID theft while still allowing the use of contactless payments. It's composed of a mixture of metals that disrupt RFID signals, with inside and outside coatings of a patent-pending metal mixture to safeguard your personal information. The card is flexible and only half the thickness of a credit card, so it won't add bulk to your wallet. Simply add RFID Blocking Cards to your wallet or credit card holder to block unwanted RFID scanners and keep your personal data safe. Buy online: 🛒 $6.80🔥 https://bit.ly/41WAUpJ 🛒 VAULTCARD https://amzn.to/3VrHCkY #RFID #card

​​reNgine Automated reconnaissance framework for web applications with a focus on highly configurable streamlined recon process via Engines, recon data correlation and organization, continuous monitoring, backed by a database, and simple yet intuitive User Interface. https://github.com/yogeshojha/rengine #infosec #pentesting #redteam

​​wstunnel This tool understands this fact and uses the websocket protocol which is compatible with http in order to bypass firewalls and proxies. Wstunnel allows you to tunnel what ever traffic you want. https://github.com/erebe/wstunnel #infosec #pentesting #redteam

​​Evilgophish Phishing campaign framework, сombination of evilginx2 and GoPhish. https://github.com/fin3ss3g0d/evilgophish #infosec #pentesting #redteam

​​Camera Exploitation Tool Automated exploit scanner for cameras on the internet. https://github.com/TasosY2K/camera-exploit-tool #infosec #pentesting #redteam

​​Kraken A modular multi-language webshell focused on web post-exploitation and defense evasion. It supports three technologies (PHP, JSP and ASPX) and is core is developed in Python. https://github.com/kraken-ng/Kraken #infosec #pentesting #redteam

​​CirFix Automatically Repairing Defects in Hardware Design Code. https://github.com/hammad-a/verilog_repair #cybersecurity #infosec