HackGit
Open in Telegram
The channel was created for cybersecurity specialists. • Offensive Security • RedTeam • Malware Research • BugBounty • OSINT • etc Disclaimer: t.me/hackgit/2082 Donations - Ads: t.me/hackgit/5423
Show more📈 Analytical overview of Telegram channel HackGit
Channel HackGit (@hackgit) in the English language segment is an active participant. Currently, the community unites 21 579 subscribers, ranking 4 526 in the Technologies & Applications category and 1 853 in the USA region.
📊 Audience metrics and dynamics
Since its creation on невідомо, the project has demonstrated rapid growth, gathering an audience of 21 579 subscribers.
According to the latest data from 02 March, 2025, the channel demonstrates stable activity. Although there has been a change in the number of participants by 19 over the last 30 days and by 0 over the last 24 hours, overall reach remains high.
- Verification status: Not verified
- Engagement rate (ER): The average audience engagement rate is 0%. Within the first 24 hours after publication, content typically collects N/A% reactions from the total number of subscribers.
- Post reach: On average, each post receives 0 views. Within the first day, a publication typically gains 0 views.
- Reactions and interaction: The audience actively supports content: the average number of reactions per post is 0.
📝 Description and content policy
The author describes the resource as a platform for expressing subjective opinions:
“The channel was created for cybersecurity specialists.
• Offensive Security
• RedTeam
• Malware Research
• BugBounty
• OSINT
• etc
Disclaimer:
t.me/hackgit/2082
Donations - Ads:
t.me/hackgit/5423”
Thanks to the high frequency of updates (latest data received on 03 March, 2025), the channel maintains relevance and a high level of publication reach. Analytics show that the audience actively interacts with content, making it an important point of influence in the Technologies & Applications category.
21 579
Subscribers
No data24 hours
-37 days
+1930 days
Posts Archive
21 579
octosuite
A framework fro gathering osint on GitHub users, repositories and organizations
https://github.com/bellingcat/octosuite
#OSINT
21 579
Pyramid
Pyramid is a set of Python scripts and module dependencies that can be used to evade EDRs.
The main purpose of the tool is to perform offensive tasks by leveraging some Python evasion properties and looking as a legit Python application usage.
https://github.com/naksyn/Pyramid
21 579
Blackhoodie
Malware Development 101
Slides and samples used for the Malware Development 101 workshop in the "Blackhoodie Virtual 2022"
https://github.com/xalicex/blackhoodie_maldev101_2022
21 579
heap_detective
This tool uses the taint analysis technique for static analysis and aims to identify points of heap memory usage vulnerabilities in C and C++ languages. The tool uses a common approach in the first phase of static analysis, using tokenization to collect information.
The second phase has a different approach to common lessons of the legendary dragon book, yes the tool doesn't use AST or resources like LLVM following parsers' and standard tips. The approach present aims to study other ways to detect vulnerabilities, using custom vector structures and typical recursive traversal with ranking following taint point. So the result of the sum of these techniques is the Heap_detective.
The tool follows the KISS principle "Keep it simple, stupid!". There's more than one way to do a SAST tool, I know that. Yes, I thought to use graph database or AST, but this action cracked the KISS principle in the context of this project.
Features:
▫️ C and C++ tokenizer
▫️ List of heap static routes for each source with taint points for analysis
▫️ Analyser to detect double free vulnerability
▫️ Analyser to detect use after free vulnerability
https://github.com/CoolerVoid/heap_detective
21 579
Android-Deeplink-Parser
This Script can be used to Parse the AndroidManifest.xml and Strings.xml to List the all deeplinks of the android application
https://github.com/Shapa7276/Android-Deeplink-Parser
21 579
otp
One Time Password utilities Go / Golang
One Time Passwords (OTPs) are an mechanism to improve security over passwords alone. When a Time-based OTP (TOTP) is stored on a user's phone, and combined with something the user knows (Password), you have an easy on-ramp to Multi-factor authentication without adding a dependency on a SMS provider. This Password and TOTP combination is used by many popular websites including Google, GitHub, Facebook, Salesforce and many others.
The otp library enables you to easily add TOTPs to your own application, increasing your user's security against mass-password breaches and malware.
https://github.com/pquerna/otp
21 579
Repost from Pentesting Shop
Proxmark3
The Proxmark3 is the swiss-army tool of RFID, allowing for interactions with the vast majority of RFID tags on a global scale. Originally built by Jonathan Westhues, the device is now the goto tool for RFID Analysis for the enthusiast.
Iceman repository is considered to be the pinnacle of features and functionality, enabling a huge range of extremely useful and convenient commands and LUA scripts to automate chip identification, penetration testing, and programming.
https://github.com/RfidResearchGroup/proxmark3
Buy online:
RDV2 🛒 https://amzn.to/3OND3hK
RDV3 Easy 🛒 https://amzn.to/3GYfhNV
RDV4 BlueShark 🛒 https://t.me/PentestingShop/95
RDV4.01 KIT 🛒 https://ali.ski/6_p9Xk
#rfid #nfc
21 579
EvilTree
A standalone python3 remake of the classic "tree" command with the additional feature of searching for user provided keywords/regex in files, highlighting those that contain matches.
Created for two main reasons:
▫️ While searching for secrets in files of nested directory structures, being able to visualize which files contain user provided keywords/regex patterns and where those files are located in the hierarchy of folders, provides a significant advantage.
▫️ "tree" is an amazing tool for analyzing directory structures. It's really handy to have a standalone alternative of the command for post-exploitation enumeration as it is not pre-installed on every linux distro and is kind of limited on Windows (compared to the UNIX version).
https://github.com/t3l3machus/eviltree
21 579
Ransomwhere
A Proof of Concept #ransomware sample that encrypts your files to test out your ransomware detection & prevention strategies. If no arguments are provided, ransomwherewill automatically execute the encrypt mode without deleting the original files.
https://github.com/hazcod/ransomwhere
21 579
wwwtree
A utility for quickly and easily locating, web hosting and transferring resources (e.g., exploits/enumeration scripts) from your filesystem to a victim machine during privilege escalation.
https://github.com/t3l3machus/wwwtree
Video Presentation:
https://www.youtube.com/watch?v=iog-eb_N0Hg
21 579
Services
Main goal - let disable/stop serviceses like WinDefend, which inot easy task from "mmc services.msc" - need have 'NT SERVICE\WinDefend' AND 'NT SERVICE\TrustedInstaller' sids in token.
https://github.com/rbmm/Services
21 579
Repost from Pentesting Shop
SharkTapUSB Ethernet Sniffer
The SharkTap allows you to sniff an Ethernet link without using an Ethernet port on your PC. This is ideal for newer portables without an Ethernet jack, but is also a benefit if you don’t want to switch a port between network and debugging purposes.
A 'Test Access Port' allows you to see the packets on an ethernet link. Directly supports 10-, 100- or 1000Base-T links.
Intended to be used with the open source Wireshark program, or equivalent.
The Gen2 SharkTapUSB features 'carbon copy' copper repeater technology for minimum impact on the monitored network. The carbon copies of bi-directional data are aggregated onto a single wired or USB Test Access Port (TAP)
Power-over-ethernet pass through. (For power-fail bypass, search "SharkTapBYP") 750mA current. Non-conductive plastic cover. Auto cross-over for cables.
Buy online:
🛒 https://amzn.to/3VerYIQ
#sniffer #lan #ethernet #usb
21 579
Purpose
Some simple IP lists to use in firewall tools like pfBlockerNG. These lists exist elsewhere but may not be in a format that is useable for me.
I primarily use these lists to block grey noise in my firewall log
https://github.com/SilvrrGIT/IP-Lists
21 579
A.S.L
Free Windows software
Detect packer , compiler , protector , .NET obfuscator
or
Binary packed data : rar , zip , iso , 7zip , zx , sqz , lz4 , img , ...
https://github.com/ExeinfoASL/ASL
21 579
Malware-Detection-Tools
A list of awesome malware detection tools
https://github.com/Reza-saeedi/Malware-Detection-Tools
21 579
Malware Samples
This repository is intended to provide access to a wide variety of malicious files and other artifacts.
https://github.com/jstrosch/malware-samples
21 579
Pafish
Pafish is a testing tool that uses different techniques to detect virtual machines and malware analysis environments in the same way that malware families do.
https://github.com/a0rtega/pafish
21 579
YARA in a nutshell
YARA is a tool aimed at (but not limited to) helping malware researchers to identify and classify malware samples. With YARA you can create descriptions of malware families (or whatever you want to describe) based on textual or binary patterns. Each description, a.k.a. rule, consists of a set of strings and a boolean expression which determine its logic. Let's see an example:
https://github.com/VirusTotal/yara
21 579
CVE-2022-22971
Spring Framework DoS with STOMP over WebSocket
https://github.com/tchize/CVE-2022-22971
#cve
