HackGit

​​SMSgate SMSgate is a Python-based interface for sending and especially receiving SMS using multiple GSM modems and SIM cards. A multi-modem interface based on the Python module python-gsmmodem-new, which is used for receiving and sending SMS. The main use case for this SMS gateway is receiving SMS and to forward the SMS or to allow XML-RPC clients to fetch SMS via an API. The second use case is to send SMS alarms for service monitoring purposes. Our blog post on the occasion of releasing the source code gives more background regarding this project. https://github.com/pentagridsec/smsgate

​​Alfa AWUS036ACM The AWUS036ACM is the second adapter that ALFA released with the MediaTek MT7612U as its driver. This chipset is the updated version of the one that was built into the AWUS036ACHM and therefore comes with better performance. Not only has this adapter a small form factor, but it also comes with a dual-antenna setup and you can directly plug it into your laptop. It supports both 2.4 and 5 GHz and it rocks not one but two 5dBi dipole antennas. This allows speeds of up to blazing-fast 867Mbps in 802.11ac and still up to 300Mbps on 802.11n. That is pretty impressive considering how small it is, this goes to show how capable MediaTek's chipsets are. The AWUS036ACM is a newer adapter that I haven't personally tested, but my research shows that it does work very well as a WiFi Adapter for Kali Linux and it is also officially listed in ALFA's list for supported Kali Linux Wireless Adapters. This adapter is very high on my wishlist. Drivers: https://docs.alfa.com.tw/Product/AWUS036ACM/ Buy online: 🛒 https://amzn.to/3Fz1sEL #wifi #adapter #alfa

​​SharpExchange This command line POC that shows how C# can be used to interact with Microsoft Exchange (EWS). Showing that it can be done in other tooling other than Powershell. Yes this is a simple POC to show how it could be done. Its not 100%. You want to show off your l33t C# coder or red teamer skills open a pull request plz :) This is for educational purposes only. Dont use for evil or illegal things. https://github.com/ceramicskate0/SharpExchange

​​Random C2 Profile Generator Cobalt Strike random C2 Profile generator This project is designed to generate malleable c2 profiles based on the reference profile at. https://github.com/threatexpress/random_c2_profile

​​Kubeshark Kubeshark, the API Traffic Viewer for kubernetes, provides deep visibility and monitoring of all API traffic and payloads going in, out and across containers and pods inside a Kubernetes cluster. Think of a combination of Chrome Dev Tools, TCPDump and Wireshark, re-invented for Kubernetes. https://github.com/kubeshark/kubeshark

​​OffensiveCloud Offensive security tips and penetration testing TTP for Cloud based environments: ▫️ AWS ▫️ Azure ▫️ GCP https://github.com/lutzenfried/OffensiveCloud

Fuzzing Templates Community curated list of fuzzing templates for the nuclei engine to find unknown security vulnerabilities. Fuzzing templates are used with nuclei scanner which powers the actual scanning engine. This repository contains various fuzzing templates for the scanner provided by our team, as well as contributed by the community. https://github.com/projectdiscovery/fuzzing-templates

​​DPWO Default Password Wifi Owner DPWO is a tool to automatically discover passwords of nearby WIFI networks. This is possible due to the default password schemas used by Brazilian internet providers (NET, VIVO, GVT, etc). https://github.com/caioluders/DPWO

​​Defender Exclusions BOF A BOF to determine Windows Defender exclusions: ▫️ Extensions ▫️ Processes ▫️ Folders https://github.com/EspressoCake/Defender_Exclusions-BOF

​​Vector Vector is a high-performance, end-to-end (agent & aggregator) observability data pipeline that puts you in control of your observability data. Collect, transform, and route all your logs, metrics, and traces to any vendors you want today and any other vendors you may want tomorrow. Vector enables dramatic cost reduction, novel data enrichment, and data security where you need it, not where it is most convenient for your vendors. Additionally, it is open source and up to 10x faster than every alternative in the space. https://github.com/vectordotdev/vector

​​Awesome ChatGPT Curated list of resources for ChatGPT and GPT-3 from OpenAI https://github.com/humanloop/awesome-chatgpt

​​SandboxSecurityTools This repository contains tools that can be used to help test security vulnerabilities against the sandboxes supported by the Microsoft Windows Insider Preview Bounty Program in the local attack scenario category. The following list describes each tool and what sandboxes they can be used to test. For additional information such as how to compile and run each tool please see the README.md file contained in the tool's directory. ▫️ Edge Sandbox Test Tool The Edge Sandbox Testing Tool can be used to test code running inside the Chromium renderer process sandbox. Supported sandboxes: Edge renderer process ▫️ Launch App Container The LaunchAppContainer tool can be used to run applications in AppContainer or Less Privileged AppContainer (LPAC) sandboxes. Supported sandboxes: AppContainer and Less-Privileged AppContainer (LPAC) https://github.com/microsoft/SandboxSecurityTools

​​securityonion-docs This repo stores the source code for our documentation which is published by ReadTheDocs We use RST format so that ReadTheDocs can publish in both HTML and PDF formats. https://github.com/Security-Onion-Solutions/securityonion-docs

​​All About API Detailed information about API ▫️ Description ▫️ Example Request (Curl and Raw request) ▫️ Response ▫️ Regex ▫️ Example API key ▫️ Nuclei Templates (Soon) https://github.com/daffainfo/all-about-apikey

​​PyArmor Deobfuscator A tool that helps to deobfuscate PyArmor-based obfuscated python scripts. https://github.com/u0pattern/PyArmor-Deobfuscator

​​SmartTubeNext (STN) SmartTubeNext is an advanced YouTube app for Android TVs and TV boxes, free & open source. It is not a live TV client and does not support "YouTube TV". ✅ Features: no ads ‧ SponsorBlock ‧ adjustable playback speed ‧ 8k support ‧ 60fps ‧ HDR ‧ read live chat ‧ customizable buttons ‧ no Google Services ‧ helpful international community https://github.com/yuliskov/SmartTubeNext

​​Lsass Shtinkering New method of dumping LSASS by abusing the Windows Error Reporting service. It sends a message to the service with the ALPC protocol to report an exception on LSASS. This report will cause the service to dump the memory of LSASS. https://github.com/deepinstinct/Lsass-Shtinkering

​​PiHoleBlocklist Smart TV's - I use Perflyst's Smart-TV Blocklist https://github.com/Perflyst/PiHoleBlocklist

​​CVE-2022-26265 Contao CMS v.1.5.0 - RCE https://github.com/Inplex-sys/CVE-2022-26265 #cve

​​GCPGoat A Damn Vulnerable GCP Infrastructure GCPGoat is a vulnerable by design infrastructure on GCP featuring the latest released OWASP Top 10 web application security risks (2021) and other misconfiguration based on services such as IAM, Storage Bucket, Cloud Functions and Compute Engine. GCPGoat mimics real-world infrastructure but with added vulnerabilities. It features multiple escalation paths and is focused on a black-box approach. https://github.com/ine-labs/GCPGoat