HackGit

​​peetch peetch is a collection of tools aimed at experimenting with different aspects of eBPF to bypass TLS protocol protections. Currently, peetch includes two subcommands. The first called dump aims to sniff network traffic by associating information about the source process with each packet. The second called tls allows to identify processes using OpenSSL to extract cryptographic keys. Combined, these two commands make it possible to decrypt TLS exchanges recorded in the PCAPng format. https://github.com/quarkslab/peetch

​​nps-auth-bypass nps authentication bypass exploit tool, use this tool to easily access the web console, or bulk get socks5 and http proxy https://github.com/carr0t2/nps-auth-bypass

​​Windows-WiFi-Extractor Extract Windows Wi-Fi Passwords to a Remote URL https://github.com/hmaverickadams/Windows-WiFi-Extractor

​​Velociraptor Endpoint visibility and collection tool. Velociraptor is a tool for collecting host based state information using The Velociraptor Query Language (VQL) queries. To learn more about Velociraptor, read the documentation on: https://github.com/Velocidex/velociraptor Docs: https://docs.velociraptor.app/

​​2022-HW-POC exploit pocs https://github.com/sobinge/2022-HW-POC

​​A TCP proxy using HTTP Reach SSH behind a Nginx reverse proxy https://github.com/julianbuettner/tcp-over-http

​​Antnium A C2 framework and RAT written in Go. This source code is publicly published as reference for my presentation Develop your own RAT - AV & EDR Defense. Antnium inteded to fulfill my own requirements, and not those of others. Works for the campaigns i performed, but is not necessarily meant to be a generic C2 framework. There are two components: ▫️ client.exe: The actual RAT / beacon / agent / implant ▫️ server.exe: C2 server https://github.com/dobin/antnium

​​cve-2021-3060 POC https://gist.github.com/rqu1/8ed4f51fd90dd82fc89111340e26a756 sloppy certificate enrollment protocol, for ghosts (cve-2021-3060) https://forum.spacehey.com/topic?id=83646 #cve #poc

​​follina (POC) All about CVE-2022-30190, aka follina, that is a RCE vulnerability that affects Microsoft Support Diagnostic Tools (MSDT) on Office apps such as Word. This is a very simple POC, feel free to check the sources below for more threat intelligence. https://github.com/Noxtal/follina Follina – CVE-2022-30190 RTF: https://0xsp.com/offensive/follina-cve-2022-30190-rtf/ #cve #poc

​​💰 Donate If you like the channel please support us ❣️ https://www.buymeacoffee.com/HackGit BTC:

1987zNaVX53v7tzpKRRde84uXbDYjuNykL

TON:

UQAAZ1BFX5OsybSryoFunzyJN3F7oKWMbZNPlwMTcVK8mEzA

USDT – ERC20❗️:

0x1e7fa9e9c42f71e6d155aca39951f23355178163

You can buy crypto here #donate #support

iCULeak.py Tool to find and extract credentials from phone configuration files in environments managed by Cisco's CUCM (Call Manager). When using Cisco's CUCM (Call Manager), phone configuration files are stored on a TFTP server. These VoIP phone configuration files quite frequently contain sensitive data, including phone SSH/admin credentials. There is also an issue with how some browsers autofill fields such as the SSH Username & Password fields with their CUCM credentials (commonly their AD credentials), if the administrator has saved the credentials in their browser. This issue has also been faced by administrators using password managers that automatically plug in credentials, where they found that their credentials were being automatically inputted into the SSH Username & Password fields, and then being saved (and stored in plaintext in the configuration files). https://github.com/llt4l/iCULeak.py #ad #cisco

​​SeeYouCM Thief Simple tool to automatically download and parse configuration files from Cisco phone systems searching for SSH credentials. Will also optionally enumerate active directory users from the UDS API. https://github.com/trustedsec/SeeYouCM-Thief Seeyoucm-thief: exploiting common misconfigurations in cisco phone systems: https://www.trustedsec.com/blog/seeyoucm-thief-exploiting-common-misconfigurations-in-cisco-phone-systems/ Unauthenticated Dumping of Usernames via Cisco Unified Call Manager (CUCM): https://www.n00py.io/2022/01/unauthenticated-dumping-of-usernames-via-cisco-unified-call-manager-cucm/ #ad #cisco

​​Awesome CobaltStrike https://github.com/zer0yu/Awesome-CobaltStrike #cobalt

​​TurboDataMine Turbo Data Miner is a #Burp Suite Extension, which adds a new tab Turbo Miner to Burp Suite's UI as well as a new entry Turbo Data Miner to Burp Suite's Extensions context menu entry. In the new tab, you are able to write new or select existing Python scripts that are executed on each request/response item currently stored in the Proxy History, Side Map, or on each request/response item that is sent or received by Burp Suite. The objective of these Python scripts is the flexible and dynamic extraction, correlation, and structured presentation of information from the Burp Suite state as well as the flexible and dynamic on-the-fly modification of outgoing or incoming HTTP requests. Thus, Turbo Data Miner shall aid in gaining a better and faster understanding of the data collected and processed by Burp Suite. https://github.com/chopicalqui/TurboDataMiner

​​CirrusGo A fast tool to scan SAAS, PAAS App written in Go https://github.com/Ph33rr/cirrusgo

​​SAMLRaider SAML2 Burp Extension. #Burp Suite extension for testing SAML infrastructures. It contains two core functionalities: Manipulating SAML Messages and manage X.509 certificates Features: ▫️ Sign SAML messages & assertions (signature spoofing attack) ▫️ Remove signatures (signature exclusion attack) ▫️ Edit SAML messages (SAMLRequest, SAMLResponse & custom parameter names) ▫️ Perform eight common XSW attacks ▫️ Insert XXE and XSLT attack payloads ▫️ Supported Profiles: SAML Webbrowser Single Sign-on Profile, Web Services Security SAML Token Profile ▫️ Supported Bindings: POST Binding, Redirect Binding, SOAP Binding, URI Binding https://github.com/CompassSecurity/SAMLRaider

​​XLMMacroDeobfuscator XLMMacroDeobfuscator can be used to decode obfuscated XLM macros (also known as Excel 4.0 macros). It utilizes an internal XLM emulator to interpret the macros, without fully performing the code. It supports both xls, xlsm, and xlsb formats. https://github.com/DissectMalware/XLMMacroDeobfuscator

Protections Artifacts Elastic Security prevents ransomware and malware, detects advanced threats, and arms responders with vital context. It’s free and open, ready for every endpoint. Protections-Artifacts is the home of our detection logic (rules, yara, etc) for Elastic Security for endpoint. At Elastic, we believe that being open and transparent is critical for the success of us and our users. Check out our blog post if you are interested in additional background. https://github.com/elastic/protections-artifacts