HackGit

​​Puredns A fast domain resolver and subdomain bruteforcing tool that can accurately filter out wildcard subdomains and DNS poisoned entries. https://github.com/d3mondev/puredns #infosec #pentesting #bugbounty

​​For Flipper Zero ESP8266 Deauther Module The hardware has been tested and confirmed to work without any issues. WiFi Scanner firmware works perfectly and Deauther v2 firmware is available, but it requires logging in once every time to avoid restarts of Flipper Zero, the reason for which is unknown and will hopefully be fixed in the future. This module can only be used with Deauther and WiFi Scanner firmware, and cannot be used as an ESP8266 development board. There is another board available on the homepage that exposes all IO ports, has a Type-C interface, an automatic programming circuit, and is fully compatible with NodeMCU. It can be used as an ESP8266 development board. The video demonstration👇 shows WiFi Scanner firmware, while Deauther v2 firmware can be found in another link. The default firmware is Deauther v2, so please specify if WiFi Scanner firmware is required. Buy online: 🛒 https://bit.ly/3IviHYi #board #flipperzero #ESP8266 #wifi

​​AADAppAudit This tool was initially developed to analyze possible illicit consent grant attacks & in help of analyzing Azure AD consent grant framework but has been developed further since to provide answers to the most typical security related questions around Azure AD integrated apps and permissions. https://github.com/jsa2/AADAppAudit #infosec #pentesting #redteam

​​ProcessInjection The program is designed to perform process injection. Currently the tool supports 5 process injection techniques. https://github.com/3xpl01tc0d3r/ProcessInjection #infosec #pentesting #redteam

​​AISec Cybersecurity of Machine Learning and Artificial Intelligence Implementations. https://github.com/sdnewhop/AISec #cybersecurity #infosec

​​NetSec A tool to analyze devices connecting to the router and alert accordingly when a new device is connected. This app can display and store intruders' IP address, MAC address, and Block the device. https://github.com/thevickypedia/NetSec #cybersecurity #infosec

​​CVE-2022-20421 Privilege escalation exploit from unstrusted_app for Android Binder vulnerability (CVE-2022-20421). The vulnerability is patched on Android's Security Bulletin of October 2022. https://github.com/0xkol/badspin #cve #infosec #exploit

​​Bug Bounty Reports Templates List of reporting templates I have used since I started doing BBH. https://github.com/pdelteil/BugBountyReportTemplates #infosec #pentesting #bugbounty

​​Hypervisor The most comprehensive resource for Virtualization with a focus on Cybersecurity, Learn, exploit, read, and create let's make the industry safer by sharing and learning. https://github.com/AtonceInventions/Hypervisor #cybersecurity #infosec #pentesting

​​Bug Bounty Dork This will output all the google results for each of the tasks so you can hopefully find a vunerability. 503 error means you need a new IP as google knows your up to something! This will output the results to files and then you cna browse and see what you have found. https://github.com/random-robbie/bugbountydork #infosec #pentesting #bugbounty

​​Darc Viewpoint Cybersecurity Assets & Threats Modeling analysis. https://github.com/eclipse/capella-cybersecurity #cybersecurity #infosec

​​dirsearch_bypass403 Directory scanning + extraction of URLs/subdomains from JS files + 403 status bypass + fingerprinting. https://github.com/lemonlove7/dirsearch_bypass403 #infosec #pentesting #redteam

​​Coercer A python script to automatically coerce a Windows server to authenticate on an arbitrary machine through 12 methods. https://github.com/p0dalirius/Coercer #infosec #pentesting #redteam

​​Endpoints Explorer A Python script that employs multiple bypass rules to discover sensitive endpoints. https://github.com/wzqs/endpoints_explore #infosec #pentesting #bugbount

​​PywerView Easy to find vulnerable machines, or list what domain users were added to the local Administrators group of a machine, and much more. https://github.com/the-useless-one/pywerview #infosec #pentesting #redteam

​​ThreatHunting-Keywords This List can be valuable for ThreatHunters, SOC and CERT teams for static analysis on SIEM as it assists in identifying threat actors (or redteamers 😆) using default configurations from renowned exploitation tools in logs. It differs from IOC feeds in its enduring relevance: the keywords here have no 'expiration dates' and can detect threats years after their inclusion, they are flexible accepting wildcard and non sensitive case matches and only focused on default keywords. https://github.com/mthcht/ThreatHunting-Keywords #infosec #pentesting #redteam

​​Cybersecurity-Books Here you will get awesome collection of mostly all well-known and usefull cybersecurity books from beginner level to expert for all cybersecurity positions. https://github.com/zealraj/Cybersecurity-Books #cybersecurity #infosec

​​Navi | An SSG Community Project Navi is an interface for CLI AI programs built on 'Echo-AI' to bring together a purpose built cybersecurity #AI. https://github.com/SSGorg/Navi #cybersecurity #infosec

​​ADCSKiller A Python-based tool designed to automate the process of discovering and exploiting Active Directory Certificate Services (ADCS) vulnerabilities. It leverages features of Certipy and Coercer to simplify the process of attacking ADCS infrastructure. https://github.com/grimlockx/ADCSKiller #infosec #pentesting #redteam

​​CFG-FindHiddenShellcode Walks the CFG bitmap to find previously executable but currently hidden shellcode regions. https://github.com/jdu2600/CFG-FindHiddenShellcode #cybersecurity #infosec