HackGit
Ir al canal en Telegram
The channel was created for cybersecurity specialists. • Offensive Security • RedTeam • Malware Research • BugBounty • OSINT • etc Disclaimer: t.me/hackgit/2082 Donations - Ads: t.me/hackgit/5423
Mostrar más📈 Análisis del canal de Telegram HackGit
El canal HackGit (@hackgit) en el segmento lingüístico de Inglés es un actor destacado. Actualmente la comunidad reúne a 21 579 suscriptores, ocupando la posición 4 526 en la categoría Tecnologías y Aplicaciones y el puesto 1 853 en la región EEUU.
📊 Métricas de audiencia y dinámica
Desde su creación el невідомо, el proyecto ha mostrado un crecimiento acelerado, reuniendo a 21 579 suscriptores.
Según los últimos datos del 02 marzo, 2025, el canal mantiene una actividad estable. En los últimos 30 días la variación de miembros fue de 19, y en las últimas 24 horas de 0, conservando un alto alcance.
- Estado de verificación: No verificado
- Tasa de interacción (ER): El promedio de interacción de la audiencia es 0%. Durante las primeras 24 horas tras publicar, el contenido suele obtener N/A% de reacciones respecto al total de suscriptores.
- Alcance de las publicaciones: Cada publicación recibe en promedio 0 visualizaciones. En el primer día suele acumular 0 visualizaciones.
- Reacciones e interacción: La audiencia responde de forma activa: el promedio de reacciones por publicación es 0.
📝 Descripción y política de contenido
El autor describe el recurso como un espacio para expresar opiniones subjetivas:
“The channel was created for cybersecurity specialists.
• Offensive Security
• RedTeam
• Malware Research
• BugBounty
• OSINT
• etc
Disclaimer:
t.me/hackgit/2082
Donations - Ads:
t.me/hackgit/5423”
Gracias a la alta frecuencia de actualizaciones (últimos datos recibidos el 11 noviembre, 2026), el canal mantiene la vigencia y un amplio alcance. La analítica demuestra que la audiencia interactúa activamente con el contenido, lo que lo convierte en un punto de referencia dentro de la categoría Tecnologías y Aplicaciones.
21 579
Suscriptores
Sin datos24 horas
-37 días
+1930 días
Archivo de publicaciones
21 579
gpu poisoning
hide the payload inside the gpu memory.
after my older repo, in which i used the thread description to hide the payload, i wanted to find new way, so now im using nividia gpu memory using cuda api's to allocate, write, and free when there is no need for the payload to be found in memory.
https://gitlab.com/ORCA000/gp
21 579
ChopHound
Some scripts for dealing with any challenges that might arise when importing (large) JSON datasets into BloodHound.
https://github.com/bitsadmin/chophound
Blog post:
https://blog.bitsadmin.com/blog/dealing-with-large-bloodhound-datasets
#ad #bloodhound #cypher
21 579
Intrigue Core
Framework for discovering attack surface. It discovers security-relevant assets and exposures within the context of projects and can be used with a human-in-the-loop running individual tasks, and/or automated through the use of workflows.
With a flexible entity model and an incredibly deep enrichment system, it is the most full-featured attack surface discovery framework of its kind.
https://github.com/intrigueio/intrigue-core
@HackGit
21 579
Parsec
Open source Dropbox-like file sharing with full client encryption!
Parsec allows you to easily share your work and data in the cloud in total privacy thanks to end-to-end cryptographic security.
Features:
▫️ Works as a virtual drive on you computer. You can access and modify all the data stored in Parsec with your regular softwares just like you would on your local hard-drive.
▫️ Never lose any data. Synchronization with the remote server never destroy any data, hence you can browse data history and recover from any point in time.
▫️ Client-side cryptographic security. Data and metadata are only visible by you and the ones you choose to share with.
▫️ Cryptographic signature. Each modification is signed by it author making trivial to identify modifications.
▫️ Cloud provider agnostic. Server provides connectors for S3 and swift object storage.
▫️ Simplified enrollment. New user enrollment is simple as sharing a link and a token code.
https://github.com/Scille/parsec-cloud
Homepage:
https://parsec.cloud
Documentation:
https://parsec-cloud.readthedocs.org
21 579
FuzzSSH
Free software tool created to detect #SSH (protocol) vulnerabilities.
https://github.com/epsylon/fuzzssh
@HackGit
21 579
osi.ig
Open Source Information Instagram
▫️ The Instagram OSINT Tool gets a range of information from an Instagram account that you normally wouldn't be able to get from just looking at their profile
The information includes:
▫️ [ profile ] : user id, followers / following, number of uploads, profile img URL, business enum, external URL, joined Recently, etc
▫️ [ tags & mentions ] : most used hashtags and mentioned accounts
▫️ [ email ] : if any email is used anywhere it'll be displayed
▫️ [ posts ] : accessability caption, location, timestamp, caption, picture url, etc
✔️ ( yet not working correctly with posts instagram marks as 'sensitive cotent' )
https://github.com/th3unkn0n/osi.ig
@HackGit
21 579
Repost from Pentesting Shop
BadUSB with MicroSD
This is one of the last developments related to rubberducky or badusb devices. This device is based on the ATMEGA32U4 microprocessor which is able to emulate many USB modes like HID, used for injecting key presses to the target system.
The main processor is based on Arduino Leonardo R3 development board and the improvement is that a microSD card slot is included to allow storing many different payloads. The microSD card has to be FAT32 formatted in order to be recognized.
You can find the firmware and firmware instructions here as well as watch the video.
Buy online:
🛒 https://bit.ly/3HV8UJM
#usb #badusb
21 579
IYPS
A password strength test app with strength, estimated crack times, warnings and suggestions to help make better passwords.
Features:
▫️ Fully open source
▫️ Material design
▫️ Completely offline
▫️ No permissions needed
▫️ Works on Android 6.0 and above devices
▫️ Supports both light and dark theme
▫️ No ads
▫️ No collection of personal data
▫️ Supported languages: English, Dutch, French, German, Italian, Japanese
https://github.com/the-weird-aquarian/IYPS
@HackGit
21 579
Fuzzuli
A url fuzzing tool that aims to find critical backup files by creating a dynamic wordlist based on the domain.
https://github.com/musana/fuzzuli
@HackGit
21 579
kernel-mii
Cobalt Strike Beacon Object File foundation for kernel exploitation using CVE-2021-21551.
This is a #Cobalt Strike (CS) Beacon Object File (BOF) which exploits CVE-2021-21551. It only overwrites the beacon process token with the system process token. But this BOF is mostly just a good foundation for further kernel exploitation via CS.
https://github.com/NorthwaveSecurity/kernel-mii
@HackGit
21 579
Scout
URL fuzzer and spider for discovering undisclosed VHOSTS, files and directories on a web server.
https://github.com/liamg/scout
@HackGit
21 579
Chrome-Android-and-Windows-0day-RCE-SBX
https://github.com/emredavut/Chrome-Android-and-Windows-0day-RCE-SBX
Research:
https://blog.google/threat-analysis-group/new-campaign-targeting-security-researchers/
21 579
Zena
Stored #XSS to #RCE #Exploit #POC
Exploit POC for Rocket Software's Zena application v. 4.2.1 - Stored XSS to RCE
CVE-2021-45025
CVE-2021-45026
POC Process:
▫️ Logs into Zena's webconfig page using default credentials
▫️ Drops Stored XSS payload
▫️ Payload needs to be triggered by someone navigating to the webconfig page
▫️ Triggered payload uses REST API backend of Zena to find an agent and build a Task for that agent
▫️ Task is then triggered for agent thus executing the specified command
https://github.com/JetP1ane/Zena
CookieMonsteRCE - XSS to RCE Exploitation in Zena 4.2.1
https://phoenix-sec.io/2022/06/17/Zena-CookieMonsteRCE.html
#exploit
21 579
Dismember
Dismember is a command-line toolkit for Linux that can be used to scan the memory of all processes (or particular ones) for common secrets and custom regular expressions, among other things.
It will eventually become a full /proc toolkit.
https://github.com/liamg/dismember
@HackGit
21 579
Astra
Astra finds urls, endpoints, aws buckets, api keys, tokens, etc from a given url/s. It combines the paths and endpoints with the given domain and gives full URL. We can use it on js, html, etc files. Astra uses asynchronous method to fetch URLs using python's aiohttp and asyncio.
Its a combination of linkfinder and secretfinder. Uses Regex's from linkfinder, secretfinder and nuclei templates. Although None of them worked exactly because python's regex r way different. So basically everyone of them is modified by me.
https://github.com/Sachin-v3rma/Astra
@HackGit
21 579
Sealighter
Easy ETW Tracing for Security Research
Features:
▫️ Subscribe to multiple ETW and WPP Providers at once
▫️ Automatically parse events into JSON without needing to know format
▫️ Robust Event filtering including filter chaining and filter negation
▫️ Output to Standard out, File, or Windows Event Log (to be ingested by other tools)
▫️ Get event stack traces
▫️ Configurable Buffering many events in a time period into one with a count, to reduce the number of events generated
https://github.com/pathtofile/Sealighter
21 579
Repost from Pentesting News
A Few Ways to Get TrustedInstaller Privileges
GetTrustedInstaller
Make an executable run with TrustedInstaller permissions under SYSTEM account.
https://github.com/rara64/GetTrustedInstaller
NtObjectManager
This module adds a provider and cmdlets to access the NT object manager namespace.
Example. Apply TrustedInstaller impersonation token to the current PowerShell process:
Install-Module -Name NtObjectManager -Confirm:$false Restart-Service TrustedInstaller $procId = (Get-Process TrustedInstaller).Id $token = Get-NtTokenFromProcess -ProcessId $procId $current = Get-NtThread -Current -PseudoHandle $ctx = $current.Impersonate($token) $impToken = Get-NtToken -Impersonation $impToken.Groupshttps://github.com/googleprojectzero/sandbox-attacksurface-analysis-tools/tree/main/NtObjectManager #localsystem #trustedinstaller
21 579
resolvers.txt
Fresh list of periodically validated public #DNS resolvers.
https://github.com/janmasarik/resolvers
@HackGit
21 579
ShoMon
ShoMon is a Shodan alert feeder for TheHive written in GoLang. With version 2.0, it is more powerful than ever!
https://github.com/KaanSK/shomon
@HackGit
