HackGit

​​Throwing Star LAN Tap The Throwing Star LAN Tap is a passive Ethernet tap, requiring no power for operation. There are active methods of tapping Ethernet connections (e.g., a mirror port on a switch), but none can beat passive taps for portability. To the target network, the Throwing Star LAN Tap looks just like a section of cable, but the wires in the cable extend to the monitoring ports in addition to connecting one target port to the other. The monitoring ports (J3 and J4) are receive-only; they connect to the receive data lines on the monitoring station but do not connect to the station's transmit lines. This makes it impossible for the monitoring station to accidentally transmit data packets onto the target network. The Throwing Star LAN Tap is designed to monitor 10BASET and 100BASETX networks. It is not possible for an unpowered tap to perform monitoring of 1000BASET (Gigabit Ethernet) networks, so the Throwing Star LAN Tap intentionally degrades the quality of 1000BASET target networks, forcing them to negotiate a lower speed (typically 100BASETX) that can be passively monitored. This is the purpose of the two capacitors (C1 and C2). Like all passive LAN Taps, the Throwing Star LAN Tap degrades signal quality to some extent. Except as described above for Gigabit networks, this rarely causes problems on the target network. In situations where very long cables are in use, the signal degradation could reduce network performance. It is a good practice to use cables that are not any longer than necessary. Usage: ▫️ Use Ethernet cables to connect the Throwing Star LAN Tap (J1 and J2) in line with a target network to be monitored. ▫️ Use Ethernet cables to connect one or both of the monitoring ports (J3 and J4) to ports on one or two monitoring stations. Each port monitors traffic in one direction only. ▫️ Use your favorite software (e.g., tcpdump or Wireshark) on the monitoring station(s) to capture network traffic. Buy online: 🛒 https://bit.ly/3xk0APB #lan #monitoring #throwing

​​CVE-2022-20128 Android Debug Bridge (adb) was vulnerable to directory traversal attacks that could have been mounted by rogue/compromised adb daemons during an adb pull operation. https://github.com/irsl/CVE-2022-20128 #cve

​​CVE-2022-20360 Android setChecked LPE https://github.com/nidhi7598/packages_apps_Settings_AOSP_10_r33_CVE-2022-20360 #cve

​​WmiSpawn This is a PoC to invesitgate WMI process execution technique. Using WMI functionallity, we can spawn any process as a child process of WmiPrvSE.exe. This tool supports not only local machine's process execution but also remote machine's process execution. https://github.com/daem0nc0re/TangledWinExec/tree/main/WmiSpawn #redteam

​​LimeLighter A tool which creates a spoof code signing certificates and sign binaries and DLL files to help evade EDR products and avoid MSS and sock scruitney. LimeLighter can also use valid code signing certificates to sign files. Limelighter can use a fully qualified domain name such as acme.com. https://github.com/Tylous/Limelighter #redteam

​​Evil-Storm This tool can create a Fake Access point. Features: ▫️ Create a Fake AP with a specific name and password ▫️ DNS spoofing (not completed) ▫️ ARP spoofing ▫️ Reverse shell ▫️ give the Victim Access to the Internet after connecting to your Fake AP ▫️ see all websites victim open it you are the Router https://github.com/Root3inspector/Evil-Storm

​​Sudo-Stealer Sudo-Stealer is an *nix program for stealing sudo passwords by disguising as the original sudo software. Its capabilities are almost similar to that of the original sudo program as such as displaying the same input messages, error messages like incorrect attempts and also handling of some system signals such as SIGQUIT, SIGINT & SIGTSTP. It verify the password, stores it in json support as well as username, the command that was executed and the execution time in a file for later usage. Features: ▫️ Maximum of 3 wrong password attempts ▫️ Timeouts the superuser session's after 15 minutes ▫️ Stores correct passwords with their respective commands and the time it was executed https://github.com/Genaro-Chris/Sudo-Stealer

​​Android RAT #RAT built in Android APP for Android User https://github.com/Th30neAnd0nly/Ohm

​​pypykatz Mimikatz implementation in pure Python. https://github.com/skelsec/pypykatz

​​LIKE-DBG Fully dockerized Linux kernel debugging environment. (LInux-KErnel-DeBuGger) aims at automating the boring steps when trying to set up a Linux kernel debugging environment. https://github.com/0xricksanchez/like-dbg

​​Chameleon Chameleon provides better content discovery by using wappalyzer's set of technology fingerprints alongside custom wordlists tailored to each detected technologies. The tool is highly customizable and allows users to add in their own custom wordlits, extensions or fingerprints. https://github.com/iustin24/chameleon The full documentation is available on: https://youst.in/posts/context-aware-conent-discovery-with-chameleon/

​​DuckySploit V3 Roblox Level 7 Executor Free. Features: ▫️ Dark Hub ▫️ Dex Explorer ▫️ Fusionic Hub ▫️ Kraken Hub ▫️ Ori Hub ▫️ Owl Hub ▫️ Solaris ▫️ Zyrex Hub https://github.com/Omnis9/DuckySploit-V3

​​EfiCMake CMake template for a basic EFI application/bootkit. https://github.com/mrexodia/EfiCMake

​​CVE-2022-36804-RCE Zimbra Unauthenticated Remote Code Execution Exploit. https://github.com/mohamedbenchikh/CVE-2022-27925 #cve #exploit

​​vMass Bot vMass Bot automates the exploitation of remote hosts by trying to find environment files (.env) in target hosts and extract tools and info insde, then the bot detects the target host CMS and tries to auto exploit and upload shell payload using the vMass vulnerability set ( 108 exploits in the current version 1.2). No target list ? No worries, vMass Bot can generate hosts lists from IP ranges, URL list, dotenv low profile dorks and scrapes from (bing, duckduckgo, ..) or you can use IP ranges from various hosting providers for best hit rate while scanning, then generated lists can be checked using the bot to eleminate dead hosts. https://github.com/c99tn/vMass

​​exploits-predict Predicting the probability of an exploit being released after a CVE is published (by Machine learning algorithm) https://github.com/wisoffe/exploits-predict #cve #exploit

​​CVE-2022-40297 Privilage escalation in Ubuntu Touch 16.04 - by PIN Bruteforce. https://github.com/filipkarc/PoC-ubuntutouch-pin-privesc #cve

​​Microwaveo Convert dll exe, etc. to an encrypted shellcode. https://github.com/Ciyfly/microwaveo

​​Java-Deserialization-Cheat-Sheet A cheat sheet for pentesters and researchers about deserialization vulnerabilities in various Java (JVM) serialization libraries. https://github.com/GrrrDog/Java-Deserialization-Cheat-Sheet #java #deserialization #cheatsheet

​​TcbElevation.cpp We are releasing an alternative way for elevating to SYSTEM when you have SeTcbPrivilege How? Leveraging AcquireCredentialsHandle through an SSPI hook that allows authenticating as SYSTEM to SCM Should be "lighter" than the classic S4U https://gist.github.com/antonioCoco/19563adef860614b56d010d92e67d178