HackGit

​​SiteDorks Search Google, Bing, Brave, Ecosia, Yahoo or Yandex for a search term with several websites. A default list is already provided, which contains Github, Gitlab, Surveymonkey, Trello etc etc. Currently, a default list of 546 dorkable websites is available. https://github.com/Zarcolio/sitedorks #cybersecurity #infosec

​​AwesomeXSS This repository is a collection of Awesome XSS resources. Contributions are welcome and should be submitted via an issue. https://github.com/s0md3v/AwesomeXSS #infosec #pentesting #bugbounty

​​Cyber-Breach-Detector Protect your personal information from hackers and cyber criminals with HackAlert. Our product scans the internet for your online persona, including financial, social, and personal accounts, to detect data breaches or hacks. With real-time notifications via text or email, you can take action before it's too late. Stay safe and secure with HackAlert https://github.com/initd1/HackAlert #cybersecurity #infosec

​​ICE9 Bluetooth Sniffer Bluetooth sniffer for Wireshark and HackRF, BladeRF, and USRP that can listen to between 4 and 40 channels simultaneously. https://github.com/mikeryan/ice9-bluetooth-sniffer #cybersecurity #infosec

​​Awesome Sysadmin A curated list of amazingly awesome open source #sysadmin resources. https://github.com/awesome-foss/awesome-sysadmin

​​Profiler A Red Teaming tool focused on profiling the target. https://github.com/madalin-dogaru/profiler #infosec #pentesting #redteam

​​Wireshark A network traffic analyzer, or "sniffer", for Linux, macOS, *BSD and other Unix and Unix-like operating systems and for Windows. It uses Qt, a graphical user interface library, and libpcap and npcap as packet capture and filtering libraries. The Wireshark distribution also comes with TShark, which is a line-oriented sniffer (similar to Sun's snoop or tcpdump) that uses the same dissection, capture-file reading and writing, and packet filtering code as Wireshark, and with editcap, which is a program to read capture files and write the packets from that capture file, possibly in a different capture file format, and with some packets possibly removed from the capture. https://github.com/wireshark/wireshark Website: https://www.wireshark.org #best #kali #sniffer #infosec

​​Malicious Document Analysis https://github.com/RanjitPatil/Malicious-Document-Analysis #cybersecurity #infosec #malware

​​GreedyBear The project goal is to extract data of the attacks detected by a TPOT or a cluster of them and to generate some feeds that can be used to prevent and detect attacks. https://github.com/intelowlproject/GreedyBear #cybersecurity #infosec

​​NIST-to-Tech An open-source listing of cybersecurity technologies mapped to the NIST Cybersecurity Framework (CSF). https://github.com/mikeprivette/NIST-to-Tech #cybersecurity #infosec

​​K🔑Logger v3.0.0 Remote persistent 🔑Logger for Windows and Linux Features: ▫️ Logs keys pressed on keyboard ▫️ upload reports in anonfile. ▫️ Works with Linux and Windows. ▫️ Does not require root or admin privlages. https://github.com/De3vil/KLogger #infosec #pentesting #redteam

​​BladeRF 2.0 Micro xA4 The bladeRF 2.0 micro is the next-generation 2x2 MIMO, 47MHz to 6GHz frequency range, off-the-shelf USB 3.0 Software Defined Radio (SDR) that is easy and affordable for students and RF enthusiasts to explore wireless communications, yet provides a powerful waveform development platform expected by industry professionals. Support is available for Linux, macOS, and Windows. The bladeRF libraries, utilities, firmware, and platform HDL are released under open source licenses, and schematics are available online. The FPGA and USB 3.0 peripheral controller are programmable using vendor-supplied tools and SDKs that are available online, free of charge. Car Hacking Part 3: Rolljam Attack: https://scare.rocks/2022/01/27/Car-Hacking-Part-3-Rolljam-Attack.html Buy online: 🛒 https://alii.pub/6o2uor #radio #bladerf #SDR

AttackSurfaceMapper ASM is a reconnaissance tool that uses a mixture of open source intelligence and active techniques to expand the attack surface of your target. You feed in a mixture of one or more domains, subdomains and IP addresses and it uses numerous techniques to find more targets. It enumerates subdomains with bruteforcing and passive lookups, Other IPs of the same network block owner, IPs that have multiple domain names pointing to them and so on. Once the target list is fully expanded it performs passive reconnaissance on them, taking screenshots of websites, generating visual maps, looking up credentials in public breaches, passive port scanning with Shodan/Censys and scraping employees from LinkedIn. https://github.com/superhedgy/AttackSurfaceMapper #infosec #pentesting #redteam

​​CVE-2023-28206 This is a PoC for CVE-2023-28206, triggering an oob memmove in IosaColorManagerMSR8::getHDRStats_gatedContext. https://gist.github.com/LinusHenze/728db96a836b6817ecb727cfbde606b3 Details: https://support.apple.com/en-us/HT213720 #cve #poc #cybersecurity #infosec

​​Fiber This is a simple PoC of how you can leverage fibers to execute in-memory code without spawning threads and hiding suspicious thread stacks among others. https://github.com/Kudaes/Fiber #cybersecurity #infosec #pentesting

​​APTnotes Data A repository of publicly-available papers and blogs (sorted by year) related to malicious campaigns/activity/software that have been associated with vendor-defined APT (Advanced Persistent Threat) groups and/or tool-sets. https://github.com/aptnotes/data #infosec #pentesting #redteam #APT

​​iocextract Indicator of Compromise (IOC) extractor for some of the most commonly ingested artifacts. https://github.com/InQuest/python-iocextract #cybersecurity #infosec

​​Linux Kernel Fuzzer Corpus https://github.com/cmu-pasta/linux-kernel-enriched-corpus #cybersecurity #infosec

​​learning-malware-analysis This repository contains sample programs that mimick behavior found in real-world malware. The goal is to provide source code that can be compiled and used for learning purposes, without having to worry about handling live malware. https://github.com/jstrosch/learning-malware-analysis #malware #cybersecurity #infosec

​​LOOBins Living Off the Orchard: macOS Binaries (LOOBins) is designed to provide detailed information on various built-in macOS binaries and how they can be used by threat actors for malicious purposes. This list does not include overlapping Unix binaries that are detailed in GTFOBins. https://github.com/infosecB/LOOBins #cybersecurity #infosec