HackGit

Paragon Paragon is a #RedTeam engagement platform. It aims to unify offensive tools behind a simple UI, abstracting much of the backend work to enable operators to focus on writing implants and spend less time worrying about databases and css. The repository also provides some offensive tools already integrated with Paragon that can be used during engagements. Features: ▫️ Easily integrate custom tools to unify operations behind a single interface ▫️ Query the Red Team knowledge graph using a provided GraphQL API ▫️ Event emission for low latency automation and real time processing ▫️ Python-like scripting language for deployments, post-exploitation, and more ▫️ Cross-platform implants & deployment included ▫️ Record operator activity to conviniently aggregate into a post-engagement report for review https://github.com/KCarretto/paragon

​​3snake Dump sshd and sudo credential related strings https://github.com/blendin/3snake

​​CrackerJack Web GUI for #Hashcat developed in #Python. Features: ▫️ Web interface for mask generation (?a?l?u). ▫️ Web Push notifications when a password is cracked. ▫️ Swagger 2.0 API. ▫️ Create wordlists from already cracked passwords and feedback into the cracking session. ▫️ Session history to track which attacks you have already performed. ▫️ Multi-user support (local and/or LDAP). ▫️ Wordlist/Mask/Rule support. https://github.com/ctxis/crackerjack

haxx Untethered + Unsandboxed code execution haxx as root on iOS 14 - iOS 14.8.1. https://github.com/asdfugil/haxx

​​PE-infector Crossplatform tool for inject shellcode into .exe binaries (x86 and 64). https://github.com/MastMind/PE-infector

​​BOF-Nim #Cobalt Strike BOF Files with Nim! https://github.com/byt3bl33d3r/BOF-Nim

​​PostDump PostDump is a C# tool developt by COS team (Cyber Offensive and Security) of POST Luxembourg. It is yet another simple tool to perform a memory dump (lsass) using several technics to bypass EDR hooking and lsass protection. Unlike tools like EDRSandBlast, it focused on unhooking only functions stricly required in order to dump the memory, thus done by using DInvoke to map required unhooked DLL. With an exception for NtReadVirtualMemory which is dynamicly patched if hook is detected. Project in constant improvement (hook detection, direct syscalls). https://github.com/post-cyberlabs/Offensive_tools/tree/main/PostDump

​​Doenerium Fully undetected #stealer (0/67) ▫️ Exodus wallet injection (get the password whenever the user logs in the wallet) ▫️ More grabbers (VPN's, Gaming, Messengers) ▫️ Keylogger ▫️ Growtopia stealer ▫️ Discord bot to build within discord ($build <webhook_url>) ▫️ Dynamic encryption https://github.com/doener2323/doenerium

Chisel-Strike A .NET XOR encrypted cobalt strike aggressor implementation for chisel to utilize faster proxy and advanced socks5 capabilities. https://github.com/m3rcer/Chisel-Strike

​​family-of-client-ids-research Abusing Family Refresh Tokens for Unauthorized Access and Persistence in Azure Active Directory ▫️ Ryan Marcotte Cobb, CTU Special Operations ▫️ Tony Gore, CTU Special Operations Undocumented functionality in Azure Active Directory allows a group of Microsoft OAuth client applications to obtain special “family refresh tokens,” which can be redeemed for bearer tokens as any other client in the family. We will discuss how this functionality was uncovered, the mechanism behind it, and various attack paths to obtain family refresh tokens. We will demonstrate how this functionality can be abused to access sensitive data. Lastly, we will share relevant information to mitigate the theft of family refresh tokens. https://github.com/secureworks/family-of-client-ids-research #ad

​​AD description password finder The purpose of this tool is to check if passwords are stored in clear text in the description of Active Directory accounts. https://github.com/AssuranceMaladieSec/AD-description-password-finder #ad

​​OWASP Mobile Security Testing Guide (MSTG) This is the official GitHub Repository of the OWASP Mobile Security Testing Guide (MSTG). The MSTG is a comprehensive manual for mobile app security testing and reverse engineering. It describes technical processes for verifying the controls listed in the OWASP Mobile Application Verification Standard (MASVS). 📖 Read it on Gitbook ⬇️ Download the latest PDF ✅ Get the latest Mobile App Security Checklists ⚡️ Contribute! 💥 Play with our Crackmes https://github.com/OWASP/owasp-mstg

Grawler The best tool ever, made for automating google dorks it's a tool written in PHP which comes with a web interface that automates the task of using google dorks, scrapes the results, and stores them in a file, version 1.0 is the more powerful than ever supporting multiple proxies. https://github.com/A3h1nt/Grawler

CVE-2022-29554 Mishandling of Input to API in PrintixService.exe https://github.com/ComparedArray/printix-CVE-2022-29554 #exploit #cve

USB Ninja Cable USB Ninja is an information security and penetration testing tool that looks and functions just like a regular USB cable (both power and data) until a wireless remote control triggers it to deliver your choice of attack payload to the host machine. In essence, USB Ninja is the next step in the evolution of BadUSB, embedding the attack in the USB cable itself. Emulating keyboard and mouse actions, payloads can be completely customized and can be highly targeted. Undetectable by firewalls, AV software (depending on payload of course) or visual inspection, the USB Ninja is an ideal tool for penetration testers, police and government. Official documentation. USB Ninja Cable: 🛒 https://ali.ski/7q4-ex Wireless trigger device for the USB Ninja. Can trigger two different payloads via toggle buttons. Accepts RP-SMA antennas if you want greater distances for remote payload triggering. USB Ninja Bluetooth Remote: https://ali.ski/c_5OXw #usb #badusb

​​KIZAGAN A python backdoor(Remote Access Trojan) and it can take camera pictures,screenshots,getting microphone sounds... etc. https://github.com/st4inl3s5/kizagan #rat

​​MITRE ATT&CK Version 11.3 added tactics and methods for Android/iOS mobile devices MITRE ATT&CK® is a globally-accessible knowledge base of adversary tactics and techniques based on real-world observations. The ATT&CK knowledge base is used as a foundation for the development of specific threat models and methodologies in the private sector, in government, and in the cybersecurity product and service community. With the creation of ATT&CK, MITRE is fulfilling its mission to solve problems for a safer world — by bringing communities together to develop more effective cybersecurity. ATT&CK is open and available to any person or organization for use at no charge. https://attack.mitre.org/versions/v11 #redteam

​​CVE-2022-33980 Apache Commons Configuration-RCE https://github.com/tangxiaofeng7/CVE-2022-33980-Apache-Commons-Configuration-RCE #exploit

​​Phoenix A tool for steganography of png files. https://github.com/AdolfMacro/phoenix

​​Faceboom Social Engineering Application for #Facebook. How does it work? ▫️ Faceboom is social engineering application, User can only hack the victim's account if they are good at guessing and assuming other people's trades and values. ▫️ It uses a wordlist to perform a successful hack, all the way the user has to update the wordlist.txt file which is already provided to make a hack attempt. https://github.com/thehassantahir/Faceboom