HackGit

​​Tracer Tracer is an OSINT tool that can be used to detect on which websites a username is currently in use. Features: ▫️ 170+ sites that are checked ▫️ Filter websites based on their domain or category ▫️ Limit the pool of sites that will be checked ▫️ Save the result of each check in a report file ▫️ Open successful results in your browser ▫️ Customizability: ▫️ Use the included config file to change the behavior of Tracer ▫️ Easy to use https://github.com/chr3st5an/tracer

​​LORSRF lorsrf is just a web pen-testing tool that I wrote to find the parameters that can be used to find SSRF or Out-of-band resource load by adding OAST host like Burp Collaborator to the parameter value, above of all, the request that will be received in Burp Collaborator will be an HTTP request without any real pieces of information about the target, i was thinking about how can i get vulnerable parameter/endpoint , Hence i made a simple feature is that allowed you to add some pieces of information of the target in your OAST host as a variables https://github.com/knassar702/lorsrf

​​Fsociety A Modular Penetration Testing Framework. https://github.com/fsociety-team/fsociety

​​TRIFECTA A batch script that allows you to search a phrase or keywords with 12 different search engines. You can do so one at a time or all at once. The options are as follows: ▫️ Yahoo ▫️ Google ▫️ DuckDuckGo ▫️ Shodan ▫️ Swisscows ▫️ Bing ▫️ Carrot2 ▫️ Thingful ▫️ Google Scholar ▫️ Wolfram Alpha ▫️ Metacrawler ▫️ Yandex ▫️ All Of The Above https://github.com/V1XX-1/TRIFECTA-Search-Tool t.me/hackgit

​​rs-shellcode A shellcode runner write in Rust use windows-rs. https://github.com/b1tg/rs_shellcode t.me/hackgit

​​evilgophish evilginx2 + gophish https://github.com/fin3ss3g0d/evilgophish

​​HTTPFY A fast #nodejs tool for gathering information about a domain or a list of domains. Response time, main page word count, content type, redirect location and many other options. https://github.com/devXprite/httpfy t.me/hackgit

​​Burp Suite Sharpener This extension should add a number of UI and functional features to Burp Suite to make working with it easier. https://github.com/mdsecresearch/BurpSuiteSharpener t.me/hackgit

$donate

​​💰 Donate If you like the channel please support us ❣️ https://www.buymeacoffee.com/HackGit BTC:

1987zNaVX53v7tzpKRRde84uXbDYjuNykL

TON:

UQAAZ1BFX5OsybSryoFunzyJN3F7oKWMbZNPlwMTcVK8mEzA

USDT – ERC20❗️:

0x1e7fa9e9c42f71e6d155aca39951f23355178163

You can buy crypto here Every donation gives us the motivation to do better and more content! #donate #support

​​Vulnerable Web App sqli-postgres-rce-privesc-hacking-playground This is free vulnerable app for novice pentesters & developers to experiment with SQL Injection vulnerability and privilege escalation. Recommended path: ▫️ exploit the SQLi vulnerability ▫️ get shell via vulnerable version of PostgreSQL ▫️ perform privilage escalation and become root 🥂 https://github.com/filipkarc/sqli-postgres-rce-privesc-hacking-playground t.me/hackgit

​​noPac Exploiting CVE-2021-42278 and CVE-2021-42287 to impersonate DA from standard domain user https://github.com/Ridter/noPac #cve #exploit

​​Swiss Cyber Defence Exam Preparation for Cyber Security Specialist with Swiss Federal Diploma. https://github.com/phr85/swiss-cyber-defence

​​Chitchatter A free (as in both price and freedom) communication tool. It is designed with security and privacy in mind. https://github.com/jeremyckahn/chitchatter Demo: https://chitchatter.im/

​​server-status PWN A script that monitors and extracts requested URLs and clients connected to the service by exploiting publicly accessible Apache server-status instances. https://github.com/mazen160/server-status_PWN Exploiting Misconfigured Apache server-status Instances with server-status_PWN: https://mazinahmed.net/blog/exploiting-misconfigured-apache-server-status-instances/

ESP32 Wi-Fi Penetration Tool This project introduces an universal tool for ESP32 platform for implementing various Wi-Fi attacks. It provides some common functionality that is commonly used in Wi-Fi attacks and makes implementing new attacks a bit simpler. It also includes Wi-Fi attacks itself like capturing PMKIDs from handshakes, or handshakes themselves by different methods like starting rogue duplicated AP or sending deauthentication frames directly, etc... Obviously cracking is not part of this project, as ESP32 is not sufficient to crack hashes in effective way. The rest can be done on this small, cheap, low-power SoC. Features: ▫️ PMKID capture ▫️ WPA/WPA2 handshake capture and parsing ▫️ Deauthentication attacks using various methods ▫️ Denial of Service attacks ▫️ Formatting captured traffic into PCAP format ▫️ Parsing captured handshakes into HCCAPX file ready to be cracked by Hashcat ▫️ Passive handshake sniffing ▫️ Easily extensible framework for new attacks implementations ▫️ Management AP for easy configuration on the go using smartphone for example ▫️ And more... Repository: https://github.com/risinek/esp32-wifi-penetration-tool Buy online: ESP32-DEVKITC-32E 🛒 https://ali.ski/ZJxBK #esp32 #wifi

​​uosint Find The Profiles Of A Person On Social Networks With this tool, you can see all the information of the target person's social networks which is publicy available. Many people thik that this tool needs to be installed, so i will make a Telegram Bot so that information can be obtained more easily and there no need to install or do any other probles just simple and easy. https://github.com/uosint-project/uosint t.me/hackgit

Pico-PIO-USB. USB host/device implementation using PIO of raspberry pi pico (RP2040). https://github.com/sekigon-gonnoc/Pico-PIO-USB