HackGit

​​SharpUserIP Extract the login log on the domain controller or remotely, and quickly obtain the IP address corresponding to the domain user https://github.com/lele8/SharpUserIP

DVS D(COM) V(ulnerability) S(canner) AKA Devious swiss army knife - Lateral movement using DCOM Objects The DVS framework is a swiss army knife which allows you to enumerate vulnerable functions of remote DCOM objects, launch them and even launch attacks using them. The framework is being developed with a "Red Team" mindset and uses stealth methods to compromise remote machines. The DVS framework contains various ways to bypass remote hardening against DCOM by re-enableing DCOM access remotely and automatically grant the required permissions to the attacking user. The framework can also revert changes on the remote machine to their original state, prior to the attack - hiding these changes from defenders. Our main insight is that the tool can also execute commands using non-vulnerable DCOM objects through an aqsome technique (Read below about Invoke-RegisterRemoteSchema) https://github.com/ScorpionesLabs/DVS #windows #lateral #redteam #dcom

​​SharpUserIP Extract the login log on the domain controller or remotely, and quickly obtain the IP address corresponding to the domain user https://github.com/lele8/SharpUserIP

​​OSIF Opensource Intelligence Framework is an open-source framework dedicated to OSINT. For the ease of use, the interface has a layout that looks like Metasploit. It consists of various modules that aid osint operations: ▫️ Attack Surface ▫️ Blockchain ▫️ Email ▫️ Host Enumeration ▫️ IoC ▫️ Mobile ▫️ Social Media ▫️ Web Enumeration https://github.com/fr4nc1stein/osint-framework

​​OWASP Kubernetes Top 10 When adopting Kubernetes, we introduce new risks to our applications and infrastructure. The OWASP Kubernetes Top 10 is aimed at helping security practitioners, system administrators, and software developers prioritize risks around the Kubernetes ecosystem. The Top Ten is a prioritized list of these risks backed by data collected from organizations varying in maturity and complexity. https://github.com/OWASP/www-project-kubernetes-top-ten

​​AlphaGolang AlphaGolang is a collection of IDAPython scripts to help malware reverse engineers master Go binaries. The idea is to break the scripts into concrete steps, thus avoiding brittle monolithic scripts, and mimicking the methodology an analyst might follow when tackling a Go binary. Scripts are released under GPL license (honoring Tim Strazzere's original GolangLoaderAssist which we refactored and updated for python3, props to Tim :) ). Contributions are welcome and encouraged! https://github.com/SentineLabs/AlphaGolang

​​SQLRecon A C# MS-SQL toolkit designed for offensive reconnaissance and post-exploitation. For detailed usage information on each technique, refer to the wiki. https://github.com/xforcered/SQLRecon Details: https://github.com/skahwah/Conference-Talks/tree/main/2022-Way-West-Hackin-Fest Demo video: https://vimeo.com/showcase/9606366/video/728191206

ICopy-XS The ICopy-X is the next generation of RFID Cloning tool. Whether you're a pentester, researchers, locksmith, hobbiest or building manager, the iCopy-X makes cloning RFID tags rapid and easy. Built around the powerful Proxmark 3, the ICopy-X is a portable device specialised in the rapid cloning of RFID badges, capable of automatically reading, cracking and writing the vast majority of Low Frequency (125KHz / 134KHz) and High Frequency (13.56MHz) RFID tags on the market. 100% portable and pocket-sized, the iCopy-X is built with simplicity in mind. No cables required, no external computers or antennas. With its built in battery, you just pull the device out of your pocket, and you're ready to go. Designed to be intuitive, users control the device via its screen and navigation buttons to place a badge and start the desired operation. Buy online: 🛒 https://ali.ski/DpXlcF #RFID

​​Get-bADpasswords Get insights into the actual strength and quality of passwords in Active Directory. https://github.com/improsec/Get-bADpasswords #ad

​​udpx Fast, single-packet UDP scanner written in Go. Supports discovery of more than 45 services with the possibility to add your own. It is lightweight - grab a binary and run it anywhere you want. Linux, Mac Os and Windows are supported but can be built for more platforms. The UDPX is not an internet-wide port scanner such as zgrab2 or zmap. The goal was to make easy to use and portable UDP scanner. ▫️ It is fast. It can scan whole /16 network in ~20 seconds for a single service. ▫️ You don't need to instal libpcap or any other dependencies. ▫️ Can run on Linux, Mac Os, Windows. Or your Nethunter if you built it for Arm. ▫️ Customizable. You can add your probes and test for even more protocols! https://github.com/nullt3r/udpx

AWSealion AWSealion is a CLI tool designed to work as a plugin for the AWS CLI to be used by pentesters and security enthusiasts in both professional and CTF settings, however it can also be used by developers and security engineers to speed up their work. This tool helps in staying stealthy during red team and pentesting engagements to ensure that your attacking footprint is as small as possible in an AWS environment. AWSealion works through not allowing the same API call to be run twice, allowing user-agent customization on a per-engagement and per-profile basis, saving the output of all API calls, and much more. Furthermore, the AWSealion tool creates an organized file structure which the user can easily reference, ensuring that you do not drift away from your commands. https://github.com/0xd4y/AWSealion

​​Awesome Mastodon Mastodon is the world's largest free, open-source, decentralized microblogging network. See the Official category to learn more about the network. https://github.com/tleb/awesome-mastodon

​​zerologon CVE-2020-1472 aka Zerologon Exploit POC NetLogon (MS-NRPC), can establish inter-domain control vulnerable security channel. It's possible to zero out the password for the machine account on domain controllers. ▫️ DC will be semi broken while password is zero'ed out, however this program changes the password back when its finished ▫️ Could cause DNS issues with DC (fixed with reboot) ▫️ Kerberos Tickets have a 10 hour lifetime before they expire ▫️ Requires the latest impacket from GitHub with added netlogon structures. ▫️ Do note that by default this changes the password of the domain controller system account then changes it back. Yes this allows you to DCSync, but it also breaks communication with other domain controllers in the short timeframe, so be careful with this! https://github.com/sho-luv/zerologon #cve #poc

​​Audit Reports Smart Contracts, Blockchain , DApps Audit Reports Through our Automated and Manual analysis we provide complete solution to identify and determine vulnerabilities and violations of logic in the smart contract. QuillAudits considers the following distinct and crucial facets of the smart contract code: Whether the code is secure. Whether the code corresponds to the documentation (including whitepaper). Whether the code meets best practices in efficient use of gas, code readability, etc. https://github.com/Quillhash/QuillAudit_Reports

​​ThunderStorm ThunderStorm is the name for the over-arching C2 solution. Based off XMT, a Golang-based C2 framework, ThunderStorm aims to be a successor to mature, currently used C2 software/service, such as CobaltStrike and Sliver. ThunderStorm has many components involved in it: ▫️ Jetstream (Bolt Builder) ▫️ Bolts (Agents) ▫️ Cirrus (The C2 Service) ▫️ Doppler (CLI Client Manager) ▫️ StormFront (Web GUI Client Manager) ▫️ Also included is a HTTP ReSTful API that allows for automation and control without direct involvement. https://github.com/iDigitalFlame/ThunderStorm

​​BrokenFlow A simple PoC to invoke an encrypted shellcode by using an hidden call. https://github.com/enkomio/BrokenFlow

​​HackRF One + Portapack H2 Mayhem. The HackRF is an exceptionally capable software defined radio (SDR) transceiver, but naturally you need to connect it to a computer to actually do anything with it. So the PortaPack was developed to turn it into a stand-alone device with the addition of a touchscreen LCD, a few buttons, and a headphone jack. With all the hardware in place, it’s just a matter of installing a firmware capable enough to do some proper RF hacking on the go. Enter MAYHEM, an evolved fork of the original PortaPack firmware that the developers claim is the most up-to-date and feature packed version available. Without ever plugging into a computer, this firmware allows you to receive, decode, and re-transmit a dizzying number of wireless protocols. From firing off the seating pagers at a local restaurant to creating a fleet of phantom aircraft with spoofed ADS-B transponders, MAYHEM certainly seems like it lives up to the name. Detailed blog post about installing and using MAYHEM on the HackRF/PortaPack, complete with a number of real-world examples that show off just a handful of possible applications for the project. Jamming cell phones, sending fake pager messages, and cloning RF remotes is just scratching the surface of what’s possible. Example of use: exploitation of a Honda vulnerability Honda's Remote Keyless System (CVE-2022-27254) Firmware to open any and all Tesla vehicle charging ports in range! Buy online: 🛒 https://ali.ski/zja-1o #hackrf #radio #sdr #spoofing

​​Tesla Charging Port Opener Files for HackRF + Portapack MAYHEM firmware to open any and all Tesla vehicle charging ports in range! https://github.com/pompel123/Tesla-Charging-Port-Opener

​​CVE-2022-40127 Apache Airflow < 2.4.0 DAG example_bash_operator RCE https://github.com/Mr-xn/CVE-2022-40127 #cve

​​csprecon Grab new domains using Content Security Policy. https://github.com/edoardottt/csprecon