HackGit
Ir al canal en Telegram
The channel was created for cybersecurity specialists. • Offensive Security • RedTeam • Malware Research • BugBounty • OSINT • etc Disclaimer: t.me/hackgit/2082 Donations - Ads: t.me/hackgit/5423
Mostrar más📈 Análisis del canal de Telegram HackGit
El canal HackGit (@hackgit) en el segmento lingüístico de Inglés es un actor destacado. Actualmente la comunidad reúne a 21 579 suscriptores, ocupando la posición 4 526 en la categoría Tecnologías y Aplicaciones y el puesto 1 853 en la región EEUU.
📊 Métricas de audiencia y dinámica
Desde su creación el невідомо, el proyecto ha mostrado un crecimiento acelerado, reuniendo a 21 579 suscriptores.
Según los últimos datos del 02 marzo, 2025, el canal mantiene una actividad estable. En los últimos 30 días la variación de miembros fue de 19, y en las últimas 24 horas de 0, conservando un alto alcance.
- Estado de verificación: No verificado
- Tasa de interacción (ER): El promedio de interacción de la audiencia es 0%. Durante las primeras 24 horas tras publicar, el contenido suele obtener N/A% de reacciones respecto al total de suscriptores.
- Alcance de las publicaciones: Cada publicación recibe en promedio 0 visualizaciones. En el primer día suele acumular 0 visualizaciones.
- Reacciones e interacción: La audiencia responde de forma activa: el promedio de reacciones por publicación es 0.
📝 Descripción y política de contenido
El autor describe el recurso como un espacio para expresar opiniones subjetivas:
“The channel was created for cybersecurity specialists.
• Offensive Security
• RedTeam
• Malware Research
• BugBounty
• OSINT
• etc
Disclaimer:
t.me/hackgit/2082
Donations - Ads:
t.me/hackgit/5423”
Gracias a la alta frecuencia de actualizaciones (últimos datos recibidos el 11 noviembre, 2026), el canal mantiene la vigencia y un amplio alcance. La analítica demuestra que la audiencia interactúa activamente con el contenido, lo que lo convierte en un punto de referencia dentro de la categoría Tecnologías y Aplicaciones.
21 579
Suscriptores
Sin datos24 horas
-37 días
+1930 días
Archivo de publicaciones
21 579
Paragon
Paragon is a #RedTeam engagement platform. It aims to unify offensive tools behind a simple UI, abstracting much of the backend work to enable operators to focus on writing implants and spend less time worrying about databases and css.
The repository also provides some offensive tools already integrated with Paragon that can be used during engagements.
Features:
▫️ Easily integrate custom tools to unify operations behind a single interface
▫️ Query the Red Team knowledge graph using a provided GraphQL API
▫️ Event emission for low latency automation and real time processing
▫️ Python-like scripting language for deployments, post-exploitation, and more
▫️ Cross-platform implants & deployment included
▫️ Record operator activity to conviniently aggregate into a post-engagement report for review
https://github.com/KCarretto/paragon
21 579
CrackerJack
Web GUI for #Hashcat developed in #Python.
Features:
▫️ Web interface for mask generation (?a?l?u).
▫️ Web Push notifications when a password is cracked.
▫️ Swagger 2.0 API.
▫️ Create wordlists from already cracked passwords and feedback into the cracking session.
▫️ Session history to track which attacks you have already performed.
▫️ Multi-user support (local and/or LDAP).
▫️ Wordlist/Mask/Rule support.
https://github.com/ctxis/crackerjack
21 579
haxx
Untethered + Unsandboxed code execution haxx as root on iOS 14 - iOS 14.8.1.
https://github.com/asdfugil/haxx
21 579
PE-infector
Crossplatform tool for inject shellcode into .exe binaries (x86 and 64).
https://github.com/MastMind/PE-infector
21 579
PostDump
PostDump is a C# tool developt by COS team (Cyber Offensive and Security) of POST Luxembourg.
It is yet another simple tool to perform a memory dump (lsass) using several technics to bypass EDR hooking and lsass protection.
Unlike tools like EDRSandBlast, it focused on unhooking only functions stricly required in order to dump the memory, thus done by using DInvoke to map required unhooked DLL. With an exception for NtReadVirtualMemory which is dynamicly patched if hook is detected.
Project in constant improvement (hook detection, direct syscalls).
https://github.com/post-cyberlabs/Offensive_tools/tree/main/PostDump
21 579
Repost from N/a
Doenerium
Fully undetected #stealer (0/67)
▫️ Exodus wallet injection (get the password whenever the user logs in the wallet)
▫️ More grabbers (VPN's, Gaming, Messengers)
▫️ Keylogger
▫️ Growtopia stealer
▫️ Discord bot to build within discord ($build <webhook_url>)
▫️ Dynamic encryption
https://github.com/doener2323/doenerium
21 579
Chisel-Strike
A .NET XOR encrypted cobalt strike aggressor implementation for chisel to utilize faster proxy and advanced socks5 capabilities.
https://github.com/m3rcer/Chisel-Strike
21 579
family-of-client-ids-research
Abusing Family Refresh Tokens for Unauthorized Access and Persistence in Azure Active Directory
▫️ Ryan Marcotte Cobb, CTU Special Operations
▫️ Tony Gore, CTU Special Operations
Undocumented functionality in Azure Active Directory allows a group of Microsoft OAuth client applications to obtain special “family refresh tokens,” which can be redeemed for bearer tokens as any other client in the family. We will discuss how this functionality was uncovered, the mechanism behind it, and various attack paths to obtain family refresh tokens.
We will demonstrate how this functionality can be abused to access sensitive data. Lastly, we will share relevant information to mitigate the theft of family refresh tokens.
https://github.com/secureworks/family-of-client-ids-research
#ad
21 579
AD description password finder
The purpose of this tool is to check if passwords are stored in clear text in the description of Active Directory accounts.
https://github.com/AssuranceMaladieSec/AD-description-password-finder
#ad
21 579
OWASP Mobile Security Testing Guide (MSTG)
This is the official GitHub Repository of the OWASP Mobile Security Testing Guide (MSTG). The MSTG is a comprehensive manual for mobile app security testing and reverse engineering.
It describes technical processes for verifying the controls listed in the OWASP Mobile Application Verification Standard (MASVS).
📖 Read it on Gitbook
⬇️ Download the latest PDF
✅ Get the latest Mobile App Security Checklists
⚡️ Contribute!
💥 Play with our Crackmes
https://github.com/OWASP/owasp-mstg
21 579
Grawler
The best tool ever, made for automating google dorks it's a tool written in PHP which comes with a web interface that automates the task of using google dorks, scrapes the results, and stores them in a file, version 1.0 is the more powerful than ever supporting multiple proxies.
https://github.com/A3h1nt/Grawler
21 579
CVE-2022-29554
Mishandling of Input to API in PrintixService.exe
https://github.com/ComparedArray/printix-CVE-2022-29554
#exploit #cve
21 579
Repost from Pentesting Shop
USB Ninja Cable
USB Ninja is an information security and penetration testing tool that looks and functions just like a regular USB cable (both power and data) until a wireless remote control triggers it to deliver your choice of attack payload to the host machine. In essence, USB Ninja is the next step in the evolution of BadUSB, embedding the attack in the USB cable itself.
Emulating keyboard and mouse actions, payloads can be completely customized and can be highly targeted. Undetectable by firewalls, AV software (depending on payload of course) or visual inspection, the USB Ninja is an ideal tool for penetration testers, police and government.
Official documentation.
USB Ninja Cable:
🛒 https://ali.ski/7q4-ex
Wireless trigger device for the USB Ninja. Can trigger two different payloads via toggle buttons. Accepts RP-SMA antennas if you want greater distances for remote payload triggering.
USB Ninja Bluetooth Remote:
https://ali.ski/c_5OXw
#usb #badusb
21 579
Repost from N/a
KIZAGAN
A python backdoor(Remote Access Trojan) and it can take camera pictures,screenshots,getting microphone sounds... etc.
https://github.com/st4inl3s5/kizagan
#rat
21 579
Repost from Pentesting News
MITRE ATT&CK
Version 11.3 added tactics and methods for Android/iOS mobile devices
MITRE ATT&CK® is a globally-accessible knowledge base of adversary tactics and techniques based on real-world observations. The ATT&CK knowledge base is used as a foundation for the development of specific threat models and methodologies in the private sector, in government, and in the cybersecurity product and service community.
With the creation of ATT&CK, MITRE is fulfilling its mission to solve problems for a safer world — by bringing communities together to develop more effective cybersecurity. ATT&CK is open and available to any person or organization for use at no charge.
https://attack.mitre.org/versions/v11
#redteam
21 579
CVE-2022-33980
Apache Commons Configuration-RCE
https://github.com/tangxiaofeng7/CVE-2022-33980-Apache-Commons-Configuration-RCE
#exploit
21 579
Faceboom
Social Engineering Application for #Facebook.
How does it work?
▫️ Faceboom is social engineering application, User can only hack the victim's account if they are good at guessing and assuming other people's trades and values.
▫️ It uses a wordlist to perform a successful hack, all the way the user has to update the wordlist.txt file which is already provided to make a hack attempt.
https://github.com/thehassantahir/Faceboom
