HackGit
Open in Telegram
The channel was created for cybersecurity specialists. • Offensive Security • RedTeam • Malware Research • BugBounty • OSINT • etc Disclaimer: t.me/hackgit/2082 Donations - Ads: t.me/hackgit/5423
Show more📈 Analytical overview of Telegram channel HackGit
Channel HackGit (@hackgit) in the English language segment is an active participant. Currently, the community unites 21 579 subscribers, ranking 4 526 in the Technologies & Applications category and 1 853 in the USA region.
📊 Audience metrics and dynamics
Since its creation on невідомо, the project has demonstrated rapid growth, gathering an audience of 21 579 subscribers.
According to the latest data from 02 March, 2025, the channel demonstrates stable activity. Although there has been a change in the number of participants by 19 over the last 30 days and by 0 over the last 24 hours, overall reach remains high.
- Verification status: Not verified
- Engagement rate (ER): The average audience engagement rate is 0%. Within the first 24 hours after publication, content typically collects N/A% reactions from the total number of subscribers.
- Post reach: On average, each post receives 0 views. Within the first day, a publication typically gains 0 views.
- Reactions and interaction: The audience actively supports content: the average number of reactions per post is 0.
📝 Description and content policy
The author describes the resource as a platform for expressing subjective opinions:
“The channel was created for cybersecurity specialists.
• Offensive Security
• RedTeam
• Malware Research
• BugBounty
• OSINT
• etc
Disclaimer:
t.me/hackgit/2082
Donations - Ads:
t.me/hackgit/5423”
Thanks to the high frequency of updates (latest data received on 11 November, 2026), the channel maintains relevance and a high level of publication reach. Analytics show that the audience actively interacts with content, making it an important point of influence in the Technologies & Applications category.
21 579
Subscribers
No data24 hours
-37 days
+1930 days
Posts Archive
21 579
CVE-2022-30190 Temporary Fix
These are two Python scripts compiled to easily and quickly apply temporary protection against the CVE-2022-30190 vulnerability (Follina)
Both can be programmed better, but this is just to implement it as quickly as possible and I did it with no much knowledge on Python, but the important is, it works! Hehe
https://github.com/SrCroqueta/CVE-2022-30190_Temporary_Fix
#Follina
21 579
DalFox
Powerful open source XSS scanning tool and parameter analyzer and utility that fast the process of detecting and verify XSS flaws. It comes with a powerful testing engine, many niche features for the cool hacker!
https://github.com/hahwul/dalfox
#web #xss
21 579
Repost from Pentesting News
A Survey of Windows RPC Discovery Tools
https://clearbluejar.github.io/posts/surveying-windows-rpc-discovery-tools
#tools #offensive #security
21 579
Toxssin
A POST-XSS exploitation tool.
Penetration testing tool that automates the process of exploiting Cross-Site Scripting (XSS) vulnerabilities. It consists of an https server that works as an interpreter for the traffic generated by the malicious JavaScript payload that powers this tool (toxin.js).
By default, toxssin intercepts:
▫️ cookies (if HttpOnly not present),
▫️ keystrokes,
▫️ paste events,
▫️ input change events,
▫️ file selections,
▫️ form submissions,
▫️ server responses,
▫️ table data (static as well as updates),
Most importantly, toxssin:
▫️ attempts to maintain XSS persistence while the user browses the website by intercepting server responses and re-writing the document,
▫️ supports session management, meaning that, you can use it to exploit reflected as well as stored XSS,
▫️ automatically logs every session.
https://github.com/t3l3machus/toxssin
21 579
Micro Backdoor for Windows
Micro Backdoor is C2 tool for Windows targets with easy customizable code base and small footprint. Micro Backdoor consists from server, client and dropper.
It wasn't designed as replacement for your favorite post-exploitation tools but rather as really minimalistic thing with all of the basic features in less than 5000 lines of code, client DLL size is less than 20Kb without compression.
https://github.com/Cr4sh/MicroBackdoor
#remote
21 579
Ffuf
A fast web fuzzer written in Go
Features:
▫️ Fast!
▫️ Allows fuzzing of HTTP header values, POST data, and different parts of URL, including GET parameter names and values
▫️ Silent mode (-s) for clean output that's easy to use in pipes to other processes.
▫️ Modularized architecture that allows integration with existing toolchains with reasonable effort
▫️ Easy-to-add filters and matchers (they are interoperable)
Research:
https://hakin9.org/ffuf-a-fast-web-fuzzer-written-in-go/
Demo:
https://asciinema.org/a/211350
https://asciinema.org/a/211360
#web #best
21 579
Aced
Aced is a tool to parse and resolve a single targeted Active Directory principal's DACL. Aced will identify interesting inbound access allowed privileges against the targeted account, resolve the SIDS of the inbound permissions, and present that data to the operator.
Additionally, the logging features of pyldapsearch have been integrated with Aced to log the targeted principal's LDAP attributes locally which can then be parsed by pyldapsearch's companion tool BOFHound to ingest the collected data into BloodHound.
https://github.com/garrettfoster13/aced
#ad
21 579
Ghost Framework
Android post-exploitation framework that exploits the Android Debug Bridge to remotely access an Android device.
https://github.com/EntySec/Ghost
21 579
HatSploit Framework
Modular penetration testing platform that enables you to write, test, and execute exploit code.
https://github.com/EntySec/HatSploit
21 579
Turbo VPN
Turbo VPN is a secure and fast VPN proxy to let you connect to unlimited free VPN servers with simple one tap.
▫️ Military-grade encryption
▫️ Bypass site-blocking to access any content you need.
▫️ Protect your privacy by surfing anonymously under WiFi hotspot.
▫️ Only one tap to connect and switch to any free VPN proxy fast and securely.
✅ Unlimited and free VPN
The best unlimited free VPN proxy for android. You can enjoy unlimited free VPN service and free VPN proxy servers anytime, anywhere.
✅ Access websites with secure Turbo VPN
Unblock sites and apps at super stable and fast VPN speed. Connect to Turbo VPN free vpn proxy servers, access geo-blocked content, forum, news, social network such as Twitter or Facebook, immediately.
✅ Anonymous connection by Turbo VPN
Turbo VPN protects your network under WiFi hotspot or any network condition. You can browse anonymously and securely without being tracked. Military-grade AES 128-bit encryption to secure WiFi hotspot. IPsec protocols and OpenVPN protocols(UDP / TCP) to mask your online identity. Secure your internet connection and guard your sensitive data wherever you are.
✅ Streaming and gaming with super fast VPN
Stream videos, live sports and TV shows on YouTube, Netflix without buffering. Listen to popular songs on any music player whenever you want. Improve your gaming experience with fast Turbo VPN servers.
✅ Turbo library is out now! Let's read all the free books together.
Relax and immerse yourself in the most exciting and addictive stories. Discover free novels on Turbo anytime, anywhere. Turbo VPN puts free eBooks at your fingertips. Find your favorite genre to read now!
✅ User-friendly VPN experience
One tap to connect to a free VPN proxy server. Turbo VPN works with WiFi, LTE, 3G, and all mobile data carriers.
Get Turbo VPN | 65% Off the secure, fast and free Turbo VPN! Secure your online activities and enjoy your favorite sites now!
#vpn
21 579
Turbo VPN
Turbo VPN is a secure and fast VPN proxy to let you connect to unlimited free VPN servers with simple one tap.
▫️ Unlimited and free VPN servers
▫️ Military-grade encryption
▫️ Bypass site-blocking to access any content you need.
▫️ Protect your privacy by surfing anonymously under WiFi hotspot.
▫️ Only one tap to connect and switch to any free VPN proxy fast and securely.
✅ Unlimited and free VPN
The best unlimited free VPN proxy for android. You can enjoy unlimited free VPN service and free VPN proxy servers anytime, anywhere.
✅ Access websites with secure Turbo VPN
Unblock sites and apps at super stable and fast VPN speed. Connect to Turbo VPN free vpn proxy servers, access geo-blocked content, forum, news, social network such as Twitter or Facebook, immediately.
✅ Anonymous connection by Turbo VPN
Turbo VPN protects your network under WiFi hotspot or any network condition. You can browse anonymously and securely without being tracked. Military-grade AES 128-bit encryption to secure WiFi hotspot. IPsec protocols and OpenVPN protocols(UDP / TCP) to mask your online identity. Secure your internet connection and guard your sensitive data wherever you are.
✅ Streaming and gaming with super fast VPN
Stream videos, live sports and TV shows on YouTube, Netflix without buffering. Listen to popular songs on any music player whenever you want. Improve your gaming experience with fast Turbo VPN servers.
✅ Turbo library is out now! Let's read all the free books together.
Relax and immerse yourself in the most exciting and addictive stories. Discover free novels on Turbo anytime, anywhere. Turbo VPN puts free eBooks at your fingertips. Find your favorite genre to read now!
✅ User-friendly VPN experience
One tap to connect to a free VPN proxy server. Turbo VPN works with WiFi, LTE, 3G, and all mobile data carriers.
Get Turbo VPN | 65% Off the secure, fast and free Turbo VPN! Secure your online activities and enjoy your favorite sites now!
#vpn
21 579
Pulsar
Pulsar is a tool for data exfiltration and covert communication that enable you to create a secure data transfer, a bizarre chat or a network tunnel through different protocols, for example you can receive data from tcp connection and resend it to real destination through DNS packets 🎉
https://github.com/jacopodl/Pulsar
21 579
Reconnaissance
Red Teaming reconnaissance Process Table of Contents
▫️ What is Reconnaissance? -2
▫️ MITRE ATT&CK Reconnaissance Techniques -3
▫️ Passive Recon Techniques -5 3.1 Gathering Domain IP/DNS Information 3.2 Gathering Domain/Website Information 3.3 Gathering Employee Information
▫️ Passive Subdomain Enumeration -9 4.1 Passive Subdomain Enumeration with Sublist3r 4.2 Subdomain Enumeration with Google Dorks
▫️ Active Recon Techniques -10 5.1 DNS Zone Transfers 5.2 Subdomain Brute-force 5.3 Port Scanning 5.4 Directory Brute-Force 5.5 Website Vulnerability Scanning
▫️ Automated Recon Frameworks -14 6.1 Automated Recon with Sn1per 6.2 Automated Recon with OWASP Amass
https://github.com/niraj98456/Reconnaissance
#redteam
21 579
confluencePot
ConfluencePot is a simple #honeypot for the Atlassian Confluence unauthenticated and remote OGNL injection vulnerability (CVE-2022-26134).
https://github.com/SIFalcon/confluencePot
21 579
DOMDig
DOMDig is a DOM XSS scanner that runs inside the Chromium web browser and it can scan single page applications (SPA) recursively.
Unlike other scanners, DOMDig can crawl any webapplication (including gmail) by keeping track of DOM modifications and XHR/fetch/websocket requests and it can simulate a real user interaction by firing events. During this process, XSS payloads are put into input fields and their execution is tracked in order to find injection points and the related URL modifications.
It is based on htcrawl, a node library powerful enough to easily crawl a gmail account.
KEY FEATURES
▫️ Runs inside a real browser (Chromium)
▫️ Recursive DOM crawling engine
▫️ Handles XHR, fetch, JSONP and websockets requests
▫️ Supports cookies, proxy, custom headers, http auth and more
▫️ Scriptable login sequences
https://github.com/fcavallarin/domdig
21 579
GoReplay
Network monitoring tool which can record your live traffic and use it for shadowing, load testing, monitoring and detailed analysis.
As your application grows, the effort required to test it also grows exponentially. GoReplay offers you the simple idea of reusing your existing traffic for testing, which makes it incredibly powerful. Our state of art technique allows you to analyze and record your application traffic without affecting it. This eliminates the risks that come with putting a third party component in the critical path.
GoReplay increases your confidence in code deployments, configuration and infrastructure changes.
GoReplay offers a unique approach for shadowing. Instead of being a proxy, GoReplay listens in the background for traffic on your network interfaces, requiring no changes in your production infrastructure, other than running GoReplay daemon on the same machine as your service.
https://github.com/buger/goreplay
21 579
21 579
