HackGit
Ir al canal en Telegram
The channel was created for cybersecurity specialists. • Offensive Security • RedTeam • Malware Research • BugBounty • OSINT • etc Disclaimer: t.me/hackgit/2082 Donations - Ads: t.me/hackgit/5423
Mostrar más📈 Análisis del canal de Telegram HackGit
El canal HackGit (@hackgit) en el segmento lingüístico de Inglés es un actor destacado. Actualmente la comunidad reúne a 21 579 suscriptores, ocupando la posición 4 526 en la categoría Tecnologías y Aplicaciones y el puesto 1 853 en la región EEUU.
📊 Métricas de audiencia y dinámica
Desde su creación el невідомо, el proyecto ha mostrado un crecimiento acelerado, reuniendo a 21 579 suscriptores.
Según los últimos datos del 02 marzo, 2025, el canal mantiene una actividad estable. En los últimos 30 días la variación de miembros fue de 19, y en las últimas 24 horas de 0, conservando un alto alcance.
- Estado de verificación: No verificado
- Tasa de interacción (ER): El promedio de interacción de la audiencia es 0%. Durante las primeras 24 horas tras publicar, el contenido suele obtener N/A% de reacciones respecto al total de suscriptores.
- Alcance de las publicaciones: Cada publicación recibe en promedio 0 visualizaciones. En el primer día suele acumular 0 visualizaciones.
- Reacciones e interacción: La audiencia responde de forma activa: el promedio de reacciones por publicación es 0.
📝 Descripción y política de contenido
El autor describe el recurso como un espacio para expresar opiniones subjetivas:
“The channel was created for cybersecurity specialists.
• Offensive Security
• RedTeam
• Malware Research
• BugBounty
• OSINT
• etc
Disclaimer:
t.me/hackgit/2082
Donations - Ads:
t.me/hackgit/5423”
Gracias a la alta frecuencia de actualizaciones (últimos datos recibidos el 11 noviembre, 2026), el canal mantiene la vigencia y un amplio alcance. La analítica demuestra que la audiencia interactúa activamente con el contenido, lo que lo convierte en un punto de referencia dentro de la categoría Tecnologías y Aplicaciones.
21 579
Suscriptores
Sin datos24 horas
-37 días
+1930 días
Archivo de publicaciones
21 579
Extension Fingerprints
Chrome extensions can be detected by fetching their web accessible resources. These are files inside an extension that can be accessed by web pages. The detected extensions can be used to track you through browser fingerprinting. This scan only detects extensions from the Chrome Web Store. Read more
https://github.com/z0ccc/extension-fingerprints#extension-fingerprints
Check it out here:
https://z0ccc.github.io/extension-fingerprints
#privacy
21 579
MemProcFS
The Memory Process File System (MemProcFS) is an easy and convenient way of viewing physical memory as files in a virtual file system.
Easy trivial point and click memory analysis without the need for complicated commandline arguments! Access memory content and artifacts via files in a mounted virtual file system or via a feature rich application library to include in your own projects!
Analyze memory dump files, live memory via DumpIt or WinPMEM, live memory in read-write mode via linked PCILeech and PCILeech-FPGA devices!
It's even possible to connect to a remote LeechAgent memory acquisition agent over a secured connection - allowing for remote live memory incident response - even over higher latency low band-width connections! Peek into Hyper-V Virtual Machines with LiveCloudKd!
Use your favorite tools to analyze memory - use your favorite hex editors, your python and powershell scripts, WinDbg or your favorite disassemblers and debuggers - all will work trivally with MemProcFS by just reading and writing files!
https://github.com/ufrisk/MemProcFS
21 579
Vulnerable-AD
Create a vulnerable active directory that's allowing you to test most of active directory attacks in local lab
Main Features:
▫️ Randomize Attacks
▫️ Full Coverage of the mentioned attacks
▫️ you need run the script in DC with Active Directory installed
▫️ Some of attacks require client workstation
Supported Attacks:
▫️ Abusing ACLs/ACEs
▫️ Kerberoasting
▫️ AS-REP Roasting
▫️ Abuse DnsAdmins
▫️ Password in Object Description
▫️ User Objects With Default password (Changeme123!)
▫️ Password Spraying
▫️ DCSync
▫️ Silver Ticket
▫️ Golden Ticket
▫️ Pass-the-Hash
▫️ Pass-the-Ticket
▫️ SMB Signing Disabled
https://github.com/WazeHell/vulnerable-AD
#ad
21 579
HTTPLoot
An automated tool which can simultaneously crawl, fill forms, trigger error/debug pages and "loot" secrets out of the client-facing code of sites.
https://github.com/redhuntlabs/httploot
#web
21 579
Hunt-Sleeping-Beacons
Aims To Identify Sleeping Beacons.The idea of this project is to identify beacons which are unpacked at runtime or running in the context of another process.
To do so, I make use of the observation that beacons tend to call Sleep between their callbacks. A call to sleep sets the state of the thread to DelayExecution which is taken as a first indiciator that a thread might be executing a beacon.
After enumerating all threads whose state is DelayExecution, multiple metrics are applied to identify potential beacons
https://github.com/thefLink/Hunt-Sleeping-Beacons
21 579
Sifter
Fully stocked Op Centre for Pentesters. Made up of over 80 different tools.
It combines a plethara of OSINT, recon and vulnerability analysis tools within catagorized modsets in order to quickly perform recon tasks, check network firewalling, enumerate remote and local hosts, and scan for the 'blue' vulnerabilities within microsoft and if unpatched, exploit them.
It uses tools like blackwidow and konan for webdir enumeration and attack surface mapping rapidly using ASM.
Gathered info is saved to the results folder, these output files can be easily parsed over to TigerShark in order to be utilised within your campaign. Or compiled for a final report to wrap up a penetration test.
https://github.com/whiterabb17/sifter
Demo:
https://www.youtube.com/watch?v=v3UzID9ZLfU
21 579
DFIR Cheat Sheet
Collection of tools, tips, and resources for #DFIR (as a tree directory)
▫️ Disk
▫️ Memory
▫️ Apps
▫️ Network
▫️ Threat Intelligence
▫️ and much more
https://github.com/dfircheatsheet/dfircheatsheet.github.io
21 579
Vulnman
Open source pentest management application written in Python using the powerful Django framework.
It aims to have a central place to manage vulnerabilities and other penetration assets. The report generation should be as simple as possible to allow the analyst to focus on finding bugs.
https://github.com/vulnman/vulnman
Website:
https://vulnman.github.io/
Documentation:
https://vulnman.github.io/doc
21 579
SharpZippo
List/Read contents of Zip files (in memory and without extraction) using #Cobalt Strike's Execute-Assembly.
https://github.com/OG-Sadpanda/SharpZippo
21 579
Repost from Pentesting News
NlsCodeInjectionThroughRegistry
Dll injection through registry modification of NLS code page ID. It requieres administrator privileges, but it definetely works.
https://github.com/NtQuerySystemInformation/NlsCodeInjectionThroughRegistry
#inject #dll
21 579
OctoPwn & OctoPwnWeb
Pentest framework running (almost) entirely in the browser via pyodide. OctoPwnWeb has been presented a41con.
How it started:
“I waited 2 years for this, rewrote impacket for this, asked cryptographers to remake algos in python for this, spent enormous time of my life to make this happen. and it's finally here this finally works and I can't find the words to express my satisfaction.” (SkelSec)
“For the record: the two crypto guys who eventually helped me in pure-python rewrite of some algos tole me to never ever use it anywhere and also they dont want to be mentioned.” (SkelSec)
https://github.com/skelsec/octopwnweb
Talk:
https://youtu.be/jStdrDHTmD4
Slides:
https://docs.google.com/presentation/d/1XQFYr_OBI1lrpybsLrHWTWcYNZcF_zOmGDHiIBwSMng
Tool:
http://octopwn.porchetta.industries/
Readme:
http://octopwn.porchetta.industries/readme.html
Sponsor for more features:
https://porchetta.industries
#pentest #framework
21 579
ADB WEBKIT
Access ADB On Browsers.
Live Android Application Manager:
▫️ Install Apk With Some Options Like GrantPermission And …
▫️ Revoke And Grant Apk Permission
▫️ Uninstall Apk
▫️ Run Apk
▫️ Clear Cache
▫️ Save Apk
▫️ Stop Apk
https://github.com/jxroot/adbwebkit
21 579
Payload-cob
Payload Automation is a collection of Python classes to serve as a bridge between Sleep and Python which can be used to help automate payload development, testing, opsec checking, and deployment with Cobalt Strike or anything else you can come up with.
Included Libraries:
▫️ Striker: A set of functions to interact with Cobalt Strike and execute functionality typically only accessible via Sleep/GUI.
▫️ Compyler: A set of functions to compile various payloads from platform or cross-platform.
▫️ Artifactor: A set of functions to inspect and review artifacts and collect and track IoCs.
▫️ Sleepy: A set of functions to help facilitate a bridge between Sleep objects and Python objects.
▫️ Detemplate: An incomplete idea of mine to automate the population of template files based on YAML configurations. Meant to be used with more complex payloads with multiple replacements and/or embedding.
https://github.com/turalalv/Payload-cob
21 579
Scavenger
Burp extension to create target specific and tailored wordlist from #burp history.
https://github.com/0xDexter0us/Scavenger
21 579
Oneliner-Bugbounty
A collection oneliner scripts for bug bounty.
https://github.com/daffainfo/Oneliner-Bugbounty
21 579
oncall
Developer-friendly incident response with brilliant Slack integration.
▫️ Collect and analyze alerts from multiple monitoring systems
▫️ On-call rotations based on schedules
▫️ Automatic escalations
▫️ Phone calls, SMS, Slack, Telegram notifications
https://github.com/grafana/oncall
21 579
OSIPs
This script scans every file from a given folder recursively, extracts every IPv4 and IPv6 address, filters out the public IP addresses and then queries these IPs against TOR relays, WhoIs service and Location service.
It outputs 4 files: a CSV file and a JSON file with all details of the IP addresses, a CSV file containing an index of every found IP address and a KML file with all the locations gathered.
Features:
▫️ Parses any number of files in a single run
▫️ Can also be run for a single input file
▫️ Extracts all unique valid IPv4 and IPv6 addresses (correctly comparing two addresses, even if they are written differently)
▫️ Collects publicly available Who Is information for all public IP addresses
▫️ Queries all public IP addresses against TOR relays
▫️ Collects geographical location information for all public IP addresses
▫️ Can be run with command line parameters in non-interactive mode for easy integration in other scripts
▫️ Can be run without parameters and the input values can be provided interactively
▫️ Allows user to select what steps to perform or exclude
▫️ Verbosely outputs information to console at every step that it performs
▫️ Exports all IP addresses details in both a CSV file and a JSON file
▫️ Exports a KML file that can be easily loaded on top of a map
▫️ Keeps an index of all found IP addresses in a separate CSV file for easy traceback
https://github.com/ciprianster/OSIPs
21 579
mailMeta
A forensic tool to make analysis of email headers easy to aid in the quick discovery of the attacker.
mailMeta is a python based forensic tool which reads through the email headers from the email file and extracts crucial information to identify if the email is legitimate.
What are the advantages of using mailMeta?
Have you ever heared of email hacking or sophisticated email crimes where a spoofed email is sent to the victim and the victim trusts this email based on the email address which is infact fake. These email contains mallicious links which can be used to extract some information or install some malware or backdoors on your device. So, in order to avoid you from this mailMeta comes to your rescue.
Here I have added instructions on how to download the email from the file and then pass it to the mailMeta executable. It then parses the headers and informs you if the mail is genuine or not. Whenever you are suspicious about an email be sure to check it once here. It can save you in most of the scenarios. If anyone has some ideas/updates feel free to open an issue or create a pull request.
What are the information revealed by the mailMeta? mailMeta parses the following headers:
▫️ Message-ID
▫️ SPF-Record
▫️ DKIM-Record
▫️ DMARC-Record
▫️ Spoofed Email detection based on the above headers
▫️ IP-Address of the sender
▫️ Service Provider used for sending the email
▫️ Content-Type
▫️ Data and Time
▫️ Subject
https://github.com/gr33nm0nk2802/mailMeta
