HackGit

Vajra An automated web #hacking framework for web applications. Vajra is an automated web hacking framework to automate boring recon tasks and same scans for multiple target during web applications penetration testing. Vajra has highly customizable target scope based scan feature. Instead of running all the scan on target, it runs only those scan selected by you which will minimize unnecessary traffic and stores output in one place at CouchDB. Vajra uses most common open source tools which every Bug Hunter runs during their testing on target. It does all the stuffs through web browser with very simple UI that makes it absolute beginner friendly framework. Analyzing your data from scan result is very important in Bug Bounty. The chances of missing anything is less only if you could visualize your data in proper way and Vajra does so with a lot of filters. https://github.com/r3curs1v3-pr0xy/vajra Detailed insight about Vajra can be found at https://hackwithproxy.medium.com/introducing-vajra-an-advanced-web-hacking-framework-bd8307a01aa8

​WebClient Service Scanner Python tool to Check running WebClient services on multiple targets https://github.com/Hackndo/WebclientServiceScanner From RPC to RCE - Workstation Takeover via RBCD and MS-RPChoose-Your-Own-Adventure https://gist.github.com/gladiatx0r/1ffe59031d42c08603a3bde0ff678feb

​Admin Panel Finder A #burp suite extension that enumerates infrastructure and application Admin Interfaces. ▫️ Multi-thread ▫️ Different and configurable levels of test. ▫️ Includable status codes ▫️ Excludable status codes ▫️ More than 1000 built-in payloads. ▫️ You can load your dictionary. ▫️ Editable root directory ▫️ Automatic detection of used technologies to generate custom payloads. ▫️ Passive listening to find login pages. https://github.com/moeinfatehi/Admin-Panel_Finder

WinRing0-poc Proof-of-concept exploit for WinRing0. https://github.com/Exploitables/WinRing0-poc #exploit #cve

​DNS_Tunneling DNS Tunneling using powershell to download and execute a payload. Works in CLM. https://github.com/Octoberfest7/DNS_Tunneling

​Vytal Spoof your location data and user agent. Vytal can spoof your timezone, locale, geolocation and user agent. This data can be used to track you or reveal your location. Most extensions that provide anti-fingerprinting features rely on content scripts to inject script tags into webpages. There are many limitations to script tag injections which you can read about here: https://palant.info/2020/12/10/how-anti-fingerprinting-extensions-tend-to-make-fingerprinting-easier/ Vytal utilizes the chrome.debugger API to spoof this data. This allows the data to be spoofed in frames, web workers and during the initial loading of a website. It also makes the spoofing completely undetectable. You can test and compare Vytal and other extensions on https://vytal.io Vytal contains no ads and signup is not required. https://github.com/z0ccc/Vytal Chrome: https://chrome.google.com/webstore/detail/vytal/ncbknoohfjmcfneopnfkapmkblaenokb #privacy

​RiskScanner Open source multi-cloud security compliance scanning platform, Based on Cloud Custodian、Prowler and Nuclei engines, it realizes security compliance scanning and vulnerability scanning of mainstream public (private) cloud resources. https://github.com/riskscanner/riskscanner/blob/master/README_EN.md

COFFInjector A Proof of Concept code - loading and injecting MSVC object file. https://github.com/0xpat/COFFInjector Research: https://0xpat.github.io/Malware_development_part_8/

​Trivy Comprehensive security scanner. It is reliable, fast, extremely easy to use, and it works wherever you need it. Trivy has different scanners that look for different security issues, and different targets where it can find those issues. Targets: ▫️ Container Image ▫️ Filesystem ▫️ Git repository (remote) ▫️ Kubernetes cluster or resource Scanners: ▫️ OS packages and software dependencies in use (SBOM) ▫️ Known vulnerabilities (CVEs) ▫️ IaC misconfigurations ▫️ Sensitive information and secrets https://github.com/aquasecurity/trivy #blueteam

​CVE-2022-23642 PoC for Sourcegraph Gitserver 3.37.0 RCE Sourcegraph prior to 3.37.0 has a remote code execution vulnerability on its gitserver service. This is due to lack of restriction on git config execution thus "core.sshCommand" can be passed on the HTTP arguments which can contain arbitrary bash commands. Note that this is only possible if gitserver is exposed to the attacker. https://github.com/Altelus1/CVE-2022-23642 Research: https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-23642 #exploit #cve

​Cryptofuzz Differential cryptography fuzzing https://github.com/guidovranken/cryptofuzz

CVE-2022-24806/CVE-2022-24807 Unauthenticated RCE vulnerability in Magento and Adobe Commerce https://github.com/oturu/CVE-2022-24806-MASS-RCE #cve

​laz-y Automating payload generation for OSEP labs and exam. This tool generates x86 and x64 HTTPS staged meterpreter shellcodes, injects them in your CS templates, and generate binaries using mcs. It supports ROT encoding, and soon XOR encoding. https://github.com/Nariod/laz-y Laz-y project compatible C# templates for shellcode injection https://github.com/Nariod/Laz-y-templates #redteam

lockc Open source sofware for providing MAC (Mandatory Access Control) type of security audit for container workloads. The main reason why lockc exists is that containers do not contain. Containers are not as secure and isolated as VMs. By default, they expose a lot of information about host OS and provide ways to "break out" from the container. lockc aims to provide more isolation to containers and make them more secure. https://github.com/lockc-project/lockc

Bettercap Powerful easily extensible and portable framework written in Go which aims to offer to security researchers, red teamers and reverse engineers an easy to use, all-in-one solution with all the features they might possibly need for performing reconnaissance and attacking WiFi networks, Bluetooth Low Energy devices, wireless HID devices and Ethernet networks. Features: ▫️ WiFi networks scanning, deauthentication attack, clientless PMKID association attack and automatic WPA/WPA2 client handshakes capture. ▫️ Bluetooth Low Energy devices scanning, characteristics enumeration, reading and writing. ▫️ 2.4Ghz wireless devices scanning and MouseJacking attacks with over-the-air HID frames injection (with DuckyScript support). ▫️ Passive and active IP network hosts probing and recon. ▫️ ARP, DNS, NDP and DHCPv6 spoofers for MITM attacks on IPv4 and IPv6 based networks. ▫️ Proxies at packet level, TCP level and HTTP/HTTPS application level fully scriptable with easy to implement javascript plugins. ▫️ A powerful network sniffer for credentials harvesting which can also be used as a network protocol fuzzer. ▫️ A very fast port scanner. ▫️ A powerful REST API with support for asynchronous events notification on websocket to orchestrate your attacks easily. ▫️ A very convenient web UI. ▫️ More! https://github.com/bettercap/bettercap #redteam #best #tools #kali

Ultimate WDAC Bypass List A centralized resource for previously documented WDAC/Device Guard/UMCI bypass techniques as well for building/managing/testing WDAC policies https://github.com/bohops/UltimateWDACBypassList

​Ghost Eye Information Gathering Tool Ghost Eye New Release. Ghost Eye is an Information Gathering, Footprinting, Scanner, and Recon Tool I made in #Python 3. Since the last release of Ghost Eye, I've tweaked, removed, and added some new features. So that Ghost Eye would become more of a whole. For me, it remains a game of options so that together you get a complete overview of your target. https://github.com/BullsEye0/ghost_eye

​BeatRev Version 2 Finished V2 of BeatRev a POC to frustrate/defeat Mal Analysts and Rev Eng's by 'keying' malware to a victim. Incorporated RDLL's, UUID's, and AV evasion. https://github.com/Octoberfest7/BeatRev

Sentinel-Attack. Sentinel ATT&CK aims to simplify the rapid deployment of a threat hunting capability that leverages Sysmon and MITRE ATT&CK on Azure Sentinel. https://github.com/BlueTeamLabs/sentinel-attack