HackGit

​​api_wordlist A wordlist of API names used for fuzzing web application APIs. https://github.com/chrislockard/api_wordlist

​​2022-07-21-malware-tricks-22 Malware development trick. Run payload as Lazarus Group. C++ malware implementation. Malware development: shellcode run via UuidFromStringA and EnumDesktopA (or another suitable candidate). C++ malware implementation example. https://github.com/cocomelonc/2022-07-21-malware-tricks-22 Research: https://cocomelonc.github.io/malware/2022/07/21/malware-tricks-22.html

CVE-2022-29593 Authentication Bypass by Capture Replay (Dingtian-DT-R002). https://github.com/9lyph/CVE-2022-29593 #cve

​​CVE-2022-36946 Reported-by: Domingo Dirutigliano and Nicola Guerrera While we were working on firegex, our application firewall for CTF Attack-Defence competitions, we stumbled upon a few kernel panics. This strange behavour was than isolated and anlayzed, leading to the dicovery of this potential security flaw in the netfilter module, specifically with nfnetlink. https://github.com/Pwnzer0tt1/CVE-2022-36946 #cve

Exploit-Development Weaponized Exploit and Proof of Concepts (PoC) https://github.com/VoidSec/Exploit-Development

​​canTot A python-based cli framework based on sploitkit and is easy to use because it is similar to working with Metasploit. This similar to an exploit framework but focused on known CAN Bus vulnerabilities or fun CAN Bus hacks. It can also be used as a guide for pentesting vehicles and learning python for Car Hacking the easier way. This is not to reinvent the wheel of known CAN fuzzers, car exploration tools like caring caribou, or other great CAN analyzers out there. But to combine all the known vulnerabilities and fun CAN bus hacks in automotive security. https://github.com/shipcod3/canTot

​​AMDH Android Mobile Device Hardening. AMDH was created to help automate scanning installed applications on Android devices, detect some known malware and also to protect privacy. https://github.com/A-YATTA/AMDH

​​LastenZug This project implements a Socka4a proxy based on websockets. The client component is implemented in C compiling down to fully position independent code (PIC). During the compilation process, obfuscation is applied on assembly level by leveraging a second tool: SpiderPIC located in LastenPIC/SpiderPIC https://github.com/codewhitesec/Lastenzug

​​Holehe Efficiently finding registered accounts from emails. Holehe checks if an email is attached to an account on sites like twitter, instagram, imgur and more than 120 others. https://github.com/megadose/holehe #OSINT

​​socialscan socialscan offers accurate and fast #checks for #email address and username usage on online platforms. Given an email address or username, socialscan returns whether it is available, taken or invalid on online platforms. 100% accuracy: socialscan's query method eliminates the false positives and negatives that often occur in similar tools, ensuring that results are always accurate. Speed: socialscan uses asyncio along with aiohttp to conduct all queries concurrently, providing fast searches even with bulk queries involving hundreds of usernames and email addresses. On a test computer with average specs and Internet speed, 100 queries were executed in ~4 seconds. Library / CLI: socialscan can be executed through a CLI, or imported as a Python library to be used with existing code. Email support: socialscan supports queries for both email addresses and usernames. https://github.com/iojw/socialscan

​​Zeratool Automatic Exploit Generation (AEG) and remote flag capture for exploitable CTF problems This tool uses angr to concolically analyze binaries by hooking printf and looking for unconstrained paths. These program states are then weaponized for remote code execution through pwntools and a series of script tricks. Finally the payload is tested locally then submitted to a remote CTF server to recover the flag. https://github.com/ChrisTheCoolHut/Zeratool

​​Erebus Fast and customisable parameter based vulnerability scanner based on simple YAML Rules Erebus is used to test every parameter across targets based on Yaml templates leading to zero false positives and providing fast scanning on large number of hosts. Erebus offers many useful features including an intercepting proxy which allows researchers to browse the web, click on links and erebus will test every parameter that passes through the proxy. https://github.com/ethicalhackingplayground/erebus

​​Winpayloads Undetectable Windows Payload Generation. Features: 1. Persistence - Adds payload persistence on reboot 2. Psexec Spray - Spray hashes until successful connection and psexec payload on target 3. Upload to local webserver - Easy deployment 4. Powershell stager - allows invoking payloads in memory & more 5. Anti sandboxing techniques 6. Custom shellcode https://github.com/nccgroup/Winpayloads

​​bopscrk Tool to generate smart and powerful wordlists. Targeted-attack wordlist creator: introduce personal info related to target, combines every word and transforms results into possible passwords. The lyricpass module allows to search lyrics related to artists and include them to the wordlists. Customizable case and leet transforms: create custom charsets and transforms patterns trough a simple config file. Wordlists exclusion: Exclude words from another wordlist (to avoid passwords that you have already tested). Interactive mode and one-line command interface supported. https://github.com/r3nt0n/bopscrk

​​TropX The best penetration testing and tech tools unified into one beatiful command line interface! Command line application to run penetration testing scripts. It aims to more efficiently run long processes and tedious tasks by allowing the creation of custom scripts in the CLI that can be run whenever. To make scripting even easier, there are premade functions and variables for bash and python to be used to simplify the process. TropX also allows for maximum customization and optimization by providing a settings menu controlled trough the CLI. https://github.com/troopek/TropX

​​APIKit Discovery, Scan and Audit APIs Toolkit All In One. https://github.com/API-Security/APIKit

Athena OS Born for InfoSec Professionals, Bug Bounty Hunters, Passionate Students and Spicy Hackers Pentesting: Athena can access to BlackArch repository, the biggest pentesting tool warehouse, whereas Debian-based distros cannot. User-oriented: if Arch is born for experienced users, Athena is conceived for decreasing complexity and improving user experience. Lightweight: Athena optimizes the disk space consumption by retrieving the tools you need only when you use them. Tools you never use won't be stored and the space is only used for what you really need. Performance: Athena is based on Arch Linux so it is configured to load the bare minimum for its purpose. No useless services, no useless modules consuming your resources. Flexibility: for its Arch nature, Athena is flexible and can easily evolve to the new needs of the users. https://github.com/Athena-OS/athena-iso

​​AntiDDOS-system Protect your web app from #DDOS attack or the Dead Ping + CAPTCHA VERIFICATION in one line! At each connection, the system temporarily saves the IP address of the client and monitors its connection frequency, if this connection frequency is abnormal, then the system considers it as a black IP address and sends a verification request in the form of verification. Captcha integrated into the system, if he passes this check, then it is a human and not a robot! https://github.com/Sanix-Darker/AntiDDOS-system

Disaster-Radio LoRa32 Disaster-radio is an off-grid, solar-powered, long-range mesh network built on free, open source software and affordable hardware. Designed to be open, distributed, and decentralized. With this device you can create your own network to exchange messages! And you don't need anything but this device and sunlight :) Repository: https://github.com/sudomesh/disaster-radio Website: https://disaster.radio/ Buy online: 🛒 https://ali.ski/jXRsIy #radio #mesh

Oauth-scan #Burp Suite Extension written in Java with the aim to provide some automatic security checks, which could be useful during penetration testing on applications implementing OAUTHv2 and OpenID standards. ▫️ Open Redirect issues on Redirect_Uri parameter ▫️ Authorization Code Replay issues ▫️ Leakage of secrets (i.e. Tokens, Codes) ▫️ PKCE misconfigurations ▫️ Nonce parameter misconfigurations ▫️ State parameter misconfiguration ▫️ Input Validation issues on Scope parameter ▫️ Detection of inerently insecure Flows ▫️ SSRF issues via Request_Uri parameter ▫️ Detection of Well-Known and WebFinger resources And others... https://github.com/PortSwigger/oauth-scan