HackGit
Ir al canal en Telegram
The channel was created for cybersecurity specialists. • Offensive Security • RedTeam • Malware Research • BugBounty • OSINT • etc Disclaimer: t.me/hackgit/2082 Donations - Ads: t.me/hackgit/5423
Mostrar más📈 Análisis del canal de Telegram HackGit
El canal HackGit (@hackgit) en el segmento lingüístico de Inglés es un actor destacado. Actualmente la comunidad reúne a 21 579 suscriptores, ocupando la posición 4 526 en la categoría Tecnologías y Aplicaciones y el puesto 1 853 en la región EEUU.
📊 Métricas de audiencia y dinámica
Desde su creación el невідомо, el proyecto ha mostrado un crecimiento acelerado, reuniendo a 21 579 suscriptores.
Según los últimos datos del 02 marzo, 2025, el canal mantiene una actividad estable. En los últimos 30 días la variación de miembros fue de 19, y en las últimas 24 horas de 0, conservando un alto alcance.
- Estado de verificación: No verificado
- Tasa de interacción (ER): El promedio de interacción de la audiencia es 0%. Durante las primeras 24 horas tras publicar, el contenido suele obtener N/A% de reacciones respecto al total de suscriptores.
- Alcance de las publicaciones: Cada publicación recibe en promedio 0 visualizaciones. En el primer día suele acumular 0 visualizaciones.
- Reacciones e interacción: La audiencia responde de forma activa: el promedio de reacciones por publicación es 0.
📝 Descripción y política de contenido
El autor describe el recurso como un espacio para expresar opiniones subjetivas:
“The channel was created for cybersecurity specialists.
• Offensive Security
• RedTeam
• Malware Research
• BugBounty
• OSINT
• etc
Disclaimer:
t.me/hackgit/2082
Donations - Ads:
t.me/hackgit/5423”
Gracias a la alta frecuencia de actualizaciones (últimos datos recibidos el 03 marzo, 2025), el canal mantiene la vigencia y un amplio alcance. La analítica demuestra que la audiencia interactúa activamente con el contenido, lo que lo convierte en un punto de referencia dentro de la categoría Tecnologías y Aplicaciones.
21 579
Suscriptores
Sin datos24 horas
-37 días
+1930 días
Archivo de publicaciones
21 579
SharpUserIP
Extract the login log on the domain controller or remotely, and quickly obtain the IP address corresponding to the domain user
https://github.com/lele8/SharpUserIP
21 579
DVS
D(COM) V(ulnerability) S(canner) AKA Devious swiss army knife - Lateral movement using DCOM Objects
The DVS framework is a swiss army knife which allows you to enumerate vulnerable functions of remote DCOM objects, launch them and even launch attacks using them.
The framework is being developed with a "Red Team" mindset and uses stealth methods to compromise remote machines.
The DVS framework contains various ways to bypass remote hardening against DCOM by re-enableing DCOM access remotely and automatically grant the required permissions to the attacking user.
The framework can also revert changes on the remote machine to their original state, prior to the attack - hiding these changes from defenders.
Our main insight is that the tool can also execute commands using non-vulnerable DCOM objects through an aqsome technique (Read below about Invoke-RegisterRemoteSchema)
https://github.com/ScorpionesLabs/DVS
#windows #lateral #redteam #dcom
21 579
SharpUserIP
Extract the login log on the domain controller or remotely, and quickly obtain the IP address corresponding to the domain user
https://github.com/lele8/SharpUserIP
21 579
OSIF
Opensource Intelligence Framework is an open-source framework dedicated to OSINT. For the ease of use, the interface has a layout that looks like Metasploit.
It consists of various modules that aid osint operations:
▫️ Attack Surface
▫️ Blockchain
▫️ Email
▫️ Host Enumeration
▫️ IoC
▫️ Mobile
▫️ Social Media
▫️ Web Enumeration
https://github.com/fr4nc1stein/osint-framework
21 579
OWASP Kubernetes Top 10
When adopting Kubernetes, we introduce new risks to our applications and infrastructure.
The OWASP Kubernetes Top 10 is aimed at helping security practitioners, system administrators, and software developers prioritize risks around the Kubernetes ecosystem.
The Top Ten is a prioritized list of these risks backed by data collected from organizations varying in maturity and complexity.
https://github.com/OWASP/www-project-kubernetes-top-ten
21 579
AlphaGolang
AlphaGolang is a collection of IDAPython scripts to help malware reverse engineers master Go binaries. The idea is to break the scripts into concrete steps, thus avoiding brittle monolithic scripts, and mimicking the methodology an analyst might follow when tackling a Go binary.
Scripts are released under GPL license (honoring Tim Strazzere's original GolangLoaderAssist which we refactored and updated for python3, props to Tim :) ). Contributions are welcome and encouraged!
https://github.com/SentineLabs/AlphaGolang
21 579
SQLRecon
A C# MS-SQL toolkit designed for offensive reconnaissance and post-exploitation. For detailed usage information on each technique, refer to the wiki.
https://github.com/xforcered/SQLRecon
Details:
https://github.com/skahwah/Conference-Talks/tree/main/2022-Way-West-Hackin-Fest
Demo video:
https://vimeo.com/showcase/9606366/video/728191206
21 579
Repost from Pentesting Shop
ICopy-XS
The ICopy-X is the next generation of RFID Cloning tool.
Whether you're a pentester, researchers, locksmith, hobbiest or building manager, the iCopy-X makes cloning RFID tags rapid and easy.
Built around the powerful Proxmark 3, the ICopy-X is a portable device specialised in the rapid cloning of RFID badges, capable of automatically reading, cracking and writing the vast majority of Low Frequency (125KHz / 134KHz) and High Frequency (13.56MHz) RFID tags on the market.
100% portable and pocket-sized, the iCopy-X is built with simplicity in mind. No cables required, no external computers or antennas. With its built in battery, you just pull the device out of your pocket, and you're ready to go.
Designed to be intuitive, users control the device via its screen and navigation buttons to place a badge and start the desired operation.
Buy online:
🛒 https://ali.ski/DpXlcF
#RFID
21 579
Get-bADpasswords
Get insights into the actual strength and quality of passwords in Active Directory.
https://github.com/improsec/Get-bADpasswords
#ad
21 579
udpx
Fast, single-packet UDP scanner written in Go. Supports discovery of more than 45 services with the possibility to add your own. It is lightweight - grab a binary and run it anywhere you want. Linux, Mac Os and Windows are supported but can be built for more platforms. The UDPX is not an internet-wide port scanner such as zgrab2 or zmap. The goal was to make easy to use and portable UDP scanner.
▫️ It is fast. It can scan whole /16 network in ~20 seconds for a single service.
▫️ You don't need to instal libpcap or any other dependencies.
▫️ Can run on Linux, Mac Os, Windows. Or your Nethunter if you built it for Arm.
▫️ Customizable. You can add your probes and test for even more protocols!
https://github.com/nullt3r/udpx
21 579
AWSealion
AWSealion is a CLI tool designed to work as a plugin for the AWS CLI to be used by pentesters and security enthusiasts in both professional and CTF settings, however it can also be used by developers and security engineers to speed up their work. This tool helps in staying stealthy during red team and pentesting engagements to ensure that your attacking footprint is as small as possible in an AWS environment.
AWSealion works through not allowing the same API call to be run twice, allowing user-agent customization on a per-engagement and per-profile basis, saving the output of all API calls, and much more. Furthermore, the AWSealion tool creates an organized file structure which the user can easily reference, ensuring that you do not drift away from your commands.
https://github.com/0xd4y/AWSealion
21 579
Awesome Mastodon
Mastodon is the world's largest free, open-source, decentralized microblogging network. See the Official category to learn more about the network.
https://github.com/tleb/awesome-mastodon
21 579
zerologon
CVE-2020-1472 aka Zerologon Exploit POC
NetLogon (MS-NRPC), can establish inter-domain control vulnerable security channel. It's possible to zero out the password for the machine account on domain controllers.
▫️ DC will be semi broken while password is zero'ed out, however this program changes the password back when its finished
▫️ Could cause DNS issues with DC (fixed with reboot)
▫️ Kerberos Tickets have a 10 hour lifetime before they expire
▫️ Requires the latest impacket from GitHub with added netlogon structures.
▫️ Do note that by default this changes the password of the domain controller system account then changes it back. Yes this allows you to DCSync, but it also breaks communication with other domain controllers in the short timeframe, so be careful with this!
https://github.com/sho-luv/zerologon
#cve #poc
21 579
Audit Reports
Smart Contracts, Blockchain , DApps Audit Reports
Through our Automated and Manual analysis we provide complete solution to identify and determine vulnerabilities and violations of logic in the smart contract.
QuillAudits considers the following distinct and crucial facets of the smart contract code: Whether the code is secure. Whether the code corresponds to the documentation (including whitepaper).
Whether the code meets best practices in efficient use of gas, code readability, etc.
https://github.com/Quillhash/QuillAudit_Reports
21 579
ThunderStorm
ThunderStorm is the name for the over-arching C2 solution. Based off XMT, a Golang-based C2 framework, ThunderStorm aims to be a successor to mature, currently used C2 software/service, such as CobaltStrike and Sliver.
ThunderStorm has many components involved in it:
▫️ Jetstream (Bolt Builder)
▫️ Bolts (Agents)
▫️ Cirrus (The C2 Service)
▫️ Doppler (CLI Client Manager)
▫️ StormFront (Web GUI Client Manager)
▫️ Also included is a HTTP ReSTful API that allows for automation and control without direct involvement.
https://github.com/iDigitalFlame/ThunderStorm
21 579
BrokenFlow
A simple PoC to invoke an encrypted shellcode by using an hidden call.
https://github.com/enkomio/BrokenFlow
21 579
Repost from Pentesting Shop
HackRF One + Portapack H2 Mayhem.
The HackRF is an exceptionally capable software defined radio (SDR) transceiver, but naturally you need to connect it to a computer to actually do anything with it. So the PortaPack was developed to turn it into a stand-alone device with the addition of a touchscreen LCD, a few buttons, and a headphone jack. With all the hardware in place, it’s just a matter of installing a firmware capable enough to do some proper RF hacking on the go.
Enter MAYHEM, an evolved fork of the original PortaPack firmware that the developers claim is the most up-to-date and feature packed version available. Without ever plugging into a computer, this firmware allows you to receive, decode, and re-transmit a dizzying number of wireless protocols. From firing off the seating pagers at a local restaurant to creating a fleet of phantom aircraft with spoofed ADS-B transponders, MAYHEM certainly seems like it lives up to the name.
Detailed blog post about installing and using MAYHEM on the HackRF/PortaPack, complete with a number of real-world examples that show off just a handful of possible applications for the project. Jamming cell phones, sending fake pager messages, and cloning RF remotes is just scratching the surface of what’s possible.
Example of use: exploitation of a Honda vulnerability Honda's Remote Keyless System (CVE-2022-27254)
Firmware to open any and all Tesla vehicle charging ports in range!
Buy online:
🛒 https://ali.ski/zja-1o
#hackrf #radio #sdr #spoofing
21 579
Tesla Charging Port Opener
Files for HackRF + Portapack MAYHEM firmware to open any and all Tesla vehicle charging ports in range!
https://github.com/pompel123/Tesla-Charging-Port-Opener
21 579
CVE-2022-40127
Apache Airflow < 2.4.0 DAG example_bash_operator RCE
https://github.com/Mr-xn/CVE-2022-40127
#cve
21 579
