HackGit
رفتن به کانال در Telegram
The channel was created for cybersecurity specialists. • Offensive Security • RedTeam • Malware Research • BugBounty • OSINT • etc Disclaimer: t.me/hackgit/2082 Donations - Ads: t.me/hackgit/5423
نمایش بیشتر📈 تحلیل کانال تلگرام HackGit
کانال HackGit (@hackgit) در بخش زبانی انگلیسی بازیگری فعال است. در حال حاضر جامعه شامل 21 579 مشترک است و جایگاه 4 526 را در دسته فناوری و برنامه‌ها و رتبه 1 853 را در منطقه الولايات المتحدة الأمريكية دارد.
📊 شاخص‌های مخاطب و پویایی
از زمان ایجاد در невідомо، پروژه رشد سریعی داشته و 21 579 مشترک جذب کرده است.
بر اساس آخرین داده‌ها در تاریخ 02 مارس, 2025، کانال فعالیت پایداری دارد. در ۳۰ روز گذشته تغییر اعضا برابر 19 و در ۲۴ ساعت گذشته برابر 0 بوده و همچنان دسترسی گسترده‌ای حفظ شده است.
- وضعیت تأیید: تأیید نشده
- نرخ تعامل (ER): میانگین تعامل مخاطب 0% است و در ۲۴ ساعت نخست پس از انتشار، محتوا معمولاً N/A% واکنش نسبت به کل مشترکان کسب می‌کند.
- دسترسی پست‌ها: هر پست به طور میانگین 0 بازدید دریافت می‌کند. در اولین روز معمولاً 0 بازدید جمع‌آوری می‌شود.
- واکنش‌ها و تعامل: مخاطبان به‌طور فعال حمایت می‌کنند؛ میانگین واکنش به هر پست 0 است.
📝 توضیح و سیاست محتوایی
نویسنده این فضا را محل بیان دیدگاه‌های شخصی توصیف می‌کند:
“The channel was created for cybersecurity specialists.
• Offensive Security
• RedTeam
• Malware Research
• BugBounty
• OSINT
• etc
Disclaimer:
t.me/hackgit/2082
Donations - Ads:
t.me/hackgit/5423”
به لطف به‌روزرسانی‌های پرتکرار (آخرین داده در تاریخ 11 نوامبر, 2026)، کانال همواره به‌روز و دارای دسترسی بالاست. تحلیل‌ها نشان می‌دهد مخاطبان به‌طور فعال با محتوا تعامل دارند و آن را به نقطه اثرگذاری مهم در دسته فناوری و برنامه‌ها تبدیل کرده‌اند.
21 579
مشترکین
اطلاعاتی وجود ندارد24 ساعت
-37 روز
+1930 روز
آرشیو پست ها
21 579
Red-Teaming-TTPs
Free Resources to Practice
https://github.com/RoseSecurity/Red-Teaming-TTPs
#redteam
21 579
unsubscan
A tool to help you find unsubscribe links in your emails
I created unsubscan because I think that anyone should be able to quickly and easily look at their emails and:
▫️ Unsubscribe from whatever they want
▫️ Unsubscribe whenever they want
▫️ Unsubscribe for free
▫️ Unsubscribe without yet another subscription service
▫️ Unsubscribe without having to give another company access to their emails
▫️ Unsubscribe without having to forward emails to other companies
https://github.com/LGUG2Z/unsubscan
21 579
Gliding Sword
A full fledged exploitation framework written in pure python3.
https://github.com/MrSharkSpamBot/GlidingSword
21 579
GVNG Search
Command line toolkit for gathering information about person (nickname search, validate email, geolocate ip) and domain (traceroute, dns lookup, tcp port scan etc).
https://github.com/ByDog3r/GvngSearch
21 579
liffy
A little python tool to perform Local file inclusion.
Feature:
▫️ data:// for code execution
▫️ expect:// for code execution
▫️ input:// for code execution
▫️ filter:// for arbitrary file reads
▫️ /proc/self/environ for code execution in CGI mode
▫️ Apache access.log poisoning
▫️ Linux auth.log SSH poisoning
▫️ Direct payload delivery with no stager
▫️ Support for absolute and relative path traversal
▫️ Support for cookies for authentication
https://github.com/mzfr/liffy
21 579
Alternative Code Execution
According to Microsoft, a callback function is code within a managed application that helps an unmanaged DLL function complete a task.
Calls to a callback function pass indirectly from a managed application, through a DLL function, and back to the managed implementation.
https://github.com/aahmad097/AlternativeShellcodeExec
21 579
Ekko
A small sleep obfuscation technique that uses CreateTimerQueueTimer to queue up the ROP chain that performs Sleep obfuscation
https://github.com/Cracked5pider/Ekko
21 579
CloudBrute
A tool to find a company (target) infrastructure, files, and apps on the top cloud providers (Amazon, Google, Microsoft, DigitalOcean, Alibaba, Vultr, Linode). The outcome is useful for bug bounty hunters, red teamers, and penetration testers alike.
Features:
▫️ Cloud detection (IPINFO API and Source Code)
▫️ Supports all major providers
▫️ Black-Box (unauthenticated)
▫️ Fast (concurrent)
▫️ Modular and easily customizable
▫️ Cross Platform (windows, linux, mac)
▫️ User-Agent Randomization
▫️ Proxy Randomization (HTTP, Socks5)
▫️ Supported Cloud Providers
https://github.com/0xsha/CloudBrute
Research:
https://0xsha.io/blog/introducing-cloudbrute-wild-hunt-on-the-clouds
21 579
Red Team Tactics: Utilizing Syscalls in C# - Prerequisite Knowledge
https://jhalon.github.io/utilizing-syscalls-in-csharp-1/
21 579
tomcatWarDeployer
Apache Tomcat auto WAR deployment & pwning penetration testing tool.
This is a penetration testing tool intended to leverage Apache Tomcat credentials in order to automatically generate and deploy JSP Backdoor, as well as invoke it afterwards and provide nice shell (either via web gui, listening port binded on remote machine or as a reverse tcp payload connecting back to the adversary).
In practice, it generates JSP backdoor WAR package on-the-fly and deploys it at the Apache Tomcat Manager Application, using valid HTTP Authentication credentials that pentester provided (or custom ones, in the end, we all love tomcat:tomcat ).
The tool offers couple of handy features - like manager's panel lookup logic, support for CVE-2007-1860 double encoding issue, CSRF handling in newer Tomcat's.
https://github.com/mgeeky/tomcatWarDeployer
21 579
DelegationBOF
This tool uses LDAP to check a domain for known abusable Kerberos delegation settings. Currently, it supports RBCD, Constrained, Constrained w/Protocol Transition, and Unconstrained Delegation checks.
Despite the name, I decided to add in a couple more features since the bulk of the code was already there. So now there is a get-spns command as well which can look for ASREP accounts or Kerberoastable SPNs.
https://github.com/IcebreakerSecurity/DelegationBOF
21 579
Repost from Pentesting News
PoC for MS-DFSNM coerce authentication using NetrDfsRemoveStdRoot method
Spooler service disabled, RPC filters installed to prevent PetitPotam and File Server VSS Agent Service not installed but you still want to relay DC authentication to ADCS? Don't worry MS-DFSNM have your back:
▫️ https://github.com/Wh04m1001/DFSCoerce
Inspired by:
▫️ https://github.com/topotam/PetitPotam
▫️ https://github.com/ShutdownRepo/ShadowCoerce
▫️ https://github.com/leechristensen/SpoolSample
#authentication #coercion #petitpotam #dfsnm
21 579
KDigger
Kubernetes focused container assessment tool for penetration testing.
Features:
▫️ try to guess your container runtime.
▫️ See your capabilities.
▫️ Scan for namespace activation and configuration.
▫️ Scan for the allowed syscalls.
But you can also do more Kubernetes specific operations:
▫️ Retrieve service account token.
▫️ Scan token permissions.
▫️ List interesting environment variables.
▫️ List available devices.
▫️ Retrieve all available services in a cluster.
▫️ Scan the admission controller chain!
https://github.com/quarkslab/kdigger
21 579
UhuruOS
Hackers' Linux Distribution based on Arch Linux and so on.
Features:
▫️ Manjaro Repository for stable update
▫️ Sophisticated appearance (Thanks to Alter Linux)
▫️ pre-installed BlackArch Repository
▫️ Beautiful Theme (MidNight-BlueNight)
Pre-Installed packages
▫️ nmap
▫️ Rustscan
▫️ masscan
▫️ sublist3r
▫️ dnsrecon
▫️ ffuf
▫️ seclists
▫️ mitmproxy
▫️ nikto
▫️ metasploit
▫️ sploitctl(searchsploit and etc)
▫️ sqlmap
▫️ wpscan
▫️ droopescan
▫️ magescan
▫️ wireshark-qt
▫️ wireshark-cli
▫️ tcpdump
▫️ hydra
▫️ john
▫️ And so on!
https://github.com/infoengine1337/UhuruOS
21 579
Cloud-Bucket-Leak-Detection-Tools
https://github.com/UzJu/Cloud-Bucket-Leak-Detection-Tools/blob/main/README.en.md
21 579
CogView2
Еще один аналог DALL·E но более быстрый, для преобразования любого (китайского/английского) текста в изображение.
https://github.com/THUDM/CogView2
#images #chinese #english #text
