HackGit
Open in Telegram
The channel was created for cybersecurity specialists. • Offensive Security • RedTeam • Malware Research • BugBounty • OSINT • etc Disclaimer: t.me/hackgit/2082 Donations - Ads: t.me/hackgit/5423
Show more📈 Analytical overview of Telegram channel HackGit
Channel HackGit (@hackgit) in the English language segment is an active participant. Currently, the community unites 21 579 subscribers, ranking 4 526 in the Technologies & Applications category and 1 853 in the USA region.
📊 Audience metrics and dynamics
Since its creation on невідомо, the project has demonstrated rapid growth, gathering an audience of 21 579 subscribers.
According to the latest data from 02 March, 2025, the channel demonstrates stable activity. Although there has been a change in the number of participants by 19 over the last 30 days and by 0 over the last 24 hours, overall reach remains high.
- Verification status: Not verified
- Engagement rate (ER): The average audience engagement rate is 0%. Within the first 24 hours after publication, content typically collects N/A% reactions from the total number of subscribers.
- Post reach: On average, each post receives 0 views. Within the first day, a publication typically gains 0 views.
- Reactions and interaction: The audience actively supports content: the average number of reactions per post is 0.
📝 Description and content policy
The author describes the resource as a platform for expressing subjective opinions:
“The channel was created for cybersecurity specialists.
• Offensive Security
• RedTeam
• Malware Research
• BugBounty
• OSINT
• etc
Disclaimer:
t.me/hackgit/2082
Donations - Ads:
t.me/hackgit/5423”
Thanks to the high frequency of updates (latest data received on 11 November, 2026), the channel maintains relevance and a high level of publication reach. Analytics show that the audience actively interacts with content, making it an important point of influence in the Technologies & Applications category.
21 579
Subscribers
No data24 hours
-37 days
+1930 days
Posts Archive
21 579
Repost from Pentesting News
FwHunt Community Scanner
Tools for analyzing UEFI firmware and checking UEFI modules with FwHunt rules.
https://github.com/binarly-io/fwhunt-scan
21 579
StegoCracker
Stego is an open-source and free steganography tool that lets you hide your secret message in an image or audio file. You will not notice any change in the image or audio file. However, your secret message will be inside the original image or audio file.
https://github.com/W1LDN16H7/StegoCracker
21 579
qBitMF (qBittorrent-MultiFace)
qBitMF is a docker container that runs qBittorrent over multiple VPN (or other) interfaces simultaneously. This is an example of a "multiface" torrent client, multiface being a portmanteau of "multiple" and "interface".
https://github.com/qBitMF/qBitMF
21 579
sauron
Sauron is a minimalistic cross-platform malware scanner with non-blocking realtime filesystem monitoring using YARA rules, written in Rust.
https://github.com/evilsocket/sauron
21 579
EDRSandBlast
EDRSandBlast is a tool written in C that weaponize a vulnerable signed driver to bypass EDR detections (Kernel callbacks and ETW TI provider) and LSASS protections. Multiple userland unhooking techniques are also implemented to evade userland monitoring.
As of release, combination of userland (--usermode) and Kernel-land (--kernelmode) techniques were used to dump LSASS memory under EDR scrutiny, without being blocked nor generating "OS Credential Dumping"-related events in the product (cloud) console. The tests were performed on 3 distinct EDR products and were successful in each case.
https://github.com/wavestone-cdt/EDRSandblast/tree/DefCon30Release
21 579
ApiHashing
just a stable replacement, that is fast and efficient.
▫️ no imported functions
▫️ easy to use
▫️ compile time seed / string hashes (different hashes everybuild with no need to change anything)
▫️ saves the module handle by hash, for the next possible api, so that it wont search for the module in peb, but by hash in our map
▫️ handles forwarded functions
https://github.com/ORCx41/ApiHashing
#Donate @HackGit
21 579
RATata
A simple python RAT to setup and use.
It works with a third-party #API so you don't have to open ports of your Wi-Fi box.
Tools:
▫️ execute bash commands
▫️ download files
▫️ inject python scripts
Characteristics:
▫️ auto run on computer boot
▫️ hash a score of 9/70 on virus total, but can easily put to 0 with a crypter
https://github.com/loTus04/RATata
21 579
secureCodeBox
A kubernetes based, modularized toolchain for continuous security scans of your software project. Its goal is to orchestrate and easily automate a bunch of security-testing tools out of the box.
https://github.com/secureCodeBox/secureCodeBox
21 579
Siembol
An open-source, real-time Security Information & Event Management tool based on big data technologies, providing a scalable, advanced security analytics framework.
Siembol provides a scalable, advanced security analytics framework based on open-source big data technologies. Siembol normalizes, enriches, and alerts on data from various sources, which allows security teams to respond to attacks before they become incidents.
https://github.com/G-Research/siembol
21 579
WpCrack Tool
A tool used to force login into the WordPress CMS web application and is built in the Python programming language.
Features:
▫️ Very fast login
▫️ Use of HTTP proxies
▫️ Multithreading or Multiprocessor
https://github.com/22XploiterCrew-Team/WpCrack
#Donate @HackGit
21 579
Determining AD domain name via NTLM Auth
If you have nmap (http-ntlm-info) unable to determine the FQND of an Active Directory domain via OWA, for example due to Citrix NetScaler or other SSO solutions, do it manually!
1.
curl -I -k -X POST -H 'Authorization: NTLM TlRMTVNTUAABAAAAB4IIogAAAAAAAAAAAAAAAAAAAAAKANc6AAAADw==' -H 'Content-Length: 0' https://autodiscover.exmaple.com/ews
2. echo 'TlRMTVNTUAACAAAADAAMAD...' | python2 ./ntlmdecoder.py
https://gist.github.com/aseering/829a2270b72345a1dc42
#ntlm #auth #sso #tricks #pentest21 579
Matos
An open-source cloud security tool for analyzing multi-cloud infrastructure security.
▫️ Discover cloud assets (e.g. virtual machines, storage, databases, disks, and containers), and gather configuration and metadata of all the assets in the cloud environment.
▫️ Assess the configurations of your cloud assets to help identify misconfiguration, non-conformance to best practices and compliance standards.
▫️ Provides out-of-the-box Ansible scripts to remediate problems efficiently.
▫️ Support multi-cloud environment - Amazon Web Services (AWS), Google Cloud Platform (GCP) and Microsoft Azure cloud service providers.
https://github.com/cloudmatos/Matos
21 579
email-header-analyzer
E-Mail header analyzer is a tool written in flask for parsing email headers and converting them to a human readable format and it also can:
▫️ Identify hop delays.
▫️ Identify the source of the email.
▫️ Identify hop country.
https://github.com/cyberdefenders/email-header-analyzer
21 579
CallMeWin32kDriver
Load your driver like win32k.sys
https://github.com/gmh5225/CallMeWin32kDriver
21 579
Repost from Pentesting Shop
Raspberry Pi Pico
Raspberry Pi Pico is a tiny, fast, and versatile board built using RP2040, the flagship microcontroller.
From light displays and IoT devices to signage and manufacturing processes, Raspberry Pi Pico gives you the power to control countless home, hobby, and industrial operations.
Programmable in C and MicroPython, Pico is adaptable to a vast range of applications and skill levels, and getting started is as easy as dragging and dropping a file.
More experienced users can take advantage of Raspberry Pi Pico's rich peripheral set, including SPI, I2C, and eight Programmable I/O (PIO) state machines for custom peripheral support.
Make a cheap but powerful USB Rubber Ducky with a Raspberry Pi Pico: https://github.com/dbisu/pico-ducky
Buy online:
🛒 https://ali.ski/ur1YN3
#raspberrypi #pico #rp2040
21 579
Nuclei Zimbra:)
Release of CVE-2022-37042 Zimbra Authentication Bypass Causing RCE Non-Destructive Vulnerability Detection Template.
https://github.com/projectdiscovery/nuclei-templates/pull/5134/files
#cve #nuclei
21 579
ScanReflectedXSS - Nuclei
This script allows to find XSS vulnerabilities with nuclei, taking advantage of this resource in its maximum analysis capacity.
In the community I have not seen XSS Fuzzing with nuclei in general, only focused on exploitations by CVE
https://github.com/HernanRodriguez1/ScanReflectedXSS
21 579
VLANPWN
DoubleTagging.py - This tool is designed to carry out a VLAN Hopping attack. As a result of injection of a frame with two 802.1Q tags, a test ICMP request will also be sent.
DTPHijacking.py - A script for conducting a DTP Switch Spoofing/Hijacking attack. Sends a malicious DTP-Desirable frame, as a result of which the attacker's machine becomes a trunk channel. The impact of this attack is that you can bypass the segmentation of VLAN networks and see all the traffic of VLAN networks.
https://github.com/in9uz/VLANPWN
21 579
