HackGit
前往频道在 Telegram
The channel was created for cybersecurity specialists. • Offensive Security • RedTeam • Malware Research • BugBounty • OSINT • etc Disclaimer: t.me/hackgit/2082 Donations - Ads: t.me/hackgit/5423
显示更多📈 Telegram 频道 HackGit 的分析概览
频道 HackGit (@hackgit) 英语 语言赛道中的 是活跃参与者。目前社区聚集了 21 579 名订阅者，在 技术与应用 类别中位列第 4 526，并在 美国 地区排名第 1 853 位。
📊 受众指标与增长动态
自 невідомо 创建以来，项目保持高速增长，吸引了 21 579 名订阅者。
根据 02 三月, 2025 的最新数据，频道保持稳定运转。过去 30 天订阅人数变化为 19，过去 24 小时变化为 0，整体触达仍然可观。
- 认证状态： 未认证
- 互动率 (ER)： 平均受众互动率为 0%。内容发布后 24 小时内通常能获得 N/A% 的反应，占订阅者总量。
- 帖子覆盖： 每篇帖子平均可获得 0 次浏览，首日通常累积 0 次浏览。
- 互动与反馈： 受众积极参与，单帖平均反应数为 0。
📝 描述与内容策略
作者将该频道定位为表达主观观点的平台：
“The channel was created for cybersecurity specialists.
• Offensive Security
• RedTeam
• Malware Research
• BugBounty
• OSINT
• etc
Disclaimer:
t.me/hackgit/2082
Donations - Ads:
t.me/hackgit/5423”
凭借高频更新（最新数据采集于 11 十一月, 2026），频道始终保持新鲜度与高覆盖。分析显示受众积极互动，使其成为 技术与应用 类别中的关键影响点。
21 579
订阅者
无数据24 小时
-37 天
+1930 天
帖子存档
21 579
Credential Dumping Cheatsheet
This cheatsheet is aimed at the Red Teamers to help them understand the fundamentals of Credential Dumping (Sub Technique of Credential Access) with examples. There are multiple ways to perform the same tasks. We have performed and compiled this list based on our experience.
https://github.com/Ignitetechnologies/Credential-Dumping
#cheatsheet #creds #ad #sam #windows #ntdis #ssp #lsass #laps
21 579
eCapture
Capture SSL/TLS text content without CA cert Using eBPF.
▫️ SSL/TLS text context capture, support openssl\libressl\boringssl\gnutls\nspr(nss) libraries.
▫️ bash audit, capture bash command for Host Security Audit.
▫️ mysql query SQL audit, support mysqld 5.6\5.7\8.0, and mariadDB.
https://github.com/ehids/ecapture
21 579
CVE-2022-33891
Apache Spark shell command injection
https://github.com/W01fh4cker/cve-2022-33891
#apache #cve #spark #rce
21 579
CVE-2022-24086 RCE POC
Adobe saw being “exploited in the wild in very limited attacks” received a severity score of 9.8 out of 10, and adversaries exploiting it can achieve remote code execution on affected systems without the need to authenticate.
Issue that is now tracked as CVE-2022-24087, which has the same severity score and can lead to the same result when leveraged in attacks. Both are Improper Input Validation vulnerabilities and the company released patches for Adobe Commerce and Magento Open Source to address the two security issues.
https://github.com/Cory65/CVE-2022-24086-POC
#cve #poc
21 579
FirmwareBleed
The industry fails to adopt Return Stack Buffer mitigations in SMM.
https://github.com/binarly-io/FirmwareBleed
21 579
MicrocodeDecryptor
At the beginning of 2020, we discovered the Red Unlock technique that allows extracting Intel Atom Microcode. We were able to research the internal structure of the microcode and then x86 instruction implementation. Also, we recovered a format of microcode updates, algorithm and the encryption key used to protect the microcode
https://github.com/chip-red-pill/MicrocodeDecryptor
#reverse #intel #interlnals
21 579
CoffeeLdr
Loader for so called Beacon Object Files. This project can be used for testing Beacon Object files without using the Cobalt Strike framework or can be used to give custom implants a way to execute BOFs that where designed for Cobalt strike. But most of the Beacon Api (fork&run and injection) functions are empty for custom implementations.
https://github.com/Cracked5pider/CoffeeLdr
#cobalt
21 579
Repost from HackGit
ZombieThread
Another meterpreter injection technique using C# that attempts to bypass WD.
https://github.com/Bl4ckM1rror/ZombieThread
@HackGit
21 579
CVE-2022-30333
An attacker who successfully exploits this vulnerability can write a file anywhere on the target file system as the user that executes unrar (on Zimbra, that’s the zimbra user).
On Zimbra, we successfully exploited this vulnerability for remote code execution. Note that the server doesn’t necessarily need to be internet-facing to be exploited, it simply needs to receive a malicious email.
https://github.com/rbowes-r7/unrar-cve-2022-30333-poc
Same version of Zimbra has a privilege escalation bug:
https://darrenmartyn.ie/2021/10/27/zimbra-zmslapd-local-root-exploit/
LPE Exploit:
https://github.com/darrenmartyn/zimbra-slapper
https://github.com/darrenmartyn/zimbra-hinginx
#cve #poc #zimbra #exploit #zimbra
21 579
PyArmor
Сommand line tool used to obfuscate python scripts, bind obfuscated scripts to fixed machine or expire obfuscated scripts. It protects Python scripts by the following ways:
▫️ Obfuscate code object to protect constants and literal strings.
▫️ Obfuscate co_code of each function (code object) in runtime.
▫️ Clear f_locals of frame as soon as code object completed execution.
▫️ Verify the license file of obfuscated scripts while running it.
https://github.com/dashingsoft/pyarmor
21 579
Android Pentest 101
A curated list of Android Security materials and resources For Pentesters and Bug Hunters. This Repository will guide you on How to start with Android pentesting from scratch, enjoy it!!
https://github.com/dn0m1n8tor/AndroidPentest101
21 579
CyberChef
CyberChef is the self-purported 'Cyber Swiss-Army Knife' created by GCHQ. It's a fantastic tool for data transformation, extraction & manipulation in your web-browser.
https://github.com/mattnotmax/cyberchef-recipes
@HackGit
21 579
Evtx Log (xml) Browser
Quick browse through Windows evtx event logs & export to xml
https://github.com/kacos2000/Evtx_Log_Browser
21 579
Evil Clippy
A cross-platform assistant for creating malicious MS Office documents. Can hide VBA macros, stomp VBA code (via P-Code) and confuse macro analysis tools. Runs on Linux, OSX and Windows.
Features:
▫️ Hide VBA macros from the GUI editor
▫️ VBA stomping (P-code abuse)
▫️ Fool analyst tools
▫️ Serve VBA stomped templates via HTTP
▫️ Set/Remove VBA Project Locked/Unviewable Protection
https://github.com/outflanknl/EvilClippy
Research:
https://outflank.nl/blog/2019/05/05/evil-clippy-ms-office-maldoc-assistant/
#msoffice #vba #malicious #macros
21 579
WindowsGSM
Powerful tool to manage game servers. Equipped with a GUI for server admins to install, import, start, stop, restart, update, and automate multiple servers with a push of a button.
https://github.com/WindowsGSM/WindowsGSM
21 579
Repost from Pentesting Shop
Universal Webcam Cover
Protect Your Digital Life: Covers your webcam when not in use, and prevents web hackers from Spying on you. It is perfect to protect privacy, security and peace of mind to individuals, groups, organizations andcompanies
Easy to Use: Webcam Cover can be opened or closed with just one simple finger movement. The adhesive can be easily applied and removed from the required device without trace.
Wide Compatibility Use: It fits on most smartphones, tablets, desktops, laptop, and computers.
Buy online:
🛒 https://ali.ski/uF-E8
#webcam #cover
21 579
ZombieThread
Another meterpreter injection technique using C# that attempts to bypass WD.
https://github.com/Bl4ckM1rror/ZombieThread
@HackGit
21 579
Repost from N/a
WebView2-Cookie-Stealer
Attacking With #WebView2 Applications.
https://github.com/mrd0x/WebView2-Cookie-Stealer
21 579
LockDoor
Framework aimed at helping penetration testers, bug bounty hunters And cyber security engineers. This tool is designed for Debian/Ubuntu/ArchLinux based distributions to create a similar and familiar distribution for Penetration Testing.
But containing the favorite and the most used tools by Pentesters. As pentesters, most of us has his personal ' /pentest/ ' directory so this Framework is helping you to build a perfect one. With all of that ! It automates the Pentesting process to help you do the job more quickly and easily.
https://github.com/SofianeHamlaoui/Lockdoor-Framework
#redteam
