HackGit
Open in Telegram
The channel was created for cybersecurity specialists. • Offensive Security • RedTeam • Malware Research • BugBounty • OSINT • etc Disclaimer: t.me/hackgit/2082 Donations - Ads: t.me/hackgit/5423
Show more📈 Analytical overview of Telegram channel HackGit
Channel HackGit (@hackgit) in the English language segment is an active participant. Currently, the community unites 21 579 subscribers, ranking 4 526 in the Technologies & Applications category and 1 853 in the USA region.
📊 Audience metrics and dynamics
Since its creation on невідомо, the project has demonstrated rapid growth, gathering an audience of 21 579 subscribers.
According to the latest data from 02 March, 2025, the channel demonstrates stable activity. Although there has been a change in the number of participants by 19 over the last 30 days and by 0 over the last 24 hours, overall reach remains high.
- Verification status: Not verified
- Engagement rate (ER): The average audience engagement rate is 0%. Within the first 24 hours after publication, content typically collects N/A% reactions from the total number of subscribers.
- Post reach: On average, each post receives 0 views. Within the first day, a publication typically gains 0 views.
- Reactions and interaction: The audience actively supports content: the average number of reactions per post is 0.
📝 Description and content policy
The author describes the resource as a platform for expressing subjective opinions:
“The channel was created for cybersecurity specialists.
• Offensive Security
• RedTeam
• Malware Research
• BugBounty
• OSINT
• etc
Disclaimer:
t.me/hackgit/2082
Donations - Ads:
t.me/hackgit/5423”
Thanks to the high frequency of updates (latest data received on 11 November, 2026), the channel maintains relevance and a high level of publication reach. Analytics show that the audience actively interacts with content, making it an important point of influence in the Technologies & Applications category.
21 579
Subscribers
No data24 hours
-37 days
+1930 days
Posts Archive
21 579
Vajra
An automated web #hacking framework for web applications.
Vajra is an automated web hacking framework to automate boring recon tasks and same scans for multiple target during web applications penetration testing. Vajra has highly customizable target scope based scan feature. Instead of running all the scan on target, it runs only those scan selected by you which will minimize unnecessary traffic and stores output in one place at CouchDB.
Vajra uses most common open source tools which every Bug Hunter runs during their testing on target. It does all the stuffs through web browser with very simple UI that makes it absolute beginner friendly framework.
Analyzing your data from scan result is very important in Bug Bounty. The chances of missing anything is less only if you could visualize your data in proper way and Vajra does so with a lot of filters.
https://github.com/r3curs1v3-pr0xy/vajra
Detailed insight about Vajra can be found at
https://hackwithproxy.medium.com/introducing-vajra-an-advanced-web-hacking-framework-bd8307a01aa8
21 579
WebClient Service Scanner
Python tool to Check running WebClient services on multiple targets
https://github.com/Hackndo/WebclientServiceScanner
From RPC to RCE - Workstation Takeover via RBCD and MS-RPChoose-Your-Own-Adventure
https://gist.github.com/gladiatx0r/1ffe59031d42c08603a3bde0ff678feb
21 579
Admin Panel Finder
A #burp suite extension that enumerates infrastructure and application Admin Interfaces.
▫️ Multi-thread
▫️ Different and configurable levels of test.
▫️ Includable status codes
▫️ Excludable status codes
▫️ More than 1000 built-in payloads.
▫️ You can load your dictionary.
▫️ Editable root directory
▫️ Automatic detection of used technologies to generate custom payloads.
▫️ Passive listening to find login pages.
https://github.com/moeinfatehi/Admin-Panel_Finder
21 579
WinRing0-poc
Proof-of-concept exploit for WinRing0.
https://github.com/Exploitables/WinRing0-poc
#exploit #cve
21 579
DNS_Tunneling
DNS Tunneling using powershell to download and execute a payload. Works in CLM.
https://github.com/Octoberfest7/DNS_Tunneling
21 579
Vytal
Spoof your location data and user agent.
Vytal can spoof your timezone, locale, geolocation and user agent. This data can be used to track you or reveal your location.
Most extensions that provide anti-fingerprinting features rely on content scripts to inject script tags into webpages. There are many limitations to script tag injections which you can read about here: https://palant.info/2020/12/10/how-anti-fingerprinting-extensions-tend-to-make-fingerprinting-easier/
Vytal utilizes the chrome.debugger API to spoof this data. This allows the data to be spoofed in frames, web workers and during the initial loading of a website. It also makes the spoofing completely undetectable.
You can test and compare Vytal and other extensions on https://vytal.io
Vytal contains no ads and signup is not required.
https://github.com/z0ccc/Vytal
Chrome:
https://chrome.google.com/webstore/detail/vytal/ncbknoohfjmcfneopnfkapmkblaenokb
#privacy
21 579
RiskScanner
Open source multi-cloud security compliance scanning platform, Based on Cloud Custodian、Prowler and Nuclei engines, it realizes security compliance scanning and vulnerability scanning of mainstream public (private) cloud resources.
https://github.com/riskscanner/riskscanner/blob/master/README_EN.md
21 579
COFFInjector
A Proof of Concept code - loading and injecting MSVC object file.
https://github.com/0xpat/COFFInjector
Research:
https://0xpat.github.io/Malware_development_part_8/
21 579
Trivy
Comprehensive security scanner. It is reliable, fast, extremely easy to use, and it works wherever you need it.
Trivy has different scanners that look for different security issues, and different targets where it can find those issues.
Targets:
▫️ Container Image
▫️ Filesystem
▫️ Git repository (remote)
▫️ Kubernetes cluster or resource
Scanners:
▫️ OS packages and software dependencies in use (SBOM)
▫️ Known vulnerabilities (CVEs)
▫️ IaC misconfigurations
▫️ Sensitive information and secrets
https://github.com/aquasecurity/trivy
#blueteam
21 579
CVE-2022-23642
PoC for Sourcegraph Gitserver 3.37.0 RCE
Sourcegraph prior to 3.37.0 has a remote code execution vulnerability on its gitserver service. This is due to lack of restriction on git config execution thus "core.sshCommand" can be passed on the HTTP arguments which can contain arbitrary bash commands. Note that this is only possible if gitserver is exposed to the attacker.
https://github.com/Altelus1/CVE-2022-23642
Research:
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-23642
#exploit #cve
21 579
CVE-2022-24806/CVE-2022-24807
Unauthenticated RCE vulnerability in Magento and Adobe Commerce
https://github.com/oturu/CVE-2022-24806-MASS-RCE
#cve
21 579
laz-y
Automating payload generation for OSEP labs and exam. This tool generates x86 and x64 HTTPS staged meterpreter shellcodes, injects them in your CS templates, and generate binaries using mcs. It supports ROT encoding, and soon XOR encoding.
https://github.com/Nariod/laz-y
Laz-y project compatible C# templates for shellcode injection
https://github.com/Nariod/Laz-y-templates
#redteam
21 579
lockc
Open source sofware for providing MAC (Mandatory Access Control) type of security audit for container workloads.
The main reason why lockc exists is that containers do not contain. Containers are not as secure and isolated as VMs. By default, they expose a lot of information about host OS and provide ways to "break out" from the container. lockc aims to provide more isolation to containers and make them more secure.
https://github.com/lockc-project/lockc
21 579
Bettercap
Powerful easily extensible and portable framework written in Go which aims to offer to security researchers, red teamers and reverse engineers an easy to use, all-in-one solution with all the features they might possibly need for performing reconnaissance and attacking WiFi networks, Bluetooth Low Energy devices, wireless HID devices and Ethernet networks.
Features:
▫️ WiFi networks scanning, deauthentication attack, clientless PMKID association attack and automatic WPA/WPA2 client handshakes capture.
▫️ Bluetooth Low Energy devices scanning, characteristics enumeration, reading and writing.
▫️ 2.4Ghz wireless devices scanning and MouseJacking attacks with over-the-air HID frames injection (with DuckyScript support).
▫️ Passive and active IP network hosts probing and recon.
▫️ ARP, DNS, NDP and DHCPv6 spoofers for MITM attacks on IPv4 and IPv6 based networks.
▫️ Proxies at packet level, TCP level and HTTP/HTTPS application level fully scriptable with easy to implement javascript plugins.
▫️ A powerful network sniffer for credentials harvesting which can also be used as a network protocol fuzzer.
▫️ A very fast port scanner.
▫️ A powerful REST API with support for asynchronous events notification on websocket to orchestrate your attacks easily.
▫️ A very convenient web UI.
▫️ More!
https://github.com/bettercap/bettercap
#redteam #best #tools #kali
21 579
Ultimate WDAC Bypass List
A centralized resource for previously documented WDAC/Device Guard/UMCI bypass techniques as well for building/managing/testing WDAC policies
https://github.com/bohops/UltimateWDACBypassList
21 579
Ghost Eye
Information Gathering Tool
Ghost Eye New Release. Ghost Eye is an Information Gathering, Footprinting, Scanner, and Recon Tool I made in #Python 3.
Since the last release of Ghost Eye, I've tweaked, removed, and added some new features. So that Ghost Eye would become more of a whole. For me, it remains a game of options so that together you get a complete overview of your target.
https://github.com/BullsEye0/ghost_eye
21 579
BeatRev Version 2
Finished V2 of BeatRev a POC to frustrate/defeat Mal Analysts and Rev Eng's by 'keying' malware to a victim. Incorporated RDLL's, UUID's, and AV evasion.
https://github.com/Octoberfest7/BeatRev
21 579
Sentinel-Attack.
Sentinel ATT&CK aims to simplify the rapid deployment of a threat hunting capability that leverages Sysmon and MITRE ATT&CK on Azure Sentinel.
https://github.com/BlueTeamLabs/sentinel-attack
