HackGit
Open in Telegram
The channel was created for cybersecurity specialists. • Offensive Security • RedTeam • Malware Research • BugBounty • OSINT • etc Disclaimer: t.me/hackgit/2082 Donations - Ads: t.me/hackgit/5423
Show more📈 Analytical overview of Telegram channel HackGit
Channel HackGit (@hackgit) in the English language segment is an active participant. Currently, the community unites 21 579 subscribers, ranking 4 526 in the Technologies & Applications category and 1 853 in the USA region.
📊 Audience metrics and dynamics
Since its creation on невідомо, the project has demonstrated rapid growth, gathering an audience of 21 579 subscribers.
According to the latest data from 02 March, 2025, the channel demonstrates stable activity. Although there has been a change in the number of participants by 19 over the last 30 days and by 0 over the last 24 hours, overall reach remains high.
- Verification status: Not verified
- Engagement rate (ER): The average audience engagement rate is 0%. Within the first 24 hours after publication, content typically collects N/A% reactions from the total number of subscribers.
- Post reach: On average, each post receives 0 views. Within the first day, a publication typically gains 0 views.
- Reactions and interaction: The audience actively supports content: the average number of reactions per post is 0.
📝 Description and content policy
The author describes the resource as a platform for expressing subjective opinions:
“The channel was created for cybersecurity specialists.
• Offensive Security
• RedTeam
• Malware Research
• BugBounty
• OSINT
• etc
Disclaimer:
t.me/hackgit/2082
Donations - Ads:
t.me/hackgit/5423”
Thanks to the high frequency of updates (latest data received on 03 March, 2025), the channel maintains relevance and a high level of publication reach. Analytics show that the audience actively interacts with content, making it an important point of influence in the Technologies & Applications category.
21 579
Subscribers
No data24 hours
-37 days
+1930 days
Posts Archive
21 579
WARF
Web Application Reconnaissance Framework
WARF is highly customizable and allows you to perform a full scan or individual scan on the target. It accumulates the results and shows them in a powerful DataTable through which you can narrow down your searches. WARF also give you the option to add and save target individually and perform different scans on them.
With a Dashboard, you will quickly get the metrics of your activity. WARF confined all your targets together and provide you with a clean and efficient way to search them down with their names.
Features:
▫️ Subdomain Enumeration
▫️ Directory BruteForce
▫️ Gather Wayback URLs
▫️ Gather JavaScript URLs
▫️ Extract links from JS files
▫️ Extract API/Secret Keys from JS files
▫️ Supports Background Scan
https://github.com/iamnihal/warf
21 579
LazyCSRF
A more useful CSRF PoC generator that runs on Burp Suite.
Features:
▫️ Automatically switch to PoC using XMLHttpRequest
→ In case the parameter is JSON
→ In case the request is a PUT/PATCH/DELETE
▫️ Support displaying multibyte characters (like Japanese)
▫️ Generating CSRF PoC with Burp Suite Community Edition (of course, it also works in Professional Edition)
https://github.com/tkmru/lazyCSRF
21 579
Ldapper
A GoLang tool to enumerate and abuse LDAP. Made simple.
Ldapper was created with for use in offensive security engagements for targeted user enumeration, group enumeration, and more. Ldapper uses familiar "net" commands such as "net user" and "net group" to perform all its queries and its output follows the same conventions. Ldapper's user interface operates as a pseudo-interactive shell, where the user can input commands until exited. All traffic goes over the LDAP(S) protocol with a singular bind to help you better blend into the network.
Ldapper is proxy aware and supports NTLM authentication with a user's hash. Additionally, this tool can perform modification actions within LDAP. More functionality is planned for later releases, but for now additional supported command functions are:
▫️ Add Domain Computers
▫️ Add/Remove Arbitrary SPNs
▫️ Kerberoast
https://github.com/Synzack/ldapper
#Donate t.me/hackgit🍻»»»
21 579
Pax
PAdding oracle eXploiter is a tool for exploiting padding oracles in order to:
▫️ Obtain plaintext for a given piece of CBC encrypted data.
▫️ Obtain encrypted bytes for a given piece of plaintext, using the unknown encryption algorithm used by the oracle.
This can be used to disclose encrypted session information, and often to bypass authentication, elevate privileges and to execute code remotely by encrypting custom plaintext and writing it back to the server.
https://github.com/liamg/pax
21 579
SCodeScanner
SCodeScanner stands for Source Code scanner where the user can scans the source code for finding the Critical Vulnerabilities. The main objective for this scanner is to find the vulnerabilities inside the source code before code gets published in Prod.
https://github.com/agrawalsmart7/scodescanner
21 579
SpyCast
A crossplatform mDNS enumeration tool that can work either in active mode by recursively querying services, or in passive mode by only listening to multicast packets.
https://github.com/evilsocket/spycast
21 579
Awesome Command & Control
A collection of awesome Command & Control (C2) frameworks, tools and resources for post-exploitation and red teaming assessments.
https://github.com/tcostam/awesome-command-control
21 579
Lab S4U2Self Abuse
This lab aims to provide a safe environment to test the S4U2Self abuse exploit
https://github.com/OtterHacker/LabS4U2Self
21 579
Seth
Seth is a tool written in Python and Bash to MitM RDP connections by attempting to downgrade the connection in order to extract clear text credentials.
It was developed to raise awareness and educate about the importance of properly configured RDP connections in the context of pentests, workshops or talks. The author is Adrian Vollmer (SySS GmbH).
https://github.com/SySS-Research/Seth
21 579
SleepKiller
One of common evasion techniques that used by malwares is delays its basically delaying execution of malicious behavior in order to evade sandboxes and analysts, it can be very annoying to wait for the malware to do the full execution also analysing it in sandboxes can give you false result because sandboxes are programmed to simply wait and watch for a period of time this is why i made this program.
https://github.com/ZeroMemoryEx/SleepKiller
21 579
CVE-2022-34729
NorthSea decided to delay the disclosure of this POC for some reason.
https://github.com/Pwnrin/CVE-2022-34729
21 579
ScreenShot
a C2 feature , ScreenShot capture , the file output is a png on the current directory named "screen.png"
https://github.com/D1rkMtr/ScreenShot
21 579
dll4shell
C++ shellcode launcher
A collection of DLL wrappers around various shellcode injection and obfuscation techniques.
https://github.com/cepxeo/dll4shell
t.me/hackgit
21 579
LDAPShell
A wrapper of ldap_shell.py module which in ntlmrelayx.
https://github.com/XiaoliChan/LDAPShell
21 579
mordor-rs
Hell's Gate / Halo's Gate / Tartarus' Gate and FreshyCalls / SysWhispers2 in Rust
https://github.com/memN0ps/mordor-rs
21 579
OWASP ZAP Heads Up Display
The HUD is an interface that provides the functionality of ZAP directly in the browser.
https://github.com/zaproxy/zap-hud
21 579
Repost from Pentesting News
multi-command mimikatz functionality in a CS beacon
https://gist.github.com/tothi/2809d548f7407de781892c4f840fdee1
21 579
Repost from Pentesting News
SMS E2E Encryption and Tunneling for Smart Mobile Devices
E2E Encrypted SMS and SMS Tunneling app: https://github.com/mich01/SpiderSMS
