HackGit

$donate

🥰 If you like the channel please support us! 💰Donate https://www.buymeacoffee.com/HackGit 💲BTC: bc1qq2kuplw92csl0yz9xcqmrcrcmnutvvuvj3s7h7 💱TON:

UQAAZ1BFX5OsybSryoFunzyJN3F7oKWMbZNPlwMTcVK8mEzA

Buy Cypto here or here (not advertising) #donate #support

​Digital Forensics Guide A guide covering Digital Forensics the applications, libraries and tools that will make you a better and more efficient with Digital Forensics development. https://github.com/mikeroyal/Digital-Forensics-Guide #forensic

​Sandman A Target Tracking , NoteTaking , CheckLists and Data Management GUI App for Bug Hunter's and Pentesters. It is designed to Track Progress , Store and Retrieve tools data , CheckLists per domain and much more (future releases). It is designed while keeping in mind the ease and requirements while working on a program.It also has an integrated web server which can be used to get and post data to its respective pages. Features: ▫️ CheckList For Each Domain With Progress Tracking. ▫️ Integrated HTTP Server to Store and Retrieve Data. ▫️ Consists of Multiple Pages (In Scope, All Subs , Active Urls etc). ▫️ Cred Page For Storing Credentials. ▫️ Store and Retrieve Tool Output of Each CheckList Item for each domain and project. ▫️ Personal Notes / Findings for each Project. ▫️ Pagination For Storing Large Content. https://github.com/tarunKoyalwar/Sandman

​tproxy When I develop backend services and write go-zero, I often need to monitor the network traffic. For example: ▫️ monitoring gRPC connections, when to connect and when to reconnect ▫️ monitoring MySQL connection pools, how many connections and figure out the lifetime policy ▫️ monitoring any TCP connections on the fly https://github.com/kevwan/tproxy

​Slacksploit A forensic analysis framework for enumerating slack artifacts residing in the Operating system. Features: ▫️ Multi-OS support -> Windows, Mac & Linux ▫️ Fetch Cookies ▫️ Retrieve User logs, Slack Client logs ▫️ Fetch and analyze levelDB files -> Extract authentication tokens ▫️ Export the data to CSV ▫️ GUI Visualizer plugin -> Slack user data https://github.com/adithyan-ak/Slacksploit #forensic

​ExeSpy Cross-Platform PE File Viewer (EXE/DLL) Free open-source cross-platform Windows PE file viewer. It supports all valid PE formats, including EXE, DLL, COM, OCX, SYS, SCR, CPL, AX, ACM, WINMD, MUI, EFI, TSP, and DRV. It can view PE information, including: ▫️ General information ▫️ Headers ▫️ Sections ▫️ Libraries ▫️ Imports ▫️ Exports ▫️ Resources ▫️ Manifest https://github.com/andyjsmith/Exe-Spy #blueteam

​gshell A simple yet flexible cross-platform shell generator tool. A cross-platform shell generator tool that lets you generate whichever shell you want, in any system you want, giving you full control and automation. Is cross-platform, you can use it in operating systems such as: ▫️ Unix-based systems ▫️ GNU/Linux ▫️ Windows ▫️ macOS Generates the following shells: ▫️ Bind Shells: The target has a listening port and we connect to the target. ▫️ Reverse Shells: We have a listening port and the target connects to us. Supports the following encodings (as of now): ▫️ URL Encoding: Bypass URL filters ▫️ Base64/32/16 Encodings: Bypass string/keyword filters ▫️ PowerShell Base64 Encoding https://github.com/nozerobit/gshell

FollinaExtractor Extract payload URLs from Follina (CVE-2022-30190) docx and rtf files https://github.com/MalwareTech/FollinaExtractor

​xnLinkFinder This is a tool used to discover endpoints for a given target. It can find them by crawling a target, searching files in a given directory, or get them from a #Burp project. The python script is based on the link finding capabilities of my Burp extension GAP. As a starting point, I took the amazing tool LinkFinder by Gerben Javado, and used the Regex for finding links, but with additional improvements to find even more. https://github.com/xnl-h4ck3r/xnLinkFinder

Remote Code Injection by Abusing CreateProcess and GetEnvironmentVariable New method of injecting code into a remote process without using WriteProcessMemory. CreateProcess: https://www.x86matthew.com/view_post?id=proc_env_injection GetEnvironmentVariable: https://x-c3ll.github.io/posts/GetEnvironmentVariable-Process-Injection/ #maldev #process #inject #pinvoke #winapi

​ssh-chat Custom SSH server written in Go. Instead of a shell, you get a chat prompt. https://github.com/shazow/ssh-chat

​mquery Blazingly fast Yara queries for #malware analysts https://github.com/CERT-Polska/mquery

​DumpsterDiver DumpsterDiver is a tool, which can analyze big volumes of data in search of hardcoded secrets like keys (e.g. AWS Access Key, Azure Share Key or SSH keys) or passwords. Additionally, it allows creating a simple search rules with basic conditions (e.g. report only csv files including at least 10 email addresses). The main idea of this tool is to detect any potential secret leaks. You can watch it in action in the demo video or read about all its features in this article. https://github.com/securing/DumpsterDiver

beacon Former attempt at creating a independent #Cobalt Strike Beacon https://github.com/SecIdiot/beacon

50-Days-Of-SQLi https://github.com/arpeetrathii/50-Days-Of-SQLi

TLS-Scanner TLS-Scanner is a tool created by the Chair for Network and Data Security from the Ruhr-University Bochum to assist pentesters and security researchers in the evaluation of TLS Server configurations. https://github.com/tls-attacker/tls-scanner

Exfilkit Data exfiltration utility used for testing detection capabilities of security products. Obviously for legal purposes only. https://github.com/tasooshi/exfilkit

​Cloud penetration testing A curateinfrastrucd list of cloud pentesting resource, contains AWS, Azure, Google Cloud https://github.com/kh4sh3i/cloud-penetration-testing

​Uptimer Application for tracking the status of servers Features: ▫️ Ping servers by ip, ip:port, websites ▫️ Notifications in the telegram channel and to the mail ▫️ Web server and API ▫️ Server groups ▫️ Configuring messages in the config ▫️ Placeholders for messages ▫️ Full customization https://github.com/dadowl/uptimer