HackGit

​​TenantHunter A small script to resolve domains to Azure AD tenants (and OAuth login portals) It is incredibly useful for pentesting companies or governments powered by the Azure ecosystem. • Resolves domain to tenant ID • Resolves tenant ID to OAuth login portal • More upcoming features but for now that's it https://github.com/axylisdead/TenantHunter #infosec #pentesting #redteam

​​Max Maximizing BloodHound with a simple suite of tools. https://github.com/knavesec/Max #infosec #pentesting #redteam

​​Nvdsearch A National Vulnerability Database (NVD) API query tool. https://github.com/optiv/nvdsearch #infosec #pentesting #bugbounty

​​CVE-2023-26258 Remote Code Execution in ArcServe UDP Backup. https://github.com/mdsecactivebreach/CVE-2023-26258-ArcServe Details: https://www.mdsec.co.uk/2023/06/cve-2023-26258-remote-code-execution-in-arcserve-udp-backup/ #cybersecurity #infosec #pentesting

​​libcurl-crlf This repository aims to describe a CRLF (Carriage Return Line Feed) that exist in the libcurl of PHP source code. Here you can found the owasp description of a CRLF. https://github.com/W0rty/libcurl-crlf #cybersecurity #infosec

​​DeFiVulnLabs This was an internal Web3 solidity security training in XREX. I want to share these materials with everyone interested in Web3 security and how to find vulnerabilities in code and exploit them. Every vulnerability testing uses Foundry. Currently supports 32 types of vulnerabilities. https://github.com/SunWeb3Sec/DeFiVulnLabs #infosec #pentesting #bugbounty

​​sddl_py Parse an SDDL string. https://github.com/t94j0/sddl_py #infosec #pentesting

​​Ninja UUID Shellcode Runner Module Stomping, No New Thread, HellsGate syscaller, UUID Shellcode Runner for x64 Windows 10! https://github.com/boku7/Ninja_UUID_Runner #infosec #pentesting #redteam

​​DorkLab Web app tool for helping compose advance search operators (aka Google dorking AKA boolean searches) for a variety of search engines. https://github.com/rtwillett/DorkLab #OSINT #dork #infosec

Villain A high level C2 framework that can handle multiple TCP socket & HoaxShell-based reverse shells, enhance their functionality with additional features (commands, utilities etc) and share them among connected sibling servers (Villain instances running on different machines). • Payload generation based on default, customizable and/or user defined payload templates (Windows & Linux), • A dynamically engaged pseudo-shell prompt that can quickly swift between shell sessions, • File uploads (via http), • Auto-http request & exec scripts against sessions (a bit unstable), • Auto-invoke ConPtyShell against a powershell r-shell session as a new process to gain a fully interactive Windows shell, • Team chat, • Session Defender (a feature that inspects user issued commands for mistakes / unintentional input that may cause a shell to hang) https://github.com/t3l3machus/Villain #infosec #pentesting #redteam

​​NetSPI #PowerShell Scripts https://github.com/NetSPI/PowerShell #infosec #pentesting #redteam

​​genieacs-default-jwt (nuclei-templates) GenieACS - Authentication Bypass (Default JWT Secret) https://github.com/projectdiscovery/nuclei-templates/blob/main/http/misconfiguration/genieacs-default-jwt.yaml Details: https://0x00sec.org/t/genieacs-and-the-tale-of-default-jwt-secret/32738 #pentesting #redteam #bugbounty

​​hakrevdns Small, fast, simple tool for performing reverse DNS lookups en masse. You feed it IP addresses, it returns hostnames. This can be a useful way of finding domains and subdomains belonging to a company from their IP addresses. https://github.com/hakluke/hakrevdns #cybersecurity #infosec

​​WMIexec Set of python scripts which perform different ways of command execution via WMI protocol. https://github.com/WKL-Sec/WMIExec #infosec #pentesting #redteam

​​Meta BugBounty Collection of Facebook Bug Bounty Writeups. https://github.com/jaiswalakshansh/Facebook-BugBounty-Writeups #cybersecurity #infosec #bugbounty

​​Polaris Validation of best practices in your #Kubernetes clusters. https://github.com/FairwindsOps/polaris #cybersecurity #infosec

​​Tele Helper #Telegram bot built with Python that provides a set of useful tools to help you. https://github.com/thesuhu/tele-helper #OSINT #cybersecurity #infosec

​​🔬 js-x-ray JavaScript & Node.js open-source SAST scanner. A static analyser for detecting most common malicious patterns. https://github.com/NodeSecure/js-x-ray #cybersecurity #infosec

​​VMwareCloak A PowerShell script that attempts to help malware analysts hide their VMware Windows VM's from malware that may be trying to evade analysis. https://github.com/d4rksystem/VMwareCloak #malware #cybersecurity #infosec

​​Malwoverview A first response tool used for threat hunting and offers intel information from Virus Total, Hybrid Analysis, URLHaus, Polyswarm, Malshare, Alien Vault, Malpedia, Malware Bazaar, ThreatFox, Triage, InQuest and it is able to scan Android devices against VT. https://github.com/alexandreborges/malwoverview #malware #cybersecurity #infosec