HackGit

ThreatHound This tool will help you on your IR & Threat Hunting & CA. just drop your event log file and anlayze the results. ▫️ support windows (ThreatHound.exe) ▫️ C for Linux based ▫️ new vesion available in C also ▫️ now you can save results in json file or print on screen it as you want by arg 'print' "'yes' to print the results on screen and 'no' to save the results on json file" ▫️ you can give windows event logs folder or single evtx file or multiple evtx separated by comma by arg -p ▫️ you can now give sigam ruels path by arg -s ▫️ add multithreading to improve runing speed ▫️ ThreatHound.exe is agent based you can push it and run it on multiple servers https://github.com/MazX0p/ThreatHound

​​pacu The AWS exploitation framework, designed for testing the security of Amazon Web Services environments. https://github.com/RhinoSecurityLabs/pacu

​​Malware YARA rules, programs for ransomware families https://github.com/rivitna/Malware darkbit: https://github.com/rivitna/Malware/tree/main/DarkBit/darkbit_demo

​​Aftermath Aftermath is a Swift-based, open-source incident response framework. Aftermath can be leveraged by defenders in order to collect and subsequently analyze the data from the compromised host. Aftermath can be deployed from an MDM (ideally), but it can also run independently from the infected user's command line. https://github.com/jamf/aftermath #blueteam

​​Asset-Discovery-Actions Use Github Actions to automate Asset Discovery. https://github.com/jayateertha043/Asset-Discovery-Actions

​​serviceDetector Detect whether a service is installed (blindly) and/or running (if exposing named pipes) on a remote machine without using local admin privileges. https://github.com/tothi/serviceDetector

​​OWASP ZAP Add-ons This project contains add-ons for the OWASP Zed Attack Proxy (ZAP) https://github.com/zaproxy/zap-extensions #pentesting #bugbounty

​​ShredHound Small utility to chunk up a large BloodHound JSON file into smaller files for importing. https://github.com/ustayready/ShredHound

​​Split Apply a divide and conquer approach to bypass EDRs https://github.com/Kudaes/Split

​​Poc for CVE-2023-23752 CMS Joomla - unauthorized access to webservice endpoints. https://github.com/WhiteOwl-Pub/CVE-2023-23752 #cve #poc

​​CRU DataPort Mouse Jiggler The CRU WiebeTech Mouse Jiggler is a plug-and-use device that creates constant mouse activity, preventing a computer from going to sleep while in use. IT professionals and computer forensic investigators use it to prevent password dialog boxes from appearing due to screensavers or sleep mode. With many hard drives now using full-disk encryption, these modes can greatly increase the time and cost of a forensic investigation. By combining the Mouse Jiggler with a WiebeTech HotPlug, investigators can transport a running computer without shutting it down or worrying about logging in. Buy online: 🛒 https://amzn.to/3XOLP1E Mouse Jiggler MJ-3: 🛒 https://amzn.to/3IhwX6p #mouse #jiggler

​​HIVE VLAN L2 Pivoting Instrument This tool analyzes traffic for VLAN ID for gaining access to other VLAN segments. "HIVE" is completely self-contained and does not create any noise on the air. After traffic analysis, the tool creates virtual VLAN interfaces, to gain access to VLAN segments. https://github.com/c4s73r/HIVE #pentesting #redteam

​​BHEH's TerminatorZ TerminatorZ is a highly sophisticated and efficient web security tool that scans for top potential vulnerabilities with known CVEs in your web applications. https://github.com/blackhatethicalhacking/TerminatorZ #pentesting #bugbounty #redteam

​​DirRunner DNS, Directories and file enumeration and fingerprint tool. Modules: ▫️ dir: directories enumeration mode ▫️ dns: dns enumeration mode ▫️ file: file enumeration mode by extension ▫️ fingerprint: web technology detection mode https://github.com/AdonsIzaguirre/DirRunner

​​cloudcat aws cli #pentesting / #redteam snippets Selection of useful aws cli command snippets for recon, compromise and escalation in aws environments, which I use in engagements. These are by no means covering everthing and every service and are very much work in progress. They do reflect what I see typically and have used in my years doing aws tests. https://github.com/rootcathacking/cloudcat

Snoop Dogg, Eminem, Dr. Dre - Back In The Game ft. DMX, Eve, Jadakiss, Ice Cube, Method Man, The Lox https://www.youtube.com/watch?v=_Rks2oCRS88 #best

​​CeWL Custom Word List generator Based on a discussion on PaulDotCom (episode 129) about creating custom word lists spidering a targets website and collecting unique words I decided to write CeWL, the Custom Word List generator. CeWL is a ruby app which spiders a given URL to a specified depth, optionally following external links, and returns a list of words which can then be used for password crackers such as John the Ripper. By default, CeWL sticks to just the site you have specified and will go to a depth of 2 links, this behaviour can be changed by passing arguments. Be careful if setting a large depth and allowing it to go offsite, you could end up drifting on to a lot of other domains. All words of three characters and over are output to stdout. This length can be increased and the words can be written to a file rather than screen so the app can be automated. https://github.com/digininja/CeWL

​​Graphcat Generate graphs and charts based on password cracking result. Simple script to generate graphs and charts on hashcat (and john) potfile and ntds. https://github.com/Orange-Cyberdefense/graphcat

​​Awesome ADB The Android Debug Bridge (ADB) is a toolkit included in the Android SDK package, it is not only a powerful tool for Android developers and testers, but also a good toy for Android fans. https://github.com/mzlogin/awesome-adb/blob/master/README.en.md

​​Commix Automated All-in-One OS Command Injection Exploitation Tool. https://github.com/commixproject/commix #best #redteam