HackGit
Ir al canal en Telegram
The channel was created for cybersecurity specialists. • Offensive Security • RedTeam • Malware Research • BugBounty • OSINT • etc Disclaimer: t.me/hackgit/2082 Donations - Ads: t.me/hackgit/5423
Mostrar más📈 Análisis del canal de Telegram HackGit
El canal HackGit (@hackgit) en el segmento lingüístico de Inglés es un actor destacado. Actualmente la comunidad reúne a 21 579 suscriptores, ocupando la posición 4 526 en la categoría Tecnologías y Aplicaciones y el puesto 1 853 en la región EEUU.
📊 Métricas de audiencia y dinámica
Desde su creación el невідомо, el proyecto ha mostrado un crecimiento acelerado, reuniendo a 21 579 suscriptores.
Según los últimos datos del 02 marzo, 2025, el canal mantiene una actividad estable. En los últimos 30 días la variación de miembros fue de 19, y en las últimas 24 horas de 0, conservando un alto alcance.
- Estado de verificación: No verificado
- Tasa de interacción (ER): El promedio de interacción de la audiencia es 0%. Durante las primeras 24 horas tras publicar, el contenido suele obtener N/A% de reacciones respecto al total de suscriptores.
- Alcance de las publicaciones: Cada publicación recibe en promedio 0 visualizaciones. En el primer día suele acumular 0 visualizaciones.
- Reacciones e interacción: La audiencia responde de forma activa: el promedio de reacciones por publicación es 0.
📝 Descripción y política de contenido
El autor describe el recurso como un espacio para expresar opiniones subjetivas:
“The channel was created for cybersecurity specialists.
• Offensive Security
• RedTeam
• Malware Research
• BugBounty
• OSINT
• etc
Disclaimer:
t.me/hackgit/2082
Donations - Ads:
t.me/hackgit/5423”
Gracias a la alta frecuencia de actualizaciones (últimos datos recibidos el 03 marzo, 2025), el canal mantiene la vigencia y un amplio alcance. La analítica demuestra que la audiencia interactúa activamente con el contenido, lo que lo convierte en un punto de referencia dentro de la categoría Tecnologías y Aplicaciones.
21 579
Suscriptores
Sin datos24 horas
-37 días
+1930 días
Archivo de publicaciones
21 579
CVE-2022–34718
TCP/IP RCE Vulnerability (CVE-2022–34718) PoC Restoration and Analysis.
https://github.com/numencyber/VulnerabilityPoC
Details:
https://medium.com/@numencyberlabs/analysis-and-summary-of-tcp-ip-protocol-remote-code-execution-vulnerability-cve-2022-34718-8fcc28538acf
#cve #poc
21 579
Get-AppLockerEventlog
This script will parse all the channels of events from the win-event log to extract all the log relatives to AppLocker. The script will gather all the important pieces of information relative to the events for forensic or threat-hunting purposes, or even in order to troubleshoot. Here are the logs we fetch from win-event:
▫️ EXE and DLL,
▫️ MSI and Script,
▫️ Packaged app-Deployment,
▫️ Packaged app-Execution.
https://github.com/RomaissaAdjailia/Get-AppLockerEventlog
#Donate t.me/hackgit🍻»»»
21 579
DragonCastle
A PoC that combines AutodialDLL lateral movement technique and SSP to scrape NTLM hashes from LSASS process.
Upload a DLL to the target machine. Then it enables remote registry to modify AutodialDLL entry and start/restart BITS service. Svchosts would load our DLL, set again AutodiaDLL to default value and perform a RPC request to force LSASS to load the same DLL as a Security Support Provider. Once the DLL is loaded by LSASS, it would search inside the process memory to extract NTLM hashes and the key/IV.
https://github.com/mdsecactivebreach/DragonCastle
21 579
Background
A phishing framework for OAuth 2.0 device code authentication grant flow
https://github.com/dunderhay/phishsticks
21 579
L2Fuzz
A stateful fuzzer to detect vulnerabilities in Bluetooth BR/EDR Logical Link Control and Adaptation Protocol (L2CAP) layer.
https://github.com/haramel/l2fuzz
21 579
Redshift-jdbc file write RCE
In Amazon AWS Redshift JDBC Driver (aka amazon-redshift-jdbc-driver or redshift-jdbc42) with the newest version, the loggerFile properties does not check the file suffix,which a knowledgeable attacker with control over the JDBC URL can use to create a jsp webshell and achieve remote code execution.
https://github.com/p1n93r/redshift-jdbc-RCE
t.me/hackgit
21 579
UbSym
A unit-based symbolic execution method for detecting memory corruption vulnerabilities in executable codes
https://github.com/SoftwareSecurityLab/UbSym
21 579
RePulsar
This is a PoC implementation of an SMB backdoor based on our own research into the Windows kernel and the SMB mechanism. Since this is just a PoC, there is no special functionality. In the future, it is planned to support the basic functionality:
▫️ Arbitrary read/write memory
▫️ Shellcode execution
▫️ Etc.
https://github.com/APT64/RePulsar
21 579
EvilSmurf2
Project Description: Finding Bluetooth Vulnerabilities and Methods of Exploitation/Weaponization as well as Mitigation/Prevention
This repository serves as storage as well as a collaborating area for C code developed and written by the group Deep Blue Devs (DBD)
https://github.com/joshuar49/EvilSmurf2
21 579
eJPT-Notes
eLearnSecurity Junior Penetration Tester
Collection of notes to prepare for the eLearnSecurity eJPT certification exam.
https://github.com/grumpzsux/eJPT-Notes
21 579
Wapiti
A web vulnerability scanner written in Python.
Features:
▫️ Generates vulnerability reports in various formats (HTML, XML, JSON, TXT, CSV).
▫️ Can suspend and resume a scan or an attack (session mechanism using sqlite3 databases).
▫️ Can give you colors in the terminal to highlight vulnerabilities.
▫️ Different levels of verbosity.
▫️ Fast and easy way to activate/deactivate attack modules.
▫️ Adding a payload can be as easy as adding a line to a text file.
▫️ Configurable number of concurrent tasks to perform HTTP requests.
https://github.com/wapiti-scanner/wapiti
Website:
https://wapiti-scanner.github.io/
#scanner #best
21 579
PENTESTING-BIBLE
Explore more than 2156 hacking articles saved over time as PDF. BROWSE HISTORY.
https://github.com/blaCCkHatHacEEkr/PENTESTING-BIBLE
t.me/hackgit
21 579
ShoMon
A Shodan alert feeder for TheHive written in GoLang. With version 2.0, it is more powerful than ever!
https://github.com/KaanSK/shomon
21 579
The JSON Web Token Toolkit v2
jwt_tool.py is a toolkit for validating, forging, scanning and tampering JWTs (JSON Web Tokens).
Its functionality includes:
▫️ Checking the validity of a token
▫️ Testing for known exploits:
→ (CVE-2015-2951) The alg=none signature-bypass vulnerability
→ (CVE-2016-10555) The RS/HS256 public key mismatch vulnerability
→ (CVE-2018-0114) Key injection vulnerability
→ (CVE-2019-20933/CVE-2020-28637) Blank password vulnerability
→ (CVE-2020-28042) Null signature vulnerability
▫️ Scanning for misconfigurations or known weaknesses
▫️ Fuzzing claim values to provoke unexpected behaviours
▫️ Testing the validity of a secret/key file/Public Key/JWKS key
▫️ Identifying weak keys via a High-speed Dictionary Attack
▫️ Forging new token header and payload contents and creating a new signature with the key or via another attack method
▫️ Timestamp tampering
▫️ RSA and ECDSA key generation, and reconstruction (from JWKS files)
...and lots more!
https://github.com/ticarpi/jwt_tool
t.me/hackgit
21 579
ghoulbond
System Utility , Scanner and OSINT tool.
https://github.com/hitesh22rana/ghoulbond
21 579
ethereum-exploit
Analysis of the major exploits that took place on the Ethereum blockchain
https://github.com/MikeSpa/ethereum-exploit
21 579
s3cXSSer
This extension will help you to detect GET/POST based XSS vulnerability in any website easily
https://github.com/s3c-krd/s3cXSSer
t.me/hackgit
21 579
CVE-2022-42045
We discovered an Arbitrary code injection in Zemana amsdk.sys kernel-mode driver, a part of Zemana Antimalware SDK. The vulnerability allows to inject an arbitrary code into the one of the driver code sections and then to execute it with kernel-mode privileges (local privileges escalation from admin to kernel mode). This vulnerability could be used, for example, to disable Driver Signature Enforcement and then to install unsigned kernel-mode drivers.
https://github.com/ReCryptLLC/CVE-2022-42045
#cve
