HackGit

CVE-2022–34718 TCP/IP RCE Vulnerability (CVE-2022–34718) PoC Restoration and Analysis. https://github.com/numencyber/VulnerabilityPoC Details: https://medium.com/@numencyberlabs/analysis-and-summary-of-tcp-ip-protocol-remote-code-execution-vulnerability-cve-2022-34718-8fcc28538acf #cve #poc

​​SharpC2 Command and Control Framework written in C#. https://github.com/rasta-mouse/SharpC2

​​Get-AppLockerEventlog This script will parse all the channels of events from the win-event log to extract all the log relatives to AppLocker. The script will gather all the important pieces of information relative to the events for forensic or threat-hunting purposes, or even in order to troubleshoot. Here are the logs we fetch from win-event: ▫️ EXE and DLL, ▫️ MSI and Script, ▫️ Packaged app-Deployment, ▫️ Packaged app-Execution. https://github.com/RomaissaAdjailia/Get-AppLockerEventlog #Donate t.me/hackgit🍻»»»

​​DragonCastle A PoC that combines AutodialDLL lateral movement technique and SSP to scrape NTLM hashes from LSASS process. Upload a DLL to the target machine. Then it enables remote registry to modify AutodialDLL entry and start/restart BITS service. Svchosts would load our DLL, set again AutodiaDLL to default value and perform a RPC request to force LSASS to load the same DLL as a Security Support Provider. Once the DLL is loaded by LSASS, it would search inside the process memory to extract NTLM hashes and the key/IV. https://github.com/mdsecactivebreach/DragonCastle

​​Background A phishing framework for OAuth 2.0 device code authentication grant flow https://github.com/dunderhay/phishsticks

​​L2Fuzz A stateful fuzzer to detect vulnerabilities in Bluetooth BR/EDR Logical Link Control and Adaptation Protocol (L2CAP) layer. https://github.com/haramel/l2fuzz

​​Redshift-jdbc file write RCE In Amazon AWS Redshift JDBC Driver (aka amazon-redshift-jdbc-driver or redshift-jdbc42) with the newest version, the loggerFile properties does not check the file suffix,which a knowledgeable attacker with control over the JDBC URL can use to create a jsp webshell and achieve remote code execution. https://github.com/p1n93r/redshift-jdbc-RCE t.me/hackgit

​​UbSym A unit-based symbolic execution method for detecting memory corruption vulnerabilities in executable codes https://github.com/SoftwareSecurityLab/UbSym

​​RePulsar This is a PoC implementation of an SMB backdoor based on our own research into the Windows kernel and the SMB mechanism. Since this is just a PoC, there is no special functionality. In the future, it is planned to support the basic functionality: ▫️ Arbitrary read/write memory ▫️ Shellcode execution ▫️ Etc. https://github.com/APT64/RePulsar

​​EvilSmurf2 Project Description: Finding Bluetooth Vulnerabilities and Methods of Exploitation/Weaponization as well as Mitigation/Prevention This repository serves as storage as well as a collaborating area for C code developed and written by the group Deep Blue Devs (DBD) https://github.com/joshuar49/EvilSmurf2

​​eJPT-Notes eLearnSecurity Junior Penetration Tester Collection of notes to prepare for the eLearnSecurity eJPT certification exam. https://github.com/grumpzsux/eJPT-Notes

​​Wapiti A web vulnerability scanner written in Python. Features: ▫️ Generates vulnerability reports in various formats (HTML, XML, JSON, TXT, CSV). ▫️ Can suspend and resume a scan or an attack (session mechanism using sqlite3 databases). ▫️ Can give you colors in the terminal to highlight vulnerabilities. ▫️ Different levels of verbosity. ▫️ Fast and easy way to activate/deactivate attack modules. ▫️ Adding a payload can be as easy as adding a line to a text file. ▫️ Configurable number of concurrent tasks to perform HTTP requests. https://github.com/wapiti-scanner/wapiti Website: https://wapiti-scanner.github.io/ #scanner #best

​​PENTESTING-BIBLE Explore more than 2156 hacking articles saved over time as PDF. BROWSE HISTORY. https://github.com/blaCCkHatHacEEkr/PENTESTING-BIBLE t.me/hackgit

​​ShoMon A Shodan alert feeder for TheHive written in GoLang. With version 2.0, it is more powerful than ever! https://github.com/KaanSK/shomon

​​The JSON Web Token Toolkit v2 jwt_tool.py is a toolkit for validating, forging, scanning and tampering JWTs (JSON Web Tokens). Its functionality includes: ▫️ Checking the validity of a token ▫️ Testing for known exploits: → (CVE-2015-2951) The alg=none signature-bypass vulnerability → (CVE-2016-10555) The RS/HS256 public key mismatch vulnerability → (CVE-2018-0114) Key injection vulnerability → (CVE-2019-20933/CVE-2020-28637) Blank password vulnerability → (CVE-2020-28042) Null signature vulnerability ▫️ Scanning for misconfigurations or known weaknesses ▫️ Fuzzing claim values to provoke unexpected behaviours ▫️ Testing the validity of a secret/key file/Public Key/JWKS key ▫️ Identifying weak keys via a High-speed Dictionary Attack ▫️ Forging new token header and payload contents and creating a new signature with the key or via another attack method ▫️ Timestamp tampering ▫️ RSA and ECDSA key generation, and reconstruction (from JWKS files) ...and lots more! https://github.com/ticarpi/jwt_tool t.me/hackgit

​​ghoulbond System Utility , Scanner and OSINT tool. https://github.com/hitesh22rana/ghoulbond

​​ethereum-exploit Analysis of the major exploits that took place on the Ethereum blockchain https://github.com/MikeSpa/ethereum-exploit

​​s3cXSSer This extension will help you to detect GET/POST based XSS vulnerability in any website easily https://github.com/s3c-krd/s3cXSSer t.me/hackgit

​​sploits aukey wr-r01 ROUTER 0day https://github.com/3sjay/sploits #exploit #0day

​​CVE-2022-42045 We discovered an Arbitrary code injection in Zemana amsdk.sys kernel-mode driver, a part of Zemana Antimalware SDK. The vulnerability allows to inject an arbitrary code into the one of the driver code sections and then to execute it with kernel-mode privileges (local privileges escalation from admin to kernel mode). This vulnerability could be used, for example, to disable Driver Signature Enforcement and then to install unsigned kernel-mode drivers. https://github.com/ReCryptLLC/CVE-2022-42045 #cve