HackGit
Ir al canal en Telegram
The channel was created for cybersecurity specialists. • Offensive Security • RedTeam • Malware Research • BugBounty • OSINT • etc Disclaimer: t.me/hackgit/2082 Donations - Ads: t.me/hackgit/5423
Mostrar más📈 Análisis del canal de Telegram HackGit
El canal HackGit (@hackgit) en el segmento lingüístico de Inglés es un actor destacado. Actualmente la comunidad reúne a 21 579 suscriptores, ocupando la posición 4 526 en la categoría Tecnologías y Aplicaciones y el puesto 1 853 en la región EEUU.
📊 Métricas de audiencia y dinámica
Desde su creación el невідомо, el proyecto ha mostrado un crecimiento acelerado, reuniendo a 21 579 suscriptores.
Según los últimos datos del 02 marzo, 2025, el canal mantiene una actividad estable. En los últimos 30 días la variación de miembros fue de 19, y en las últimas 24 horas de 0, conservando un alto alcance.
- Estado de verificación: No verificado
- Tasa de interacción (ER): El promedio de interacción de la audiencia es 0%. Durante las primeras 24 horas tras publicar, el contenido suele obtener N/A% de reacciones respecto al total de suscriptores.
- Alcance de las publicaciones: Cada publicación recibe en promedio 0 visualizaciones. En el primer día suele acumular 0 visualizaciones.
- Reacciones e interacción: La audiencia responde de forma activa: el promedio de reacciones por publicación es 0.
📝 Descripción y política de contenido
El autor describe el recurso como un espacio para expresar opiniones subjetivas:
“The channel was created for cybersecurity specialists.
• Offensive Security
• RedTeam
• Malware Research
• BugBounty
• OSINT
• etc
Disclaimer:
t.me/hackgit/2082
Donations - Ads:
t.me/hackgit/5423”
Gracias a la alta frecuencia de actualizaciones (últimos datos recibidos el 11 noviembre, 2026), el canal mantiene la vigencia y un amplio alcance. La analítica demuestra que la audiencia interactúa activamente con el contenido, lo que lo convierte en un punto de referencia dentro de la categoría Tecnologías y Aplicaciones.
21 579
Suscriptores
Sin datos24 horas
-37 días
+1930 días
Archivo de publicaciones
21 579
Probe
This is a special tool for bug hunter for automated recon process smoothly.
https://github.com/whoami-anoint/Probe
t.me/hackgit
21 579
CVE-2022-1388
F5 BIG-IP RCE exploitation (CVE-2022-1388)
https://github.com/alt3kx/CVE-2022-1388_PoC
#cve #poc
21 579
PyExchangePasswordSpray
Microsoft Exchange password spraying tool with proxy capabilities.
Features:
▫️ Proxy List Support . HTTP & HTTPS
▫️ Set a delay between each password spray.
▫️ Use user & password list from a txt file
▫️ Multi-threading support
https://github.com/iomoath/PyExchangePasswordSpray
21 579
BlazingFast
DoS method (updated 2022)
The previous method I posted has been patched, this one has not been. You can modify this script or implement it in order to use bots to take down a BlazingFast VPS. BlazingFast is known for being a relatively good host, and with my own experience, has a good team.
BlazingFast protects all its virtual private servers with very good mitigation and detection methods, this script bypasses them by pretending to be a whitelisted crawling bot (BlazingFast use them to crawl servers for statistics such as avg heat, avg net use, etc) and succeeds in sending enough traffic to knock down a single server its aimed at.
https://github.com/0x44F/blazingfast-dos-updated
21 579
Ekko_CFG_Bypass
A PoC for adding NtContinue to the CFG allowed list in order to make callback-based sleep obfuscation techniques work in a CFG protected process.
Use the markCFGValid_std function to call SetProcessValidCallTargets and the markCFGValid_nt function to call NtSetInformationVirtualMemory.
https://github.com/IcebreakerSecurity/Ekko_CFG_Bypass
t.me/hackgit
21 579
The_spy_job
This Tool is focused on the OSINT of almost all areas (People, Nicknames, Social Networks, Emails, Phone Numbers, Websites, Public IPs and Images).
https://github.com/XDeadHackerX/The_spy_job
t.me/hackgit
21 579
Repost from Pentesting Shop
WUD v1.2
The device has an ESP32-S2 module that allows it to be identified as a keyboard + USB disk. It also a microSD slot that can be identified as MSC SD Card.
The new ESP32-S2 module from Espressif addresses the security flaws in the original ESP32. While the ESP32-S2 does include improved security features, it lacks the Bluetooth capabilities of the original ESP32 module. But it supports native USB.
The pre-flashed firmware is "Wireless USB disk". It use ESP32-S2 as an USB Disk with Wireless accessibility. HTTP file server be used with both upload and download capability.
Firmware:
▫️ Source code of wireless usb disk - written in Arduino
▫️ usb_msc_wireless_disk from espressif
▫️ WUD-Ducky Thanks tobozo for his great projects
Buy online:
🛒 https://ali.ski/AJoiRH
#esp32s2 #usb #ducky
21 579
CVE-2022-24637
Exploit for the Unauthenticated RCE in Open Web Analytics (OWA) <1.7.4. This work is based on https://devel0pment.de/?p=2494.
https://github.com/JacobEbben/CVE-2022-24637
#cve #RCE
21 579
YongyouNC
UF NC deserialization vulnerability payload generation
https://github.com/Ghost2097221/YongyouNC-Unserialize-Tools
t.me/hackgit
21 579
SandboxBootkit
Bootkit tested on Windows Sandbox to patch ntoskrnl.exe and disable DSE/PatchGuard.
https://github.com/thesecretclub/SandboxBootkit
t.me/hackgit
21 579
Reinschauer
A PoC to remotely control Windows machines over Websockets.
▫️ Other than most HVNC implementations, reinschauer converts raw bitmaps to JPEG before sending data across the network to reduce frame size.
▫️ FPS can be set via the GUI.
▫️ Basic mouse and keyboard controls are possible.
▫️ You can use the script in the server folder to generate TLS server files or bring your own.
▫️ The server window can be resized freely, while click events should™ be translated to the correct pixel on the target machine.
https://github.com/ps1337/reinschauer
t.me/hackgit
21 579
Hunt3r
Made your bugbounty subdomains reconnaissance easier with Hunt3r the web application reconnaissance framework.
https://github.com/EasyRecon/Hunt3r
t.me/hackgit
21 579
Gel4y Mini Shell Backdoor
A backdoor built using the PHP programming language with the PHP procedural method in stealth mode where the file size will not exceed 15KB. Each function has been converted into a hex code to allow this webshell to penetrate the WAF (Firewall) server system.
Features:
▫️ Multiple File Upload
▫️ Create Folder and File
▫️ File Download
Bypassed:
▫️ 403 Forbidden
▫️ 406 Not Acceptable
▫️ Imunify360
https://github.com/22XploiterCrew-Team/Gel4y-Mini-Shell-Backdoor
t.me/hackgit
21 579
Shreder
A powerful multi-threaded SSH protocol password brute-force tool.
Features:
▫️ Very fast password guessing, just one password in 0.1 second.
▫️ Optimized for big password lists, Shreder tries 1000 passwords in 1 minute and 40 seconds.
▫️ Simple CLI and API usage.
https://github.com/EntySec/Shreder
21 579
WhiskeySAML and Friends
TicketsPlease: Python library to assist with the generation of Kerberos tickets, remote retrieval of ADFS configuration settings, generation of Golden SAML tokens, and retrieval of Azure Access Tokens.
WhiskeySAML: Proof of concept tool for a Golden SAML attack with Remote ADFS Configuration Extraction. This tool leverages the TicketsPlease library.
ShockNAwe: Proof of concept tool to generate a Golden SAML token that will be used to request an Access Token from Azure Core Management which will then be used to enumerate and attack the virtual machines within the Azure subscription.
https://github.com/secureworks/whiskeysamlandfriends
t.me/hackgit
21 579
RomBuster
A router exploitation tool that allows to disclosure network router admin password.
Features:
▫️ Exploits vulnerabilities in most popular routers such as D-Link, Zyxel, TP-Link, Cisco and Huawei.
▫️ Optimized to exploit multiple routers at one time from list.
▫️ Simple CLI and API usage.
https://github.com/EntySec/RomBuster
t.me/hackgit
21 579
Knockles
eBPF Port Knocking Tool
Knockles, is a port knocking tool based on eBPF. It allows you to remotely open a TCP connection while being completely invisible to port scanners.
▫️ A single SYN request is sent on an opened || closed port.
▫️ It carries an OTP for authentication so you can be the only one to open a port.
▫️ Once authentified, a random (HMAC based) port is opened for a TCP connection.
▫️ Then, the port is closed as soon as a connection has been established.
https://github.com/eeriedusk/knockles
t.me/hackgit
21 579
mscan
A domain penetration scanning tool that facilitates one-click automated, all-inclusive information gathering and scanning for domain lifting vulnerabilities.
Supports common domain information collection, Zerologon, Nopac, Spooler, MS17010 scanning and other features.
https://github.com/lele8/mscan
21 579
Pentdocks
Web application pentesting tools for docker.
Usually, people who have one laptop face problems when multitasking. While pentesting, I used to install and run VMware in ubuntu to run other tools to finish my work faster.
So i found a way to solve this using docker and I fell in love with it. The most amazing thing that i'm fascinated about is that the docker is just like an OS, internally running. You can keep backups using sudo docker save os:latest > os.tar and many more. just try it, you will love it.
https://github.com/diwsec/pentdocks
@HackGit
21 579
NETPHY
Web network analyzer.
Available for:
▫️ Android terminal emulators
▫️ windows powershell and mac ios terminals
▫️ Linux environments
Find:
▫️ Web page header
▫️ Web page encode
▫️ Web page cookies
▫️ Web page history
▫️ Request recent page logs
▫️ Determine web page legitimate
▫️ Request web status code
▫️ Detect an hacker phish link
https://github.com/shade234sherif/NETPHY
@HackGit
