HackGit

Linux Audit Usable, Robust, Easy Logging LAUREL is an event post-processing plugin for auditd(8) to improve its usability in modern security monitoring setups. https://github.com/threathunters-io/laurel

​​IPinfo CLI This is the official CLI for the IPinfo.io IP address API, allowing you to: ▫️ Look up IP details in bulk or one-by-one. ▫️ Look up ASN details. ▫️ Summarize the details of up to 1000 IPs at a time. ▫️ Open a map of IP locations for any set of IPs. ▫️ Filter IPv4 & IPv6 addresses from any input. ▫️ Print out IP lists for any CIDR or IP range. ▫️ And more! https://github.com/ipinfo/cli

​​Hakrawler Fast golang web crawler for gathering URLs and JavaScript file locations. This is basically a simple implementation of the awesome Gocolly library. https://github.com/hakluke/hakrawler

​​Captcha Bypassing Lab A captcha bypassing lab in PHP. You can bypass the captcha with just 2 things: 1. python (for sending the requests, using tesseract and image processing) 2. tesseract (a python module for converting an image to text) https://github.com/D3Ext/Captcha-Bypassing

Vulnerable-AD Create a vulnerable active directory that's allowing you to test most of active directory attacks in local lab Features: ▫️ Randomize Attacks ▫️ Full Coverage of the mentioned attacks ▫️ you need run the script in DC with Active Directory installed ▫️ Some of attacks require client workstation https://github.com/WazeHell/vulnerable-AD

​​mkpath Make URL path combinations using a wordlist. Read a wordlist file and generate path combinations for given domain or list of domains. Input from wordlist file is lowercased and unique words are processed. Additionally, wordlist can be filtered using regex. When you use mkpath's -l parameter, it will generate all path combinations up to the specified level, including all lower levels, using words from the wordlist. For instance, with -l 2, it will generate len(permutation_list)^2 + len(permutation_list) results, which is: ▫️ 30 combinations for a 5-word wordlist. ▫️ 10100 combinations for a 100-word wordlist. ▫️ 250500 combinations for a 500-word wordlist. https://github.com/trickest/mkpath

​​Voice Changer Mini This handheld voice changer has 7 different sound changes, man to woman, woman to man, little girl, baby, magic sound, deep sound. Perfect for calling and entertainment with friends, voice change for online games, etc. It is a must-have device. Buy online: 🛒 https://ali.ski/S5lgTz #changer #voice

Stealth shellcode runners 🐺 EDR evasion via ntdll unhooking (userland), AMSI bypass via in memory patch, and obfuscation via AES encryption. https://github.com/kymb0/Stealth_shellcode_runners

​​stink Stealer in just 2 lines with sending to telegram. https://github.com/FallenAstaroth/stink/blob/master/docs/en.md

​​Zombiegang General-purpose #botnet with modular and extensible architecture, task scheduler, remote live shell sessions and a retro look-feeling interface which makes it funny to use. https://github.com/r3nt0n/zombiegang

​​AMSI_Rubeus_bypass AMSI bypass hooking NtCreateSection POC for Rubeus execution. Execute Openssl-Dev.exe "commands" to execute Rubeus (file deletefile.txt has to be in the same path, or change the file in the code) https://github.com/waawaa/AMSI_Rubeus_bypass Bypass AMSI in local process hooking NtCreateSection: https://waawaa.github.io/es/amsi_bypass-hooking-NtCreateSection/

​​camp-exploit https://github.com/ehtec/camp-exploit Authentication Bypass vulnerability in camp, a Raspberry Pi camera server https://medium.com/@elias.hohl/authentication-bypass-vulnerability-in-camp-a-raspberry-pi-camera-server-477e5d270904 #exploit

​​GoodbyeDPI Passive Deep Packet Inspection blocker and Active DPI circumvention utility This software designed to bypass Deep Packet Inspection systems found in many Internet Service Providers which block access to certain websites. It handles DPI connected using optical splitter or port mirroring (Passive DPI) which do not block any data but just replying faster than requested destination, and Active DPI connected in sequence. Windows 7, 8, 8.1, 10 or 11 with administrator privileges required. https://github.com/ValdikSS/GoodbyeDPI #DPI

​​LiveTargetsFinder Generates lists of live hosts and URLs for targeting, automating the usage of Massdns, Masscan and nmap to filter out unreachable hosts Given an input file of domain names, this script will automate the usage of MassDNS to filter out unresolvable hosts, and then pass the results on to Masscan to confirm that the hosts are reachable and on which ports. The script will then generate a list of full URLs to be used for further targeting (passing into tools like gobuster or dirsearch, or making HTTP requests), a list of reachable domain names, and a list of reachable IP addresses. As an optional last step, you can run an nmap version scan on this reduced host list, verifying that the earlier reachable hosts are up, and gathering service information from their open ports. https://github.com/allyomalley/LiveTargetsFinder

​​TLS-Anvil TLS-Anvil is a test suite for the evaluation of RFC compliance of Transport Layer Security (TLS) libraries using combinatorial testing (CT). Have a look at our docs https://tls-anvil.com to learn more about the project. https://github.com/tls-attacker/TLS-Anvil

Deoptfuscator A tool for deobfuscating Android applications that have been transformed using control-flow obfuscation mechanisms. Deoptfuscator can reverse the control-flow obfuscation performed by DexGuard on open-source Android applications. https://github.com/Gyoonus/deoptfuscator

​​Devil Devil is a tool that is basically made for Facebook to Hack target accounts, BruteForce Attack, grab friend-list accounts, yahoo checker, Facebook Friend information gathering tool, auto likes reactions & much more. https://github.com/evildevill/Devil

​​RedNixOS Hackable NixOS container preloaded with tools for security enthusiasts This is a NixOS container pre-loaded with tools for security auditors, ethical hackers, CTF players and other people interested in infosec. The goal is to have a reproducible NixOS container, so one can use it in many instances on many NixOS machines and have an identical working environment. https://github.com/redcode-labs/RedNix

​​Rook Storage Orchestration for Kubernetes. Open source cloud-native storage orchestrator for Kubernetes, providing the platform, framework, and support for a diverse set of storage solutions to natively integrate with cloud-native environments. https://github.com/rook/rook

bpflock eBPF driven security for locking and auditing Linux machines. https://github.com/linux-lock/bpflock