HackGit
Open in Telegram
The channel was created for cybersecurity specialists. • Offensive Security • RedTeam • Malware Research • BugBounty • OSINT • etc Disclaimer: t.me/hackgit/2082 Donations - Ads: t.me/hackgit/5423
Show more📈 Analytical overview of Telegram channel HackGit
Channel HackGit (@hackgit) in the English language segment is an active participant. Currently, the community unites 21 579 subscribers, ranking 4 526 in the Technologies & Applications category and 1 853 in the USA region.
📊 Audience metrics and dynamics
Since its creation on невідомо, the project has demonstrated rapid growth, gathering an audience of 21 579 subscribers.
According to the latest data from 02 March, 2025, the channel demonstrates stable activity. Although there has been a change in the number of participants by 19 over the last 30 days and by 0 over the last 24 hours, overall reach remains high.
- Verification status: Not verified
- Engagement rate (ER): The average audience engagement rate is 0%. Within the first 24 hours after publication, content typically collects N/A% reactions from the total number of subscribers.
- Post reach: On average, each post receives 0 views. Within the first day, a publication typically gains 0 views.
- Reactions and interaction: The audience actively supports content: the average number of reactions per post is 0.
📝 Description and content policy
The author describes the resource as a platform for expressing subjective opinions:
“The channel was created for cybersecurity specialists.
• Offensive Security
• RedTeam
• Malware Research
• BugBounty
• OSINT
• etc
Disclaimer:
t.me/hackgit/2082
Donations - Ads:
t.me/hackgit/5423”
Thanks to the high frequency of updates (latest data received on 11 November, 2026), the channel maintains relevance and a high level of publication reach. Analytics show that the audience actively interacts with content, making it an important point of influence in the Technologies & Applications category.
21 579
Subscribers
No data24 hours
-37 days
+1930 days
Posts Archive
21 579
Paragon
Paragon is a #RedTeam engagement platform. It aims to unify offensive tools behind a simple UI, abstracting much of the backend work to enable operators to focus on writing implants and spend less time worrying about databases and css.
The repository also provides some offensive tools already integrated with Paragon that can be used during engagements.
Features:
▫️ Easily integrate custom tools to unify operations behind a single interface
▫️ Query the Red Team knowledge graph using a provided GraphQL API
▫️ Event emission for low latency automation and real time processing
▫️ Python-like scripting language for deployments, post-exploitation, and more
▫️ Cross-platform implants & deployment included
▫️ Record operator activity to conviniently aggregate into a post-engagement report for review
https://github.com/KCarretto/paragon
21 579
CrackerJack
Web GUI for #Hashcat developed in #Python.
Features:
▫️ Web interface for mask generation (?a?l?u).
▫️ Web Push notifications when a password is cracked.
▫️ Swagger 2.0 API.
▫️ Create wordlists from already cracked passwords and feedback into the cracking session.
▫️ Session history to track which attacks you have already performed.
▫️ Multi-user support (local and/or LDAP).
▫️ Wordlist/Mask/Rule support.
https://github.com/ctxis/crackerjack
21 579
haxx
Untethered + Unsandboxed code execution haxx as root on iOS 14 - iOS 14.8.1.
https://github.com/asdfugil/haxx
21 579
PE-infector
Crossplatform tool for inject shellcode into .exe binaries (x86 and 64).
https://github.com/MastMind/PE-infector
21 579
PostDump
PostDump is a C# tool developt by COS team (Cyber Offensive and Security) of POST Luxembourg.
It is yet another simple tool to perform a memory dump (lsass) using several technics to bypass EDR hooking and lsass protection.
Unlike tools like EDRSandBlast, it focused on unhooking only functions stricly required in order to dump the memory, thus done by using DInvoke to map required unhooked DLL. With an exception for NtReadVirtualMemory which is dynamicly patched if hook is detected.
Project in constant improvement (hook detection, direct syscalls).
https://github.com/post-cyberlabs/Offensive_tools/tree/main/PostDump
21 579
Repost from N/a
Doenerium
Fully undetected #stealer (0/67)
▫️ Exodus wallet injection (get the password whenever the user logs in the wallet)
▫️ More grabbers (VPN's, Gaming, Messengers)
▫️ Keylogger
▫️ Growtopia stealer
▫️ Discord bot to build within discord ($build <webhook_url>)
▫️ Dynamic encryption
https://github.com/doener2323/doenerium
21 579
Chisel-Strike
A .NET XOR encrypted cobalt strike aggressor implementation for chisel to utilize faster proxy and advanced socks5 capabilities.
https://github.com/m3rcer/Chisel-Strike
21 579
family-of-client-ids-research
Abusing Family Refresh Tokens for Unauthorized Access and Persistence in Azure Active Directory
▫️ Ryan Marcotte Cobb, CTU Special Operations
▫️ Tony Gore, CTU Special Operations
Undocumented functionality in Azure Active Directory allows a group of Microsoft OAuth client applications to obtain special “family refresh tokens,” which can be redeemed for bearer tokens as any other client in the family. We will discuss how this functionality was uncovered, the mechanism behind it, and various attack paths to obtain family refresh tokens.
We will demonstrate how this functionality can be abused to access sensitive data. Lastly, we will share relevant information to mitigate the theft of family refresh tokens.
https://github.com/secureworks/family-of-client-ids-research
#ad
21 579
AD description password finder
The purpose of this tool is to check if passwords are stored in clear text in the description of Active Directory accounts.
https://github.com/AssuranceMaladieSec/AD-description-password-finder
#ad
21 579
OWASP Mobile Security Testing Guide (MSTG)
This is the official GitHub Repository of the OWASP Mobile Security Testing Guide (MSTG). The MSTG is a comprehensive manual for mobile app security testing and reverse engineering.
It describes technical processes for verifying the controls listed in the OWASP Mobile Application Verification Standard (MASVS).
📖 Read it on Gitbook
⬇️ Download the latest PDF
✅ Get the latest Mobile App Security Checklists
⚡️ Contribute!
💥 Play with our Crackmes
https://github.com/OWASP/owasp-mstg
21 579
Grawler
The best tool ever, made for automating google dorks it's a tool written in PHP which comes with a web interface that automates the task of using google dorks, scrapes the results, and stores them in a file, version 1.0 is the more powerful than ever supporting multiple proxies.
https://github.com/A3h1nt/Grawler
21 579
CVE-2022-29554
Mishandling of Input to API in PrintixService.exe
https://github.com/ComparedArray/printix-CVE-2022-29554
#exploit #cve
21 579
Repost from Pentesting Shop
USB Ninja Cable
USB Ninja is an information security and penetration testing tool that looks and functions just like a regular USB cable (both power and data) until a wireless remote control triggers it to deliver your choice of attack payload to the host machine. In essence, USB Ninja is the next step in the evolution of BadUSB, embedding the attack in the USB cable itself.
Emulating keyboard and mouse actions, payloads can be completely customized and can be highly targeted. Undetectable by firewalls, AV software (depending on payload of course) or visual inspection, the USB Ninja is an ideal tool for penetration testers, police and government.
Official documentation.
USB Ninja Cable:
🛒 https://ali.ski/7q4-ex
Wireless trigger device for the USB Ninja. Can trigger two different payloads via toggle buttons. Accepts RP-SMA antennas if you want greater distances for remote payload triggering.
USB Ninja Bluetooth Remote:
https://ali.ski/c_5OXw
#usb #badusb
21 579
Repost from N/a
KIZAGAN
A python backdoor(Remote Access Trojan) and it can take camera pictures,screenshots,getting microphone sounds... etc.
https://github.com/st4inl3s5/kizagan
#rat
21 579
Repost from Pentesting News
MITRE ATT&CK
Version 11.3 added tactics and methods for Android/iOS mobile devices
MITRE ATT&CK® is a globally-accessible knowledge base of adversary tactics and techniques based on real-world observations. The ATT&CK knowledge base is used as a foundation for the development of specific threat models and methodologies in the private sector, in government, and in the cybersecurity product and service community.
With the creation of ATT&CK, MITRE is fulfilling its mission to solve problems for a safer world — by bringing communities together to develop more effective cybersecurity. ATT&CK is open and available to any person or organization for use at no charge.
https://attack.mitre.org/versions/v11
#redteam
21 579
CVE-2022-33980
Apache Commons Configuration-RCE
https://github.com/tangxiaofeng7/CVE-2022-33980-Apache-Commons-Configuration-RCE
#exploit
21 579
Faceboom
Social Engineering Application for #Facebook.
How does it work?
▫️ Faceboom is social engineering application, User can only hack the victim's account if they are good at guessing and assuming other people's trades and values.
▫️ It uses a wordlist to perform a successful hack, all the way the user has to update the wordlist.txt file which is already provided to make a hack attempt.
https://github.com/thehassantahir/Faceboom
