HackGit
Ir al canal en Telegram
The channel was created for cybersecurity specialists. • Offensive Security • RedTeam • Malware Research • BugBounty • OSINT • etc Disclaimer: t.me/hackgit/2082 Donations - Ads: t.me/hackgit/5423
Mostrar más📈 Análisis del canal de Telegram HackGit
El canal HackGit (@hackgit) en el segmento lingüístico de Inglés es un actor destacado. Actualmente la comunidad reúne a 21 579 suscriptores, ocupando la posición 4 526 en la categoría Tecnologías y Aplicaciones y el puesto 1 853 en la región EEUU.
📊 Métricas de audiencia y dinámica
Desde su creación el невідомо, el proyecto ha mostrado un crecimiento acelerado, reuniendo a 21 579 suscriptores.
Según los últimos datos del 02 marzo, 2025, el canal mantiene una actividad estable. En los últimos 30 días la variación de miembros fue de 19, y en las últimas 24 horas de 0, conservando un alto alcance.
- Estado de verificación: No verificado
- Tasa de interacción (ER): El promedio de interacción de la audiencia es 0%. Durante las primeras 24 horas tras publicar, el contenido suele obtener N/A% de reacciones respecto al total de suscriptores.
- Alcance de las publicaciones: Cada publicación recibe en promedio 0 visualizaciones. En el primer día suele acumular 0 visualizaciones.
- Reacciones e interacción: La audiencia responde de forma activa: el promedio de reacciones por publicación es 0.
📝 Descripción y política de contenido
El autor describe el recurso como un espacio para expresar opiniones subjetivas:
“The channel was created for cybersecurity specialists.
• Offensive Security
• RedTeam
• Malware Research
• BugBounty
• OSINT
• etc
Disclaimer:
t.me/hackgit/2082
Donations - Ads:
t.me/hackgit/5423”
Gracias a la alta frecuencia de actualizaciones (últimos datos recibidos el 03 marzo, 2025), el canal mantiene la vigencia y un amplio alcance. La analítica demuestra que la audiencia interactúa activamente con el contenido, lo que lo convierte en un punto de referencia dentro de la categoría Tecnologías y Aplicaciones.
21 579
Suscriptores
Sin datos24 horas
-37 días
+1930 días
Archivo de publicaciones
21 579
Slash
Automated doxer tool
Slash supports social media search (over 180 websites) , forum search , pastebin leak search , github commit search. New will be added soon... Also slash scrapes multiple informations from important websites as : Name , Bio , Location , Website , User Info... And it extracting Phone Number - Email Adress from Bios...
Slash include threading modules. It make slash faster than others. It means, it search social media,github commit,forums,pastebin in same time.
https://github.com/redc86/slash
21 579
D4TA-HUNTER
#Osint Framework for #KALI
A tool created in order to automate the collection of information about the employees of a company that is going to be audited for ethical hacking.
In addition, in this tool we can find in the "search company" section by inserting the domain of a company, emails of employees, subdomains and IP's of servers.
https://github.com/micro-joan/D4TA-HUNTER
21 579
The PenTesters Framework (PTF)
A Python script designed for Debian/Ubuntu/ArchLinux based distributions to create a similar and familiar distribution for Penetration Testing. As #pentesters, we've been accustom to the /pentest/ directories or our own toolsets that we want to keep up-to-date all of the time. We have those "go to" tools that we use on a regular basis, and using the latest and greatest is important.
PTF attempts to install all of your penetration testing tools (latest and greatest), compile them, build them, and make it so that you can install/update your distribution on any machine. Everything is organized in a fashion that is cohesive to the Penetration Testing Execution Standard (PTES) and eliminates a lot of things that are hardly used. PTF simplifies installation and packaging and creates an entire pentest framework for you. Since this is a framework, you can configure and add as you see fit. We commonly see internally developed repos that you can use as well as part of this framework. It's all up to you.
https://github.com/trustedsec/ptf
For a video tutorial on how to use PTF, check out our Vimeo page here: https://vimeo.com/137133837
21 579
NTFSCopy
This project is based on NtfsLib. I have made the NTFSCopy tool usable with execute-assembly in Cobalt Strike. This was done using ILMerge to make a single executable without any dependencies, and removing the fancy colored progress bar which Cobalt Strike couldn't handle (seems like Console.Seek() was throwing an exception).
https://github.com/RedCursorSecurityConsulting/NTFSCopy
21 579
MFASweep
MFASweep is a PowerShell script that attempts to log in to various Microsoft services using a provided set of credentials and will attempt to identify if MFA is enabled. Depending on how conditional access policies and other multi-factor authentication settings are configured some protocols may end up being left single factor. It also has an additional check for ADFS configurations and can attempt to log in to the on-prem ADFS server if detected.
Currently MFASweep has the ability to login to the following services:
▫️ Microsoft Graph API
▫️ Azure Service Management API
▫️ Microsoft 365 Exchange Web Services
▫️ Microsoft 365 Web Portal w/ 6 device types (Windows, Linux, MacOS, Android Phone, iPhone, Windows Phone)
▫️ Microsoft 365 Active Sync
▫️ ADFS
https://github.com/dafthack/MFASweep
21 579
CVE-2022-21661
POC Video | WordPress Core 5.8.2 - 'WP_Query' SQL Injection.
https://github.com/APTIRAN/CVE-2022-21661
#cve #poc
21 579
Hacktoria-CTF-WriteUps
THE KILLER CLOWN:
https://github.com/s1l1c0np1r4t3/Hacktoria-CTF-WriteUps/blob/main/Easy/TheKillerClown.md
PRISONER OF WAR:
https://github.com/s1l1c0np1r4t3/Hacktoria-CTF-WriteUps/blob/main/Easy/PrisonerOfWar.md
LOST AT SEA:
https://github.com/s1l1c0np1r4t3/Hacktoria-CTF-WriteUps/blob/main/Easy/LostAtSea.md
Wow, that's cool.) author: @s1l1c0np1r4t3x
#OSINT #RedTeam
21 579
Gotanda
Gotanda is #OSINT(Open Source Intelligence) Web Extension for Firefox/Chrome.
This Web Extension could search OSINT information from some IOC in web page.(IP,Domain,URL,SNS...etc)
https://github.com/HASH1da1/Gotanda
21 579
VMUnprotect.Dumper
A project engaged in hunting tampered VMProtect assemblies.
https://github.com/void-stack/VMUnprotect.Dumper
21 579
Phill's Hypothetical Browser
PHB is a testbed for security focused browser features built around WebView2 which is in turn a wrapper around Microsoft Edge which is a fork of Google Chrome.
https://github.com/hallambaker/PhillsHypotheticalBrowser
21 579
Linux Kernel
UAF in Bluetooth L2CAP Handshake
https://github.com/google/security-research/security/advisories/GHSA-pf87-6c9q-jvm4
Infoleak in Bluetooth L2CAP Handling
https://github.com/google/security-research/security/advisories/GHSA-vccx-8h74-2357
#exploit
21 579
Namaste!
This repository contains some of the most exhaustive wordlists for enumeration, gathered from a lot of wordlists available on the Internet.
https://github.com/HacktivistRO/Bug-Bounty-Wordlists
21 579
pycrypt
Python Based Crypter That Can Bypass Any Kinds Of Antivirus Products
https://github.com/machine1337/pycrypt
21 579
ForgeCert
ForgeCert uses the BouncyCastle C# API and a stolen Certificate Authority (CA) certificate + private key to forge certificates for arbitrary users capable of authentication to Active Directory.
This attack is codified as DPERSIST1 in our "Certified Pre-Owned" whitepaper. This code base was released ~45 days after the whitepaper was published.
https://github.com/GhostPack/ForgeCert
#ad
21 579
Repost from Pentesting News
Get-InjectedThreadEx – Detecting Thread Creation Trampolines.
https://www.elastic.co/security-labs/get-injectedthreadex-detection-thread-creation-trampolines
PowerShell detection script:
https://github.com/jdu2600/Get-InjectedThreadEx
21 579
YApi-Exploit
YApi boolean-based injection exploit.
https://github.com/Anthem-whisper/YApi-Exploit
#cve #exploit
21 579
subzuf
subzuf is a subdomain brute-force fuzzer coupled with an immensly simple but effective DNS reponse-guided algorithm. It utilizes a provided set of input data, like a tailored wordlist or historical DNS/TLS records, to accurately synthesize more corresponding domain names and expand them even further in a loop based on information gathered during DNS scan. This somewhat different approach to subdomain enumeration in most cases allows to discover more subdomains with significantly reduced time and resources.
In short, subzuf can be summarized by the following:
▫️ Generates carefully selected candidates and uncover completely new subdomains during DNS enumeration scans
▫️ Efficient multi-threaded DNS client capable of resolving thousands of domains per second
▫️ Wildcard detection in two modes: filter (default, slightly slower but accurate) and reject (resource-saving)
▫️ Accepts wordlist or domain names or a mix of both as input
▫️ Requires essentially no configuration or fine-tuning
▫️ Works right of out the box - no external dependencies or bizzare requirements
▫️ Easily chainable with other tools
https://github.com/elceef/subzuf
21 579
safety
Safety checks Python dependencies for known security vulnerabilities and suggests the proper remediations for vulnerabilities detected.
Safety can be run on developer machines, in CI/CD pipelines and on production systems.
By default it uses the open Python vulnerability database Safety DB, which is licensed for non-commercial use only.
https://github.com/pyupio/safety
21 579
katoolin
Automatically install all Kali linux tools.
Features:
▫️ Add Kali linux repositories
▫️ Remove kali linux repositories
▫️ Install Kali linux tools
https://github.com/LionSec/katoolin
21 579
