HackGit
Ir al canal en Telegram
The channel was created for cybersecurity specialists. • Offensive Security • RedTeam • Malware Research • BugBounty • OSINT • etc Disclaimer: t.me/hackgit/2082 Donations - Ads: t.me/hackgit/5423
Mostrar más📈 Análisis del canal de Telegram HackGit
El canal HackGit (@hackgit) en el segmento lingüístico de Inglés es un actor destacado. Actualmente la comunidad reúne a 21 579 suscriptores, ocupando la posición 4 526 en la categoría Tecnologías y Aplicaciones y el puesto 1 853 en la región EEUU.
📊 Métricas de audiencia y dinámica
Desde su creación el невідомо, el proyecto ha mostrado un crecimiento acelerado, reuniendo a 21 579 suscriptores.
Según los últimos datos del 02 marzo, 2025, el canal mantiene una actividad estable. En los últimos 30 días la variación de miembros fue de 19, y en las últimas 24 horas de 0, conservando un alto alcance.
- Estado de verificación: No verificado
- Tasa de interacción (ER): El promedio de interacción de la audiencia es 0%. Durante las primeras 24 horas tras publicar, el contenido suele obtener N/A% de reacciones respecto al total de suscriptores.
- Alcance de las publicaciones: Cada publicación recibe en promedio 0 visualizaciones. En el primer día suele acumular 0 visualizaciones.
- Reacciones e interacción: La audiencia responde de forma activa: el promedio de reacciones por publicación es 0.
📝 Descripción y política de contenido
El autor describe el recurso como un espacio para expresar opiniones subjetivas:
“The channel was created for cybersecurity specialists.
• Offensive Security
• RedTeam
• Malware Research
• BugBounty
• OSINT
• etc
Disclaimer:
t.me/hackgit/2082
Donations - Ads:
t.me/hackgit/5423”
Gracias a la alta frecuencia de actualizaciones (últimos datos recibidos el 03 marzo, 2025), el canal mantiene la vigencia y un amplio alcance. La analítica demuestra que la audiencia interactúa activamente con el contenido, lo que lo convierte en un punto de referencia dentro de la categoría Tecnologías y Aplicaciones.
21 579
Suscriptores
Sin datos24 horas
-37 días
+1930 días
Archivo de publicaciones
21 579
dp_cryptomg
Another tool for exploiting CVE-2017-9248, a cryptographic weakness in Telerik UI for ASP.NET AJAX dialog handler. Exploitation leads to access to a file manager utility capable up uploading arbitrary files, usually leading to remote code execution.
https://github.com/blacklanternsecurity/dp_cryptomg
21 579
CVE-2022-41040-metasploit-ProxyNotShell
the metasploit script(POC) about CVE-2022-41040. Microsoft Exchange are vulnerable to a server-side request forgery (SSRF) attack. An authenticated attacker can use the vulnerability to elevate privileges.
https://github.com/TaroballzChen/CVE-2022-41040-metasploit-ProxyNotShell
21 579
sysmon-parser
Automatically generated Sysmon parser for Azure Sentinel
Sysmon-AllVersions_Parser.txt can be loaded as a function in Azure Sentinel to parse all your events.
There is an Azure Devops pipeline that triggers daily to install the latest Sysmon version, extracts the schema and populates the parser with all unique fields.
The PowerShell script can also be run locally on a box which has Sysmon installed
https://github.com/olafhartong/sysmon-parser
21 579
CVE-2022-22947
Spring Cloud Gateway < 3.0.7 & < 3.1.1 Code Injection (RCE)
Applications using Spring Cloud Gateway are vulnerable to a code injection attack when the Gateway Actuator endpoint is enabled, exposed and unsecured. A remote attacker could make a maliciously crafted request that could allow arbitrary remote execution on the remote host.
https://github.com/crowsec-edtech/CVE-2022-22947
#cve
21 579
KASLD
Kernel Address Space Layout Derandomization
A collection of various techniques to bypass Linux Kernel Address Space Layout Randomization (KASLR) and retrieve the kernel base virtual address on x86/x86_64 architectures as an unprivileged local user.
https://github.com/bcoles/kasld
t.me/hackgit
21 579
Wireless Penetration Testing
https://github.com/lutzenfried/Methodology/blob/main/wireless.md
21 579
Unique Subdomain Enumeration
Great research regarding subdomain enumeration through permutations, unique approach that can provide good results with a smaller initial bruteforce data set in comparison to altdns.
https://github.com/cramppet/regulator
Research:
https://cramppet.github.io/regulator/index.html
21 579
PHP filter chain generator
A CLI to generate PHP filters chain, get your RCE without uploading a file if you control entirely the parameter passed to a require or an include in PHP!
https://github.com/synacktiv/php_filter_chain_generator
21 579
DeJITLeak DOI
This repository provides the tool for the paper "DeJITLeak: Eliminating JIT-Induced Timing Side-Channel Leaks" accepted at ECSE/FSE 2022.
https://github.com/DeJITLeak/DeJITLeak
21 579
penguinTrace
penguinTrace is intended to help build an understanding of how programs run at the hardware level. It provides a way to see what instructions compile to, and then step through those instructions and see how they affect machine state as well as how this maps back to variables in the original program. A bit more background is available on the website.
penguinTrace starts a web-server which provides a web interface to edit and run code. Code can be developed in C, C++ or Assembly. The resulting assembly is then displayed and can then be stepped through, with the values of hardware registers and variables in the current scope shown.
penguinTrace runs on Linux and supports the AMD64/X86-64 and AArch64 architectures. penguinTrace can run on other operating systems using Docker, a virtual machine or through the Windows Subsystem for Linux (WSL).
https://github.com/penguintrace/penguintrace
21 579
SubEnum
bash script for Subdomain Enumeration using 4 tools and 3 online services, you have to install these tools by yourself to be able to use SubEnum.sh, or use setup.sh script to install them.
https://github.com/bing0o/SubEnum
#Donate t.me/hackgit🍻»»»
21 579
rewind
Rewind is a snapshot-based coverage-guided fuzzer targeting Windows kernel components.
The idea is to start from a snapshot of a live running system. This snapshot is composed of the physical memory pages along with the state of the cpu.
This state is used to setup the initial state of a virtual cpu. By leveraging on-demand paging only the pages needed for the execution of the target function are read from the snapshot.
Because we use a dedicated virtual machine with only the physical memory pages useful for the execution of the target function, restoring a snapshot is fast.
https://github.com/quarkslab/rewind
21 579
xnLinkFinder
This is a tool used to discover endpoints (and potential parameters) for a given target.
It can find them by:
▫️ crawling a target (pass a domain/URL)
▫️ crawling multiple targets (pass a file of domains/URLs)
▫️ searching files in a given directory (pass a directory name)
▫️ get them from a Burp project (pass location of a Burp XML file)
▫️ get them from an OWASP ZAP project (pass location of a ZAP ASCII message file)
▫️ processing a waymore results directory (searching archived response files from waymore -mode R and also requesting URLs from waymore.txt and the original URLs from index.txt - see waymore README.md)
https://github.com/xnl-h4ck3r/xnLinkFinder
21 579
Symbiotic
Symbiotic is an open-source framework for program analysis integrating instrumentation, static program slicing and various program analysis tools. Symbiotic is highly modular and most of its components are self-standing programs or LLVM passes that have their own repositories at https://github.com/staticafi
https://github.com/staticafi/symbiotic
21 579
GetFGPP
Get Fine Grained Password Policy
You must have have read access to the FGPP Container and FGPP Objects to enumerate this. By default, only admins have this right.
https://github.com/n00py/GetFGPP
t.me/hackgit
21 579
CVE-2022-42889 PoC
This is Proof of Concept for the vulnerability CVE-2022-42889. This code will run the JavaScript code 195 + 324. If vulnerable the output should be:
PoC Output: 519
https://github.com/SeanWrightSec/CVE-2022-42889-PoC
Details:
https://blogs.apache.org/security/entry/cve-2022-42889
#cve #poc21 579
Kunyu
More Efficient Corporate Asset Collection.
Application scenario:
▫️ Forgotten and isolated assets in the enterprise are identified and added to security management.
▫️ Perform quick investigation and statistics on externally exposed assets of the enterprise.
▫️ Red and blue are used against related requirements, and batch inspections of captured IPs are performed.
▫️ Collect vulnerable assets in batches (0day/1day) for equipment and terminals within the impact.
▫️ Information on sites involved in new-type cybercrime cases is quickly collected and merged for more efficient research, judgment, and analysis.
▫️ Statistic and reproduce the fragile assets on the Internet that are affected by related vulnerabilities.
https://github.com/knownsec/Kunyu
21 579
Privado
Privado is an open-source static code analysis tool to discover data flows in the code. It detects Personally Identifiable Information (PII) being processed and further maps the data flow from the point of collection to "sinks" such as external third parties, databases, logs, and internal APIs.
https://github.com/Privado-Inc/privado
