HackGit
Open in Telegram
The channel was created for cybersecurity specialists. • Offensive Security • RedTeam • Malware Research • BugBounty • OSINT • etc Disclaimer: t.me/hackgit/2082 Donations - Ads: t.me/hackgit/5423
Show more📈 Analytical overview of Telegram channel HackGit
Channel HackGit (@hackgit) in the English language segment is an active participant. Currently, the community unites 21 579 subscribers, ranking 4 526 in the Technologies & Applications category and 1 853 in the USA region.
📊 Audience metrics and dynamics
Since its creation on невідомо, the project has demonstrated rapid growth, gathering an audience of 21 579 subscribers.
According to the latest data from 02 March, 2025, the channel demonstrates stable activity. Although there has been a change in the number of participants by 19 over the last 30 days and by 0 over the last 24 hours, overall reach remains high.
- Verification status: Not verified
- Engagement rate (ER): The average audience engagement rate is 0%. Within the first 24 hours after publication, content typically collects N/A% reactions from the total number of subscribers.
- Post reach: On average, each post receives 0 views. Within the first day, a publication typically gains 0 views.
- Reactions and interaction: The audience actively supports content: the average number of reactions per post is 0.
📝 Description and content policy
The author describes the resource as a platform for expressing subjective opinions:
“The channel was created for cybersecurity specialists.
• Offensive Security
• RedTeam
• Malware Research
• BugBounty
• OSINT
• etc
Disclaimer:
t.me/hackgit/2082
Donations - Ads:
t.me/hackgit/5423”
Thanks to the high frequency of updates (latest data received on 03 March, 2025), the channel maintains relevance and a high level of publication reach. Analytics show that the audience actively interacts with content, making it an important point of influence in the Technologies & Applications category.
21 579
Subscribers
No data24 hours
-37 days
+1930 days
Posts Archive
21 579
ESP32 Linux WiFi OTA Crasher
This is a small POC running on an ESP32, exploiting CVE-2022-42722 to crash Linux devices over the air.
The exact config I tested (works reliably):
▫️ ESP32-WROOM-32D board
▫️ Linux 5.15.0-48-generic #54~20.04.1-Ubuntu SMP
https://github.com/jo-m/linux-wifi-ota-crash
21 579
IFaultrepElevatedDataCollectionUAC
PoC for UAC bypass using arbitrary file delete in auto-elevated IFaultrepElevatedDataCollection COM object. Arbitrary file delete is abused to get SYSTEM shell using method described here
This PoC will just execute cmd.exe as system so in order to performe other actions such as executing different binary new RBS file should be created (using wix or other tools).
If you want to test this PoC it is the best to do it on system with minimum of 4 processor cores.
https://github.com/Wh04m1001/IFaultrepElevatedDataCollectionUAC
21 579
NoRunPI
Run Your Payload Without Running Your Payload
Since "SettingSyncHost.exe -Embedding" Runs a Thread On "SHCore.dll!Ordinal172+0x100", We can hijack the flow before this thread start, to do that:
▫️ Load shcore.dll to calculate the thread's entry
▫️ Create "SettingSyncHost.exe -Embedding" Process
▫️ Wait for ~ 5 ms ~ just make sure that the newly created process loads shcore.dll [NOTE ON THIS IN THE CODE]
▫️ suspend the process
▫️ inject the payload to the calculated address
▫️ resume the process
▫️ $$
https://github.com/ORCx41/NoRunPI
21 579
CloudFlair
CloudFlair is a tool to find origin servers of websites protected by CloudFlare who are publicly exposed and don't restrict network access to the CloudFlare IP ranges as they should.
https://github.com/christophetd/CloudFlair
Details:
https://blog.christophetd.fr/bypassing-cloudflare-using-internet-wide-scan-data/
21 579
XorStringsNET
A tool for simple and quick XOR based string encryption of .NET binaries
XORStrings implements a simple XOR based cipher, I call RXOR. RXOR does not only encrypt the string but also reverses its character order. Each string is encrypted with a unique key. The arguments used by the decryption routine are also XOR encrypted.
https://github.com/dr4k0nia/XorStringsNET
21 579
SteaLinG v0.3
The SteaLinG is an open-source penetration testing framework designed for social engineering After the hack, you can upload it to the victim's device and run it
https://github.com/De3vil/SteaLinG
21 579
Repost from Pentesting Shop
TicWatch Pro
Smart watch with official Kali NetHunter support.
What is Kali NetHunter?
Kali NetHunter is an Android ROM overlay that turns an ordinary phone into the ultimate Mobile Penetration Testing Platform. Now it's available for your smartwatch with some limitations.
The overlay includes a custom kernel, a Kali Linux chroot, an accompanying Android application, which allows for easier interaction with various security tools and attacks.
Beyond the penetration testing tools arsenal within Kali Linux, NetHunter also supports several additional classes, such as HID Keyboard Attacks, BadUSB attacks, WPS attacks, and much more.
NetHunter is an open-source project developed by Offensive Security and the community.
Installing NetHunter On the TicWatch Pro:
https://www.kali.org/docs/nethunter/installing-nethunter-on-the-ticwatch-pro/
Buy online:
🛒 https://ali.ski/Wtihm (aliexpress)
🛒 https://amzn.to/3CCtooj (amazon)
#watch #kali
21 579
The Soaring Eagle C2
I developed this tool for whoever wants to learn the basics regarding C2 and Malware Development, it is not intended to be used in real world scenarios and engagements you will get caught guaranteed, I developed it for learning not evasion.
https://github.com/ItsCyberAli/The-Soaring-Eagle
21 579
CVE-2021-46422
Telesquare SDT-CW3B1 - OS command injection vulnerability
https://github.com/Awei507/CVE-2021-46422
#cve
21 579
Ghauri
An advanced cross-platform tool that automates the process of detecting and exploiting SQL injection security flaws
https://github.com/r0oth3x49/ghauri
21 579
CVE-2022-41852
Remote Code Execution in JXPath Library (CVE-2022-41852) Proof of Concept
https://github.com/Warxim/CVE-2022-41852
#cve
21 579
phomber
A Infomation Grathering tool that reverse search phone numbers and get their details !
https://github.com/s41r4j/phomber
21 579
osintui
Open Source Intelligence Terminal User Interface
https://github.com/wssheldon/osintui
#OSINT
21 579
csdroid
Cobalts Srike mobile client, cobaltstrike mobile version, cs mobile version, cobaltstrike android.
https://github.com/linshaoSec/csdroid
t.me/hackgit
21 579
Repost from Pentesting Shop
WiFi Pineapple Mark VII by Hak5
The Hak5 WiFi Pineapple is a highly advanced WiFi auditing and MITM platform. The original "RougeAP" device - the WiFi Pineapple provides an end-to-end workflow to bring WiFi clients from their trusted network to your rouge network.
Hak5's latest generation V7 brings sees updates in three key area: performance, management tools and framework upgrades.
The PineAP suite is a cross-platform control panel for the WiFi Pineapple devices, providing fine-grained control over all elements of your audit.
The elegance of the WiFi Pineapple Platform is in its simplicity. Previously onerous, inefficient and prone to collateral damage - WiFi Auditing and Offensive Operations are now highly targeted, covert and very simple.
Advanced mitm attacks: Perfectly mimicks target networks, allowing for seamless client capture via the highly targeted deAuth mechanisms. Once captured, all standard network vectors are available: DNSSpoofing, Packet Capture, etc.
Wifi reconnaissance: Covertly discover, visualise and map WiFi networks and client hierarchies. Build lists of existing networks, and even client historical SSID connections. Continuously scan, add notes, filter clients, networks, logs and more.
Automated wifi infiltration: Capture and pipe WiFi Encryption credentials in pcap / hashcat or JTR formats. WEP, WPA & WPA Enterprise.
Highly targeted, highly covert: Keep your "Get Out of Jail Free" letter firmly in your pocket. The PineAP suite allows for fine-grained, highly targeted actions, ensuring no detection and no collateral damage.
Buy online:
🛒 https://ali.ski/aRCSNt (aliexpress)
🛒 https://amzn.to/3VxMHbd (amazon)
#pineapple #wifi
21 579
Locksmith
A tool to identify and remediate common misconfigurations in Active Directory Certificate Services
https://github.com/TrimarcJake/Locksmith
21 579
RedEye
RedEye is an open-source analytic tool developed by CISA and DOE’s Pacific Northwest National Laboratory to assist Red Teams with visualizing and reporting command and control activities. This tool, released in October 2022 on GitHub, allows an operator to assess and display complex data, evaluate mitigation strategies, and enable effective decision making in response to a Red Team assessment.
The tool parses logs, such as those from Cobalt Strike, and presents the data in an easily digestible format. The users can then tag and add comments to activities displayed within the tool. The operators can use the RedEye’s presentation mode to present findings and workflow to stakeholders.
https://github.com/cisagov/RedEye
21 579
matano
Matano is an open source security lake platform for AWS. It lets you ingest petabytes of security and log data from various sources, store and query them in an open Apache Iceberg data lake, and create Python detections as code for realtime alerting. Matano is fully serverless and designed specifically for AWS and focuses on enabling high scale, low cost, and zero-ops. Matano deploys fully into your AWS account.
https://github.com/matanolabs/matano
21 579
PsyloDbg
PsyloDbg is a very simple Windows Debugger that currently only monitor for debug events:
▫️ Exception
▫️ Create Thread
▫️ Create Process
▫️ Exit Thread
▫️ Exit Process
▫️ Load DLL
▫️ Unload DLL
▫️ Debug String
▫️ RIP
https://github.com/DarkCoderSc/PsyloDbg
