HackGit
Ir al canal en Telegram
The channel was created for cybersecurity specialists. • Offensive Security • RedTeam • Malware Research • BugBounty • OSINT • etc Disclaimer: t.me/hackgit/2082 Donations - Ads: t.me/hackgit/5423
Mostrar más📈 Análisis del canal de Telegram HackGit
El canal HackGit (@hackgit) en el segmento lingüístico de Inglés es un actor destacado. Actualmente la comunidad reúne a 21 579 suscriptores, ocupando la posición 4 526 en la categoría Tecnologías y Aplicaciones y el puesto 1 853 en la región EEUU.
📊 Métricas de audiencia y dinámica
Desde su creación el невідомо, el proyecto ha mostrado un crecimiento acelerado, reuniendo a 21 579 suscriptores.
Según los últimos datos del 02 marzo, 2025, el canal mantiene una actividad estable. En los últimos 30 días la variación de miembros fue de 19, y en las últimas 24 horas de 0, conservando un alto alcance.
- Estado de verificación: No verificado
- Tasa de interacción (ER): El promedio de interacción de la audiencia es 0%. Durante las primeras 24 horas tras publicar, el contenido suele obtener N/A% de reacciones respecto al total de suscriptores.
- Alcance de las publicaciones: Cada publicación recibe en promedio 0 visualizaciones. En el primer día suele acumular 0 visualizaciones.
- Reacciones e interacción: La audiencia responde de forma activa: el promedio de reacciones por publicación es 0.
📝 Descripción y política de contenido
El autor describe el recurso como un espacio para expresar opiniones subjetivas:
“The channel was created for cybersecurity specialists.
• Offensive Security
• RedTeam
• Malware Research
• BugBounty
• OSINT
• etc
Disclaimer:
t.me/hackgit/2082
Donations - Ads:
t.me/hackgit/5423”
Gracias a la alta frecuencia de actualizaciones (últimos datos recibidos el 03 marzo, 2025), el canal mantiene la vigencia y un amplio alcance. La analítica demuestra que la audiencia interactúa activamente con el contenido, lo que lo convierte en un punto de referencia dentro de la categoría Tecnologías y Aplicaciones.
21 579
Suscriptores
Sin datos24 horas
-37 días
+1930 días
Archivo de publicaciones
21 579
SharpImpersonation
A User Impersonation tool - via Token or Shellcode injection.
This was a learning by doing project from my side. Well known techniques are used to built just another impersonation tool with some improvements in comparison to other public tools.
https://github.com/S3cur3Th1sSh1t/SharpImpersonation
The code base was taken from:
https://github.com/0xbadjuju/Tokenvator
A blog post for the intruduction can be found here:
https://s3cur3th1ssh1t.github.io/SharpImpersonation-Introduction/
#windows #privesc #elevation #impersonation #token #shellcode #dotnet
21 579
pwncat
A post-exploitation platform for Linux targets. It started out as a wrapper around basic bind and reverse shells and has grown from there. It streamlines common red team operations while staging code from your attacker machine, not the target.
pwncat used to only support Linux, but there has been a lot of work recently to support multiple platforms. Currently, there is alpha support for Windows targets. Please see the latest documentation for details on how to use pwncat with a Windows target.
pwncat intercepts the raw communication with a remote shell and allows the user to perform automated actions on the remote host including enumeration, implant installation and even privilege escalation.
After receiving a connection, pwncat will setup some common configurations for working with remote shells.
▫️ Disable history in the remote shell
▫️ Normalize shell prompt
▫️ Locate useful binaries (using which)
▫️ Attempt to spawn a pseudo-terminal (pty) for a full interactive session
https://github.com/calebstewart/pwncat
21 579
WSee
A CDN Domain Fronting Tool or Websocket Discovery. Should work on any CDN but more focused on CloudFlare and CloudFront CDN. This tool uses several way to make sure any endpoint can fall under specific protocol, indicated via 101 statuses. This tool also can be used for Bug Hunters to find any delicate domain related to CDN behind Endpoint.
https://github.com/MC874/wsee
21 579
All in One Recon Tool
A easy-to-use python tool to perform dns recon, subdomain enumeration and much more
The purpouse of this tool is helping bug haunters and pentesters during reconnaissance
https://github.com/D3Ext/AORT
21 579
Evil Cat
An open-source FPS hacking framework. You can plug your favorite games into the framework.
https://github.com/zouxianyu/evil-cat
t.me/hackgit
21 579
Sniffle
A Sniffer For Bluetooth 5 And 4.X LE.
Sniffle is a sniffer for Bluetooth 5 and 4.x (LE) using TI CC1352/CC26x2 hardware.
Features:
▫️ Support for BT5/4.2 extended length advertisement and data packets
▫️ Support for BT5 Channel Selection Algorithms #1 and #2
▫️ Support for all BT5 PHY modes (regular 1M, 2M, and coded modes)
▫️ Support for sniffing only advertisements and ignoring connections
▫️ Support for channel map, connection parameter, and PHY change operations
▫️ Support for advertisement filtering by MAC address and RSSI
▫️ Support for BT5 extended advertising (non-periodic)
▫️ Support for capturing advertisements from a target MAC on all three primary advertising channels using a single sniffer. This makes connection detection nearly 3x more reliable than most other sniffers that only sniff one advertising channel.
▫️ Easy to extend host-side software written in Python
▫️ PCAP export compatible with the Ubertooth
https://github.com/nccgroup/Sniffle
21 579
GPUSleep
Move CS beacon to GPU memory when sleeping.
GPUSleep moves the beacon image to GPU memory before the beacon sleeps, and move it back to main memory after sleeping.
The idea is to hook HeapAlloc and Sleep. Encrypt (XOR) the heap allocated by the beacon and move all PE sections + heap segments to GPU memory using nvcuda.dll imports.
https://github.com/oXis/GPUSleep
Details:
https://oxis.github.io/GPUSleep/
21 579
Repost from Pentesting Shop
Screen Crab
The Screen Crab is a stealthy video man-in-the-middle implant.
This covert inline screen grabber sits between HDMI devices - like a computer and monitor, or console and television - to quietly capture screenshots. Perfect for sysadmins, pentesters and anyone wanting to record what's on a screen.
Buy online:
🛒 https://ali.ski/BpZHm7
#hdmi #mitm #video
21 579
Codecepticon
Codecepticon is a .NET application that allows you to obfuscate C#, VBA/VB6 (macros), and PowerShell source code, and is developed for offensive security engagements such as Red/Purple Teams.
What separates Codecepticon from other obfuscators is that it targets the source code rather than the compiled executables, and was developed specifically for AV/EDR evasion
https://github.com/Accenture/Codecepticon
21 579
Awesome AV/EDR/XDR Bypass Tips
The purpose of this repository is to gather as many techniques and tools as possible to circumvent AVs, EDRs and XDRs so that it can help you throughout your pentest.
https://github.com/MrEmpy/Awesome-AV-EDR-XDR-Bypass
t.me/hackgit
21 579
CVE-2022-34721
Windows Internet Key Exchange (IKE) Protocol Extension Remote Code Execution
https://github.com/78ResearchLab/PoC/tree/main/CVE-2022-34721
#cve
21 579
Microsoft Teams C2 — Covert Attack Chain Utilizing GIFShell
Seven different insecure design elements/vulnerabilities present in Microsoft Teams, can be leveraged by an attacker, to execute a reverse shell between an attacker and victim, where no communication is directly exchanged between an attacker and a victim, but is entirely piped through malicious GIFs sent in Teams messages, and Out of Bounds (OOB) lookups of GIFs conducted by Microsoft’s own servers.
This unique C2 infrastructure can be leveraged by sophisticated threat actors to avoid detection by EDR and other network monitoring tools. Particularly in secure network environments, where Microsoft Teams might be one of a handful of allowed, trusted hosts and programs, this attack chain can be particularly devastating.
https://github.com/bobbyrsec/Microsoft-Teams-GIFShell
Details:
https://medium.com/@bobbyrsec/gifshell-covert-attack-chain-and-c2-utilizing-microsoft-teams-gifs-1618c4e64ed7
t.me/hackgit
21 579
Heroinn
A cross platform C2/post-exploitation framework implementation by Rust.
Features:
▫️ GUI
▫️ Interactive PTY shell
▫️ System infomations collect
▫️ File manager support with resume broken transfer and largefile
▫️ Support Win10+(Windows Server 2019+) & Linux & BSD & OSX
▫️ Multiple communication protocols (TCP & HTTP & reliable UDP)
https://github.com/b23r0/Heroinn
#Donate t.me/hackgit🍻»»»
21 579
Cliws
Lightweight interactive bind/reverse PTY shell implementation by Rust.
Features:
▫️ WebSocket
▫️ Full pty support: VIM, SSH, readline, Ctrl+X
▫️ Auto set terminal window size.
▫️ Reverse connection / Bind port
▫️ Support Win10+(Windows Server 2019+) & Linux & BSD & OSX
https://github.com/b23r0/cliws
t.me/hackgit
21 579
Talon
Talon is a 3rd party agent for Havoc written in C. It's very minimalistic and it's meant to show how to work with the Havoc service api. Talon.py is the script that handles callbacks, register reqeuest and tasks by interacting with the Havoc service api.
https://github.com/HavocFramework/Talon
t.me/hackgit
21 579
Joern
Open-source code analysis platform for C/C++/Java/Binary/Javascript/Python/Kotlin based on code property graphs.
https://github.com/joernio/joern
21 579
hacktricks
The page where you will find each hacking trick/technique/whatever I have learnt from CTFs, real life apps, reading researches, and news.
https://github.com/carlospolop/hacktricks
t.me/hackgit
21 579
RevSuit
A Flexible and Powerful #Reverse #Connection Platform
RevSuit is a flexible and powerful reverse connection platform designed for receiving connection from target host in penetration. It currently supports HTTP, DNS, RMI, MySQL and FTP protocols.
https://github.com/Li4n0/revsuit
21 579
CloudFox
It’s an open source CLI tool created to help pentester's and other offensive security professionals find exploitable attack paths in cloud infrastructure.
https://github.com/BishopFox/cloudfox
