HackGit
Ir al canal en Telegram
The channel was created for cybersecurity specialists. • Offensive Security • RedTeam • Malware Research • BugBounty • OSINT • etc Disclaimer: t.me/hackgit/2082 Donations - Ads: t.me/hackgit/5423
Mostrar más📈 Análisis del canal de Telegram HackGit
El canal HackGit (@hackgit) en el segmento lingüístico de Inglés es un actor destacado. Actualmente la comunidad reúne a 21 579 suscriptores, ocupando la posición 4 526 en la categoría Tecnologías y Aplicaciones y el puesto 1 853 en la región EEUU.
📊 Métricas de audiencia y dinámica
Desde su creación el невідомо, el proyecto ha mostrado un crecimiento acelerado, reuniendo a 21 579 suscriptores.
Según los últimos datos del 02 marzo, 2025, el canal mantiene una actividad estable. En los últimos 30 días la variación de miembros fue de 19, y en las últimas 24 horas de 0, conservando un alto alcance.
- Estado de verificación: No verificado
- Tasa de interacción (ER): El promedio de interacción de la audiencia es 0%. Durante las primeras 24 horas tras publicar, el contenido suele obtener N/A% de reacciones respecto al total de suscriptores.
- Alcance de las publicaciones: Cada publicación recibe en promedio 0 visualizaciones. En el primer día suele acumular 0 visualizaciones.
- Reacciones e interacción: La audiencia responde de forma activa: el promedio de reacciones por publicación es 0.
📝 Descripción y política de contenido
El autor describe el recurso como un espacio para expresar opiniones subjetivas:
“The channel was created for cybersecurity specialists.
• Offensive Security
• RedTeam
• Malware Research
• BugBounty
• OSINT
• etc
Disclaimer:
t.me/hackgit/2082
Donations - Ads:
t.me/hackgit/5423”
Gracias a la alta frecuencia de actualizaciones (últimos datos recibidos el 11 noviembre, 2026), el canal mantiene la vigencia y un amplio alcance. La analítica demuestra que la audiencia interactúa activamente con el contenido, lo que lo convierte en un punto de referencia dentro de la categoría Tecnologías y Aplicaciones.
21 579
Suscriptores
Sin datos24 horas
-37 días
+1930 días
Archivo de publicaciones
21 579
Red-Teaming-TTPs
Free Resources to Practice
https://github.com/RoseSecurity/Red-Teaming-TTPs
#redteam
21 579
unsubscan
A tool to help you find unsubscribe links in your emails
I created unsubscan because I think that anyone should be able to quickly and easily look at their emails and:
▫️ Unsubscribe from whatever they want
▫️ Unsubscribe whenever they want
▫️ Unsubscribe for free
▫️ Unsubscribe without yet another subscription service
▫️ Unsubscribe without having to give another company access to their emails
▫️ Unsubscribe without having to forward emails to other companies
https://github.com/LGUG2Z/unsubscan
21 579
Gliding Sword
A full fledged exploitation framework written in pure python3.
https://github.com/MrSharkSpamBot/GlidingSword
21 579
GVNG Search
Command line toolkit for gathering information about person (nickname search, validate email, geolocate ip) and domain (traceroute, dns lookup, tcp port scan etc).
https://github.com/ByDog3r/GvngSearch
21 579
liffy
A little python tool to perform Local file inclusion.
Feature:
▫️ data:// for code execution
▫️ expect:// for code execution
▫️ input:// for code execution
▫️ filter:// for arbitrary file reads
▫️ /proc/self/environ for code execution in CGI mode
▫️ Apache access.log poisoning
▫️ Linux auth.log SSH poisoning
▫️ Direct payload delivery with no stager
▫️ Support for absolute and relative path traversal
▫️ Support for cookies for authentication
https://github.com/mzfr/liffy
21 579
Alternative Code Execution
According to Microsoft, a callback function is code within a managed application that helps an unmanaged DLL function complete a task.
Calls to a callback function pass indirectly from a managed application, through a DLL function, and back to the managed implementation.
https://github.com/aahmad097/AlternativeShellcodeExec
21 579
Ekko
A small sleep obfuscation technique that uses CreateTimerQueueTimer to queue up the ROP chain that performs Sleep obfuscation
https://github.com/Cracked5pider/Ekko
21 579
CloudBrute
A tool to find a company (target) infrastructure, files, and apps on the top cloud providers (Amazon, Google, Microsoft, DigitalOcean, Alibaba, Vultr, Linode). The outcome is useful for bug bounty hunters, red teamers, and penetration testers alike.
Features:
▫️ Cloud detection (IPINFO API and Source Code)
▫️ Supports all major providers
▫️ Black-Box (unauthenticated)
▫️ Fast (concurrent)
▫️ Modular and easily customizable
▫️ Cross Platform (windows, linux, mac)
▫️ User-Agent Randomization
▫️ Proxy Randomization (HTTP, Socks5)
▫️ Supported Cloud Providers
https://github.com/0xsha/CloudBrute
Research:
https://0xsha.io/blog/introducing-cloudbrute-wild-hunt-on-the-clouds
21 579
Red Team Tactics: Utilizing Syscalls in C# - Prerequisite Knowledge
https://jhalon.github.io/utilizing-syscalls-in-csharp-1/
21 579
tomcatWarDeployer
Apache Tomcat auto WAR deployment & pwning penetration testing tool.
This is a penetration testing tool intended to leverage Apache Tomcat credentials in order to automatically generate and deploy JSP Backdoor, as well as invoke it afterwards and provide nice shell (either via web gui, listening port binded on remote machine or as a reverse tcp payload connecting back to the adversary).
In practice, it generates JSP backdoor WAR package on-the-fly and deploys it at the Apache Tomcat Manager Application, using valid HTTP Authentication credentials that pentester provided (or custom ones, in the end, we all love tomcat:tomcat ).
The tool offers couple of handy features - like manager's panel lookup logic, support for CVE-2007-1860 double encoding issue, CSRF handling in newer Tomcat's.
https://github.com/mgeeky/tomcatWarDeployer
21 579
DelegationBOF
This tool uses LDAP to check a domain for known abusable Kerberos delegation settings. Currently, it supports RBCD, Constrained, Constrained w/Protocol Transition, and Unconstrained Delegation checks.
Despite the name, I decided to add in a couple more features since the bulk of the code was already there. So now there is a get-spns command as well which can look for ASREP accounts or Kerberoastable SPNs.
https://github.com/IcebreakerSecurity/DelegationBOF
21 579
Repost from Pentesting News
PoC for MS-DFSNM coerce authentication using NetrDfsRemoveStdRoot method
Spooler service disabled, RPC filters installed to prevent PetitPotam and File Server VSS Agent Service not installed but you still want to relay DC authentication to ADCS? Don't worry MS-DFSNM have your back:
▫️ https://github.com/Wh04m1001/DFSCoerce
Inspired by:
▫️ https://github.com/topotam/PetitPotam
▫️ https://github.com/ShutdownRepo/ShadowCoerce
▫️ https://github.com/leechristensen/SpoolSample
#authentication #coercion #petitpotam #dfsnm
21 579
KDigger
Kubernetes focused container assessment tool for penetration testing.
Features:
▫️ try to guess your container runtime.
▫️ See your capabilities.
▫️ Scan for namespace activation and configuration.
▫️ Scan for the allowed syscalls.
But you can also do more Kubernetes specific operations:
▫️ Retrieve service account token.
▫️ Scan token permissions.
▫️ List interesting environment variables.
▫️ List available devices.
▫️ Retrieve all available services in a cluster.
▫️ Scan the admission controller chain!
https://github.com/quarkslab/kdigger
21 579
UhuruOS
Hackers' Linux Distribution based on Arch Linux and so on.
Features:
▫️ Manjaro Repository for stable update
▫️ Sophisticated appearance (Thanks to Alter Linux)
▫️ pre-installed BlackArch Repository
▫️ Beautiful Theme (MidNight-BlueNight)
Pre-Installed packages
▫️ nmap
▫️ Rustscan
▫️ masscan
▫️ sublist3r
▫️ dnsrecon
▫️ ffuf
▫️ seclists
▫️ mitmproxy
▫️ nikto
▫️ metasploit
▫️ sploitctl(searchsploit and etc)
▫️ sqlmap
▫️ wpscan
▫️ droopescan
▫️ magescan
▫️ wireshark-qt
▫️ wireshark-cli
▫️ tcpdump
▫️ hydra
▫️ john
▫️ And so on!
https://github.com/infoengine1337/UhuruOS
21 579
Cloud-Bucket-Leak-Detection-Tools
https://github.com/UzJu/Cloud-Bucket-Leak-Detection-Tools/blob/main/README.en.md
21 579
CogView2
Еще один аналог DALL·E но более быстрый, для преобразования любого (китайского/английского) текста в изображение.
https://github.com/THUDM/CogView2
#images #chinese #english #text
