HackGit

​​Slicer A tool to automate the recon process on an APK file. Slicer accepts a path to an extracted APK file and then returns all the activities, receivers, and services which are exported and have null permissions and can be externally provoked. https://github.com/mzfr/slicer

​​Osmedeus Core Engine Osmedeus is a Workflow Engine for Offensive Security. It was designed to build a foundation with the capability and flexibility that allows you to build your own reconnaissance system and run it on a large number of targets. Features: ▫️ Significantly speed up your recon process ▫️ Organize your scan results ▫️ Efficiently to customize and optimize your recon process ▫️ Seamlessly integrate with new public and private tools ▫️ Easy to scale across large number of targets ▫️ Easy to synchronize the results across many places https://github.com/j3ssie/osmedeus Documentation: https://docs.osmedeus.org/

​​Name-That-Hash Description Name That Hash defines the type of hash. The program supports MD5, SHA256 and over 300 other hashes. 📺 Popularity Ratings - Name that hash will show you the most popular hashes first. In older systems it would prioritise Skype Hash the same as Active Directory's NTLM! Which makes as much sense as saying that my GitHub is as popular as VSCode 📈 ✍️ Hash Summaries - no more wondering whether it's MD5 or NTLM. Name-that-hash will summarise the main usage of each hash, allowing you to make an informed & decisive choice ⚡️ 🌈 Colour Output - Don't worry, the colours were hand-selected with a designer to be 100% accessible and gnarly 😎 🤖 JSON output && API - Want to use Name-That-Hash in your project? We are API first, CLI second. Use JSON output or import us as a Python module! 💾 👵 Updated! - HashID was last updated in 2015. Hash-Identifier in 2011! Name-That-Hash is a 2021 project 🦧 ♿️ Accessible - We are 100% committed to making this an accessible hacking tool 🙏 🎫 Extensible - Add new hashes as quickly as you can edit this README. No, seriously -- it's that easy! 🎱 https://github.com/HashPals/Name-That-Hash

​​Artfuscator A better approach towards psychological warfare against reverse engineers. https://github.com/JuliaPoo/Artfuscator

WonkaVision WonkaVision is a proof of concept (POC) tool to analyze Kerberos tickets and attempt to determine if they are forged. This tool was created by Charlie Clark and Andrew Schwartz. It should be noted that this POC is not intended to be a production-ready enterprise application, but rather to generate ideas on how to better detect forged tickets while publicizing discovered IOAs. https://github.com/0xe7/WonkaVision

​​nuvola nuvola (with the lowercase n) is a tool to dump and perform automatic and manual security analysis on AWS environments configurations and services using predefined, extensible and custom rules created using a simple Yaml syntax. https://github.com/primait/nuvola

​​Orpheus Bypassing Kerberoast Detections with Modified KDC Options and Encryption Types! Orpheus is a wrapper for a modified version of Impacket's GetUserSPNs.py and kerberosv5.py which alters the KDC Options (Ticket Options) and the Encryption Type for Kerberoasting. https://github.com/trustedsec/orpheus Details: https://www.trustedsec.com/blog/the-art-of-bypassing-kerberoast-detections-with-orpheus/ Demo: https://www.youtube.com/watch?v=SwbSq1dTz7Y

​​o365sprayer Offensive security tool to enumerate/spray passwords for O365 accounts on both Managed and Federated AD services. Features: ▫️ Distinguishes Managed O365 & Federated O365 for the target domain ▫️ Enumerates emails for valid O365 accounts ▫️ Sprays passwords to check for valid credentials ▫️ Provide custom delay between each request ▫️ Provide number of attempts which triggers account lockout ▫️ Provide cool down time for account lockout ▫️ Provide maximum number of account lockouts to tolerate while spraying https://github.com/securebinary/o365sprayer

​​Invisible Backdoor Detector Invisible Backdoor Detector is a little Python script that allows you to spot and remove Bidi characters that could lead to an invisible backdoor. If you don't know what that is you should check the related paragraph. https://github.com/cybersecsi/invisible-backdoor-detector

​​refreshing-soap-exploit This is a proof of concept for CVE-2022-41622, which is a CSRF in F5 Big-IP that leads to remote code execution. Using this is a bit finnicky, but I'll walk you through my favourite usecases. https://github.com/rbowes-r7/refreshing-soap-exploit

​​NetLlix A project created with an aim to emulate and test exfiltration of data over different network protocols. The emulation is performed w/o the usage of native API's. This will help blue teams write correlation rules to detect any type of C2 communication or data exfiltration. https://github.com/advanced-threat-research/NetLlix

​​P4-IPsec This projects implements IPsec in BMv2 together with an controller based operation of IPsec. For details, please see the corresponding paper. The code in this repository is intended to work with the versions of p4c, BMv2 and PI referenced in dependencies/user-bootstrap.sh. More recent version are likely to break things.

​​TiEtwAgent ETW-based process injection detection. PoC memory injection detection agent based on ETW, for offensive and defensive research purposes. https://github.com/xuanxuan0/TiEtwAgent

​​ExecASLR Abusing Intel branch predictors to bypass ASLR Address Space Layout Randomization is a mitigation used to make harder to exploit memory corruption attacks. In a scenario of a buffer overflow vulnerability, for example, an attacker that tries to make a Return Oriented Programing exploit needs to know the addresses of the gadgets in the chain. If the code segment of the exploited binary is randomized, then it's much harder for an attacker to pick the correct address for the exploit, making the exploitation unfeasible. https://github.com/es0j/ExecASLR-ekoparty

​​GoTestWAF GoTestWAF is a tool for API and OWASP attack simulation that supports a wide range of API protocols including REST, GraphQL, gRPC, WebSockets, SOAP, XMLRPC, and others. It was designed to evaluate web application security solutions, such as API security proxies, Web Application Firewalls, IPS, API gateways, and others. https://github.com/wallarm/gotestwaf

​​EmailAll A powerful Email Collect tool https://github.com/Taonn/EmailAll

​​DT2000 Encrypted USB Flash Drive Alphanumeric Keypad and FIPS 140-2 Level 3 Certified. Kingston’s DataTraveler® 2000 is designed to be secure, with an alphanumeric keypad that locks the drive with a word or number combination, for easy-to-use PIN protection. DT2000 features hardware-based, Full Disk AES 256-bit data encryption in XTS mode. Encryption is done on the drive and no trace of the PIN is left on the system. It’s FIPS 140-2 Level 3 certified, to meet a frequently requested corporate IT requirement. ▫️ Alphanumeric keypad makes it easy to unlock your device ▫️ Full-disk AES 256-bit hardware-based encryption ▫️ Can be used on any device with a USB 2.0 or USB 3.1 Gen 1 (USB 3.0) port ▫️ FIPS 140-2 Level 3 ▫️ Administrator (Admin) PIN – Enables Admin access to the drive and ability to issue new User PIN if user forgets PIN ▫️ Read-Only Access – Admin can pre-provision a drive with pre-loaded content as read-only for the User Buy online: 🛒 https://amzn.to/3EE3qTw 🛒 https://ali.ski/x6tisQ #usb #drive #kingston

​​bxss My alternative to XSS Hunter to find blind XSS. https://github.com/gwen001/bxss

​​TripleCross TripleCross is a Linux eBPF rootkit that demonstrates the offensive capabilities of the eBPF technology. https://github.com/h3xduck/TripleCross

​​ProxyNotShell-PoC Working PoC for CVE-2022-41040 and CVE-2022-41082 (A.K.A ProxyNotShell) https://github.com/testanull/ProxyNotShell-PoC #cve #poc