HackGit
رفتن به کانال در Telegram
The channel was created for cybersecurity specialists. • Offensive Security • RedTeam • Malware Research • BugBounty • OSINT • etc Disclaimer: t.me/hackgit/2082 Donations - Ads: t.me/hackgit/5423
نمایش بیشتر📈 تحلیل کانال تلگرام HackGit
کانال HackGit (@hackgit) در بخش زبانی انگلیسی بازیگری فعال است. در حال حاضر جامعه شامل 21 579 مشترک است و جایگاه 4 526 را در دسته فناوری و برنامه‌ها و رتبه 1 853 را در منطقه الولايات المتحدة الأمريكية دارد.
📊 شاخص‌های مخاطب و پویایی
از زمان ایجاد در невідомо، پروژه رشد سریعی داشته و 21 579 مشترک جذب کرده است.
بر اساس آخرین داده‌ها در تاریخ 02 مارس, 2025، کانال فعالیت پایداری دارد. در ۳۰ روز گذشته تغییر اعضا برابر 19 و در ۲۴ ساعت گذشته برابر 0 بوده و همچنان دسترسی گسترده‌ای حفظ شده است.
- وضعیت تأیید: تأیید نشده
- نرخ تعامل (ER): میانگین تعامل مخاطب 0% است و در ۲۴ ساعت نخست پس از انتشار، محتوا معمولاً N/A% واکنش نسبت به کل مشترکان کسب می‌کند.
- دسترسی پست‌ها: هر پست به طور میانگین 0 بازدید دریافت می‌کند. در اولین روز معمولاً 0 بازدید جمع‌آوری می‌شود.
- واکنش‌ها و تعامل: مخاطبان به‌طور فعال حمایت می‌کنند؛ میانگین واکنش به هر پست 0 است.
📝 توضیح و سیاست محتوایی
نویسنده این فضا را محل بیان دیدگاه‌های شخصی توصیف می‌کند:
“The channel was created for cybersecurity specialists.
• Offensive Security
• RedTeam
• Malware Research
• BugBounty
• OSINT
• etc
Disclaimer:
t.me/hackgit/2082
Donations - Ads:
t.me/hackgit/5423”
به لطف به‌روزرسانی‌های پرتکرار (آخرین داده در تاریخ 11 نوامبر, 2026)، کانال همواره به‌روز و دارای دسترسی بالاست. تحلیل‌ها نشان می‌دهد مخاطبان به‌طور فعال با محتوا تعامل دارند و آن را به نقطه اثرگذاری مهم در دسته فناوری و برنامه‌ها تبدیل کرده‌اند.
21 579
مشترکین
اطلاعاتی وجود ندارد24 ساعت
-37 روز
+1930 روز
آرشیو پست ها
21 579
URLHunter
A recon tool that allows searching on URLs that are exposed via shortened services.
https://github.com/utkusen/urlhunter
21 579
Terra
OSINT Tool on Twitter and Instagram.
▫️ Install it and write your login/password in credentials
▫️ Launch (python3 terra.py <username>)
▫️ Type command "followers emails"
▫️ Wait. Long time.
▫️ Get list of users's followers emails (from bio)
https://github.com/xadhrit/terra
21 579
PDFCrack
An Advanced tool to Crack Any Password Protected PDF file. A very user friendly script especially for noob hackers.
Features:
▫️ Crack Any PDF password protected file with different Techniques.
▫️ This script will install required tool automatically.
▫️ U can Use Your Own Custom Wordlist in order to crack password.
▫️ Also U can Use Default wordlist as well as own wordlist in Hash Attack.
▫️ Very Fast To Crack Any Password Protected File.
▫️ More Features will be added in Future IA!
https://github.com/machine1337/pdfcrack
21 579
Purpose
Password generator based on keywords and commonly used creation patterns.
psudohash is a password list generator for orchestrating brute force attacks. It imitates certain password creation patterns commonly used by humans, like substituting a word's letters with symbols or numbers, using char-case variations, adding a common padding before or after the word and more. It is keyword-based and highly customizable.
https://github.com/t3l3machus/psudohash
21 579
Randy
This is a pre-authenticated RCE exploit for Inductive Automation Ignition that impacts versions <= 8.1.16. We failed to exploit the bugs at Pwn2Own Miami 2022 because we had a sloppy exploit and no debug environment, but since then we have found the time and energy to improve it!
https://github.com/sourceincite/randy
#exploit #RCE
21 579
blindssl
Disable SSL certificate verification using eBPF
https://github.com/citronneur/blindssl
21 579
BackBag Lab\VM
Small enough to carry on your back (Backpack) 🎒💻.
There are also times where I just need an ubuntu server or a win10 instance with a specific set of tools and not a whole environment. This project caters for such cases.
https://github.com/Humoud/BackBag-Lab-VM
21 579
ElectroMagnetic Mining Array (EMMA)
Framework for capturing and attacking traces of electromagnetic radiation emitted by an electronic device, in order to obtain encryption keys or other sensitive data. Detect syscall hooking using eBPF.
https://github.com/pathtofile/bpf-hookdetect
21 579
ReoSploit
A Tool that Finds, Enumerates, and #exploits Reolink Cameras.
Features:
▫️ Scanning Networks for Reolink Devices.
▫️ Listening to Network Traffic for Reolink credentials and sessions.
▫️ Generating #api Tokens from Credentials.
▫️ Enumerating the device for users, hardware information, firmware information, etc.
▫️ Taking a Photo through the Camera and saving it.
▫️ Streaming Live Video
▫️ DOSing the Device's Video Feed & Web Page
▫️ Toggling Infrared Capabilities
▫️ Toggling Recording Capabilities
https://github.com/spicesouls/reosploit
21 579
DrvMon
Advanced driver monitoring utility.
Driver monitor is an advanced driver monitoring utility created first in 2010 by hFireF0x (EP_XOFF) and myself. We kept it private for many years, as it still works well today.
Given the last update to the code was in 2017, I see no reason as to why not to make it open source for all.
It works on Windows 7 - Windows 10 version 10.0.19044.1766 (last version I tested on).
https://github.com/Fyyre/DrvMon
21 579
Twosint
Python tool that automates the process of Twitter #OSINT investigation using twint.
Made for:
▫️ Penetration testers/Ethical hackers
▫️ IT students that are looking for something cool to search.
▫️ OSiNT investigators (This tool is a MUST for you! It makes the job much more faster and efficient!)
▫️ Journalists who are looking for more information on a specific celebrity or person
https://github.com/falkensmz/tw1tter0s1nt
21 579
rga
ripgrep, but also search in PDFs, E-Books, Office documents, zip, tar.gz, etc.
rga is a line-oriented search tool that allows you to look for a regex in a multitude of file types. rga wraps the awesome ripgrep and enables it to search in pdf, docx, sqlite, jpg, movie subtitles (mkv, mp4), etc.
https://github.com/phiresky/ripgrep-all
21 579
BeaconHunter
Behavior based monitoring and hunting tool built in C# leveraging ETW tracing. Blue teamers can use this tool to detect and respond to potential #Cobalt Strike beacons. Red teamers can use this tool to research ETW bypasses and discover new processes that behave like beacons.
Beacon implants injected in a benign process live in a thread with a Wait:DelayExecution state (probably related to Cobalt Strike's sleep). Find all processes that contain a thread in a Wait:DelayExecution state. Then, leverage ETW tracing to specifically monitor suspicious thread activity:
▫️ HTTP/HTTPS callbacks
▫️ DNS queries
▫️ File system (cd,ls,upload,rm)
▫️ Process termination (kill)
▫️ Shell commands (run,execute)
▫️ Score suspicious behavior. Log, display, and take action against them.
https://github.com/3lp4tr0n/BeaconHunter
21 579
Repost from Pentesting Shop
Packet Squirrel
The Packet Squirrel is a stealthy pocket-sized man-in-the-middle.
This Ethernet multi-tool is designed to give you covert remote access, painless packet captures, and secure VPN connections with the flip of a switch.
Simple Scripting Language: Combining the power of bash, loads of familiar Linux tools, and the simplicity of Ducky Script – writing payloads is quick and easy. With commands like NETMODE, setting up transparent network bridges, NAT, VPNs and even MAC address cloning is simple. Plus there’s a growing library of payloads ready to download in addition to the VPN tunneling, packet capturing and DNS spoofing payloads pre-loaded.
Multi-Payload Select: Flick the switch to select a payload and effortlessly perform advanced attacks, quietly log data, or secure all connections over a VPN with instant feedback from the multi-color LED.
Buy online:
🛒 https://ali.ski/FqOrG
#lan #mitm #ethernet
21 579
HawkScan
Security Tool for Reconnaissance and Information Gathering on a website. (#python 3.x).
Features:
▫️ Test backup/old file on all the files found (index.php.bak, index.php~ ...)
▫️ Check header information
▫️ Check DNS information
▫️ Check email in the website and in same time if emails leaked (report)
▫️ CMS detection + version and vulns
▫️ Backup system (if the script stopped, it take again in same place)
▫️ WAF detection and Response error to WAF + Testing bypass it
▫️ Check Github
▫️ Option --exclude to exclude page, code error, bytes
▫️ Option rate-limit if app is unstable (--timesleep)
▫️ Check in waybackmachine
▫️ Check if DataBase firebaseio existe and accessible
▫️ Search S3 buckets in source code page
▫️ Testing if it's possible scanning with "localhost" host
▫️ Try differents bypass for 403 code error
▫️ JS parsing and analysis (option --js)
▫️ Check Google Dork
▫️ Check Host IP
▫️ Auto resize relative to window
▫️ Check backup domain name (ex: www.domain.com/domain.zip)
▫️ Check socketio connection
▫️ Notify when scan completed (Only work on Linux)
https://github.com/c0dejump/HawkScan
21 579
BFAC
Burp Extension for BFAC (Advanced Backup-File Artifacts Testing for Web-Applications)
Backup files are too often overlooked by web application auditors. With the objective of democratizing the backup file tests and integrating these tests into the most used tool for web auditors, SEC-IT auditors worked on the integration of the BFAC checks as a BurpSuite plugin.
BFAC is an automated tool that checks for backup artifacts that may disclose the web-application's source code. The artifacts can also lead to leakage of sensitive information, such as passwords, directory structure, etc.
https://github.com/sec-it/BFAC-Burp-Extension
#burp
21 579
Repost from Pentesting News
Investigator
An online handy-recon tool.
A web-based handy-recon tool that uses different Google Dorking techniques and some open-source services to find juicy information about target websites. It helps you quickly check and gather information about the target domain name.
https://abhijithb200.github.io/investigator/
#google #dork
21 579
Trufflehog
Find Credentials All Over The Place
https://github.com/trufflesecurity/trufflehog
21 579
Repost from Pentesting News
HiddenCPG
HiddenCPG is a vulnerable clone detection system using code property graph (CPG) for uncovering various web vulnerabilities HiddenCPG is capable of detecting unknown web vulnerabilities that stem from the absence of input sanitization and incorrect sanitization.
The details of the testing strategy is in our paper, "HiddenCPG: Large-Scale Vulnerable Clone Detection Using Subgraph Isomorphism of Code Property Graphs", which appeared in WWW 2022. To see how to configure and execute HiddenCPG, see the followings.
https://github.com/WSP-LAB/HiddenCPG
