HackGit

​​PHP-jpeg-injector Injects #PHP payloads into jpeg images. This script injects PHP code into a specified jpeg image. The web application will execute the payload if it interprets the image. Make sure your input jpeg is uncompressed! https://github.com/dlegs/php-jpeg-injector

HiddenWall Tool to generate a Linux kernel module for custom rules with Netfilter hooking. (block ports, Hidden mode, functions to protect, etc.) HiddenWall is a Linux kernel module generator for custom rules with netfilter. (block ports, Hidden mode, rootkit functions, etc.). The motivation: in a bad situation, an attacker can put your iptables/ufw to fall. But if you have HiddenWall, the attacker will not find the hidden kernel module that blocks external access because it has a hook to netfilter on kernel land(think like a second layer for Firewall). https://github.com/CoolerVoid/HiddenWall

​​Pesidious Malware Mutation using Deep Reinforcement Learning and GANs The purpose of the tool is to use artificial intelligence to mutate a malware (PE32 only) sample to bypass AI powered classifiers while keeping its functionality intact. In the past, notable work has been done in this domain with researchers either looking at reinforcement learning or generative adversarial networks as their weapons of choice to modify the states of a malware executable in order to deceive anti-virus agents. Our solution makes use of a combination of deep reinforcement learning and GANs in order to overcome some of the limitations faced while using these approaches independently as showen below. https://github.com/CyberForce/Pesidious

Patchy Patch the inner source of #python functions at runtime. Patchy works by replacing the code attribute of the function, leaving the function object itself the same. It's thus more versatile than monkey patching, since if the function has been imported in multiple places they'll also call the new behaviour. https://github.com/adamchainz/patchy

​​SubDomz The All in One Subdomain Enumeration Tool The tool SubDomz uses multiple open-source tools and various #OSINT search engines to find subdomains effectively. https://github.com/0xlittleboy/subdomz

Credit Card Generator Free Check fake numbers & BIN Codes Tester. You can test your credit card and create virtual new credit card for use payment apis & codes. https://github.com/web-apply/Credit-Card-Generator

​​WiFi HID Injector - An USB Rubberducky This device allows keystrokes to be sent via WiFi to a target machine. The target recognises the Ducky as both a standard HID keyboard and a serial port, allows interactive commands and scripts to be executed on the target remotely. Third-Party Softwares Compatible with WHID’s Hardware: ▫️ https://github.com/whid-injector/WHID ▫️ https://github.com/exploitagency/ESPloitV2 ▫️ https://github.com/sensepost/USaBUSe ▫️ https://github.com/spacehuhn/wifi_ducky ▫️ https://github.com/basic4/WiDucky Buy online: 🛒 https://ali.ski/3P9oU #wifi #badusb

​​Fake-SMS A simple command line tool using which you can skip phone number based SMS verification by using a temporary phone number that acts like a proxy. Latest update : The tool no longer uses upmasked.com, as the service went down. We are using another provider which provides more phone numbers across more countries. Make sure you pull the main branch before compiling. Features: ▫️ Written in Go-1.15 (with modules support enabled) ▫️ Provides an interactive CLI, which is easier to use. ▫️ Provides a local file based DB to save and manage a list of fake phone numbers to help you remember and reuse. https://github.com/Narasimha1997/fake-sms

​​Yaramail Python package and CLI utility for scanning emails with YARA rules https://seanthegeek.github.io/yaramail

​​NiCOFF Basically, NiCOFF is a COFF and BOF file loader written in Nim. NiCOFF reads a BOF or COFF file, parses and executes it in the memory. Both the loader and beacon functions in these projects were rewritten in Nim. https://github.com/frkngksl/NiCOFF

​​CVE-2022-33891 Apache Spark Shell Command Injection Vulnerability A Python POC for exploiting the Apache Spark Shell Command Injection vulnerability. I saw some other POCs out there but they looked mega sus. This one is clean and simple. https://github.com/HuskyHacks/cve-2022-33891 #cve #poc

KoviD LKM Rootkit is a full-feature LKM intended for use against Linux kernel v5+ Here are some of the features, but not all: ▫️ Hide itself (module), even from SysFS ▫️ Provide 4 multi-user shell reverse backdoors ▫️ Hide processes from proc file system (userspace), not with that getdents shit... ▫️ Properly (overstatement!) handle children, newly created processes and more ▫️ Hide KauditD logs, syslogs, user presence and so on ▫️ Hide CPU usage for all hidden tasks - Go Doge! ▫️ Give r00t (duh!) ▫️ Hide files and directories ▫️ etc... https://github.com/carloslack/KoviD

​​AST Android security guides, roadmap, tools, docs, courses, write-ups and teryaagh. https://github.com/Ralireza/Android-Security-Teryaagh

​​Windows10Exploits https://github.com/nu11secur1ty/Windows10Exploits @HackGit

CVE-2022-24500-RCE Windows SMB Remote Code Execution Vulnerability https://github.com/Daro1967/CVE-2022-24500-RCE #cve #RCE

​​Infoooze New #OSINT tool in NodeJs. It helps you to quickly find information about "something" effectively. Its a Global package so that you can easily use it independently from any directory. All you need is to input info such as website, ip, username... and it will take take care of rest. https://github.com/devXprite/infoooze

​​ggshield Protect your secrets with GitGuardian ggshield is a CLI application that runs in your local environment or in a CI environment to help you detect more than 300 types of secrets, as well as other potential security vulnerabilities or policy breaks. https://github.com/GitGuardian/ggshield

​​SilentETHMiner Can mine any Ethash or Etchash cryptocurrency. https://github.com/UnamSanctam/SilentETHMiner

​​matano The open-source security lake platform for AWS. Matano is an open source security lake platform for AWS. It lets you ingest petabytes of security and log data from various sources, store and query them in a data lake, and create Python detections as code for realtime alerting. Matano is fully serverless and designed specifically for AWS and focuses on enabling high scale, low cost, and zero-ops. Matano deploys fully into your AWS account. https://github.com/matanolabs/matano