HackGit
رفتن به کانال در Telegram
The channel was created for cybersecurity specialists. • Offensive Security • RedTeam • Malware Research • BugBounty • OSINT • etc Disclaimer: t.me/hackgit/2082 Donations - Ads: t.me/hackgit/5423
نمایش بیشتر📈 تحلیل کانال تلگرام HackGit
کانال HackGit (@hackgit) در بخش زبانی انگلیسی بازیگری فعال است. در حال حاضر جامعه شامل 21 579 مشترک است و جایگاه 4 526 را در دسته فناوری و برنامه‌ها و رتبه 1 853 را در منطقه الولايات المتحدة الأمريكية دارد.
📊 شاخص‌های مخاطب و پویایی
از زمان ایجاد در невідомо، پروژه رشد سریعی داشته و 21 579 مشترک جذب کرده است.
بر اساس آخرین داده‌ها در تاریخ 02 مارس, 2025، کانال فعالیت پایداری دارد. در ۳۰ روز گذشته تغییر اعضا برابر 19 و در ۲۴ ساعت گذشته برابر 0 بوده و همچنان دسترسی گسترده‌ای حفظ شده است.
- وضعیت تأیید: تأیید نشده
- نرخ تعامل (ER): میانگین تعامل مخاطب 0% است و در ۲۴ ساعت نخست پس از انتشار، محتوا معمولاً N/A% واکنش نسبت به کل مشترکان کسب می‌کند.
- دسترسی پست‌ها: هر پست به طور میانگین 0 بازدید دریافت می‌کند. در اولین روز معمولاً 0 بازدید جمع‌آوری می‌شود.
- واکنش‌ها و تعامل: مخاطبان به‌طور فعال حمایت می‌کنند؛ میانگین واکنش به هر پست 0 است.
📝 توضیح و سیاست محتوایی
نویسنده این فضا را محل بیان دیدگاه‌های شخصی توصیف می‌کند:
“The channel was created for cybersecurity specialists.
• Offensive Security
• RedTeam
• Malware Research
• BugBounty
• OSINT
• etc
Disclaimer:
t.me/hackgit/2082
Donations - Ads:
t.me/hackgit/5423”
به لطف به‌روزرسانی‌های پرتکرار (آخرین داده در تاریخ 11 نوامبر, 2026)، کانال همواره به‌روز و دارای دسترسی بالاست. تحلیل‌ها نشان می‌دهد مخاطبان به‌طور فعال با محتوا تعامل دارند و آن را به نقطه اثرگذاری مهم در دسته فناوری و برنامه‌ها تبدیل کرده‌اند.
21 579
مشترکین
اطلاعاتی وجود ندارد24 ساعت
-37 روز
+1930 روز
آرشیو پست ها
21 579
apt-get update hook
Gain persistence through apt-get update
Every time user tries sudo apt-get update command we gain root access if we set a listener first an alternative to
/metasploit-framework/blob/master/modules/exploits/linux/local/apt_package_manager_persistence.rb
https://github.com/0bfxgh0st/apt-get_update_hook
21 579
PywerView
Remotely interacts with ldap server. Also included with mini interactive console with auto completion.
Alternative for the awesome original PowerView script. Most of the modules used in PowerView are available in this project ( some of the flags are changed ).
Interesting Features:
▫️ Embeded user session
▫️ Mini PywerView console to make you feel like home when using PowerView in Powershell
▫️ Auto-completer, so no more memorizing commands
▫️ Cross-Domain interactions (might or might not work) Maybe more?
https://github.com/aniqfakhrul/PywerView
#ad #Python
21 579
iscsicpl_bypassUAC
iscsicpl autoelevate DLL Search Order hijacking UAC Bypass 0day
The iscsicpl.exe binary is vulnerable to a DLL Search Order hijacking vulnerability when running 32bit Microsoft binary on a 64bit host via SysWOW64. The 32bit binary, will perform a search within user %Path% for the DLL iscsiexe.dll. This can be exploited using a Proxy DLL to execute code via "iscsicpl.exe" as autoelevate is enabled. This exploit has been tested against the following versions of Windows desktop:
▫️ Windows 11 Enterprise x64 (Version 10.0.22000.739).
▫️ Windows 8.1 Professional x64 (Version 6.3.9600).
https://github.com/hackerhouse-opensource/iscsicpl_bypassUAC
21 579
XSS Payload List
Cross-site scripting works by manipulating a vulnerable web site so that it returns malicious JavaScript to users.
When the malicious code executes inside a victim's browser, the attacker can fully compromise their interaction with the application.
https://github.com/AmoloHT/XSS-Payload
21 579
Unit README: Red Vs. Blue Team Project
Assessment, Analysis, and Hardening of a vulnerable system. This report includes a Red Team Security Assessment, a Blue Team Log Analysis, and Hardening and Mitigation Strategies.
https://github.com/Maximus-Meridius-SC/Project-2-Red-Team-vs.-Blue-Team
21 579
social-media-hacker-list
These are apps and projects made by unaffiliated developers. This list features alternative clients, SDKs, tools, bots and datasets to improve or build upon the default user experience across various social media platforms.
Also included are solutions that repurpose social media platforms and their content in elevated ways. No dead or broken projects - all apps in this list are checked automatically weekly for OK response and will be removed following failure.
Open source projects must not be archived and must show recent commit activity (<= 12 months) to be included. No sketchy extensions that must be run in dev mode.
https://github.com/MobileFirstLLC/social-media-hacker-list
21 579
Repost from Pentesting Shop
Fingerprint Encryption USB Flash Drive
Keep your data private with Eaget's FU60 fingerprint encryption USB 3.0 flash drive.
It's the perfect way of taking your important files with you while keeping it safe from your curious friends or coworkers. The AES 265 encryption algorithm provides absolute security for your data, while its ICE fingerprint chip prevents anyone except you from accessing it.
The USB 3.0 interface lets you transfer your information at tremendous speed and provides a more stable connection, and its high-quality zinc housing gives it a much longer service life.
Features:
▫️ Eaget FU60 fingerprint encryption USB 3.0 flash drive
▫️ Lets you take your data with you while keeping it safe
▫️ Fingerprint sensor gives you exclusive access
▫️ AES 265 encryption algorithm for additional security
▫️ Durable housing and slim, pocket-friendly design
Specifications:
▫️ Interface: USB 3.0
▫️ Capacity: 32G/64G/128GB
▫️ System compatibility: Windows 10/8/7/Vista/XP; Linux; MacOS
▫️ Size: 63,2 x 20,2 x 8,6mm
▫️ Weight: 20g
▫️ Chip: ICE
Buy online:
🛒 https://ali.ski/f4fQel
#usb #drive #fingerprint
21 579
microsoft-rpc-fuzzing-tools
A tool that lists all open #SMB #pipes remotely in live mode. With this you can easily see which pipes will open when starting services.
https://github.com/p0dalirius/microsoft-rpc-fuzzing-tools
21 579
CVE-2022-26134
Confluence Pre-Auth RCE.
In affected versions of Confluence Server and Data Center, an OGNL injection vulnerability exists that would allow an unauthenticated attacker to execute arbitrary code on a Confluence Server or Data Center instance.
The affected versions are from 1.3.0 before 7.4.17, from 7.13.0 before 7.13.7, from 7.14.0 before 7.14.3, from 7.15.0 before 7.15.2, from 7.16.0 before 7.16.4, from 7.17.0 before 7.17.4, and from 7.18.0 before 7.18.1.
https://github.com/AmoloHT/CVE-2022-26134
#cve
21 579
Retbleed
Arbitrary Speculative Code Execution with Return Instruction.
https://github.com/comsec-group/retbleed
Research:
https://comsec.ethz.ch/research/microarch/retbleed
21 579
Code Signing Certificate Cloning Attack
A Powershell script that signs input Executable file with fake Microsoft code-signing certificate to demonstrate risks of cloned-certificate sign attacks.
https://github.com/mgeeky/Penetration-Testing-Tools/tree/master/red-teaming/Self-Signed%20Threat
Research:
https://posts.specterops.io/code-signing-certificate-cloning-attacks-and-defenses-6f98657fc6ec
21 579
Project-Whis
Advanced HTTP Botnet / #Remote Admin Tool written in GoLANG mainly. The Server (C2) is Cross-Platform and can be run on Windows, Linux, MacOS, Etc. once compiled for it.
Supported Clients for Windows, Linux and Android Based Systems. The user Frontend is written in HTML, CSS3, JavaScript while using Bootstrap4 and Font Awesome frameworks.
https://github.com/SaturnsVoid/Project-Whis
21 579
macOS-Security-and-Privacy-Guide
This guide is a collection of techniques for improving the security and privacy of a modern Apple Macintosh computer ("MacBook") running a recent version of macOS (formerly known as "OS X").
This guide is targeted to power users who wish to adopt enterprise-standard security, but is also suitable for novice users with an interest in improving their privacy and security on a Mac.
https://github.com/drduh/macOS-Security-and-Privacy-Guide
21 579
Argos
This script will automatically set up an #OSINT workstation starting from a Ubuntu OS.
Features:
▫️ Multi-User support with roles of admin and user
▫️ Graphs and visual interaction with listeners and agents
▫️ Password length requirements
▫️ 2FA Authentication using Google MFA
▫️ Websocket API Calls
https://github.com/SOsintOps/Argos
21 579
CRAXplusplus (CRAX++)
Being inspired by AFL++, the exploit generator CRAX++ is CRAX with x86_64 ROP techniques, s2e 2.0 upgrade, code selection, I/O states, dynamic ROP, and more. Given a x86_64 binary program and a PoC input, our system leverages dynamic symbolic execution (i.e. concolic execution) to collect the path constraints determined by the PoC input, add exploit constraints to the crashing states, and query the constraint solver for exploit script generation.
Our system supports custom exploitation techniques and modules with the aim of maximizing its extensibility. We implement several binary exploitation techniques in our system, and design two ROP payload chaining algorithms to build ROP payload from multiple techniques.
https://github.com/SQLab/CRAXplusplus
21 579
Nzyme
WiFi Defense System.
The nzyme project uses #WIFI adapters in monitor mode to scan the frequencies for suspicious behavior, specifically rogue access points and known WiFi attack platforms. Each recorded wireless frame is parsed and optionally sent to a Graylog log management system for long-term storage that allows you to perform forensics and incident response.
Ever wondered what to do if you catch a malicious wireless actor? With nzyme, you will be able to reconstruct what happened, who was targeted, and who was successfully compromised.
https://github.com/lennartkoopmann/nzyme
