HackGit

​​CVE-2022-2588 Linux kernel cls_route UAF https://github.com/sang-chu/CVE-2022-2588 #cve

​​PCredz This tool extracts Credit card numbers, NTLM(DCE-RPC, HTTP, SQL, LDAP, etc), Kerberos (AS-REQ Pre-Auth etype 23), HTTP Basic, SNMP, POP, SMTP, FTP, IMAP, etc from a pcap file or from a live interface. https://github.com/lgandx/PCredz

​​DSTIKE Hackheld Hackheld is a open source hackable handheld for DIY. It comes installed with the latest ESP8266 Deauther software. With this software, you can perform different attacks to test WiFi networks. Please note that the ESP8266 does only support 2.4GHz. You can also use it to develop your own software. It is simple to use, just like any other ESP8266 development board. Function: ▫️ Deauther Attack: Disconnect 2.4G WiFi ▫️ Deauther Beacon: Create fake networks ▫️ Deauther Probe：Confuse wifi trackers ▫️ Packet Monitor：Display wifi traffic Repository: https://github.com/SpacehuhnTech/Hackheld Buy online: 🛒 https://ali.ski/8sz30 #esp8266

​​CVE-2022-2588 The #DirtyCred version of exploit to CVE-2022-2588 (an 8-year-old bug) along with a brief write-up. Ideally, the exploit could work on different distros if the kernel is vulnerable. https://github.com/Markakd/CVE-2022-2588 #cve

​​PPID Spoofing and Blocking DLLs in C# Using InitializeProcThreadAttributeList and UpdateProcThreadAttribute to update attributes of the process to change parent PID and add PROCESS_CREATION_MITIGATION_POLICY_BLOCK_NON_MICROSOFT_BINARIES_ALWAYS_ON. https://github.com/crypt0ace/PPIDSpoof Staying Under the Radar - Part 1 - PPID Spoofing and Blocking DLLs https://crypt0ace.github.io/posts/Staying-under-the-Radar/

​​GwisinMsi This repo contains the PoC of the MSI payload used in the blog post The payload is based on the Gwisin ransomware's MSI payload analysis of the AhnLab ASEC team's blog post. https://github.com/ChoiSG/GwisinMsi t.me/hackgit

​​CiLocks Android/IOS Hacking 📱 Crack Interface lockscreen, Metasploit and More Android/IOS Hacking. https://github.com/tegal1337/CiLocks

​​3klCon Full Automation Recon tool which works with Small and Medium scopes. Recommended to use it on VPS, it'll discover secrets and searching for vulnerabilities https://github.com/eslam3kl/3klCon

​​APKiD APKiD gives you information about how an APK was made. It identifies many compilers, packers, obfuscators, and other weird stuff. It's PEiD for Android. https://github.com/rednaga/APKiD

​​RunasCs RunasCs is an utility to run specific processes with different permissions than the user's current logon provides using explicit credentials. This tool is an improved and open version of windows builtin runas.exe that solves some limitations: ▫️ Allows explicit credentials ▫️ Works both if spawned from interactive process and from service process ▫️ Manage properly DACL for Window Stations and Desktop for the creation of the new process ▫️ Uses more reliable create process functions like CreateProcessAsUser() and CreateProcessWithTokenW() if the calling process holds the required privileges (automatic detection) ▫️ Allows to specify the logon type, e.g. 8-NetworkCleartext logon (no UAC limitations) ▫️ Allows to bypass UAC when an administrator password is known (flag --bypass-uac) ▫️ Allows redirecting stdin, stdout and stderr to a remote host https://github.com/antonioCoco/RunasCs

​​Fly4s A lightweight, simple and functional wrapper for Flyway using cats effect. https://github.com/geirolz/fly4s

​​AppShark A static taint analysis platform to scan vulnerabilities in an Android app. https://github.com/bytedance/appshark

​​PyMeta A Python3 rewrite of the tool PowerMeta, created in PowerShell. It uses specially crafted search queries to identify and download the following file types (pdf, xls, xlsx, csv, doc, docx, ppt, pptx) from a given domain using Google and Bing scraping. https://github.com/m8sec/pymeta

​​LDAP Nom Nom Anonymously bruteforce Active Directory usernames from Domain Controllers by abusing LDAP Ping requests (cLDAP) ▫️ Autodetects DCs on domain joined machines. A bit moot, as you can just dump usernames with authenticated LDAP, but included for completeness ▫️ Reads usernames to test from stdin or file ▫️ Outputs to stdin or file ▫️ Parallelized, defaults to 8 connections ▫️ Shows progressbar if you're using both input and output files https://github.com/lkarlslund/ldapnomnom

​​ExecRemoteAssembly Execute Remote Assembly with args passing and with AMSI and ETW patching https://github.com/D1rkMtr/ExecRemoteAssembly

​​Condor A tool created to help pentesters bypass protections like AVs/EDRs/XDRs in the Windows operating system. Condor was developed in Python and has several advantages to help pentesters. https://github.com/MrEmpy/Condor

​​TomcatWeakScan Tomcat Weak Password Batch Scanner https://github.com/Tas9er/TomcatWeakScan

​​CVE-2022-32883 Turning Your Computer Into a GPS Tracker With Apple Maps. https://github.com/breakpointHQ/CVE-2022-32883