HackGit

​​Self-Service Security Assessment tool Cybersecurity remains a very important topic and point of concern for many CIOs, CISOs, and their customers. To meet these important concerns, AWS has developed a primary set of services customers should use to aid in protecting their accounts. Amazon GuardDuty, AWS Security Hub, AWS Config, and AWS Well-Architected reviews help customers maintain a strong security posture over their AWS accounts. As more organizations deploy to the cloud, especially if they are doing so quickly, and they have not yet implemented the recommended AWS Services, there may be a need to conduct a rapid security assessment of the cloud environment. https://github.com/awslabs/aws-security-assessment-solution

​​Malware analysis and #Reverse engineering Some of my publicly available Malware analysis and Reverse engineering. (Reports, tips, tricks...) https://github.com/Dump-GUY/Malware-analysis-and-Reverse-engineering

​​PPLcontrol This tool allows you to list protected processes, get the protection level of a specific process, or set an arbitrary protection level. For more information, you can read this blog post: Debugging Protected Processes. https://github.com/itm4n/PPLcontrol

​​Facebook SSL Pinning Bypass Bypass Facebook SSL pinning on Android devices. https://github.com/Eltion/Facebook-SSL-Pinning-Bypass

​​Auth Analyzer The Burp extension helps you to find authorization bugs. Just navigate through the web application with a high privileged user and let the Auth Analyzer repeat your requests for any defined non-privileged user. With the possibility to define Parameters the Auth Analyzer is able to extract and replace parameter values automatically. With this for instance, CSRF tokens or even whole session characteristics can be auto extracted from responses and replaced in further requests. Each response will be analyzed and tagged on its bypass status. https://github.com/simioni87/auth_analyzer

​​Cactus WHID This device allows keystrokes to be sent via WiFi to a target machine. The target recognizes the Ducky as both a standard HID keyboard and a serial port, allows interactive commands and scripts to be executed on the target remotely. It stands for WiFi HID Injector. It is a WiFi remotely-controlled {Keyboard, Mouse} Emulator. Practically is an USB Rubberducky or BadUSB device on Steroids! This attack video shows 👇 an attacker can plug this device into a system and then execute Mimikatz remotly. Repository: https://github.com/whid-injector/WHID Buy online: 🛒 https://amzn.to/3FoAFL9 🛒 https://ali.ski/3P9oU #wifi #badusb #usb

​​xSMTP The One And Only Open-Relay SMTP Servers Scanner Tool On Github xSMTP is a lightning fast, multithreaded scanner written in Python, capable of scanning massive network ranges and find open-relay and unsecured SMTP servers inside. ranges can be directly setted in the ranges.txt file or gathered by performing an ASN Lookup, the user can input any website in mind and the tool will make an API Call to external third party services ( ipinfo.io and api.hackertarget.com ) where all the IP Ranges of the website's ASN will be fetched and saved in ranges.txt file. with the gathered ranges, xSMTP generates all available hosts and can perform a very fast check and see if hosts can listen on the most used smtp ports (2525,587..) and saves the good hosts on list.txt file, then a mass SMTP scan can be performed, where the tool will try to send a test email with the hosts gathered in list.txt containing the smtp info in the email body, if the smtp server is open-relay/unsecured! https://github.com/c99tn/xSMTP

​​reverse-engineering-workshop Here are some slides and hands-on about Linux x86-64 reverse engineering: https://github.com/romainthomas/reverse-engineering-workshop

​​AWS-malware-lab Creation of a laboratory for malware analysis in AWS https://github.com/adanalvarez/AWS-malware-lab

​​House of Gods - Arena Hijacking Technique House-of-Gods is a new heap exploitation technique for older versions of the GNU C Library (< glibc 2.27). There are currently two different revisions of the same exploit. The first revision is way more inefficient and less applicable in real world scenarios compared to the second revision. https://github.com/Milo-D/house-of-gods

​​go-exploitdb This is a tool for searching Exploits from some Exploit Databases. Exploits are inserted at sqlite database(go-exploitdb) can be searched by command line interface. In server mode, a simple Web API can be used. As the following vulnerabilities database ▫️ ExploitDB(OffensiveSecurity) by CVE number or Exploit Database ID. ▫️ GitHub Repositories ▫️ Awesome Cve Poc ▫️ inTheWild DB https://github.com/vulsio/go-exploitdb

​​DeTTECT Detect Tactics, Techniques & Combat Threats DeTT&CT aims to assist blue teams in using ATT&CK to score and compare data log source quality, visibility coverage, detection coverage and threat actor behaviours. All of which can help, in different ways, to get more resilient against attacks targeting your organisation. The DeTT&CT framework consists of a Python tool (DeTT&CT CLI), YAML administration files, the DeTT&CT Editor (to create and edit the YAML administration files) and scoring tables for detections, data sources and visibility. DeTT&CT provides the following functionality for the ATT&CK domains Enterprise, ICS and Mobile: ▫️ Administrate and score the quality of your data sources*. ▫️ Get insight on the visibility you have on for example endpoints. ▫️ Map your detection coverage. ▫️ Map threat actor behaviours. ▫️ Compare visibility, detection coverage and threat actor behaviours to uncover possible improvements in detection and visibility (which is based on your available data sources). This can help you to prioritise your blue teaming efforts. ▫️ Get statistics (per platform) on the number of techniques covered per data source. https://github.com/rabobank-cdc/DeTTECT

​​SilentMoonwalk PoC Implementation of a true call stack spoofer SilentMoonwalk is a PoC implementation of a true call stack spoofer, implementing a technique to remove the original caller from the call stack, using ROP to desynchronize unwinding from control flow. https://github.com/klezVirus/SilentMoonwalk

​​Neton A sandbox information gathering tool Neton is a tool for getting information from Internet connected sandboxes. It is composed by an agent and a web interface that displays the collected information. The Neton agent gets information from the systems on which it runs and exfiltrates it via HTTPS to the web server. Some of the information it collects: ▫️ Operating system and hardware information ▫️ Find files on mounted drives ▫️ List unsigned microsoft drivers ▫️ Run SharpEDRChecker ▫️ Run Pafish ▫️ Run Al-Khaser ▫️ Detect hooks ▫️ Take screenshots of the desktop https://github.com/Aetsu/Neton

​​HTB: CarpeDiem https://0xdf.gitlab.io/2022/12/03/htb-carpediem.html

​​IKEA Vindriktning WisBlock Hack This repository holds the code to connect a WisBlock RAK4631 to an IKEA Vindriktning air quality sensor and send the aire quality data over LoRaWAN to your LNS of choice. The code also expects a Bosch BME680 sensor connected to the WisBlock using a WisBlock Environment Sensor (RAK1906). These are the components required for this hack: ▫️ IKEA Vindriktning ▫️ RAKwireless WisBlock Mini Base Board (RAK19003) ▫️ RAKwireless nRF52840 Core (RAK4631) ▫️ RAKwireless Environment Sensor (RAK1906) ▫️ A JST1.0 battery connector and some wire ▫️ USB Type-C cable to flash the WisBlock https://github.com/xoseperez/wisblock-vindriktning

​​Paralus Paralus is a free, open source tool that enables controlled, audited access to Kubernetes infrastructure for your users, user groups, and services. Ships as a GUI, API, and CLI. https://github.com/paralus/paralus

​​cvedata A collection of CVE and related data. This python package is caught somewhere between a data collection tool and a CVE data API. Much more the former than the latter. https://github.com/clearbluejar/cvedata

​​friTap The goal of this project is to help researchers to analyze traffic encapsulated in SSL or TLS. For details have a view into the OSDFCon webinar slides or in this blog post. This project was inspired by SSL_Logger and currently supports all major operating systems (Linux, Windows, Android). More platforms and libraries will be added in future releases. https://github.com/fkie-cad/friTap

​​tinyfw tinyfw is a toy firewall built in Rust and leveraging the eBPF technology. The network policies can be attached to any supported network interface. It is also containers aware, the containerd runtime is supported. https://github.com/angelopoerio/tinyfw