HackGit

Happy New Year! In the New Year, never forget to thank your past years because they enabled you to reach today! Without the stairs of the past, you cannot arrive at the future! Mehmet Murat Ildan

​​TinyArgParser TinyArgParser is a command processing program, it has less than 300 lines of code, it supports command line parameter processing and help generation. https://github.com/BeichenDream/SharpTinyArgParser

​​HackVault This is a container repository for my defensive/offensive hacks. https://github.com/0xSobky/HackVault

​​pa A simple #password manager. encryption via age, written in portable posix shell. https://github.com/biox/pa

​​finderj This is for finding subdomains with custom wordlist. https://github.com/j0k-3r/finderj

​​Moneta A live usermode memory analysis tool for Windows with the capability to detect malware IOCs. https://github.com/forrest-orr/moneta

​​ASRenum Cobalt Strike BOF that identifies Attack Surface Reduction (ASR) rules, actions, and exclusion locations. https://github.com/mlcsec/ASRenum-BOF #cobalt #bof

​​VulChatGPT An IDA PRO plugin to help in finding vulnerabilites in binaries. Use #IDA PRO HexRays decompiler with OpenAI(ChatGPT) to find possible vulnerabilities in binaries. https://github.com/ke0z/VulChatGPT

​​nistrich nistrich allows you to discover CVEs and their severities belong to IP addresses. https://github.com/webemin/nistrich

​​Burp Extension - IpLogger IpLogger is a basic Burp Extension that will make a request to https://api.ipify.org every time Burp is opened and will store the IP and date in iplogger.json. https://github.com/bsysop/IpLogger

​​Kubernetes-security #Kubernetes pentesting, hardening and hunting tools. https://github.com/SunWeb3Sec/Kubernetes-security

​​Aftermath Aftermath is a Swift-based, open-source incident response framework. Aftermath can be leveraged by defenders in order to collect and subsequently analyze the data from the compromised host. Aftermath can be deployed from an MDM (ideally), but it can also run independently from the infected user's command line. https://github.com/jamf/aftermath

​​Weaponize Your Burp This is a repository about how to Weaponize #Burp Suite with extensions for Bug Bounty Hunting. Burp Suite is an amazing tool for Bug Hunting, Penetration Testing Web Applications. If a bug hunter or penetration tester can implement his own bug hunting mindset in BurpSuite, he can hunt bugs much more powerfully and faster than before. https://github.com/cyspad/Weaponize-Your-Burp

​​Security Explained SecurityExplained is a new series after the previous learning challenge series #Learn365. The aim of #SecurityExplained series is to create informational content in multiple formats and share with the community to enable knowledge creation and learning. Below are the various activities and formats planned under SecurityExplained series: ▫️ Tweets explaining interesting security stuff ▫️ Blogs/Tutorials/How-To-Guides about different tools/techniques/attacks ▫️ Security Discussion Spaces/Meets ▫️ Monthly Mindmap/Mindmap based explainers for different attacks/techniques ▫️ My Pentesting Methodology Breakdown ▫️ Giveaways and Community Engagement ▫️ GitHub Repository to Maintain "SecurityExplained" ▫️ Public & Free to Access ▫️ Newsletter https://github.com/harsh-bothra/SecurityExplained

​​lookup-editor_scripts scripts using splunk application lookup-editor endpoint. Download, upload and update #splunk lookups content https://github.com/mthcht/lookup-editor_scripts

​​CTF-Heaven This is an introduction to some of the basics of each category. It was designed to help beginners and old comrades, enjoy the ride and "HackThePlanet". https://github.com/thezakman/CTF-Heaven

​​HENlo WebKit+Kernel #exploit chain for all PS Vita firmwares https://github.com/TheOfficialFloW/HENlo

​​Steganography Toolkit This project is a Docker image useful for solving Steganography challenges as those you can find at #CTF platforms like hackthebox.eu. The image comes pre-installed with many popular tools (see list below) and several screening scripts you can use check simple things (for instance, run check_jpg.sh image.jpg to get a report for a JPG file). https://github.com/DominicBreuker/stego-toolkit

​​Imaginary C2 Imaginary C2 is a python tool which aims to help in the behavioral (network) analysis of malware. Imaginary C2 hosts a HTTP server which captures HTTP requests towards selectively chosen domains/IPs. Additionally, the tool aims to make it easy to replay captured Command-and-Control responses/served payloads. By using this tool, an analyst can feed the malware consistent network responses (e.g. C&C instructions for the malware to execute). Additionally, the analyst can capture and inspect HTTP requests towards a domain/IP which is off-line at the time of the analysis. https://github.com/felixweyne/imaginaryC2

​​Wordlists Real-world infosec wordlists, updated regularly These wordlists are based on the source code of the CMSes/servers/frameworks listed here. The current wordlists include: ▫️ Wordpress ▫️ Joomla ▫️ Drupal ▫️ Magento ▫️ Ghost ▫️ Tomcat https://github.com/trickest/wordlists