HackGit

​​CVE-2022-39425 Vulnerability in Oracle VM VirtualBox <6.1.40 (Core) https://github.com/bob11vrdp/CVE-2022-39425 #cve #poc

​​When an N-Day turns into a 0day. (Part 1 of 2) Analysis and exploitation of an uninitialized pointer vulnerability affecting certain TP-LINK routers. https://github.com/b1ack0wl/vulnerability-write-ups/blob/master/TP-Link/WR940N/112022/Part1.md

​​BLAKE3 BLAKE3 is a cryptographic hash function that is: ▫️ Much faster than MD5, SHA-1, SHA-2, SHA-3, and BLAKE2. ▫️ Secure, unlike MD5 and SHA-1. And secure against length extension, unlike SHA-2. ▫️ Highly parallelizable across any number of threads and SIMD lanes, because it's a Merkle tree on the inside. ▫️ Capable of verified streaming and incremental updates, again because it's a Merkle tree. ▫️ A PRF, MAC, KDF, and XOF, as well as a regular hash. ▫️ One algorithm with no variants, which is fast on x86-64 and also on smaller architectures. https://github.com/BLAKE3-team/BLAKE3

​​ThreatFox ThreatFox is an open threat intelligence sharing platform, allowin anyone to share indicators of compromise (IOCs). This repository provides some sample python3 scripts on how to interact with the ThreatFox API. https://github.com/abusech/ThreatFox

​​EmailAnalyzer With EmailAnalyzer you can able to analyze your suspicious emails. You can extract headers, links and hashes from the .eml file https://github.com/keraattin/EmailAnalyzer

​​stegoWiper A powerful and flexible active attack for disrupting stegomalware https://github.com/mindcrypt/stegowiper

​​Empire Empire is a post-exploitation and adversary emulation framework that is used to aid Red Teams and Penetration Testers. The Empire server is written in Python 3 and is modular to allow operator flexibility. Empire comes built-in with a client that can be used remotely to access the server. There is also a GUI available for remotely accessing the Empire server, Starkiller. Features: ▫️ Server/Client Architecture for Multiplayer Support ▫️ Supports GUI & CLI Clients ▫️ Fully encrypted communications ▫️ HTTP/S, Malleable HTTP, OneDrive, Dropbox, and PHP Listeners ▫️ Massive library (400+) of supported tools in PowerShell, C#, & Python ▫️ Donut Integration for shellcode generation ▫️ Modular plugin interface for custom server features ▫️ Flexible module interface for adding new tools ▫️ Integrated obfuscation using ConfuserEx 2 & Invoke-Obfuscation ▫️ In-memory .NET assembly execution ▫️ Customizable Bypasses ▫️ JA3/S and JARM Evasion ▫️ MITRE ATT&CK Integration ▫️ Integrated Roslyn compiler (Thanks to Covenant) ▫️ Docker, Kali, Ubuntu, and Debian Install Support https://github.com/BC-SECURITY/Empire #best #kali

​​Red Teaming Toolkit This repository contains cutting-edge open-source security tools (OST) that will help you during adversary simulation and as information intended for threat hunter can make detection and prevention control easier. The list of tools below that could be potentially misused by threat actors such as APT and Human-Operated Ransomware (HumOR). If you want to contribute to this list send me a pull request. https://github.com/infosecn1nja/Red-Teaming-Toolkit

​​OffensiveGolang A collection of offensive Go packs inspired by different repositories. Ideas have been taken from OffensiveGoLang and Ben Kurtz's DEFCON 29 talk. This repository has some basic implementations and examples that depending on the environment in which they are used can be easily detected by defensive systems. The goal is to support the rapid development of red team tools by providing common functions and with the possibility of improvements by the community. https://github.com/MrTuxx/OffensiveGolang #redteam

​​Dynamic RPC proxy Proxy requests to different Ethereum RPC servers and optionally alter the request. https://github.com/shark0der/rpc-proxy

​​Cobalt Strike Community Kit Cobalt Strike is a post-exploitation framework designed to be extended and customized by the user community. Several excellent tools and scripts have been written and published, but they can be challenging to locate. Community Kit is a central repository of extensions written by the user community to extend the capabilities of Cobalt Strike. The Cobalt Strike team acts as the curator and provides this kit to showcase this fantastic work. https://github.com/Cobalt-Strike/community_kit #cobalt

​​Dismap Asset discovery and identification tool Dismap positioning is an asset discovery and identification tool. It can quickly identify protocols and fingerprint information such as web/tcp/udp, locate asset types, and is suitable for internal and external networks. It assists red team personnel to quickly locate potential risk asset information, and assist blue team personnel to detect Suspected Fragile Assets https://github.com/zhzyker/dismap

​​WP Exploits Collection of Wordpress Exploits and CVES https://github.com/0xd3vil/WP-Vulnerabilities-Exploits #cve #exploit

​​OSINT Search Operators https://github.com/BushidoUK/OSINT-SearchOperators #OSINT

​​incident-runbook A runbook for handling security incidents https://github.com/redar0n/incident-runbook

​​Linux Forensics Everything related to Linux #Forensics https://github.com/ashemery/LinuxForensics

​​PSEdit Edit PowerShell scripts directly in your terminal. ▫️ IntelliSense ▫️ Syntax Higlighting ▫️ Format on Save ▫️ Script Execution ▫️ Error View ▫️ Syntax Error View https://github.com/ironmansoftware/psedit t.me/hackgit

​​Helios Helios is a fully trustless, efficient, and portable Ethereum light client written in Rust. Helios converts an untrusted centralized RPC endpoint into a safe unmanipulable local RPC for its users. It syncs in seconds, requires no storage, and is lightweight enough to run on mobile devices. The entire size of Helios's binary is 13Mb and should be easy to compile into WebAssembly. This makes it a perfect target to embed directly inside wallets and dapps. https://github.com/a16z/helios

​​minikerberos Kerberos manipulation library in pure Python. https://github.com/skelsec/minikerberos This is the public repository of minikerberos, for latest version and updates please consider supporting us through https://porchetta.industries/

​​Mistborn A secure platform for easily standing up and managing your own cloud services: including firewall, ad-blocking, and multi-factor WireGuard VPN access. https://gitlab.com/cyber5k/mistborn #cybersecurity #vpn