HackGit

​​asminject.py A heavily-modified fork of David Buchanan's dlinject project. Injects arbitrary assembly (or precompiled binary) payloads directly into x86-64, x86, and ARM32 Linux processes by accessing /proc/<pid>/mem instead of attaching via ptrace. Useful for tampering with trusted processes, certain post-exploitation scenarios, recovering content from process memory, and bypassing some security controls. Can inject into containerized processes from outside of the container, as long as you have root access on the host. https://github.com/BishopFox/asminject

​​vDDoS Proxy Protection Welcome to vDDoS, a HTTP(S) DDoS Protection Reverse Proxy. https://github.com/duy13/vDDoS-Protection

​​AtomPePacker A Highly Capable Pe Packer Features : ▫️ the packer only support x64 exe's (altho planning to make x32 version but idk when it'll be done) ▫️ no crt imports ▫️ api hashing library ( custom getmodulehandle and getprocaddress ) ▫️ direct syscalls ( for the part that i do the ntdll unhooking ) ▫️ ntdll unhooking from \KnownDlls ▫️ support tls callbacks ▫️ support reallocation in case of needed ( the image is mapped to the preferable address first ) ▫️ no rwx section allocation ▫️ support exception handling ▫️ uses elzma compression algorithm to do the compression (reducing the final file size) ▫️ its local run pe, so it support arguments ▫️ fake imported functions to add more friendly look to the iat https://github.com/ORCx41/AtomPePacker

​​Monkey365 Monkey365 is an Open Source security tool that can be used to easily conduct not only Microsoft 365, but also Azure subscriptions and Azure Active Directory security configuration reviews without the significant overhead of learning tool APIs or complex admin panels from the start. To help with this effort, Monkey365 also provides several ways to identify security gaps in the desired tenant setup and configuration. Monkey365 provides valuable recommendations on how to best configure those settings to get the most out of your Microsoft 365 tenant or Azure subscription. https://github.com/silverhack/monkey365

​​CSRF PoC Generator This HTML file creates a CSRF PoC form to any HTTP request. ▫️ HTTP or HTTPS radio button. ▫️ Auto submit form. ▫️ Other HTTP data types. (json, xml, multipart form data) https://github.com/merttasci/csrf-poc-generator

​​AddUser-Bof Cobalt Strike BOF that Add an admin user https://github.com/0x3rhy/AddUser-Bof

​​teamserver Shlyuz teamserver is the main component of the c2 that the operator interacts with. It provides interaction with the listening posts, and thus the implants, as well as issuing of commands to the artifact factory. https://github.com/shlyuz/teamserver

​​DropBox-XPC-Exploit Exploit for PID Reuse and Logical Error in DropBox's XPC service https://github.com/Pwnrin/DropBox-XPC-Exploit

​​CVE-2022-40684 Remote Fortinet Code Exeuction vulnerability On October 7, public reports began to circulate that Fortinet communicated directly with customers about a critical vulnerability in its FortiOS and FortiProxy products. This vulnerability, CVE-2022-40684, has been patched, but Fortinet has not released a full advisory yet via its Product Security Incident Response Team. Fortinet usually follows a monthly release schedule for security advisories on the second Tuesday of every month, the same day as Microsoft’s Patch Tuesday. At the time this blog post was originally published, it remained to be seen whether Fortinet was going to follow the same schedule for the CVE-2022-40684 advisory. https://github.com/CarlosV1e1ra/CVE-2022-40684-RCE-POC #cve

​​RedTeam-OffensiveSecurity Tools & Interesting Things for RedTeam Ops https://github.com/bigb0sss/RedTeam-OffensiveSecurity

​​sysmon-config Advanced Sysmon ATT&CK configuration https://github.com/ion-storm/sysmon-config

​​HavocNotion A simple ExternalC2 POC for Havoc C2. Communicates over Notion using a custom python agent, handler and extc2 channel. Not meant to be a usable agent, just a PoC to understand how Havoc C2's ExternalC2 interface works. Accompanying blogpost upcoming and will be linked here eventually. https://github.com/CodeXTF2/HavocNotion

​​CallStackSpoofer This repository demonstrates a PoC implementation to spoof arbitrary call stacks when making system calls. For a full technical walkthrough please see the accompanying blog post here https://github.com/WithSecureLabs/CallStackSpoofer

​​Linux Privilege Escalation Cheatsheet This cheatsheet is aimed at the OSCP aspirants to help them understand the various methods of Escalating Privilege on Linux based Machines and CTFs with examples. There are multiple ways to perform the same tasks. We have performed and compiled this list based on our experience. Please share this with your connections and direct queries and feedback to Hacking Articles. https://github.com/Ignitetechnologies/Linux-Privilege-Escalation t.me/hackgit

​​TickTock This repository demonstrates a PoC memory scanner for enumerating timer-queue timers as used in Ekko Sleep Obfuscation https://github.com/WithSecureLabs/TickTock Details: https://labs.withsecure.com/publications/hunting-for-timer-queue-timers

​​ShadowSpray A tool to spray Shadow Credentials across an entire domain in hopes of abusing long forgotten GenericWrite/GenericAll DACLs over other objects in the domain. https://github.com/Dec0ne/ShadowSpray

In this zip is a scam link be careful.

​​CVE-2022-41040-POC Server Side Request Forgery (SSRF) in Microsoft Exchange Server https://github.com/kljunowsky/CVE-2022-41040-POC #cve

​​mailsecchk A simple shell script (almost) POSIX(1) for mail security checks against domain names. https://github.com/jeffbencteux/mailsecchk #Donate t.me/hackgit🍻»»»