HackGit
Ir al canal en Telegram
The channel was created for cybersecurity specialists. • Offensive Security • RedTeam • Malware Research • BugBounty • OSINT • etc Disclaimer: t.me/hackgit/2082 Donations - Ads: t.me/hackgit/5423
Mostrar más📈 Análisis del canal de Telegram HackGit
El canal HackGit (@hackgit) en el segmento lingüístico de Inglés es un actor destacado. Actualmente la comunidad reúne a 21 579 suscriptores, ocupando la posición 4 526 en la categoría Tecnologías y Aplicaciones y el puesto 1 853 en la región EEUU.
📊 Métricas de audiencia y dinámica
Desde su creación el невідомо, el proyecto ha mostrado un crecimiento acelerado, reuniendo a 21 579 suscriptores.
Según los últimos datos del 02 marzo, 2025, el canal mantiene una actividad estable. En los últimos 30 días la variación de miembros fue de 19, y en las últimas 24 horas de 0, conservando un alto alcance.
- Estado de verificación: No verificado
- Tasa de interacción (ER): El promedio de interacción de la audiencia es 0%. Durante las primeras 24 horas tras publicar, el contenido suele obtener N/A% de reacciones respecto al total de suscriptores.
- Alcance de las publicaciones: Cada publicación recibe en promedio 0 visualizaciones. En el primer día suele acumular 0 visualizaciones.
- Reacciones e interacción: La audiencia responde de forma activa: el promedio de reacciones por publicación es 0.
📝 Descripción y política de contenido
El autor describe el recurso como un espacio para expresar opiniones subjetivas:
“The channel was created for cybersecurity specialists.
• Offensive Security
• RedTeam
• Malware Research
• BugBounty
• OSINT
• etc
Disclaimer:
t.me/hackgit/2082
Donations - Ads:
t.me/hackgit/5423”
Gracias a la alta frecuencia de actualizaciones (últimos datos recibidos el 11 noviembre, 2026), el canal mantiene la vigencia y un amplio alcance. La analítica demuestra que la audiencia interactúa activamente con el contenido, lo que lo convierte en un punto de referencia dentro de la categoría Tecnologías y Aplicaciones.
21 579
Suscriptores
Sin datos24 horas
-37 días
+1930 días
Archivo de publicaciones
21 579
CVE-2022-33980
Apache Commons RCE can use url,dns,script key-words to connect any server
https://github.com/HKirito/CVE-2022-33980
#cve #RCE
21 579
DashOverride
This is a pre-authenticated RCE exploit for VMware vRealize Operations Manager (vROPS) that impacts versions <= 8.6.3.19682901.
https://github.com/sourceincite/DashOverride
#exploit #RCE
21 579
SCMKit
Source Code Management Attack Toolkit - SCMKit is a toolkit that can be used to attack SCM systems. SCMKit allows the user to specify the SCM system and attack module to use, along with specifying valid credentials (username/password or API key) to the respective SCM system.
Currently, the SCM systems that SCMKit supports are GitHub Enterprise, GitLab Enterprise and Bitbucket Server. The attack modules supported include reconnaissance, privilege escalation and persistence. SCMKit was built in a modular approach, so that new modules and SCM systems can be added in the future by the information security community.
https://github.com/xforcered/SCMKit
21 579
Hydroxide
General purpose pen-testing tool for games on the Roblox engine
https://github.com/Upbolt/Hydroxide
21 579
PSItems
A PowerShell module that finds files and directories as well as file and directory information the quick and easy way!
The goal of this project is to write simple but (very) fast functions for finding (and perhaps managing) FileSystem Objects and their information.
https://github.com/eizedev/PSItems
21 579
Repost from Pentesting Shop
Smart Chip Reader
Support: DNIE, ATM, IC, ID, CAC, SIM, smart card, intelligent card, tax card, and bank card.
Applicable for SIM card and CAC card.
Support touch chip card operations, such as online banking digital signature, for ActivClient, for AKO, for OWA, for DKO, for JKO, for NKO, for BOL, for GKO, for Marinenet, for AF Portal, for Pure Edge Viewer, for ApproveIt, for DCO, for DTS, for LPS, and for Disa Enterprise Email.
Buy online:
🛒 https://ali.ski/rZafy
#reader #card
21 579
D.RDynamicShellcode
Download & Run Dynamic Shellcode : it reads the shellcode from a url (has to be downloadable) locate it in a RWX section in memory and run it, useful for people looking for a shellcode as a 1st stage
https://gitlab.com/ORCA000/d.rdynamicshellcode
21 579
UnamDownloader
A free silent downloader
A free silent (hidden) open-source downloader (binder) that can be built as a native C file or a managed (.NET C#) file. A downloader is essentially the same as a binder although it downloads the files instead of storing them in memory, you can also see my UnamBinder for a normal file binder.
https://github.com/UnamSanctam/UnamDownloader
21 579
Gobuster
A tool used to brute-force:
▫️ URIs (directories and files) in web sites.
▫️ DNS subdomains (with wildcard support).
▫️ Virtual Host names on target web servers.
▫️ Open Amazon S3 buckets
https://github.com/OJ/gobuster
21 579
DefectDojo
DefectDojo is a security orchestration and vulnerability management platform. DefectDojo allows you to manage your application security program, maintain product and application information, triage vulnerabilities and push findings to systems like JIRA and Slack.
DefectDojo enriches and refines vulnerability data using a number of heuristic algorithms that improve with the more you use the platform.
https://github.com/DefectDojo/django-DefectDojo
Demo:
https://demo.defectdojo.org/
21 579
SprayingToolkit
A set of Python scripts/utilities that tries to make password spraying attacks against Lync/S4B & OWA a lot quicker, less painful and more efficient.
https://github.com/byt3bl33d3r/SprayingToolkit
21 579
Shhhloader
A SysWhispers/GetSyscallStub Shellcode Loader that is currently a Work in Progress. It takes raw shellcode as input and compiles a C++ stub that uses syscalls to try and bypass AV/EDR. The included python builder will work on any Linux system that has Mingw-w64 installed.
Features:
▫️ 7 Different Shellcode Execution Methods (ModuleStomping, QueueUserAPC, ProcessHollow, EnumDisplayMonitors, RemoteThreadContext, RemoteThreadSuspended, CurrentThread)
▫️ PPID Spoofing
▫️ Block 3rd Party DLLs
▫️ GetSyscallStub & SysWhispers2
▫️ Obfuscator-LLVM (OLLVM) Support
▫️ Automatic DLL Proxy Generation
▫️ Syscall Name Randomization
▫️ Store Shellcode as English Word Array
▫️ XOR Encryption with Dynamic Key Generation
▫️ Sandbox Evasion via Loaded DLL, Domain, User, Hostname, and System Enumeration
See below video demonstrating the Module Stomping shellcode injection technique executed via DLL Proxying with Windows Defender fully enabled. As seen in the video, the Obfuscator-LLVM and English word list options were also utilized to help evade detection: 👇
https://github.com/icyguider/Shhhloader
21 579
LDAP Monitor
Monitor creation, deletion and changes to LDAP objects live during your pentest or system administration!
With this tool you can quickly see if your attack worked and if it changed LDAP attributes of the target object.
https://github.com/p0dalirius/LDAPmonitor
21 579
Puwr
Easily expand your attack surface on a local network by discovering more hosts, via SSH. Using a machine running a SSH service, Puwr uses a given subnet range to scope out IP's, sending back any successful ping requests it has.
This can be used to create a pivoting attack from a compromised machine, by returning you hosts you couldn't normally discover from your own device. Open ports can then be probed on these discovered devices, to find a gateway into attacking more devices.
https://github.com/Xeonrx/Puwr
21 579
TamperingSyscalls
This is a 2 part novel project consisting of argument spoofing and syscall retrival which both abuse EH in order to subvert EDRs. This project consists of both of these projects in order to provide an alternative solution to direct syscalls.
https://github.com/rad9800/TamperingSyscalls
#edr #evasion #maldev #syscall #tampering
21 579
MNSPlusTrasher
The best and only MNS+ "hacktool" available
MNSPlusTrasher is designed to show flaws in MNS+ which is used by most schools in Rhineland-Palatinate, Germany
https://github.com/basti564/MNSPlusTrasher
21 579
CVE-2022-31101
Exploit for PrestaShop bockwishlist module 2.1.0 SQLi (CVE-2022-31101)
https://github.com/karthikuj/CVE-2022-31101
#cve #exploit
21 579
BlueHound
BlueHound is an open-source tool that helps blue teams pinpoint the security issues that actually matter. By combining information about user permissions, network access and unpatched vulnerabilities, BlueHound reveals the paths attackers would take if they were inside your network
It is a fork of NeoDash, reimagined, to make it suitable for defensive security purposes.
To get started with BlueHound, check out our introductory video and blog post.
https://github.com/zeronetworks/BlueHound
#blueteam
21 579
BootMii loader
This repository contains the public release of the source code for the BootMii stub loader.
https://github.com/fail0verflow/bootmii
