HackGit
Ir al canal en Telegram
The channel was created for cybersecurity specialists. • Offensive Security • RedTeam • Malware Research • BugBounty • OSINT • etc Disclaimer: t.me/hackgit/2082 Donations - Ads: t.me/hackgit/5423
Mostrar más📈 Análisis del canal de Telegram HackGit
El canal HackGit (@hackgit) en el segmento lingüístico de Inglés es un actor destacado. Actualmente la comunidad reúne a 21 579 suscriptores, ocupando la posición 4 526 en la categoría Tecnologías y Aplicaciones y el puesto 1 853 en la región EEUU.
📊 Métricas de audiencia y dinámica
Desde su creación el невідомо, el proyecto ha mostrado un crecimiento acelerado, reuniendo a 21 579 suscriptores.
Según los últimos datos del 02 marzo, 2025, el canal mantiene una actividad estable. En los últimos 30 días la variación de miembros fue de 19, y en las últimas 24 horas de 0, conservando un alto alcance.
- Estado de verificación: No verificado
- Tasa de interacción (ER): El promedio de interacción de la audiencia es 0%. Durante las primeras 24 horas tras publicar, el contenido suele obtener N/A% de reacciones respecto al total de suscriptores.
- Alcance de las publicaciones: Cada publicación recibe en promedio 0 visualizaciones. En el primer día suele acumular 0 visualizaciones.
- Reacciones e interacción: La audiencia responde de forma activa: el promedio de reacciones por publicación es 0.
📝 Descripción y política de contenido
El autor describe el recurso como un espacio para expresar opiniones subjetivas:
“The channel was created for cybersecurity specialists.
• Offensive Security
• RedTeam
• Malware Research
• BugBounty
• OSINT
• etc
Disclaimer:
t.me/hackgit/2082
Donations - Ads:
t.me/hackgit/5423”
Gracias a la alta frecuencia de actualizaciones (últimos datos recibidos el 03 marzo, 2025), el canal mantiene la vigencia y un amplio alcance. La analítica demuestra que la audiencia interactúa activamente con el contenido, lo que lo convierte en un punto de referencia dentro de la categoría Tecnologías y Aplicaciones.
21 579
Suscriptores
Sin datos24 horas
-37 días
+1930 días
Archivo de publicaciones
21 579
Repost from Pentesting Shop
Raspberry Pi Zero 2 W
The Raspberry Pi Zero 2 W incorporates a quad-core 64-bit Arm Cortex-A53 CPU clocked at 1GHz. At its heart is a Raspberry Pi RP3A0 system-in-package (SiP), integrating a Broadcom BCM2710A1 die with 512MB of LPDDR2 SDRAM. This upgraded package provides the Raspberry Pi Zero 2 W with its generous increase in performance.
Raspberry Pi Zero 2 W continues to offer 2.4GHz 802.11 b/g/n wireless LAN and Bluetooth (now 4.2), along with support for Bluetooth Low Energy (BLE) and modular compliance certification.
The new Raspberry Pi Zero 2 has a MicroSD card slot for the Raspberry Pi Operating System, a CSI-2 camera connector, a USB On-The-Go (OTG) port and an unpopulated footprint for a HAT-compatible 40-pin GPIO header. Video output is via a mini HDMI port; composite video output is available via the board's test points if needed.
The Zero 2 is powered via a micro-USB socket and requires a 5V 2.5A power supply just like previous generations.
Kali Linux on Raspberry Pi Zero 2 W - User Instructions
Buy online:
🛒 https://ali.ski/DSteo (aliexpress)
🛒 https://amzn.to/3S6Y7iV (amazon)
#zero #raspberry #pi
21 579
SharpAgent
C# havoc implant
A .NET Framework test agent for Havoc C2. I just wanna learn how to make c2 implants. Will receive updates for now.
Just modify the handler to your teamserver. Also it's probably really buggy right now.
https://github.com/susMdT/SharpAgent/
21 579
OpenBackdoor
OpenBackdoor is an open-source toolkit for textual backdoor attack and defense, which enables easy implementation, evaluation, and extension of both attack and defense models.
https://github.com/thunlp/OpenBackdoor
21 579
CVE-2021-45067
This bug was Out of Bounds Read caused by treating ANSI string as Unicode which can be exploited to leak sensitive information from the sandboxed adobe reader process.
https://github.com/hacksysteam/CVE-2021-45067
#cve
21 579
Chopper payload smuggling
Ported the pascal version to C#, and becomes even better while smuggling the payload using Created Service DisplayName 👇
The tool would create random service, smuggle the payloads chunks through the windows service display name, and write/decode/execute the final payload.
https://github.com/0xsp-SRD/0xsp.com/tree/main/chopper
Details:
https://ired.dev/discussion/13/chopper-payload-smuggling/p1?new=1
21 579
Nuclei template CVE-2022-40684
https://github.com/NagliNagli/BountyTricks/blob/main/CVE-2022-40684.yaml
#cve
21 579
WPRecon (Wordpress Recon)
WPRecon, is a tool for the recognition of vulnerabilities and blackbox information for wordpress.
We can use wprecon to recognize the versions of plugins, themes, and wordpress core, in addition to counting users, and waf (web application firewall).
The purpose of this tool is just to help developers find possible loopholes in their systems/wordpress sites.
https://github.com/AngraTeam/wprecon
21 579
Fortinet RCE (CVE-2022-40684)
Fortinet recently patched a critical authentication bypass vulnerability in their FortiOS, FortiProxy, and FortiSwitchManager projects (CVE-2022-40684). This vulnerability gives an attacker the ability to login as an administrator on the affected system.
https://github.com/horizon3ai/CVE-2022-40684
Research:
https://www.horizon3.ai/fortios-fortiproxy-and-fortiswitchmanager-authentication-bypass-technical-deep-dive-cve-2022-40684/
#fortinet #rce #cve #poc #exploit
21 579
CVE-2022-40684
Auth bypass extract admin users and LDAP config - This PoC do only read-only actions.
https://github.com/carlosevieira/CVE-2022-40684
#cve #poc
21 579
XSLeaker.
XSLeaker is a tool that helps to find XS-Leaks on websites. The tool compares resource values for that a leak technique is known (e.g. number of iframes) between different states.
XSLeaker consists of two components, a chrome extension that is used to gather the resource values in different states and a node.js server that is used to compare and display the results.
The following resource values are checked for differences:
▫️ URL
▫️ Number of iframes
▫️ HTTP status code
▫️ Number of redirects
▫️ Number of WebSocket connections
▫️ IDs of focusable elements
https://github.com/Philesiv/XSLeaker
t.me/hackgit
21 579
CipherScan
Cipherscan tests the ordering of the SSL/TLS ciphers on a given target, for all major versions of SSL and TLS. It also extracts some certificates informations, TLS options, OCSP stapling and more. Cipherscan is a wrapper above the openssl s_client command line.
Cipherscan is meant to run on all flavors of unix. It ships with its own built of OpenSSL for Linux/64 and Darwin/64. On other platform, it will use the openssl version provided by the operating system (which may have limited ciphers support), or your own version provided in the -o command line flag.
https://github.com/mozilla/cipherscan
21 579
Java android magisk burp objection root emulator easy (Jamboee)
Want to pentest or run Android apps in minutes ? Sick of BlueStacks or NOX malware/adware ? Not a single binary in this script and it's open source and downloads are direct from proper sources. There is lots of great powershell tricks (not great code) in this script. I worked hard on thing's like:
▫️ Making it portable as possible
▫️ Setting up and downloading extremely fast environment for Android, Java and Python
▫️ Converting ssl certs to Android without openssl using certutil.exe only
https://github.com/freeload101/Java-Android-Magisk-Burp-Objection-Root-Emulator-Easy
21 579
AWSome Pentesting Cheatsheet
▫️ This guide was created to help pentesters learning more about AWS misconfigurations and ways to abuse them.
▫️ It was created with my notes gathered with uncontable hours of study and annotations from various places
▫️ It's assumed that you have the AWS keys (This is not difficult to find, just look in developer's github)
https://github.com/pop3ret/AWSome-Pentesting
21 579
Janus
Janus is designed to allow for string obfuscation when developing tools. Janus utilizes pre-build and post-build execution steps to apply obfuscation to the tool. If the tool breaks the build, the post-build will always be able to repair it. The pre-build execution step will store clean copies of the code before making modifications. The post-build execution step restores the file to a clean-copy state.
https://github.com/echtdefault/Janus
t.me/hackgit
21 579
Malware-IOCs
This is where I'll post IOCs from malware investigations
https://github.com/executemalware/Malware-IOCs
21 579
Heap-Overflow-Detection
A unit-based symbolic execution method for detecting heap overflow vulnerability in executable codes.
https://github.com/SoftwareSecurityLab/Heap-Overflow-Detection
21 579
EnableWindowsLogSettings
Documentation and scripts to properly enable Windows event logs.
https://github.com/Yamato-Security/EnableWindowsLogSettings
21 579
𝐎𝐒𝐂𝐏 𝐏𝐫𝐞-𝐏𝐫𝐞𝐩𝐚𝐫𝐚𝐭𝐢𝐨𝐧 𝐏𝐥𝐚𝐧 𝐚𝐧𝐝 𝐍𝐨𝐭𝐞𝐬
https://github.com/shreyaschavhan/oscp-pre-preparation-plan-and-notes
21 579
Nimbo-C2
Nimbo-C2 is yet another (simple and lightweight) C2 framework.
Nimbo-C2 agent currently supports Windows x64 only. It's written in Nim, with some usage of .NET (by dynamically loading the CLR to the process). Nim is powerful, but interacting with Windows is much more easier and robust using Powershell, hence this combination is made.
All server components are written in Python:
▫️ HTTP listener that manages the agents.
▫️ Builder that generates the agent payloads.
▫️ Nimbo-C2 is the interactive C2 component that rule'em all!
I developed Nimbo-C2 in the past several months mainly at the late evenings while working at my day job and waking up at nights to my boy, in order to learn and maybe contribute my part to the cyber community 💪.
https://github.com/itaymigdal/Nimbo-C2
21 579
RustHound
RustHound is a cross-platform BloodHound collector tool, written in Rust. (Linux,Windows,MacOS)
No anti-virus detection and cross-compiled.
RustHound generate users,groups,computers,ous,gpos,containers,domains json files to analyze it with BloodHound application.
https://github.com/OPENCYBER-FR/RustHound
#Donate t.me/hackgit🍻»»»
