HackGit

Ransom0 Open source #ransomware made with Python, designed to find and encrypt user data. In order for the program to work from anywhere in the world, the server uses PyNgrok to tunnel it and make the server reacheable from evrywhere. https://github.com/HugoLB0/Ransom0

​​SleepyCrypt A shellcode function to encrypt a running process image in memory when sleeping. This is the companion code for my blog post here. https://github.com/SolomonSklash/SleepyCrypt

Malware Development for Dummies In the age of EDR, red team operators cannot get away with using pre-compiled payloads anymore. As such, malware development is becoming a vital skill for any operator. Getting started with maldev may seem daunting, but is actually very easy. This workshop will show you all you need to get started! This repository contains the slides and accompanying exercises for the 'MalDev for Dummies' workshop that will be facilitated at Hack in Paris 2022 (additional conferences TBA 👀). The exercises will remain available here to be completed at your own pace - the learning process should never be rushed! Issues and pull requests to this repo with questions and/or suggestions are welcomed. https://github.com/chvancooten/maldev-for-dummies

​​Trape Trape is an #OSINT analysis and research tool, which allows people to track and execute intelligent social engineering attacks in real time. It was created with the aim of teaching the world how large Internet companies could obtain confidential information such as the status of sessions of their websites or services and control their users through their browser, without their knowledge, but It evolves with the aim of helping government organizations, companies and researchers to track the cybercriminals. https://github.com/jofpin/trape

​​oFx Vulnerability Batch Verification Framework. Features: ▫️ Python, cross-platform, strong concurrency, fast scanning speed ▫️ The author continues to update, and the number of POC libraries is considerable ▫️ Functions keep pace with the times, and constantly optimize and polish ▫️ The structure of the POC template is simple, and it provides a small toolbox for developers, which is suitable for users to customize and expand the POC, and can quickly respond to different security scenarios ▫️ All POCs are written on the premise of not having any negative impact on the target. They aim to find defects without causing any negative impact on the target business, and can be flexibly applied to the different security needs of enterprises and individuals https://github.com/bigblackhat/oFx

​​Whoogle Search Self-hosted, ad-free, privacy-respecting #Google metasearch engine. Get Google search results, but without any ads, javascript, AMP links, cookies, or #IP address tracking. Easily deployable in one click as a Docker app, and customizable with a single config file. Quick and simple to implement as a primary search engine replacement on both desktop and mobile. Features: ▫️ No ads or sponsored content ▫️ No javascript ▫️ No #cookies ▫️ No tracking/linking of your personal IP address ▫️ No AMP links ▫️ No #URL tracking tags (i.e. utm=%s) ▫️ No referrer header ▫️ Autocomplete/search suggestions ▫️ POST request search and suggestion queries (when possible) ▫️ View images at full res without site redirect (currently mobile only) ▫️ Dark mode ▫️ Randomly generated User-Agent ▫️ Easy to install/deploy ▫️ Optional location-based searching (i.e. results near <city>) ▫️ Optional NoJS mode to disable all Javascript in results https://github.com/benbusby/whoogle-search

RanSim RanSim is a #ransomware simulation script written in PowerShell. It recurisively encrypts files in the target directory using 256-bit AES encryption. You can use RanSim to test your defenses and backups against real ransomware-like activity in a controlled setting. The same script can be used to decrypt the files if needed. https://github.com/lawndoc/RanSim

ZoneMinder ZoneMinder is an integrated set of applications which provide a complete surveillance solution allowing capture, analysis, recording and monitoring of any CCTV or security cameras attached to a Linux based machine. It is designed to run on distributions which support the Video For Linux (V4L) interface and has been tested with video cameras attached to BTTV cards, various USB cameras and also supports most IP network cameras. https://github.com/ZoneMinder/zoneminder Documentation: https://zoneminder.readthedocs.org

​​Rubeus Rubeus is a C# toolkit for Kerberos interaction and abuses. Kerberos, as we all know, is a ticket-based network authentication protocol and is used in Active Directories. Unfortunately, due to human error, oftentimes AD is not configured properly keeping security in mind. Rubeus can exploit vulnerabilities arising out of these misconfigurations and perform functions such as crafting keys and granting access using forged certificates. The article serves as a guide on using Rubeus in various scenarios. https://github.com/GhostPack/Rubeus Research: https://www.hackingarticles.in/a-detailed-guide-on-rubeus/

anti keystroke deanonymization tool kloak: Keystroke-level online anonymization kernel A #privacy tool that makes keystroke biometrics less effective. This is accomplished by obfuscating the time intervals between key press and release events, which are typically used for identification. https://github.com/vmonaco/kloak

​​Meet the USB Kill v3 The USB Killer is a CE Approved and FCC Approved testing device designed to test the surge protection circuitry of electronics to their limits - and beyond. When plugged into a device, the USB Killer rapidly charges its capacitors from the USB power lines. When the device is charged, -200VDC is discharged over the data lines of the host device. This charge/discharge cycle is repeated many times per second, until the USB Killer is removed. Simply put: used on unprotected equipment, the USB Killer instantly and permanently disables the target hardware. Does not require batteries, can be used an unlimited number of times. Its compact size and flash-drive style housing makes it an important device in every pen-tester's toolkit. The USB Kill V3.0 also comes in an anonymous edition: without any logo or branding, in a generic USB Flash Drive case. 🛒 https://bit.ly/3o0Y9wP #usb #usbkiller

​​BruteMQ An exotic service bruteforce tool. Services supported: ▫️ HashiCorp Vault Userpass ▫️ etcd v3 ▫️ AMQP PLAIN SASL https://github.com/codexlynx/brutemq

GSocket Connect like there is no firewall. Securely. The Global Socket Toolkit allows two users behind NAT/Firewall to establish a TCP connection with each other. Securely. Features: ▫️ Uses the Global Socket Relay #Network to connect TCP pipes ▫️ End-2-End encryption (using OpenSSL's SRP / RFC 5054) ▫️ AES-256 & key exchange using 4096-bit Prime ▫️ No PKI required. ▫️ Perfect Forward Secrecy ▫️ TOR support (optional) https://github.com/hackerschoice/gsocket Research: https://www.gsocket.io

​​CallStackSpoofer This repository demonstrates a PoC implementation to spoof arbitrary call stacks when making system calls. For a full technical walkthrough please see the accompanying blog post here. https://github.com/countercept/CallStackSpoofer

Z-ransom Z-Ransom (Create Android Ransomware In Kali linux and Termux (NO ROOT) https://github.com/caronero/Z-ransom

​​Jwtear A modular command-line tool to parse, create and manipulate JSON Web Token(JWT) tokens for security testing purposes. Features: ▫️ Complete modularity. ▫️ All commands are plugins. ▫️ Easy to add new plugins. ▫️ Support JWS and JWE tokens. ▫️ Easy interface for plugins. (follow the template example) ▫️ Flexible ▫️ token generation based on production-class libraries (e.g. json-jwt, jwe). https://github.com/KINGSABRI/jwtear

Bannerbomb3 This is a POC for a new System Settings userland exploit. It uses ROP and ARM execution to dump DS Internet (and possibly others) from System Settings using a custom crafted dsiware export. This is useful primarily as an enhancement for "Fredminer" variant of seedminer to obtain free cfw on 3ds. Among other things, it brings free cfw to more regions*, and removes the possibility of Nintendo pulling certain games like Steel Diver from the eshop to thwart homebrew efforts. https://github.com/zoogie/Bannerbomb3 #poc #exploit

​​Base16 Shell A shell script to change your shell's default ANSI colors but most importantly, colors 17 to 21 of your shell's 256 colorspace (if supported by your terminal). This script makes it possible to honor the original bright colors of your shell (e.g. bright green is still green and so on) while providing additional base16 colors to applications such as Vim and tmux. https://github.com/base16-project/base16-shell

Gallia Gallia is an extendable pentesting framework with the focus on the automotive domain. The scope of the toolchain is conducting penetration tests from a single ECU up to whole cars. Currently, the main focus lies on the UDS interface. Taking advantage of this modular design, the logging and archiving functionality was developed separately. Acting as a generic interface, the logging functionality implements reproducible tests and enables post-processing tasks. The rendered documentation is available via Github Pages. https://github.com/Fraunhofer-AISEC/gallia