HackGit
Open in Telegram
The channel was created for cybersecurity specialists. • Offensive Security • RedTeam • Malware Research • BugBounty • OSINT • etc Disclaimer: t.me/hackgit/2082 Donations - Ads: t.me/hackgit/5423
Show more📈 Analytical overview of Telegram channel HackGit
Channel HackGit (@hackgit) in the English language segment is an active participant. Currently, the community unites 21 579 subscribers, ranking 4 526 in the Technologies & Applications category and 1 853 in the USA region.
📊 Audience metrics and dynamics
Since its creation on невідомо, the project has demonstrated rapid growth, gathering an audience of 21 579 subscribers.
According to the latest data from 02 March, 2025, the channel demonstrates stable activity. Although there has been a change in the number of participants by 19 over the last 30 days and by 0 over the last 24 hours, overall reach remains high.
- Verification status: Not verified
- Engagement rate (ER): The average audience engagement rate is 0%. Within the first 24 hours after publication, content typically collects N/A% reactions from the total number of subscribers.
- Post reach: On average, each post receives 0 views. Within the first day, a publication typically gains 0 views.
- Reactions and interaction: The audience actively supports content: the average number of reactions per post is 0.
📝 Description and content policy
The author describes the resource as a platform for expressing subjective opinions:
“The channel was created for cybersecurity specialists.
• Offensive Security
• RedTeam
• Malware Research
• BugBounty
• OSINT
• etc
Disclaimer:
t.me/hackgit/2082
Donations - Ads:
t.me/hackgit/5423”
Thanks to the high frequency of updates (latest data received on 03 March, 2025), the channel maintains relevance and a high level of publication reach. Analytics show that the audience actively interacts with content, making it an important point of influence in the Technologies & Applications category.
21 579
Subscribers
No data24 hours
-37 days
+1930 days
Posts Archive
21 579
asminject.py
A heavily-modified fork of David Buchanan's dlinject project. Injects arbitrary assembly (or precompiled binary) payloads directly into x86-64, x86, and ARM32 Linux processes by accessing /proc/<pid>/mem instead of attaching via ptrace.
Useful for tampering with trusted processes, certain post-exploitation scenarios, recovering content from process memory, and bypassing some security controls. Can inject into containerized processes from outside of the container, as long as you have root access on the host.
https://github.com/BishopFox/asminject
21 579
vDDoS Proxy Protection
Welcome to vDDoS, a HTTP(S) DDoS Protection Reverse Proxy.
https://github.com/duy13/vDDoS-Protection
21 579
AtomPePacker
A Highly Capable Pe Packer
Features :
▫️ the packer only support x64 exe's (altho planning to make x32 version but idk when it'll be done)
▫️ no crt imports
▫️ api hashing library ( custom getmodulehandle and getprocaddress )
▫️ direct syscalls ( for the part that i do the ntdll unhooking )
▫️ ntdll unhooking from \KnownDlls
▫️ support tls callbacks
▫️ support reallocation in case of needed ( the image is mapped to the preferable address first )
▫️ no rwx section allocation
▫️ support exception handling
▫️ uses elzma compression algorithm to do the compression (reducing the final file size)
▫️ its local run pe, so it support arguments
▫️ fake imported functions to add more friendly look to the iat
https://github.com/ORCx41/AtomPePacker
21 579
Monkey365
Monkey365 is an Open Source security tool that can be used to easily conduct not only Microsoft 365, but also Azure subscriptions and Azure Active Directory security configuration reviews without the significant overhead of learning tool APIs or complex admin panels from the start.
To help with this effort, Monkey365 also provides several ways to identify security gaps in the desired tenant setup and configuration. Monkey365 provides valuable recommendations on how to best configure those settings to get the most out of your Microsoft 365 tenant or Azure subscription.
https://github.com/silverhack/monkey365
21 579
CSRF PoC Generator
This HTML file creates a CSRF PoC form to any HTTP request.
▫️ HTTP or HTTPS radio button.
▫️ Auto submit form.
▫️ Other HTTP data types. (json, xml, multipart form data)
https://github.com/merttasci/csrf-poc-generator
21 579
teamserver
Shlyuz teamserver is the main component of the c2 that the operator interacts with. It provides interaction with the listening posts, and thus the implants, as well as issuing of commands to the artifact factory.
https://github.com/shlyuz/teamserver
21 579
DropBox-XPC-Exploit
Exploit for PID Reuse and Logical Error in DropBox's XPC service
https://github.com/Pwnrin/DropBox-XPC-Exploit
21 579
CVE-2022-40684
Remote Fortinet Code Exeuction vulnerability
On October 7, public reports began to circulate that Fortinet communicated directly with customers about a critical vulnerability in its FortiOS and FortiProxy products. This vulnerability, CVE-2022-40684, has been patched, but Fortinet has not released a full advisory yet via its Product Security Incident Response Team.
Fortinet usually follows a monthly release schedule for security advisories on the second Tuesday of every month, the same day as Microsoft’s Patch Tuesday. At the time this blog post was originally published, it remained to be seen whether Fortinet was going to follow the same schedule for the CVE-2022-40684 advisory.
https://github.com/CarlosV1e1ra/CVE-2022-40684-RCE-POC
#cve
21 579
RedTeam-OffensiveSecurity
Tools & Interesting Things for RedTeam Ops
https://github.com/bigb0sss/RedTeam-OffensiveSecurity
21 579
sysmon-config
Advanced Sysmon ATT&CK configuration
https://github.com/ion-storm/sysmon-config
21 579
HavocNotion
A simple ExternalC2 POC for Havoc C2. Communicates over Notion using a custom python agent, handler and extc2 channel.
Not meant to be a usable agent, just a PoC to understand how Havoc C2's ExternalC2 interface works. Accompanying blogpost upcoming and will be linked here eventually.
https://github.com/CodeXTF2/HavocNotion
21 579
CallStackSpoofer
This repository demonstrates a PoC implementation to spoof arbitrary call stacks when making system calls. For a full technical walkthrough please see the accompanying blog post here
https://github.com/WithSecureLabs/CallStackSpoofer
21 579
Linux Privilege Escalation Cheatsheet
This cheatsheet is aimed at the OSCP aspirants to help them understand the various methods of Escalating Privilege on Linux based Machines and CTFs with examples.
There are multiple ways to perform the same tasks. We have performed and compiled this list based on our experience. Please share this with your connections and direct queries and feedback to Hacking Articles.
https://github.com/Ignitetechnologies/Linux-Privilege-Escalation
t.me/hackgit
21 579
TickTock
This repository demonstrates a PoC memory scanner for enumerating timer-queue timers as used in Ekko Sleep Obfuscation
https://github.com/WithSecureLabs/TickTock
Details:
https://labs.withsecure.com/publications/hunting-for-timer-queue-timers
21 579
ShadowSpray
A tool to spray Shadow Credentials across an entire domain in hopes of abusing long forgotten GenericWrite/GenericAll DACLs over other objects in the domain.
https://github.com/Dec0ne/ShadowSpray
21 579
CVE-2022-41040-POC
Server Side Request Forgery (SSRF) in Microsoft Exchange Server
https://github.com/kljunowsky/CVE-2022-41040-POC
#cve
21 579
Repost from Pentesting News
Lsass-Shtinkering dump lsass tool
https://github.com/JDArmy/Lsass-Shtinkering
