HackGit
Open in Telegram
The channel was created for cybersecurity specialists. • Offensive Security • RedTeam • Malware Research • BugBounty • OSINT • etc Disclaimer: t.me/hackgit/2082 Donations - Ads: t.me/hackgit/5423
Show more📈 Analytical overview of Telegram channel HackGit
Channel HackGit (@hackgit) in the English language segment is an active participant. Currently, the community unites 21 579 subscribers, ranking 4 526 in the Technologies & Applications category and 1 853 in the USA region.
📊 Audience metrics and dynamics
Since its creation on невідомо, the project has demonstrated rapid growth, gathering an audience of 21 579 subscribers.
According to the latest data from 02 March, 2025, the channel demonstrates stable activity. Although there has been a change in the number of participants by 19 over the last 30 days and by 0 over the last 24 hours, overall reach remains high.
- Verification status: Not verified
- Engagement rate (ER): The average audience engagement rate is 0%. Within the first 24 hours after publication, content typically collects N/A% reactions from the total number of subscribers.
- Post reach: On average, each post receives 0 views. Within the first day, a publication typically gains 0 views.
- Reactions and interaction: The audience actively supports content: the average number of reactions per post is 0.
📝 Description and content policy
The author describes the resource as a platform for expressing subjective opinions:
“The channel was created for cybersecurity specialists.
• Offensive Security
• RedTeam
• Malware Research
• BugBounty
• OSINT
• etc
Disclaimer:
t.me/hackgit/2082
Donations - Ads:
t.me/hackgit/5423”
Thanks to the high frequency of updates (latest data received on 11 November, 2026), the channel maintains relevance and a high level of publication reach. Analytics show that the audience actively interacts with content, making it an important point of influence in the Technologies & Applications category.
21 579
Subscribers
No data24 hours
-37 days
+1930 days
Posts Archive
21 579
HijackLibs
This project aims to keep a record of publicly disclosed DLL Hijacking opportunities.
You can find the web version of this repository on https://www.hijacklibs.net
https://github.com/wietze/HijackLibs
#dll #hijack #redteam
21 579
CVE-2022-30216
Authentication coercion of the Windows “Server” service
https://github.com/akamai/akamai-security-research/tree/main/cve-2022-30216
Research:
https://www.akamai.com/blog/security/authentication-coercion-windows-server-service
#windows #cve
21 579
Agnee
Find sensitive information using dorks from different search-engines.
https://github.com/R0X4R/Agnee
21 579
python-keylogger
Simple Python Keylogger with Pynput Sending data to a server
https://github.com/davidbombal/python-keylogger
21 579
QueenSono
A Golang Package for Data Exfiltration with ICMP protocol.
QueenSono tool only relies on the fact that ICMP protocol isn't monitored. It is quite common.
It could also been used within a system with basic ICMP inspection (ie. frequency and content length watcher) or to bypass authentication step with captive portal (used by many public Wi-Fi to authenticate users after connecting to the Wi-Fi e.g Airport Wi-Fi).
Try to imitate PyExfil (and others) with the idea that the target machine does not necessary have python installed (so provide a binary could be useful)
https://github.com/ariary/QueenSono
21 579
Threatest
A Go framework for testing threat detection end-to-end.
Threatest allows you to detonate an attack technique, and verify that the alert you expect was generated in your favorite security platform.
A detonator describes how and where an attack technique is executed.
Supported detonators:
▫️ Local command execution
▫️ SSH command execution
▫️ Stratus Red Team
▫️ AWS detonator
https://github.com/datadog/threatest
Read the announcement blog post:
https://securitylabs.datadoghq.com/articles/threatest-end-to-end-testing-threat-detection/
21 579
Black Hat USA 2022 Presentation Materials
Presentation materials for my Black Hat USA 2022 Briefing and Arsenal talks
https://github.com/h4wkst3r/Blackhat-USA-2022-Materials
21 579
Bypass-Sandbox-Evasion
Bypass Malware sandbox evasion Ram check.
https://github.com/ZeroMemoryEx/Bypass-Sandbox-Evasion
21 579
blackhat-usa-2022-demos
▫️ Silver ticket with password.
▫️ Silver ticket U2U.
▫️ Silver ticket with buffer type confusion.
▫️ KDC pinning and BYOKDC
▫️ S4U2Self
▫️ UAC bypass
https://github.com/tyranid/blackhat-usa-2022-demos
21 579
Azure AD Exporter
The Azure AD Exporter is a PowerShell module that allows you to export your Azure AD and Azure AD B2C configuration settings to local .json files.
This module can be run as a nightly scheduled task or a DevOps component (Azure DevOps, GitHub, Jenkins) and the exported files can be version controlled in Git or SharePoint.
This will provide tenant administrators with a historical view of all the settings in the tenant including the change history over the years.
https://github.com/microsoft/azureadexporter
21 579
MemoryRanger
Updated MemoryRanger: Hijacking Is Not An Option
Blasting Event-Driven Cornucopia: WMI-based User-Space Attacks Blind SIEMs and EDRs
MemoryRanger protects kernel data and code by running drivers and hosting data in isolated kernel enclaves using VT-x/EPT features:
▫️ Hijacking of NTFS structures gains an unauthorized access to files opened without shared access by patching Stream Control Block structures;
▫️ Handle Hijacking Attack provides illegal access to exclusively open files via patching handle table entries;
▫️ Token Hijacking Attack is designed to elevate the process privileges without using token-swapping technique;
https://github.com/IgorKorkin/MemoryRanger
21 579
BadBlood
BadBlood by Secframe fills a Microsoft Active Directory Domain with a structure and thousands of objects. The output of the tool is a domain similar to a domain in the real world.
After BadBlood is ran on a domain, security analysts and engineers can practice using tools to gain an understanding and prescribe to securing Active Directory. Each time this tool runs, it produces different results. The domain, users, groups, computers and permissions are different. Every. Single. Time.
https://github.com/davidprowe/BadBlood
#ad
21 579
Repost from Pentesting Shop
Orange Pi 3 LTS
Orange Pi 3 LTS is as $35 single-board PC with Allwinner H6, 2GB RAM, 8GB storage.
The Orange Pi 3 LTS is a Raspberry Pi-sized single-board computer powered by an Allwinner H6 processor, which is a 1.8 GHz quad-core ARM Cortex-A53 chip with Mali-T720 graphics. The little computer also has 2GB of LPDDR3 memory, 8GB of eMMC storage, a microSD card reader, and support for WiFi 5 and Bluetooth 5.0.
The new board measures 85 x 56mm (3.4″ x 2.2″), which makes it a little smaller than the previous model, which was 93.5 x 60mm (3.7″ x 2.4″). It has the same processor and basic specs, but the manufacturer has updated the wireless card, replaced the micro USB port with a USB-C port, removed the mPCIe support, and reduced the number of USB Type-A ports.
But the Orange Pi 3 LTS still has a pretty decent selection of I/O options including:
▫️ 1 x USB 3.0 Type-A
▫️ 2 x USB 2.0 Type-A
▫️ 1 x Gigabit Ethernet
▫️ 1 x HDMI 2.0
▫️ 1 x 3.5mm audio
▫️ 26-pin connector with GPIO, I2C, SPI, and UART
▫️ IR receiver for optional remote control
The board should support Android 9 as well as GNU/Linux distributions including Ubuntu and Debian (Kali Linux).
Buy online:
🛒 https://ali.ski/kh-EIS
#orangepi #minipc
21 579
CVE-2022-27255
Realtek eCos SDK SIP ALG buffer overflow.
https://github.com/infobyte/cve-2022-27255
#cve
21 579
CVE-2022-27925-PoC
Zimbra RCE simple poc
https://github.com/vnhacker1337/CVE-2022-27925-PoC
#cve #poc
21 579
Cobalt Strike Token Vault
This Beacon Object File (BOF) creates in-memory storage for stolen/duplicated Windows access tokens allow you to:
▫️ Hot swap/re-use already stolen tokens without re-duplicating.
▫️ Store tokens for later use in case of a person log out.
https://github.com/Henkru/cs-token-vault
#ad #tokens #c2 #cobalt #redteam
21 579
SharpSCCM
SharpSCCM is a post-exploitation tool designed to leverage Microsoft Endpoint Configuration Manager (a.k.a. ConfigMgr, formerly SCCM) for lateral movement and credential gathering without requiring access to the SCCM administration console GUI.
Please visit the wiki for documentation detailing how to build and use SharpSCCM.
https://github.com/Mayyhem/SharpSCCM
21 579
CVE-2022-36446
A Python script to exploit CVE-2022-36446 Software Package Updates RCE (Authenticated) on Webmin < 1.997.
▫️ Supports HTTP and HTTPS (even with self-signed certificates with --insecure).
▫️ Single command execution with --command option.
▫️ Interactive console with --interactive option.
https://github.com/p0dalirius/CVE-2022-36446-Webmin-Software-Package-Updates-RCE
#cve #exploit
21 579
PrivescCheck
This script aims to enumerate common Windows configuration issues that can be leveraged for local privilege escalation. It also gathers various information that might be useful for exploitation and/or post-exploitation.
https://github.com/itm4n/PrivescCheck
#windows #privesc #enumeration #powershell
