HackGit

​​Outpost AWS Testing and Reporting Management Outpost is a simple tool to generate AWS configuration files for AssumeRole, a testing capability for verifying accounts work, and a report generator for ScoutSuite scan results. ▫️ Run ScoutSuite ▫️ Parse the results ▫️ ✨Generate Report Findings✨ https://github.com/ustayready/outpost

​​astaroth-deobfuscator IDA python script for deobfuscating Astaroth/Guildma injector DLL https://github.com/dodo-sec/astaroth-deobfuscator

​​Proxy Function Calls For ETwTI Indirect Syscall is Dead! Long Live Custom Call Stacks A new technique which build a clean callstack originating from ntdll to avoid detections. No ROP required and tested & works against every EDR. https://github.com/paranoidninja/Proxy-Function-Calls-For-ETwTI #redteam

​​D1rkLrd Shellcode Loader with Indirect Dynamic syscall Implementation , shellcode in MAC format, API resolving from PEB, Syscall calll and syscall instruction address resolving at run time. https://github.com/TheD1rkMtr/D1rkLrd #infosec #redteam

​​DynamicDotNet Tooling Added a POC "Dynamic Assembly Loader" to the repo that loads and executes an assembly using a dynamic method and emitted MSIL instructions (C#). System.Reflection.Emit is quite powerful (maybe more to come in a future blog post) https://github.com/bohops/DynamicDotNet/blob/main/assembly_loader/DynamicAssemblyLoader.cs

​​RToolZ A Stealthy Lsass Dumper - can abuse ProcExp152.sys driver to dump PPL Lsass, no dbghelp.lib calls. https://github.com/OmriBaso/RToolZ #pentesting #redteam

​​Xssor.go Xssor is XSS payloads reflections in source code checker. https://github.com/SirBugs/Xssor.go #pentesting #bugbounty

​​Sublist115r A python tool designed to enumerate subdomains of websites using OSINT. It helps penetration testers and bug hunters collect and gather subdomains for the domain they are targeting. Sublist115r enumerates subdomains using many search engines such as Google, Yahoo, Bing, Baidu and Ask. Sublist115r also enumerates subdomains using Netcraft, Virustotal, ThreatCrowd, DNSdumpster and ReverseDNS. https://github.com/elpirata111/Hacking-tools #Donate t.me/hackgit🍻»»»

​​Stable Diffusion Pickle Scanner Scan .pt, .ckpt and .bin files for potentially malicious code. https://github.com/zxix/stable-diffusion-pickle-scanner

​​ASH The Automated Security Helper The security helper tool was created to help you reduce the probability of a security violation in a new code, infrastructure or IAM configuration by providing a fast and easy tool to conduct preliminary security check as early as possible within your development process. https://github.com/aws-samples/automated-security-helper

​​Json Value Extractor Cmd line utility that accepts json via standard in (piping) and extracts values from json fields. https://github.com/theflakes/jve

HackRF One + Portapack H2 Mayhem. The HackRF is an exceptionally capable software defined radio (SDR) transceiver, but naturally you need to connect it to a computer to actually do anything with it. So the PortaPack was developed to turn it into a stand-alone device with the addition of a touchscreen LCD, a few buttons, and a headphone jack. With all the hardware in place, it’s just a matter of installing a firmware capable enough to do some proper RF hacking on the go. Enter MAYHEM, an evolved fork of the original PortaPack firmware that the developers claim is the most up-to-date and feature packed version available. Without ever plugging into a computer, this firmware allows you to receive, decode, and re-transmit a dizzying number of wireless protocols. From firing off the seating pagers at a local restaurant to creating a fleet of phantom aircraft with spoofed ADS-B transponders, MAYHEM certainly seems like it lives up to the name. Detailed blog post about installing and using MAYHEM on the HackRF/PortaPack, complete with a number of real-world examples that show off just a handful of possible applications for the project. Jamming cell phones, sending fake pager messages, and cloning RF remotes is just scratching the surface of what’s possible. Example of use: exploitation of a Honda vulnerability Honda's Remote Keyless System (CVE-2022-27254) Firmware to open any and all Tesla vehicle charging ports in range! Buy online: 🛒 https://alii.pub/6lfodk 🛒 https://amzn.to/3kRIrFF #hackrf #radio #sdr #spoofing

​​Windows 11 Debloat / Privacy Guide This guide is meant for advanced users who wants to get rid off Windows 11's bloatware and telemetry, if you have no experience of such thing then you can consider this guide for ease. ▫️ Get rid of bloatware ▫️ Disable most of the telemetry ▫️ Gain performance ▫️ Optimize Windows 11 for gaming as well as productivity ▫️ Strip Windows 11 to barebones (In Advanced removal below) https://github.com/TheWorldOfPC/Windows11-Debloat-Privacy-Guide

​​Chisel Chisel is a fast TCP/UDP tunnel, transported over HTTP, secured via SSH. Single executable including both client and server. Written in Go (golang). Chisel is mainly useful for passing through firewalls, though it can also be used to provide a secure endpoint into your network. https://github.com/jpillora/chisel

​​Dell Driver EoP (CVE-2021-21551) Dell dbutil_2_3.sys driver contains an insufficient access control vulnerability which may lead to escalation of privileges, denial of service, or information disclosure. Local authenticated user access is required. This exploit was tested on Windows 10 v1511. https://github.com/nanabingies/CVE-2021-21551 #cve

​​bbFuzzing.txt A unique vocabulary that is 70% generated with OpenAI ChatGPT. The remaining 30% is a compilation of dictionaries from Bo0om, circuit and other bugbounters. https://github.com/reewardius/bbFuzzing.txt #bugbounty #ChatGPT

​​KeePwn A python tool to automate KeePass discovery and secret extraction. https://github.com/Orange-Cyberdefense/KeePwn

​​CVE-2022-25765 Exploit for CVE-2022-25765 command injection in pdfkit < 0.8.6 https://github.com/nikn0laty/PDFkit-CMD-Injection-CVE-2022-25765 #cve #poc #exploit

​​CVE-2022-44900 Directory traversal vulnerability in SevenZipFile.extractall() function. https://github.com/0xless/CVE-2022-44900-demo-lab #cve