HackGit

​​FlavorTown Various ways to execute shellcode. C: Written/Tested using an empty project in VS 2022. C#: Tested with VS 2022 and csc. The usage can be found commented at the top of each file. Additionally, there's a basic check to ensure that enough arguments have been passed when executed. https://github.com/Wra7h/FlavorTown t.me/hackgit

​​DongTai DongTai IAST is an open-source passive interactive security testing (IAST) product. It uses dynamic hooks and taint tracking algorithms to achieve universal vulnerability detection and multiples request associated with vulnerability detection (including but not limited to unauthorized vulnerabilities, overpower vulnerabilities), Third-party component vulnerability detection, etc. Currently, applications in Java and Python are supported for vulnerability detection. https://github.com/HXSecurity/DongTai t.me/hackgit

​​CloudQuery The open source high performance data integration platform designed for security and infrastructure teams. CloudQuery extracts, transforms, and loads your cloud assets. CloudQuery enables you to assess, audit, and monitor the configurations of your cloud assets. CloudQuery key use-cases and features: ▫️ Search: Use standard SQL to find any asset based on any configuration or relation to other assets. ▫️ Visualize: Connect CloudQuery standard PostgreSQL database to your favorite BI/Visualization tool such as Grafana, QuickSight, etc. ▫️ Policy-as-Code: Codify your security & compliance rules with SQL as the query engine. https://github.com/cloudquery/cloudquery

​​HearMeOut Voice phishing behavior detection system in AOSP HearMeOut operates as an Android system service. You need to register HearMeOut as an Android system service, referring to the description below. You also need to change the source code of each Android module so that HaerMeOut can detect voice phishing behavior. https://github.com/WSP-LAB/hearmeout

​​Blackbone Windows memory hacking library. Features: ▫️ x86 and x64 support ▫️ Process interaction ▫️ Process Memory ▫️ Process modules ▫️ Threads ▫️ Pattern search ▫️ Remote code execution ▫️ Remote hooking ▫️ Manual map features ▫️ Driver features https://github.com/DarthTon/Blackbone t.me/hackgit

​​CVE-2022-21371 The Oracle Fusion Middleware's Oracle WebLogic Server product (Web Container component) is vulnerable to local file inclusion. An easily exploited vulnerability could allow an unauthenticated attacker with HTTP network access to compromise Oracle WebLogic Server. A successful attack on this vulnerability, provide hackers complete access to Oracle WebLogic Server's whole data store or unrestricted access to sensitive data. https://github.com/Vulnmachines/Oracle-WebLogic-CVE-2022-21371 #cve

​​CVE-2022-33174 Powertek PDU Identity Bypass. https://github.com/Henry4E36/CVE-2022-33174 #cve

​​SnaffPoint A tool for pointesters who are in need of some sweetness in this world. It should help you find sensitive files available on SharePoint online and on shared OneDrive files for your company (or your customer). https://github.com/nheiniger/SnaffPoint t.me/hackgit

​​AsmResolver A PE inspection library allowing .NET programmers to read, modify and write executable files. This includes .NET as well as native images. The library exposes high-level representations of the PE, while still allowing the user to access low-level structures. https://github.com/Washi1337/AsmResolver t.me/hackgit

​​autodeauth A tool built to automatically deauth local networks https://github.com/Drew-Alleman/autodeauth t.me/hackgit

​​r77 Rootkit A ring 3 Rootkit that hides following entities from all processes: ▫️ Files, directories, junctions, named pipes, scheduled tasks ▫️ Processes ▫️ CPU usage ▫️ Registry keys & values ▫️ Services ▫️ TCP & UDP connections https://github.com/bytecode77/r77-rootkit t.me/hackgit

​​GetWindowsCredentials Get user credentials by calling the Windows API CredUIPromptForWindowsCredentialsW and save them to a file. https://github.com/Rvn0xsy/GetWindowsCredentials #Donate t.me/hackgit🍻

​​WFH Windows Feature Hunter. A proof of concept python script that uses Frida, a dynamic instrumentation toolkit, to assist in potentially identifying common “vulnerabilities” or “features” within Windows executables. WFH currently has the capability to automatically identify potential Dynamic Linked Library (DLL) sideloading and Component Object Model (COM) hijacking opportunities at scale. https://github.com/ConsciousHacker/WFH t.me/hackgit

​​MATE MATE is a suite of tools for interactive program analysis with a focus on hunting for bugs in C and C++ code. MATE unifies application-specific and low-level vulnerability analysis using code property graphs (CPGs), enabling the discovery of highly application-specific vulnerabilities that depend on both implementation details and the high-level semantics of target C/C++ programs. https://github.com/GaloisInc/MATE t.me/hackgit

​​BlackWidow A python based web application spider to gather subdomains, URL's, dynamic parameters, email addresses and phone numbers from a target website. This project also includes Inject-X fuzzer to scan dynamic URL's for common OWASP vulnerabilities. Features: ▫️ Automatically collect all URL's from a target website ▫️ Automatically collect all dynamic URL's and parameters from a target website ▫️ Automatically collect all subdomains from a target website ▫️ Automatically collect all phone numbers from a target website ▫️ Automatically collect all email addresses from a target website ▫️ Automatically collect all form URL's from a target website ▫️ Automatically scan/fuzz for common OWASP TOP vulnerabilities ▫️ Automatically saves all data into sorted text files https://github.com/1N3/BlackWidow t.me/hackgit

Chuwi LarkBox Pro is World’s Smallest 4K Mini PC Mini PC sizes only 61 x 61 x 43mm, weights only 127 gram, it wont take up space, can be put into any bag and will not make you feel bulky. Pre-installed Windows 10 home edition which has a rich software ecology, Office efficient office; also supports Linux operating system, such as Kali Linux, etc., for server construction, software compilation and other needs. Ultra High-efficiency Mobile Processor: Equipped with Intel J4125 processor which has quad cores, 4 threads, 4M Cache, 14nm lithography technology. Burst Frequency 2.7GHz, combined with 750MHz Intel UHD Graphics 600, browse webs is none issue for itself, everythings load up really quick at all. 4K videos play back from Youtube and Netflix are always smooth and work well. It will definitely ideal for office, home-learning, entertainment and other affairs. Large and Expandable Storage: This LarkBox Mini Computer comes with LPDDR4 6GB(2133 MHz) and 128GB eMMC 5.1 flash for smoothly loading software. The Micro SD reader support extra 128GB storage expansion. Or you can DIY to upgrade storage to 1TB(no included) via the M.2 ssd 2242 interface. Stable Wireless Connection: This mobile workstation support 2.4G/5G dual WiFi frequency band, connect to the appropriate network according to the demand, always online at high speed and stability so you can surf the internet no latency. You can connect keyboard, mouse, Bluetooth speakers and other peripherals via B-t 5.1. Also, you can buy a USB Gigabit Ethernet to enhance the network speed. Support VESA back Hanging: The body is reserved for VESA pendant support, which can be installed on the back of the display and other devices, hide the mini host, save space, and transform into an all-in-one machine. It is equipped with a practical expansion interface, with USB-A (3.0) x 2, USB-C(for power), HDMI 2.0, 1x3.5mm audio jack, MicroSD expansion port, file and audio and video transmission, and capacity expansion support. Buy online: 🛒 https://ali.ski/kxK1Ic #pc #minipc

​​Awesome Password Cracking A curated list of awesome tools, research, papers and other projects related to password cracking and password security. https://github.com/narkopolo/awesome-password-cracking t.me/hackgit

​​MSSQL-Analysis-Coerce Coerced Authentication A technique to coerce a Windows SQL Server to authenticate on an arbitrary machine. https://github.com/p0dalirius/MSSQL-Analysis-Coerce

​​Wpushell A tool used to upload a backdoor shell to a site that uses a WordPress Content Management System with a simple and fast process. Built using the Python programming language and can only be run on the command line terminal. This tool has advantages which include: ▫️ Fast process. ▫️ Execution of more than one target. ▫️ Easy to use. https://github.com/22XploiterCrew-Team/Wpushell

​​GarbageMan A set of tools designed for .NET heap analysis. These tools offer the following benefits for malware researchers: ▫️ Ability to extract clear-text payload (PE Images etc.) from .NET heaps quickly. ▫️ Easy analysis of encrypted network protocols, signs of data exfiltration, and similar. ▫️ Ability to overcome malware anti-dumping techniques (psnotify) https://github.com/WithSecureLabs/GarbageMan t.me/hackgit