HackGit
Ir al canal en Telegram
The channel was created for cybersecurity specialists. • Offensive Security • RedTeam • Malware Research • BugBounty • OSINT • etc Disclaimer: t.me/hackgit/2082 Donations - Ads: t.me/hackgit/5423
Mostrar más📈 Análisis del canal de Telegram HackGit
El canal HackGit (@hackgit) en el segmento lingüístico de Inglés es un actor destacado. Actualmente la comunidad reúne a 21 579 suscriptores, ocupando la posición 4 526 en la categoría Tecnologías y Aplicaciones y el puesto 1 853 en la región EEUU.
📊 Métricas de audiencia y dinámica
Desde su creación el невідомо, el proyecto ha mostrado un crecimiento acelerado, reuniendo a 21 579 suscriptores.
Según los últimos datos del 02 marzo, 2025, el canal mantiene una actividad estable. En los últimos 30 días la variación de miembros fue de 19, y en las últimas 24 horas de 0, conservando un alto alcance.
- Estado de verificación: No verificado
- Tasa de interacción (ER): El promedio de interacción de la audiencia es 0%. Durante las primeras 24 horas tras publicar, el contenido suele obtener N/A% de reacciones respecto al total de suscriptores.
- Alcance de las publicaciones: Cada publicación recibe en promedio 0 visualizaciones. En el primer día suele acumular 0 visualizaciones.
- Reacciones e interacción: La audiencia responde de forma activa: el promedio de reacciones por publicación es 0.
📝 Descripción y política de contenido
El autor describe el recurso como un espacio para expresar opiniones subjetivas:
“The channel was created for cybersecurity specialists.
• Offensive Security
• RedTeam
• Malware Research
• BugBounty
• OSINT
• etc
Disclaimer:
t.me/hackgit/2082
Donations - Ads:
t.me/hackgit/5423”
Gracias a la alta frecuencia de actualizaciones (últimos datos recibidos el 11 noviembre, 2026), el canal mantiene la vigencia y un amplio alcance. La analítica demuestra que la audiencia interactúa activamente con el contenido, lo que lo convierte en un punto de referencia dentro de la categoría Tecnologías y Aplicaciones.
21 579
Suscriptores
Sin datos24 horas
-37 días
+1930 días
Archivo de publicaciones
21 579
peetch
peetch is a collection of tools aimed at experimenting with different aspects of eBPF to bypass TLS protocol protections.
Currently, peetch includes two subcommands. The first called dump aims to sniff network traffic by associating information about the source process with each packet. The second called tls allows to identify processes using OpenSSL to extract cryptographic keys.
Combined, these two commands make it possible to decrypt TLS exchanges recorded in the PCAPng format.
https://github.com/quarkslab/peetch
21 579
nps-auth-bypass
nps authentication bypass exploit tool, use this tool to easily access the web console, or bulk get socks5 and http proxy
https://github.com/carr0t2/nps-auth-bypass
21 579
Windows-WiFi-Extractor
Extract Windows Wi-Fi Passwords to a Remote URL
https://github.com/hmaverickadams/Windows-WiFi-Extractor
21 579
Velociraptor
Endpoint visibility and collection tool.
Velociraptor is a tool for collecting host based state information using The Velociraptor Query Language (VQL) queries.
To learn more about Velociraptor, read the documentation on:
https://github.com/Velocidex/velociraptor
Docs:
https://docs.velociraptor.app/
21 579
A TCP proxy using HTTP
Reach SSH behind a Nginx reverse proxy
https://github.com/julianbuettner/tcp-over-http
21 579
Antnium
A C2 framework and RAT written in Go.
This source code is publicly published as reference for my presentation Develop your own RAT - AV & EDR Defense. Antnium inteded to fulfill my own requirements, and not those of others. Works for the campaigns i performed, but is not necessarily meant to be a generic C2 framework.
There are two components:
▫️ client.exe: The actual RAT / beacon / agent / implant
▫️ server.exe: C2 server
https://github.com/dobin/antnium
21 579
cve-2021-3060 POC
https://gist.github.com/rqu1/8ed4f51fd90dd82fc89111340e26a756
sloppy certificate enrollment protocol, for ghosts (cve-2021-3060)
https://forum.spacehey.com/topic?id=83646
#cve #poc
21 579
follina (POC)
All about CVE-2022-30190, aka follina, that is a RCE vulnerability that affects Microsoft Support Diagnostic Tools (MSDT) on Office apps such as Word. This is a very simple POC, feel free to check the sources below for more threat intelligence.
https://github.com/Noxtal/follina
Follina – CVE-2022-30190 RTF: https://0xsp.com/offensive/follina-cve-2022-30190-rtf/
#cve #poc
21 579
Repost from HackGit
💰 Donate
If you like the channel please support us ❣️
https://www.buymeacoffee.com/HackGit
BTC:
1987zNaVX53v7tzpKRRde84uXbDYjuNykLTON:
UQAAZ1BFX5OsybSryoFunzyJN3F7oKWMbZNPlwMTcVK8mEzAUSDT – ERC20❗️:
0x1e7fa9e9c42f71e6d155aca39951f23355178163You can buy crypto here #donate #support
21 579
iCULeak.py
Tool to find and extract credentials from phone configuration files in environments managed by Cisco's CUCM (Call Manager).
When using Cisco's CUCM (Call Manager), phone configuration files are stored on a TFTP server. These VoIP phone configuration files quite frequently contain sensitive data, including phone SSH/admin credentials.
There is also an issue with how some browsers autofill fields such as the SSH Username & Password fields with their CUCM credentials (commonly their AD credentials), if the administrator has saved the credentials in their browser. This issue has also been faced by administrators using password managers that automatically plug in credentials, where they found that their credentials were being automatically inputted into the SSH Username & Password fields, and then being saved (and stored in plaintext in the configuration files).
https://github.com/llt4l/iCULeak.py
#ad #cisco
21 579
SeeYouCM Thief
Simple tool to automatically download and parse configuration files from Cisco phone systems searching for SSH credentials. Will also optionally enumerate active directory users from the UDS API.
https://github.com/trustedsec/SeeYouCM-Thief
Seeyoucm-thief: exploiting common misconfigurations in cisco phone systems: https://www.trustedsec.com/blog/seeyoucm-thief-exploiting-common-misconfigurations-in-cisco-phone-systems/
Unauthenticated Dumping of Usernames via Cisco Unified Call Manager (CUCM):
https://www.n00py.io/2022/01/unauthenticated-dumping-of-usernames-via-cisco-unified-call-manager-cucm/
#ad #cisco
21 579
TurboDataMine
Turbo Data Miner is a #Burp Suite Extension, which adds a new tab Turbo Miner to Burp Suite's UI as well as a new entry Turbo Data Miner to Burp Suite's Extensions context menu entry. In the new tab, you are able to write new or select existing Python scripts that are executed on each request/response item currently stored in the Proxy History, Side Map, or on each request/response item that is sent or received by Burp Suite.
The objective of these Python scripts is the flexible and dynamic extraction, correlation, and structured presentation of information from the Burp Suite state as well as the flexible and dynamic on-the-fly modification of outgoing or incoming HTTP requests. Thus, Turbo Data Miner shall aid in gaining a better and faster understanding of the data collected and processed by Burp Suite.
https://github.com/chopicalqui/TurboDataMiner
21 579
CirrusGo
A fast tool to scan SAAS, PAAS App written in Go
https://github.com/Ph33rr/cirrusgo
21 579
SAMLRaider
SAML2 Burp Extension.
#Burp Suite extension for testing SAML infrastructures. It contains two core functionalities: Manipulating SAML Messages and manage X.509 certificates
Features:
▫️ Sign SAML messages & assertions (signature spoofing attack)
▫️ Remove signatures (signature exclusion attack)
▫️ Edit SAML messages (SAMLRequest, SAMLResponse & custom parameter names)
▫️ Perform eight common XSW attacks
▫️ Insert XXE and XSLT attack payloads
▫️ Supported Profiles: SAML Webbrowser Single Sign-on Profile, Web Services Security SAML Token Profile
▫️ Supported Bindings: POST Binding, Redirect Binding, SOAP Binding, URI Binding
https://github.com/CompassSecurity/SAMLRaider
21 579
XLMMacroDeobfuscator
XLMMacroDeobfuscator can be used to decode obfuscated XLM macros (also known as Excel 4.0 macros). It utilizes an internal XLM emulator to interpret the macros, without fully performing the code.
It supports both xls, xlsm, and xlsb formats.
https://github.com/DissectMalware/XLMMacroDeobfuscator
21 579
Protections Artifacts
Elastic Security prevents ransomware and malware, detects advanced threats, and arms responders with vital context. It’s free and open, ready for every endpoint.
Protections-Artifacts is the home of our detection logic (rules, yara, etc) for Elastic Security for endpoint. At Elastic, we believe that being open and transparent is critical for the success of us and our users. Check out our blog post if you are interested in additional background.
https://github.com/elastic/protections-artifacts
