HackGit

​​parallels-plist-escape This repository contains exploits for CVE-2023-27327 and CVE-2023-27328, which can be used together to escape a Parallels Desktop virtual machine, prior to Parallels Desktop 18.1.1. https://github.com/kn32/parallels-plist-escape #cve #cybersecurity #infosec

​​Kraken Generate a report with charts and statistics about cracked passwords in XLSX format. https://github.com/hnsecurity/kraken Details: https://security.humanativaspa.it/cracked-password-analytics-with-kraken #cybersecurity #infosec

​​Buffer-Overflow-Stack-Smash Example of buffer overflow exploit from Aleph1's article "Smashing the Stack for Fun and Profit" https://github.com/CYoshioB/Buffer-Overflow-Stack-Smash #infosec #pentesting #redteam

​​HPHardwareDiagnostics-PoC PoC exploit for HP Hardware Diagnostic's EtdSupp driver https://github.com/alfarom256/HPHardwareDiagnostics-PoC #cve #poc #exploit

​​Awesome Symbolic Execution A curated list of awesome symbolic execution resources including essential research papers, lectures, videos, and tools. https://github.com/ksluckow/awesome-symbolic-execution #cybersecurity #infosec

​​PPEnum Simple BOF to read the protection level of a process. https://github.com/rasta-mouse/PPEnum #infosec #pentesting #redteam

​​Java Android Magisk Burp Objection Root Emulator Easy (JAMBOREE) Get a working portable Python/Git/Java environment on Windows in SECONDS without having local administrator, regardless of your broken Python environment. Our open-source script downloads directly from proper sources without any binaries. While the code may not be perfect, it includes many useful PowerShell tricks. https://github.com/freeload101/Java-Android-Magisk-Burp-Objection-Root-Emulator-Easy #cybersecurity #infosec

​​Awesome Google VRP Writeups 🐛 A list of writeups from the Google VRP Bug Bounty program. https://github.com/xdavidhu/awesome-google-vrp-writeups #cybersecurity #infosec #bugbounty

​​GetLAPSPassword A feeble attempt at writing a LAPS dumping tool that supports both NTLM and Kerberos auth using the impacket library. https://github.com/dru1d-foofus/GetLAPSPassword #infosec #pentesting #redteam

​​HackRF One A powerful Software-Defined Radio that can transmit and receive radio signals from 1 MHz to 6 GHz. It works as a USB peripheral and is open-source, allowing it to be programmed and managed as a standalone device. The device can interact with various digital technologies like WiFi, Bluetooth, smartphones, and GPS. The ANT500 telescopic antenna is a perfect first antenna for general-purpose use with the HackRF One. It operates on radio frequencies between 75 MHz and 1000 MHz and can be collapsed to 20 cm or fully extended to 88 cm. The HackRF One Bundle features a half-duplex transceiver, a maximum sample rate of 20 Msps, and 8-bit quadrature samples with an interface of high-speed USB. It can be powered by USB bus power. Buy online: 🛒 https://amzn.to/3I2VInk 🛒 https://bit.ly/3VZixyf #SDR #RF #radio

​​ronin-payloads A Ruby micro-framework for writing and running exploit payloads. ronin-payloads allows one to write payloads as plain old Ruby classes. https://github.com/ronin-rb/ronin-payloads #infosec #pentesting #redteam

​​resocks A reverse/back-connect SOCKS5 proxy tunnel that can be used to route traffic through a system that can't be directly accessed (e.g. due to NAT). The channel is secured by mutually trusted TLS with auto-generated certificates based on a connection key. https://github.com/RedTeamPentesting/resocks #infosec #pentesting #redteam

​​Invoke-ADEnum Active Directory Enumerator - Automate Active Directory Enumeration using PowerView. https://github.com/Leo4j/Invoke-ADEnum #infosec #pentesting #redteam

​​Evilginx 3.0 A man-in-the-middle attack framework used for phishing login credentials along with session cookies, which in turn allows to bypass 2-factor authentication protection. https://github.com/kgretzky/evilginx2 #infosec #pentesting #redteam

​​Ultimate Magic Card (Gen4) The Ultimate Magic Card is an all-in-one emulation card with customizable card types, configurations, and functionality modes. It allows for modification of the ATQA/SAK/ATS/byte length/card number (UID)/M1 area size of any card without restrictions and can read and write any block like a UID card without a password. The card also supports Ultralight card transformation and rolling code recovery card mode, even after key modification. Additionally, it has a 14B card with a modifiable card number and a password-protected backdoor command. The recovery mode allows for reconfiguration in case of abnormal interference, reducing the chances of damage to the card. Buy online: 🛒 https://bit.ly/41uefzH #UID #card

​​OSED Containing my notes, practice binaries + solutions, blog posts, etc. for the Offensive Security Exploit Developer (OSED/EXP-301). https://github.com/nop-tech/OSED #infosec #pentesting #redteam

​​Arsenal Offensive Security Tools Weaponized. https://github.com/sneakerhax/Arsenal #infosec #pentesting #redteam

​​TOP all Top Top Top_Codeql TOP All bugbounty pentesting CVE-2022- POC Exp Things https://github.com/hktalent/TOP #infosec #cybersecurity #cve

​​STACS A YARA powered static credential scanner which suports binary file formats, analysis of nested archives, composable rulesets and ignore lists, and SARIF reporting. https://github.com/stacscan/stacs #cybersecurity #infosec

​​Direct Syscalls: A journey from high to low Start with shellcode execution using Windows APIs (high level), move on to native APIs (medium level) and finally to direct syscalls (low level). https://github.com/VirtualAlllocEx/Direct-Syscalls-A-journey-from-high-to-low Details: https://redops.at/en/blog/direct-syscalls-a-journey-from-high-to-low #infosec #pentesting #redteam