HackGit

​​UbSym A Unit-Based Symbolic Execution Method for Detecting Memory Corruption Vulnerabilities in Executable Codes. https://github.com/SoftwareSecurityLab/UbSym #cybersecurity #infosec

​​Hiding Shellcode In Plain Sight Hiding shellcode in plain sight within a large memory region. Inspired by technique used by Raspberry Robin's Roshtyak https://github.com/LloydLabs/shellcode-plain-sight #cybersecurity #infosec

​​Mobile Verification Toolkit MVT (Mobile Verification Toolkit) helps with conducting forensics of mobile devices in order to find signs of a potential compromise. https://github.com/mvt-project/mvt #cybersecurity #infosec #forensic

​​UAC-Exploit ( Win 10 / 11 ) The Windows operating system uses a built-in security mechanism that requires users to confirm elevated privileges in order to perform certain system-level tasks. This protection mechanism aims to prevent unauthorized access to the system and protect user data. However, some attackers can bypass this security mechanism and gain administrator access to the system without proper authentication. In this repository, I present an exploit method that bypasses the admin access confirmation requirement in Windows 10 and 11. https://github.com/DosX-dev/UAC-Exploit

​​Bypass Url Parser Tool that tests MANY url bypasses to reach a 40X protected page. https://github.com/laluka/bypass-url-parser #infosec #pentesting #bugbounty

​​MBR payloads In recent years, we've seen interesting MBR payloads, ranging from ransomware to generic malware. While new technologies (UEFI) makes MBR payloads obsolete, the sad reality is that old BIOS-style boot sequences are still commonly used. This blogpost discusses MBR payloads - I really like old real mode Assembly, so the MBR payloads are a nice opportunity. Let's go! https://github.com/yo-yo-yo-jbo/mbr_analysis #cybersecurity #infosec #pentesting

​​hackspacecon Workshop & Talk Slide Decks from HackSpaceCon. https://github.com/ethanolivertroy/hackspacecon #cybersecurity #infosec #pentesting

​​Hunt-Weird-Syscalls This is a ETW based POC to monitor for abnormal syscalls. For now, the syscalls NtOpenThread and NtSetContextThread are monitored to identify IOCs indicating both direct and indirect syscalls. https://github.com/thefLink/Hunt-Weird-Syscalls #cybersecurity #infosec

​​HackSpaceCon Malware Course Free training course offered at Hack Space Con 2023 https://github.com/archcloudlabs/HackSpaceCon_Malware_Analysis_Course #malware #cybersecurity #infosec

​​LDAP Nom Nom Anonymously bruteforce Active Directory usernames from Domain Controllers by abusing LDAP Ping requests (cLDAP). https://github.com/lkarlslund/ldapnomnom #infosec #pentesting #redteam

​​HACKERTOOL1 Port scanner with service detection featuring automatic anonymous ftp login and ssh brute. https://github.com/usethisname1419/HACKERTOOL1 #cybersecurity #infosec #pentesting

ESP32 Wi-Fi Penetration Tool This ESP32 Wi-Fi Penetration Tool is a universal tool for implementing various Wi-Fi attacks on the ESP32 platform. It includes common functionality for Wi-Fi attacks and makes implementing new attacks simpler. Some of its features include PMKID capture, WPA/WPA2 handshake capture and parsing, deauthentication attacks using various methods, denial of service attacks, passive handshake sniffing, and more. This tool is not intended for cracking hashes, but it can format captured traffic into PCAP format and parse captured handshakes into HCCAPX files ready to be cracked by Hashcat. The project's repository is available on GitHub, and the ESP32-DEVKITC-32E can be purchased online👇 Buy online: 🛒 https://bit.ly/3KQtZqA 🛒 https://amzn.to/43Psdig #ESP32 #board

​​MalSeclogon A little tool to play with the Seclogon service. https://github.com/antonioCoco/MalSeclogon Full technical details at: • https://splintercod3.blogspot.com/p/the-hidden-side-of-seclogon-part-2.html • https://splintercod3.blogspot.com/p/the-hidden-side-of-seclogon-part-3.html #infosec #pentesting #redteam

​​CVE-2023-25136 OpenSSH Pre-Auth Double Free CVE-2023-25136 POC https://github.com/adhikara13/CVE-2023-25136 #cve #poc #cybersecurity #infosec

​​gh-action-pip-audit A GitHub Action that uses pip-audit to scan Python dependencies for known vulnerabilities. https://github.com/pypa/gh-action-pip-audit #cybersecurity #infosec

​​EDR Telemetry This project aims to compare and evaluate the telemetry of various EDR products. https://github.com/tsale/EDR-Telemetry #cybersecurity #infosec

​​GpuDecryptShellcode XOR-decrypting shellcode on the GPU using OpenCL. https://github.com/eversinc33/GpuDecryptShellcode #cybersecurity #infosec

​​SubGPT SubGPT looks at subdomains you have already discovered for a domain and uses BingGPT to predict and find more. Best part? It's free! https://github.com/s0md3v/SubGPT #infosec #pentesting #bugbounty

​​Awesome EDR Bypass https://github.com/tkmru/awesome-edr-bypass #infosec #pentesting #bugbounty

​​GC2 Command and Control application that allows an attacker to execute commands on the target machine using Google Sheet and exfiltrate data using Google Drive. https://github.com/looCiprian/GC2-sheet #infosec #pentesting #redteam