HackGit

​​SRUM-DUMP2 A forensics tool to convert the data in the Windows srum (System Resource Usage Monitor) database to an xlsx spreadsheet. https://github.com/MarkBaggett/srum-dump #cybersecurity #infosec #forensic

​​QuadraInspect QuadraInspect is an Android framework that integrates AndroPass, APKUtil, and MobFS, providing a powerful tool for analyzing the security of Android applications. https://github.com/morpheuslord/QuadraInspect #cybersecurity #infosec #android

​​SolarWinds-CVE-2021-35250 During penetration testing, I came across Serv-U. I started looking for known vulnerabilities, and I was interested in CVE-2020-27994. But it was closed by an update in version 15.2.2, and I was working with Serv-U version 15.3.0. "I decided to dig deeper and modify the payload in various ways, as well as modify the HTTP request itself, after much agony I managed to reproduce the vulnerability of directory traversal" :) https://github.com/rissor41/SolarWinds-CVE-2021-35250 #infosec #pentesting #redteam

​​Patch Diffing In The Dark A series of blog posts leveraging CVE analysis and patch diffing to discover new vulnerabilities. As revealed in the blog posts, the following 4 CVEs came from the in-depth study of CVE-2021-1657. • Part 1 - Patch Diffing In The Dark • Part 2 - Down the Rabbit Hole • Part 3 - Down But Not Out • Part 4 - Do You Trust Me? https://github.com/VulnerabilityResearchCentre/patch-diffing-in-the-dark #cybersecurity #infosec #pentesting

​​WinShellcode It's a C code project created in Visual Studio that helps you generate shellcode from your C code. https://github.com/DallasFR/WinShellcode #infosec #pentesting #redteam

​​reconFTW A tool designed to perform automated recon on a target domain by running the best set of tools to perform scanning and finding out vulnerabilities. https://github.com/six2dez/reconftw #infosec #pentesting #redteam

​​Practical IoT Hacking A comprehensive guide to testing and exploiting IoT systems and devices. Written by expert security researchers, the book covers common threats and a threat modeling framework, security testing methodologies, and passive reconnaissance techniques. Readers will learn how to assess security on all layers of an IoT system, perform VLAN hopping, crack MQTT authentication, abuse UPnP, craft WS-Discovery attacks, and tackle hardware and radio hacking. The book also covers developing an NFC fuzzer, hacking a smart home, and more. The tools and devices used in the book are affordable and readily available, making it a valuable resource for security researchers, IT teams, and hobbyists. Buy online: 🛒 https://amzn.to/3mzbqPG #book #IoT

​​GobyVuls Vulnerabilities of Goby supported with exploitation. This folder contains a variety of vulnerability exploitations for working with goby. https://github.com/gobysec/GobyVuls #cybersecurity #infosec #pentesting

​​Practical Cyber Security Resources 🌟 This repository contains a curated list of resources I suggest on LinkedIn and Twitter.📝🌝 https://github.com/brcyrr/PracticalCyberSecurityResources #cybersecurity #infosec

​​IT Security Lecture University lecture on "IT Security" as Open Educational Resources material. https://github.com/bkimminich/it-security-lecture #cybersecurity #infosec

​​Wordlists A collection of wordlists for many different usages. They are sorted by their content. Feel free to request to add new wordlists. https://github.com/kkrypt0nn/wordlists #infosec #pentesting #bugbounty

​​E4GL30S1NT Simple Information Gathering Tool. https://github.com/C0MPL3XDEV/E4GL30S1NT #OSINT #infosec

​​AutoFunkt Python script for automating the creation of serverless cloud redirectors from Cobalt Strike malleable C2 profiles. https://github.com/FortyNorthSecurity/AutoFunkt #infosec #pentesting #redteam

​​Subdomain Takeover Scanner This Python script helps detect subdomain takeovers by scanning a target domain for potentially vulnerable subdomains. It uses asyncio and aiohttp for asynchronous scanning, which allows for faster and more efficient checking of multiple subdomains simultaneously. https://github.com/sarveshkapre/subdomain_takeover #infosec #pentesting #bugbounty

​​XSS Automation Tool This tool is designed to help hackers identify and exploit cross-site scripting (XSS) vulnerabilities in web applications. XSS vulnerabilities occur when an application includes user-supplied data in its responses without properly sanitizing it, allowing an attacker to inject malicious code into the response that is then executed by the victim's browser. https://github.com/EmperialX/XSS-Automation-Tool #infosec #pentesting #redteam

​​Thoth Automate recon for red team assessments. Thoth is a very modular tool that automates the execution of tools during a reconnaissance assessment. Using multithreading, several tools are executed simultaneously. The use of different modules can be adapted on the fly by using module names or risk level as a filter. https://github.com/r1cksec/thoth #infosec #pentesting #redteam

​​Responder-Parser A python 3.x open source tool which give you the ability to easily configure Responder's settings and configurations. https://github.com/villains-team/Responder-Parser #cybersecurity #infosec #pentesting

​​SysWhispers3 SysWhispers helps with evasion by generating header/ASM files implants can use to make direct system calls. https://github.com/klezVirus/SysWhispers3 #cybersecurity #infosec #pentesting

​​HaxorHandbook HaxorHandbook is the ultimate cheat sheet for cybersecurity enthusiasts looking to up their game. Our comprehensive guide includes must-have resources like Recon-ng-5.x Cheat Sheet, Metasploit Cheat Sheet, Hashcat Cheat Sheet, Nmap Commands Cheat Sheet, Hydra Password Cracking Cheat Sheet, Wireshark Display Filters and much more. https://github.com/cyberfascinate/HaxorHandbook #cybersecurity #infosec #pentesting

​​Navi A GPT CyberSecurity AI https://github.com/SSGOrg/Navi #cybersecurity #infosec