HackGit

​​PlumHound BloodHoundAD Report Engine for Security Teams https://github.com/PlumHound/PlumHound #infosec #pentesting #redteam

​​RWXfinder Windows-specific tool written in C which uses Windows API functions to traverse through directories and look for DLL files with an RWX section in memory. https://github.com/pwnsauc3/RWXFinder #infosec #pentesting #redteam

​​CVE-2023-36884 Office/Windows HTML RCE Vulnerability https://github.com/Maxwitat/CVE-2023-36884-Scripts-for-Intune-Remediation-SCCM-Compliance-Baseline #cve #cybersecurity #infosec

​​DSTIKE Hackheld This versatile tool is designed for hacking and DIY enthusiasts. It features a D1 Mini, OLED display, RGB LED, and buttons for a simple and compact design. The kit comes preloaded with the latest ESP8266 Deauther software, allowing you to test WiFi networks through various attacks. Additionally, you can develop your own software using this ESP8266 development board. The kit includes a 1000mAh rechargeable battery, providing up to 10 hours of operation. Function: ▫️ Deauther Attack: Disconnect 2.4G WiFi ▫️ Deauther Beacon: Create fake networks ▫️ Deauther Probe：Confuse wifi trackers ▫️ Packet Monitor：Display wifi traffic Repository: https://github.com/SpacehuhnTech/Hackheld Buy online: Original 🛒 https://bit.ly/44CeESS Chinese clone 🛒 https://amzn.to/3pPLqkB Chinese clone 🛒 https://bit.ly/3NLsfQY #esp8266 #wifi #dstike

​​Zigbee 3.0 USB Dongle Plus-E Gateway A versatile Zigbee USB stick that serves as a universal gateway for your Zigbee devices. With compatibility across platforms like Home Assistant, openHAB, and Zigbee2MQTT, it eliminates the need for multiple brand-specific Zigbee hubs. This pre-flashed dongle supports a wide range of devices and can be used as a coordinator or router. It features the EFR32MG21 chip for optimal performance, software flow control for reliable communication, and an aluminum housing to minimize signal interference. Buy online: 🛒 https://amzn.to/3JYtWJz #usb #gateway #zigbee

​​LOLAPPS Kind of like the cousin of LOLBAS and GTFObins. Sometimes you might struggle to common binaries to exploit and LOLAPPS is meant to be a supplementary resource for identifying native functionality in applications that can be used to the hacker's advantage, both third-party and from within. https://github.com/LOLAPPS-Project/LOLAPPS Web: https://lolapps-project.github.io/ #infosec #pentesting #redteam

​​HadesLdr Shellcode loader implementing indirect dynamic syscall, api hashing, fileless shellcode retrieving using winsock2. • Indirect Dynamic Syscall by resolving the SSN and the address pointing to a backed syscall instruction dynamically. • API Hashing by resolving modules & APIs base address from PEB by hashes • Fileless Chunked RC4 Shellcode retrieving using Winsock2 https://github.com/CognisysGroup/HadesLdr Details: https://labs.cognisys.group/posts/Combining-Indirect-Dynamic-Syscalls-and-API-Hashing/ #infosec #pentesting #redteam

​​docleaner A web service to clean #documents from potentially privacy-invasive #metadata. https://github.com/TUD-CERT/docleaner

​​Linux Kernel Factory Linux kernel CVE exploit analysis report and relative debug environment. You don't need to compile Linux kernel and configure your environment anymore. https://github.com/bsauce/kernel-exploit-factory #infosec #pentesting #redteam

​​CoWitness A powerful web application testing tool that enhances the accuracy and efficiency of your testing efforts. It allows you to mimic an HTTP server and a DNS server, providing complete responses and valuable insights during your testing process. https://github.com/stolenusername/cowitness #cybersecurity #infosec #pentesting

glit A little #OSINT tool to retrieve all mails of user related to a git repository, a git user or a git organization. https://github.com/shadawck/glit #cybersecurity #infosec

​​🐧 Awesome Linux Rootkits Best linux rootkits resources. https://github.com/milabs/awesome-linux-rootkits #infosec #pentesting #redteam

​​⚔️ Web Hacker's Weapons A collection of cool tools used by Web hackers. https://github.com/hahwul/WebHackersWeapons #infosec #pentesting #bugbounty

​​GitHub Logs Extracting #OSINT Insights from 15TB of GitHub Event Logs. https://github.com/trickest/github-logs #cybersecurity #infosec

​​Navgix A multi-threaded golang tool that will check for nginx alias traversal vulnerabilities. https://github.com/hakaioffsec/navgix #infosec #pentesting #bugbounty

​​🏴 BlackLotus UEFI Windows Bootkit https://github.com/ldpreload/BlackLotus #infosec #pentesting #redteam

​​Venera Framework A tool for automating customized tests and attacks agaist many kinds of protocol. It relies on a scripting engine based on the Lua scripting language that makes it possible to create modules for all types of checks and exploits. https://github.com/farinap5/Venera #infosec #pentesting #redteam

​​💖 DocumentSpark Simple secure document viewing server. Converts a document to a picture of its pages. Content disarm and reconstruction. CDR. Formerly p2. The CDR solution for BrowserBox Pro remote browser isolation. https://github.com/dosyago/documentspark #cybersecurity #infosec

​​SharpDXWebcam Utilizing the DirectX and DShowNET assemblies to record video from the host's webcam. https://github.com/snovvcrash/SharpDXWebcam #cybersecurity #infosec #pentesting

​​PerfExec Tooling PoC The code is not super clean but project contains an example performance dll that will run CMD.exe and a .NET assembly that will execute the DLL or gather performance data locally or remotely. https://github.com/0xthirteen/PerfExec #cybersecurity #infosec