HackGit

​​PcapXray A Network Forensics Tool - To visualize a Packet Capture offline as a Network Diagram including device identification, highlight important communication and file extraction https://github.com/Srinivas11789/PcapXray

​​Fuzzing-101 An step by step fuzzing tutorial. A GitHub Security Lab initiative. https://github.com/antonio-morales/Fuzzing101

​​kconfig-hardened-check There are plenty of security hardening options for the Linux kernel. A lot of them are not enabled by the major distros. We have to enable these options ourselves to make our systems more secure. But nobody likes checking configs manually. So let the computers do their job! https://github.com/a13xp0p0v/kconfig-hardened-check

​​Packer Fuzzer A fast and efficient Scanner for #security detection of websites constructed by javascript module bundler such as Webpack. This tool will automatically generate a scan result report based on the user's detection results. The content of this report and other derivative content cannot represent the position and views of the team. https://github.com/rtcatc/Packer-Fuzzer

​​AllinOneKit This kit contains many programs for brute force for social media accounts, for information gathering for websites, phising attacks, information gathering for social media accounts and more... https://github.com/new92/AllInOneKit

DOGERAT A multifunctional Telegram based Android RAT without port forwarding. Features: ▫️ Read all the files of Internal Storage ▫️ Delete files or folder from victim device ▫️ Download Any Media to your Device from Victims Device ▫️ Get system information of Victim Device ▫️ Retrieve the List of Installed Applications ▫️ Retrive SMS ▫️ Retrive Call Logs ▫️ Retrive Contacts ▫️ Click photos from victim device front/main camera ▫️ Send SMS ▫️ Keylogger {not working in android 11 or higher version} ▫️ Record Audio ▫️ Pre Binded with [Instagram Webview] ▫️ Runs In Background https://github.com/shivaya-dav/DogeRat

​​Pi.Alert WIFI / LAN intruder detector. Scan the devices connected to your WIFI / LAN and alert you the connection of unknown devices. It also warns the disconnection of "always connected" devices. The system continuously scans the network for: ▫️ New devices ▫️ New connections (re-connections) ▫️ Disconnections ▫️ "Always Connected" devices down ▫️ Devices IP changes ▫️ Internet IP address changes https://github.com/pucherot/Pi.Alert

​​PyHTools Python Hacking Tools (PyHTools) (pht) is a collection of python written hacking tools consisting of network scanner, arp spoofer and detector, dns spoofer, code injector, packet sniffer, network jammer, email sender, downloader, wireless password harvester credential harvester, keylogger, download&execute, and reverse_backdoor along with website login bruteforce, scraper, web spider etc. PHT also includes malwares which are undetectable by the antiviruses. https://github.com/dmdhrumilmistry/pyhtools

​​ZenBuster Multi-threaded URL enumeration/brute-forcing tool in Python. Features: ▫️ Hostname format supports standard, IPv4, and IPv6. ▫️ Support for logging results to a file with -O [filename]. ▫️ Specifying custom ports for nonstandard webservers with -p . ▫️ Optional file extensions in directory mode with -x . ▫️ Quiet mode for less distracting output with -Q. ▫️ Color can be disabled for less distracting output with -nc/-nl. ▫️ Tested on Python versions 3.9 and 3.10, with theoretical support for versions >= 3.6 https://github.com/0xTas/zenbuster

​​GOAD (Game Of Active Directory) - version 2 GOAD is a pentest active directory LAB project. The purpose of this lab is to give pentesters a vulnerable Active directory environement ready to use to practice usual attack techniques. https://github.com/Orange-Cyberdefense/GOAD Reconnaissance and scan https://mayfly277.github.io/posts/GOADv2-pwning_part1 Find users https://mayfly277.github.io/posts/GOADv2-pwning-part2 Enumeration with user https://mayfly277.github.io/posts/GOADv2-pwning-part3 #ad

GOAD (Game Of Active Directory) - version 2 https://github.com/Orange-Cyberdefense/GOAD Reconnaissance and scan https://mayfly277.github.io/posts/GOADv2-pwning_part1 Find users https://mayfly277.github.io/posts/GOADv2-pwning-part2 Enumeration with user https://mayfly277.github.io/posts/GOADv2-pwning-part3 #ad

PEASS-ng Privilege Escalation Awesome Scripts SUITE (with colors) Here you will find privilege escalation tools for #windows and #linux/ #Unix* (in some near future also for #mac). These tools search for possible local privilege escalation paths that you could #exploit and print them to you with nice colors so you can recognize the misconfigurations easily. ▫️ Check the Local Windows Privilege Escalation checklist from book.hacktricks.xyz ▫️ WinPEAS - Windows local Privilege Escalation Awesome Script (C#.exe and .bat) ▫️ Check the Local Linux Privilege Escalation checklist from book.hacktricks.xyz ▫️ LinPEAS - Linux local Privilege Escalation Awesome Script (.sh) https://github.com/carlospolop/PEASS-ng

​​sqlscan sqlscan is quick web scanner for find an sql inject point. https://github.com/Cvar1984/sqlscan

Shocker A tool to find and exploit servers vulnerable to Shellshock https://github.com/nccgroup/shocker

The Poor Man's Obfuscator The purpose of this publication is to present ELF and Mach-O transformations which impact or hinder disassemblers like IDA, BinaryNinja, Ghidra, and Radare2. https://github.com/romainthomas/the-poor-mans-obfuscator Research: https://www.romainthomas.fr/publication/22-pst-the-poor-mans-obfuscator

POCs built in Rust ▫️ mock-trusted-directories - bypasses UAC by using a fake trusted directory. ▫️ windir-with-silentcleanup-task - bypasses UAC by mocking the WinDir environment variable, and using the https://github.com/TheBotlyNoob/Rust-Privesc

​​BOF - RDPHijack Cobalt Strike Beacon Object File (BOF) that uses WinStationConnect API to perform local/remote RDP session hijacking. With a valid access token / kerberos ticket (e.g., golden ticket) of the session owner, you will be able to hijack the session remotely without dropping any beacon/tool on the target server. To enumerate sessions locally/remotely, you could use Quser-BOF. https://github.com/netero1010/RDPHijack-BOF

​​AIR SCRIPT Air Script is Wi-Fi pwning Swiss Army knife that also has optional email notifications for when handshakes have been captured. Air Script is an automated and automatic way to pwn wifi. Automated: Step by step user friendly interface, to improve workflow. Type less, attack more! Automatic: You can tell Air-Script to hack all wifi networks around you with an Air Script attack. (Attack all option) Air Script will automatically pwn every network in range in a matter of seconds to minutes without any user input. When Air-Script is done. It will automatically turn off monitor mode, and send you an email notification. (Notifications are optional) Then Air Script will ask you what wordlist to use, and will try to bruteforce the password for you. (When asked for wordlist, click enter or crl + c to skip.) https://github.com/B3ND1X/air-script