HackGit
Ir al canal en Telegram
The channel was created for cybersecurity specialists. • Offensive Security • RedTeam • Malware Research • BugBounty • OSINT • etc Disclaimer: t.me/hackgit/2082 Donations - Ads: t.me/hackgit/5423
Mostrar más📈 Análisis del canal de Telegram HackGit
El canal HackGit (@hackgit) en el segmento lingüístico de Inglés es un actor destacado. Actualmente la comunidad reúne a 21 579 suscriptores, ocupando la posición 4 526 en la categoría Tecnologías y Aplicaciones y el puesto 1 853 en la región EEUU.
📊 Métricas de audiencia y dinámica
Desde su creación el невідомо, el proyecto ha mostrado un crecimiento acelerado, reuniendo a 21 579 suscriptores.
Según los últimos datos del 02 marzo, 2025, el canal mantiene una actividad estable. En los últimos 30 días la variación de miembros fue de 19, y en las últimas 24 horas de 0, conservando un alto alcance.
- Estado de verificación: No verificado
- Tasa de interacción (ER): El promedio de interacción de la audiencia es 0%. Durante las primeras 24 horas tras publicar, el contenido suele obtener N/A% de reacciones respecto al total de suscriptores.
- Alcance de las publicaciones: Cada publicación recibe en promedio 0 visualizaciones. En el primer día suele acumular 0 visualizaciones.
- Reacciones e interacción: La audiencia responde de forma activa: el promedio de reacciones por publicación es 0.
📝 Descripción y política de contenido
El autor describe el recurso como un espacio para expresar opiniones subjetivas:
“The channel was created for cybersecurity specialists.
• Offensive Security
• RedTeam
• Malware Research
• BugBounty
• OSINT
• etc
Disclaimer:
t.me/hackgit/2082
Donations - Ads:
t.me/hackgit/5423”
Gracias a la alta frecuencia de actualizaciones (últimos datos recibidos el 03 marzo, 2025), el canal mantiene la vigencia y un amplio alcance. La analítica demuestra que la audiencia interactúa activamente con el contenido, lo que lo convierte en un punto de referencia dentro de la categoría Tecnologías y Aplicaciones.
21 579
Suscriptores
Sin datos24 horas
-37 días
+1930 días
Archivo de publicaciones
21 579
DynamicSyscalls
This is a library written in .net resolves the syscalls dynamically (Has nothing to do with hooking/unhooking)
https://github.com/Shrfnt77/DynamicSyscalls
21 579
PurpleCloud
Terraform code generator to create different Azure security labs.
For full documentation visit: https://www.purplecloud.network
https://github.com/iknowjason/PurpleCloud
21 579
LDAP Relay Scan
A tool to check Domain Controllers for LDAP server protections regarding the relay of NTLM authentication.
https://github.com/zyn3rgy/LdapRelayScan
#ad #ldap #scan #tools
21 579
Subdomain enumeration
Based on my last live stream created a deep enumeration of subdomain
https://github.com/Virdoexhunter/Subenum_deep_subdomain_enumeration
21 579
SharpGmailC2
Our Friendly Gmail will act as Server and implant will exfiltrate data via smtp and will read commands from C2 (Gmail) via imap protocol.
https://github.com/reveng007/SharpGmailC2
Demo:
https://youtu.be/6SoKeeEUKfA
21 579
wa-tunnel
HTTP Tunneling through Whatsapp
This is a Baileys based piece of code that lets you tunnel TCP data through two Whatsapp accounts.
This can be usable in different situations, for example network carriers that give unlimited whatsapp data or airplanes where you also get unlimited social network data.
It's using Baileys since it's a WS based multi-device whatsapp library and therefore could be used in android in the future, using Termux for example.
The idea is to use it with a proxy setup on the server like this:
[Client (restricted access) -> Whatsapp -> Server -> Proxy -> Internet]
Apologizes in advance since Javascript it's not one of my primary coding languages :/
https://github.com/aleixrodriala/wa-tunnel
#Donate t.me/hackgit🍻»»»21 579
Gaiated
An addon to exploit potential open traces of Google ID (GaiaID).
https://github.com/Seeraiwer/gaiated
#OSINT
21 579
nse-exchange
Nmap NSE scripts to check against exchange vulnerability (CVE-2022-44228). NSE scripts check most popular exposed services on the Internet. It is basic script which checks if virtual patching works.
https://github.com/Diverto/nse-exchange
#cve #nmap
21 579
Repost from HackGit
💰 Donate
If you like the channel please support us ❣️
https://www.buymeacoffee.com/HackGit
BTC:
1987zNaVX53v7tzpKRRde84uXbDYjuNykLTON:
UQAAZ1BFX5OsybSryoFunzyJN3F7oKWMbZNPlwMTcVK8mEzAUSDT – ERC20❗️:
0x1e7fa9e9c42f71e6d155aca39951f23355178163You can buy crypto here Every donation gives us the motivation to do better and more content! #donate #support
21 579
CVE-2022-41352
Zimbra Unauthenticated RCE
is an arbitrary file write vulnerability in Zimbra mail servers due to the use of a vulnerable cpio version.
https://github.com/Cr4ckC4t/cve-2022-41352-zimbra-rce
t.me/hackgit
21 579
CVE-2022-3949
XSS in Simple Cashiering System
Simple Cashiering System is vulnerable to Cross Site Scripting (XSS) - a malicious actor can change the fullname of a compromised user to a XSS Payload and whenever a admin visits the user-tab or the sales tab (and looks into sales made by the malicious actor) the payload is triggered. This can lead to session takeover because the cookie does not have an HttpOnly Flag.
https://github.com/maikroservice/CVE-2022-3949
21 579
Triton
A dynamic binary analysis library. It provides internal components that allow you to build your program analysis tools, automate reverse engineering, perform software verification or just emulate code.
▫️ Dynamic symbolic execution
▫️ Dynamic taint analysis
▫️ AST representation of the x86, x86-64, ARM32 and AArch64 ISA semantic
▫️ Expressions synthesis
▫️ SMT simplification passes
▫️ Lifting to LLVM as well as Z3 and back
▫️ SMT solver interface to Z3 and Bitwuzla
▫️ C++ and Python API
https://github.com/jonathansalwan/Triton
21 579
TTexplore
library that performs path exploration on binary code using symbolic execution.
https://github.com/JonathanSalwan/ttexplore
21 579
cve-2022-31898
Exploit POC code for CVE-2022-31898, a command injection for GL-iNet routers with firmware below 3.215.
https://github.com/gigaryte/cve-2022-31898
#cve #poc
21 579
Bomber
bomber is an application that scans SBOMs for security vulnerabilities.
So you've asked a vendor for an Software Bill of Materials (SBOM) for one of their closed source products, and they provided one to you in a JSON file... now what?
The first thing you're going to want to do is see if any of the components listed inside the SBOM have security vulnerabilities, and what kind of licenses these components have. This will help you identify what kind of risk you will be taking on by using the product.
Finding security vulnerabilities and license information for components identified in an SBOM is exactly what bomber is meant to do. bomber can read any JSON or XML based CycloneDX format, or a JSON SPDX or Syft formatted SBOM, and tell you pretty quickly if there are any vulnerabilities.
https://github.com/devops-kung-fu/bomber
21 579
Fzf
A general-purpose command-line fuzzy finder.
It's an interactive Unix filter for command-line that can be used with any list; files, command history, processes, hostnames, bookmarks, git commits, etc.
Pros:
▫️ Portable, no dependencies
▫️ Blazingly fast
▫️ The most comprehensive feature set
▫️ Flexible layout
▫️ Batteries included
https://github.com/junegunn/fzf
fzf - command line fuzzy finder: https://www.youtube.com/watch?v=qgG5Jhi_Els
21 579
Repost from Pentesting Shop
CJMCU BadUSB with MicroSD
This is one of the last developments related to rubberducky or badusb devices. This device is based on the ATMEGA32U4 microprocessor which is able to emulate many USB modes like HID, used for injecting key presses to the target system.
The main processor is based on Arduino Leonardo R3 development board and the improvement is that a microSD card slot is included to allow storing many different payloads. The microSD card has to be FAT32 formatted in order to be recognized.
Repository:
https://github.com/asciiterminal/CJMCU_ATMEGA32U4_BADUSB
Buy online:
🛒 https://bit.ly/3HV8UJM (ali)
🛒 https://amzn.to/3TEuC9i (amazon)
#usb #badusb #atmega32u4
21 579
Awesome IDA, Ghidra, x64DBG & OllyDBG plugins
A curated list of IDA x64DBG and OllyDBG plugins. IDA is a powerful disassembler and debugger that allows to analyze binary, it also includes a decompiler. X64DBG is an open-source x64/x32 debugger for Windows. OllyDbg is a 32-bit assembler level analysing debugger for Windows.
https://github.com/fr0gger/awesome-ida-x64-olly-plugin
t.me/hackgit
21 579
Web3 Decoder
Web3 Decoder is a Burp Suite Extension that helps to analyze what is going on with the operations involving smart contracts of the web3. This is mainly JSON-RPC calls to Ethereum Nodes, and nodes of other compatible networks (like Polygon, Arbitrum, BSC...)
https://github.com/nccgroup/web3-decoder
t.me/hackgit
