HackGit

​​octosuite A framework fro gathering osint on GitHub users, repositories and organizations https://github.com/bellingcat/octosuite #OSINT

​​Pyramid Pyramid is a set of Python scripts and module dependencies that can be used to evade EDRs. The main purpose of the tool is to perform offensive tasks by leveraging some Python evasion properties and looking as a legit Python application usage. https://github.com/naksyn/Pyramid

​​Blackhoodie Malware Development 101 Slides and samples used for the Malware Development 101 workshop in the "Blackhoodie Virtual 2022" https://github.com/xalicex/blackhoodie_maldev101_2022

​​heap_detective This tool uses the taint analysis technique for static analysis and aims to identify points of heap memory usage vulnerabilities in C and C++ languages. The tool uses a common approach in the first phase of static analysis, using tokenization to collect information. The second phase has a different approach to common lessons of the legendary dragon book, yes the tool doesn't use AST or resources like LLVM following parsers' and standard tips. The approach present aims to study other ways to detect vulnerabilities, using custom vector structures and typical recursive traversal with ranking following taint point. So the result of the sum of these techniques is the Heap_detective. The tool follows the KISS principle "Keep it simple, stupid!". There's more than one way to do a SAST tool, I know that. Yes, I thought to use graph database or AST, but this action cracked the KISS principle in the context of this project. Features: ▫️ C and C++ tokenizer ▫️ List of heap static routes for each source with taint points for analysis ▫️ Analyser to detect double free vulnerability ▫️ Analyser to detect use after free vulnerability https://github.com/CoolerVoid/heap_detective

​​Android-Deeplink-Parser This Script can be used to Parse the AndroidManifest.xml and Strings.xml to List the all deeplinks of the android application https://github.com/Shapa7276/Android-Deeplink-Parser

​​otp One Time Password utilities Go / Golang One Time Passwords (OTPs) are an mechanism to improve security over passwords alone. When a Time-based OTP (TOTP) is stored on a user's phone, and combined with something the user knows (Password), you have an easy on-ramp to Multi-factor authentication without adding a dependency on a SMS provider. This Password and TOTP combination is used by many popular websites including Google, GitHub, Facebook, Salesforce and many others. The otp library enables you to easily add TOTPs to your own application, increasing your user's security against mass-password breaches and malware. https://github.com/pquerna/otp

​​Proxmark3 The Proxmark3 is the swiss-army tool of RFID, allowing for interactions with the vast majority of RFID tags on a global scale. Originally built by Jonathan Westhues, the device is now the goto tool for RFID Analysis for the enthusiast. Iceman repository is considered to be the pinnacle of features and functionality, enabling a huge range of extremely useful and convenient commands and LUA scripts to automate chip identification, penetration testing, and programming. https://github.com/RfidResearchGroup/proxmark3 Buy online: RDV2 🛒 https://amzn.to/3OND3hK RDV3 Easy 🛒 https://amzn.to/3GYfhNV RDV4 BlueShark 🛒 https://t.me/PentestingShop/95 RDV4.01 KIT 🛒 https://ali.ski/6_p9Xk #rfid #nfc

​​Wordlists Infosec Wordlists. https://github.com/xajkep/wordlists

​​EvilTree A standalone python3 remake of the classic "tree" command with the additional feature of searching for user provided keywords/regex in files, highlighting those that contain matches. Created for two main reasons: ▫️ While searching for secrets in files of nested directory structures, being able to visualize which files contain user provided keywords/regex patterns and where those files are located in the hierarchy of folders, provides a significant advantage. ▫️ "tree" is an amazing tool for analyzing directory structures. It's really handy to have a standalone alternative of the command for post-exploitation enumeration as it is not pre-installed on every linux distro and is kind of limited on Windows (compared to the UNIX version). https://github.com/t3l3machus/eviltree

​​Ransomwhere A Proof of Concept #ransomware sample that encrypts your files to test out your ransomware detection & prevention strategies. If no arguments are provided, ransomwherewill automatically execute the encrypt mode without deleting the original files. https://github.com/hazcod/ransomwhere

​​wwwtree A utility for quickly and easily locating, web hosting and transferring resources (e.g., exploits/enumeration scripts) from your filesystem to a victim machine during privilege escalation. https://github.com/t3l3machus/wwwtree Video Presentation: https://www.youtube.com/watch?v=iog-eb_N0Hg

​​Services Main goal - let disable/stop serviceses like WinDefend, which inot easy task from "mmc services.msc" - need have 'NT SERVICE\WinDefend' AND 'NT SERVICE\TrustedInstaller' sids in token. https://github.com/rbmm/Services

​​SharkTapUSB Ethernet Sniffer The SharkTap allows you to sniff an Ethernet link without using an Ethernet port on your PC. This is ideal for newer portables without an Ethernet jack, but is also a benefit if you don’t want to switch a port between network and debugging purposes. A 'Test Access Port' allows you to see the packets on an ethernet link. Directly supports 10-, 100- or 1000Base-T links. Intended to be used with the open source Wireshark program, or equivalent. The Gen2 SharkTapUSB features 'carbon copy' copper repeater technology for minimum impact on the monitored network. The carbon copies of bi-directional data are aggregated onto a single wired or USB Test Access Port (TAP) Power-over-ethernet pass through. (For power-fail bypass, search "SharkTapBYP") 750mA current. Non-conductive plastic cover. Auto cross-over for cables. Buy online: 🛒 https://amzn.to/3VerYIQ #sniffer #lan #ethernet #usb

​​Purpose Some simple IP lists to use in firewall tools like pfBlockerNG. These lists exist elsewhere but may not be in a format that is useable for me. I primarily use these lists to block grey noise in my firewall log https://github.com/SilvrrGIT/IP-Lists

​​A.S.L Free Windows software Detect packer , compiler , protector , .NET obfuscator or Binary packed data : rar , zip , iso , 7zip , zx , sqz , lz4 , img , ... https://github.com/ExeinfoASL/ASL

​​Malware-Detection-Tools A list of awesome malware detection tools https://github.com/Reza-saeedi/Malware-Detection-Tools

​​Malware Samples This repository is intended to provide access to a wide variety of malicious files and other artifacts. https://github.com/jstrosch/malware-samples

​​Pafish Pafish is a testing tool that uses different techniques to detect virtual machines and malware analysis environments in the same way that malware families do. https://github.com/a0rtega/pafish

​​YARA in a nutshell YARA is a tool aimed at (but not limited to) helping malware researchers to identify and classify malware samples. With YARA you can create descriptions of malware families (or whatever you want to describe) based on textual or binary patterns. Each description, a.k.a. rule, consists of a set of strings and a boolean expression which determine its logic. Let's see an example: https://github.com/VirusTotal/yara

​​CVE-2022-22971 Spring Framework DoS with STOMP over WebSocket https://github.com/tchize/CVE-2022-22971 #cve