HackGit

​​AtomicTestHarnesses A PowerShell module that simulates and validates attack technique execution. The details of a technique can vary from attack to attack; AtomicTestHarnesses accounts for this by allowing you to execute many variations of a technique at once. AtomicTestHarnesses also validates the telemetry generated during execution, so you always know whether your simulations were successful. https://github.com/redcanaryco/AtomicTestHarnesses

​​yarang YARA New Generation yarang is an experiment focused on new scanning engine for YARA, which is based on compiling YARA ruleset into native code and exposing C API in order to use it anywhere. It uses HyperScan under the hood as a pattern matcher instead of custom Aho-Corasick implementation which YARA rolls. https://github.com/avast/yarang

​​bomber bomber is an application that scans SBoMs for security vulnerabilities. https://github.com/devops-kung-fu/bomber

​​yxd yxd is a hex dump tool similar to xxd, but with features that I wanted. It's written in python3, and doesn't have any requirements outside of the python3 standard library (sys, argparse, re). The script itself is pretty simple, and should be easy to add features to if needed. https://github.com/netspooky/yxd

​​RPC Backdoor Emulation This project is a basic implementation of an "RPC Backdoor" meant to emulate TTPs used by certain groups. The project contains an RPC server with five functions: ▫️ Execute a command with cmd.exe /c and the CreateProcess API call. ▫️ Steal a token and execute a command with cmd.exe /c and the CreateProcessWithTokenW API call. ▫️ Download a file from the remote host. ▫️ Upload a file to the remote host. ▫️ Terminate the RPC server. https://github.com/eladshamir/RPC-Backdoor

​​Ox4Shell Deobfuscate Log4Shell payloads with ease. https://github.com/ox-eye/Ox4Shell

CVE-2022-23779 Internal Hostname Disclosure Vulnerability https://github.com/Vulnmachines/Zoho_CVE-2022-23779 #cve

​​CVE-2022-37153 XSS vulnerability in Artica Proxy 4.30.0. https://github.com/Fjowel/CVE-2022-37153 #cve

​​SCMKit Source Code Management Attack Toolkit A toolkit that can be used to attack SCM systems. SCMKit allows the user to specify the SCM system and attack module to use, along with specifying valid credentials (username/password or API key) to the respective SCM system. Currently, the SCM systems that SCMKit supports are GitHub Enterprise, GitLab Enterprise and Bitbucket Server. The attack modules supported include reconnaissance, privilege escalation and persistence. SCMKit was built in a modular approach, so that new modules and SCM systems can be added in the future by the information security community. https://github.com/h4wkst3r/SCMKit

CVE-2022-32250-Linux-Kernel-LPE CVE-2022-32250 allows a local user to escalate privileges to root because an incorrect NFT_STATEFUL_EXPR check leads to a use-after-free. https://github.com/theori-io/CVE-2022-32250-exploit #cve #exploit

​​Contacts Details Scraper Our free Contact Details Scraper can crawl any website and extract the following contact information for individuals listed on the website: ▫️ Email addresses ▫️ Phone numbers (from phone links or extracted from text) ▫️ LinkedIn profiles ▫️ Twitter handles ▫️ Instagram profiles ▫️ Facebook user profiles or pages https://github.com/vdrmota/Social-Media-and-Contact-Info-Extractor

​​SET The Social-Engineer Toolkit is an open-source penetration testing framework designed for social engineering. SET has a number of custom attack vectors that allow you to make a believable attack quickly. https://github.com/trustedsec/social-engineer-toolkit #kali #best

​​fake-sms ▫️ sms anonymously ▫️ super fast sms sending ▫️ international sms sending available. ▫️ you can send only one sms per day. ▫️ no charges on sending sms. ▫️ very easy to use. https://github.com/machine1337/fake-sms

​​tfsec tfsec uses static analysis of your terraform code to spot potential misconfigurations. Features: ☁️ Checks for misconfigurations across all major (and some minor) cloud providers ⛔️ Hundreds of built-in rules 🪆 Scans modules (local and remote) ➕ Evaluates HCL expressions as well as literal values ↪️ Evaluates Terraform functions e.g. concat() 🔗 Evaluates relationships between Terraform resources 🧰 Compatible with the Terraform CDK 🙅 Applies (and embellishes) user-defined Rego policies 📃 Supports multiple output formats: lovely (default), JSON, SARIF, CSV, CheckStyle, JUnit, text, Gif. 🛠 Configurable (via CLI flags and/or config file) ⚡️ Very fast, capable of quickly scanning huge repositories 🔌 Plugins for popular IDEs available (JetBrains, VSCode and Vim) 🏡 Community-driven - come and chat with us on Slack! https://github.com/aquasecurity/tfsec

ReconPal Leveraging NLP for Infosec Recon is one of the most important phases that seem easy but takes a lot of effort and skill to do right. One needs to know about the right tools, correct queries/syntax, run those queries, correlate the information, and sanitize the output. All of this might be easy for a seasoned infosec/recon professional to do, but for rest, it is still near to magic. How cool it will be to ask a simple question like "Find me an open Memcached server in Singapore with UDP support?" or "How many IP cameras in Singapore are using default credentials?" in a chat and get the answer? The integration of GPT-3, deep learning-based language models to produce human-like text, with well-known recon tools like Shodan, is the foundation of ReconPal. ReconPal also supports using voice commands to execute popular exploits and perform reconnaissance. https://github.com/pentesteracademy/reconpal

​​vuls Agentless Vulnerability Scanner for Linux/FreeBSD Vuls is open-source, agent-less vulnerability scanner based on information from NVD, OVAL, etc. Features: ▫️ Informs users of the vulnerabilities that are related to the system. ▫️ Informs users of the servers that are affected. ▫️ Vulnerability detection is done automatically to prevent any oversight. ▫️ The report is generated on a regular basis using CRON or other methods. to manage vulnerability. https://github.com/future-architect/vuls Details: https://vuls.io/en/

​​SecureFolderFS SecureFolderFS helps you keep your files private. Protect your data with state-of-the-art encryption algorithms that seamlessly secure your data thanks to SecureFolderFS' advanced on-fly encryption/decryption. https://github.com/securefolderfs-community/SecureFolderFS

​​System Informer A free, powerful, multi-purpose tool that helps you monitor system resources, debug software and detect malware. Brought to you by Winsider Seminars & Solutions, Inc. Features: ▫️ A detailed overview of system activity with highlighting. ▫️ Graphs and statistics allow you quickly to track down resource hogs and runaway processes. ▫️ Can't edit or delete a file? Discover which processes are using that file. ▫️ See what programs have active network connections, and close them if necessary. ▫️ Get real-time information on disk access. ▫️ View detailed stack traces with kernel-mode, WOW64 and .NET support. ▫️ Go beyond services.msc: create, edit and control services. ▫️ Small, portable and no installation required. ▫️ 100% Free Software (MIT) https://github.com/winsiderss/systeminformer

​​chainsaw Rapidly Search and Hunt through Windows Event Logs Chainsaw provides a powerful ‘first-response’ capability to quickly identify threats within Windows event logs. It offers a generic and fast method of searching through event logs for keywords, and by identifying threats using built-in support for Sigma detection rules, and via custom Chainsaw detection rules. https://github.com/WithSecureLabs/chainsaw