HackGit

​​Raspberry Pi Zero 2 W The Raspberry Pi Zero 2 W incorporates a quad-core 64-bit Arm Cortex-A53 CPU clocked at 1GHz. At its heart is a Raspberry Pi RP3A0 system-in-package (SiP), integrating a Broadcom BCM2710A1 die with 512MB of LPDDR2 SDRAM. This upgraded package provides the Raspberry Pi Zero 2 W with its generous increase in performance. Raspberry Pi Zero 2 W continues to offer 2.4GHz 802.11 b/g/n wireless LAN and Bluetooth (now 4.2), along with support for Bluetooth Low Energy (BLE) and modular compliance certification. The new Raspberry Pi Zero 2 has a MicroSD card slot for the Raspberry Pi Operating System, a CSI-2 camera connector, a USB On-The-Go (OTG) port and an unpopulated footprint for a HAT-compatible 40-pin GPIO header. Video output is via a mini HDMI port; composite video output is available via the board's test points if needed. The Zero 2 is powered via a micro-USB socket and requires a 5V 2.5A power supply just like previous generations. Kali Linux on Raspberry Pi Zero 2 W - User Instructions Buy online: 🛒 https://ali.ski/DSteo (aliexpress) 🛒 https://amzn.to/3S6Y7iV (amazon) #zero #raspberry #pi

​​SharpAgent C# havoc implant A .NET Framework test agent for Havoc C2. I just wanna learn how to make c2 implants. Will receive updates for now. Just modify the handler to your teamserver. Also it's probably really buggy right now. https://github.com/susMdT/SharpAgent/

​​OpenBackdoor OpenBackdoor is an open-source toolkit for textual backdoor attack and defense, which enables easy implementation, evaluation, and extension of both attack and defense models. https://github.com/thunlp/OpenBackdoor

​​CVE-2021-45067 This bug was Out of Bounds Read caused by treating ANSI string as Unicode which can be exploited to leak sensitive information from the sandboxed adobe reader process. https://github.com/hacksysteam/CVE-2021-45067 #cve

​​Chopper payload smuggling Ported the pascal version to C#, and becomes even better while smuggling the payload using Created Service DisplayName 👇 The tool would create random service, smuggle the payloads chunks through the windows service display name, and write/decode/execute the final payload. https://github.com/0xsp-SRD/0xsp.com/tree/main/chopper Details: https://ired.dev/discussion/13/chopper-payload-smuggling/p1?new=1

​​Nuclei template CVE-2022-40684 https://github.com/NagliNagli/BountyTricks/blob/main/CVE-2022-40684.yaml #cve

​​WPRecon (Wordpress Recon) WPRecon, is a tool for the recognition of vulnerabilities and blackbox information for wordpress. We can use wprecon to recognize the versions of plugins, themes, and wordpress core, in addition to counting users, and waf (web application firewall). The purpose of this tool is just to help developers find possible loopholes in their systems/wordpress sites. https://github.com/AngraTeam/wprecon

​​Fortinet RCE (CVE-2022-40684) Fortinet recently patched a critical authentication bypass vulnerability in their FortiOS, FortiProxy, and FortiSwitchManager projects (CVE-2022-40684). This vulnerability gives an attacker the ability to login as an administrator on the affected system. https://github.com/horizon3ai/CVE-2022-40684 Research: https://www.horizon3.ai/fortios-fortiproxy-and-fortiswitchmanager-authentication-bypass-technical-deep-dive-cve-2022-40684/ #fortinet #rce #cve #poc #exploit

​​CVE-2022-40684 Auth bypass extract admin users and LDAP config - This PoC do only read-only actions. https://github.com/carlosevieira/CVE-2022-40684 #cve #poc

XSLeaker. XSLeaker is a tool that helps to find XS-Leaks on websites. The tool compares resource values for that a leak technique is known (e.g. number of iframes) between different states. XSLeaker consists of two components, a chrome extension that is used to gather the resource values in different states and a node.js server that is used to compare and display the results. The following resource values are checked for differences: ▫️ URL ▫️ Number of iframes ▫️ HTTP status code ▫️ Number of redirects ▫️ Number of WebSocket connections ▫️ IDs of focusable elements https://github.com/Philesiv/XSLeaker t.me/hackgit

​​CipherScan Cipherscan tests the ordering of the SSL/TLS ciphers on a given target, for all major versions of SSL and TLS. It also extracts some certificates informations, TLS options, OCSP stapling and more. Cipherscan is a wrapper above the openssl s_client command line. Cipherscan is meant to run on all flavors of unix. It ships with its own built of OpenSSL for Linux/64 and Darwin/64. On other platform, it will use the openssl version provided by the operating system (which may have limited ciphers support), or your own version provided in the -o command line flag. https://github.com/mozilla/cipherscan

Java android magisk burp objection root emulator easy (Jamboee) Want to pentest or run Android apps in minutes ? Sick of BlueStacks or NOX malware/adware ? Not a single binary in this script and it's open source and downloads are direct from proper sources. There is lots of great powershell tricks (not great code) in this script. I worked hard on thing's like: ▫️ Making it portable as possible ▫️ Setting up and downloading extremely fast environment for Android, Java and Python ▫️ Converting ssl certs to Android without openssl using certutil.exe only https://github.com/freeload101/Java-Android-Magisk-Burp-Objection-Root-Emulator-Easy

​​AWSome Pentesting Cheatsheet ▫️ This guide was created to help pentesters learning more about AWS misconfigurations and ways to abuse them. ▫️ It was created with my notes gathered with uncontable hours of study and annotations from various places ▫️ It's assumed that you have the AWS keys (This is not difficult to find, just look in developer's github) https://github.com/pop3ret/AWSome-Pentesting

Janus Janus is designed to allow for string obfuscation when developing tools. Janus utilizes pre-build and post-build execution steps to apply obfuscation to the tool. If the tool breaks the build, the post-build will always be able to repair it. The pre-build execution step will store clean copies of the code before making modifications. The post-build execution step restores the file to a clean-copy state. https://github.com/echtdefault/Janus t.me/hackgit

​​Malware-IOCs This is where I'll post IOCs from malware investigations https://github.com/executemalware/Malware-IOCs

​​Heap-Overflow-Detection A unit-based symbolic execution method for detecting heap overflow vulnerability in executable codes. https://github.com/SoftwareSecurityLab/Heap-Overflow-Detection

​​EnableWindowsLogSettings Documentation and scripts to properly enable Windows event logs. https://github.com/Yamato-Security/EnableWindowsLogSettings

​​𝐎𝐒𝐂𝐏 𝐏𝐫𝐞-𝐏𝐫𝐞𝐩𝐚𝐫𝐚𝐭𝐢𝐨𝐧 𝐏𝐥𝐚𝐧 𝐚𝐧𝐝 𝐍𝐨𝐭𝐞𝐬 https://github.com/shreyaschavhan/oscp-pre-preparation-plan-and-notes

​​Nimbo-C2 Nimbo-C2 is yet another (simple and lightweight) C2 framework. Nimbo-C2 agent currently supports Windows x64 only. It's written in Nim, with some usage of .NET (by dynamically loading the CLR to the process). Nim is powerful, but interacting with Windows is much more easier and robust using Powershell, hence this combination is made. All server components are written in Python: ▫️ HTTP listener that manages the agents. ▫️ Builder that generates the agent payloads. ▫️ Nimbo-C2 is the interactive C2 component that rule'em all! I developed Nimbo-C2 in the past several months mainly at the late evenings while working at my day job and waking up at nights to my boy, in order to learn and maybe contribute my part to the cyber community 💪. https://github.com/itaymigdal/Nimbo-C2

​​RustHound RustHound is a cross-platform BloodHound collector tool, written in Rust. (Linux,Windows,MacOS) No anti-virus detection and cross-compiled. RustHound generate users,groups,computers,ous,gpos,containers,domains json files to analyze it with BloodHound application. https://github.com/OPENCYBER-FR/RustHound #Donate t.me/hackgit🍻»»»