HackGit

​​🔭 NetRadar This tool is focused on Networking, specifically on the Mapping of Local Networks and Wifi Networks. At the Local Network level, it is capable of analyzing all connected devices (MAC, MAC Vendor, Operating System, Name, Device Type), all open ports of each IP (Port, Service, Service Version, State, Banner), and finding Servers (Name, Operating System, Service Version, Domain, Ports, etc.). At the Wifi Network level, we have 4 types of fully automated and powerful scans (Aircrack-ng, Bettercap, NmCli, and Wash). After finishing the scan, it will generate a Graph *that shows a schema of the detected Wifi Networks (MAC, Distance from our Wifi Network Card, Beacons, Channel, Router Speed, Encryption, AUTH, and Wifi Network Name) and the Devices connected to each Network, showing you (MAC, MAC Manufacturer, Device Type, and time connected to the Network). https://github.com/XDeadHackerX/NetRadar #infosec #pentesting #redteam

​​Podman Desktop A graphical tool for developing on containers and #Kubernetes. https://github.com/containers/podman-desktop

​​GL.iNet Puli AX (GL-XE3000) The GL.iNet Puli AX (GL-XE3000) is a compact WiFi 6 and 5G cellular router powered by a MediaTek Filogic 820 dual-core Arm Cortex-A53 SoC. Its standout feature is the built-in 6,400 mAh battery, providing unmatched portability. Running on a custom OpenWrt 21.02 firmware, it offers seamless 5G connectivity, failover support, and SMS capabilities. Weighing slightly more than the Spitz AX model, it delivers exceptional performance with features like AdGuard, Tor, OpenVPN, and WireGuard. Buy online: 🛒 https://amzn.to/459IeiO #router #openwrt

​​BHEH's SSRFPwned Checks for SSRF using built-in custom Payloads after fetching URLs from Multiple Passive Sources & applying complex patterns aimed at SSRF https://github.com/blackhatethicalhacking/SSRFPwned #infosec #pentesting #redteam

​​D1rkInject Another approach of Threadless injection discovered by @EthicalChaos in c that loads a module into the target process and stomps it, and reverting back memory protections and original memory state. https://github.com/TheD1rkMtr/D1rkInject #infosec #pentesting #redteam

​​secretsdump.py Enhanced version of secretsdump.py from Impacket. Adds multi-threading and accepts an input file with a list of target hosts for simultaneous secrets extraction. https://github.com/fin3ss3g0d/secretsdump.py #infosec #pentesting #redteam

​​CVE-2023-37979 XSS in Ninja Forms wordpress plugin https://github.com/Fire-Null/CVE-2023-37979 #cve #cybersecurity #infosec

​​CVE-2023-37979 This Python script exploits the reflected Cross-Site Scripting (XSS) vulnerability CVE-2023-37979 found in the Ninja-forms WordPress plugin. This CVE could allow a malicious actor to inject malicious scripts, such as redirects, advertisements, and other HTML payloads into your website which will be executed when guests visit your site. This vulnerability has been fixed in version 3.6.26 https://github.com/Mehran-Seifalinia/CVE-2023-37979 #cve #cybersecurity #infosec

​​Cartographer Code Coverage Exploration Plugin for #Ghidra https://github.com/nccgroup/Cartographer #cybersecurity #infosec

LFI-FINDER Open-source tool available on GitHub that focuses on detecting Local File Inclusion (LFI) vulnerabilities. https://github.com/capture0x/LFI-FINDER #pentesting #redteam #bugbounty

​​xorshell Reject all things fancy, Only encoder PHP webshell to bypass WAF using XOR operations. https://github.com/GgBoom-993/xorshell #infosec #pentesting #redteam

​​The Hacker's Toolkit: Techniques and Tools for Penetration The Hacker's Toolkit provides a comprehensive overview of commonly used tools and techniques in the industry, including network scanning and reconnaissance, vulnerability analysis and exploitation, password cracking and encryption, web application hacking, wireless hacking, network security, and evasion and countermeasures. Buy online: 🛒 https://amzn.to/44NfP26 #book #pentesting

​​Amsi_Bypass_In_2023 Amsi Bypass payload that works on Windwos 11 https://github.com/senzee1984/Amsi_Bypass_In_2023 #infosec #pentesting #redteam

​​PUFF Clientside vulnerability/reflected xss fuzzer. https://github.com/ignis-sec/puff #pentesting #redteam #bugbounty

​​CVE-2023-33768 DoS against Belkin smart plugs via crafted firmware injection. https://github.com/Fr0stM0urne/CVE-2023-33768 #cve #cybersecurity #infosec

​​Windows Exploits Collections A large collection of rights raising vulnerabilities on the windows platform, which collects various rights raising vulnerability utilization tools for a long time. https://github.com/lyshark/Windows-exploits #cve #infosec #pentesting #redteam

RansomLord A proof-of-concept Anti-Ransomware exploitation tool that automates the creation of PE files, used to compromise Ransomware pre-encryption. https://github.com/malvuln/RansomLord #malware #cybersecurity #infosec

​​CVE-2022-25451 Tenda AC6 - Unauthorized stack overflow https://github.com/EPhaha/IOT_vuln/tree/main/Tenda/AC6/9 #cybersecurity #infosec #cve

​​S4UTomato Escalate Service Account To LocalSystem via Kerberos. https://github.com/wh0amitz/S4UTomato #infosec #pentesting #redteam

​​Awesome Browser Extensions for OSINT A collection of awesome browser extension useful for #OSINT along with their use case. https://github.com/osintambition/Awesome-Browser-Extensions-for-OSINT #cybersecurity #infosec