HackGit
رفتن به کانال در Telegram
The channel was created for cybersecurity specialists. • Offensive Security • RedTeam • Malware Research • BugBounty • OSINT • etc Disclaimer: t.me/hackgit/2082 Donations - Ads: t.me/hackgit/5423
نمایش بیشتر📈 تحلیل کانال تلگرام HackGit
کانال HackGit (@hackgit) در بخش زبانی انگلیسی بازیگری فعال است. در حال حاضر جامعه شامل 21 579 مشترک است و جایگاه 4 526 را در دسته فناوری و برنامه‌ها و رتبه 1 853 را در منطقه الولايات المتحدة الأمريكية دارد.
📊 شاخص‌های مخاطب و پویایی
از زمان ایجاد در невідомо، پروژه رشد سریعی داشته و 21 579 مشترک جذب کرده است.
بر اساس آخرین داده‌ها در تاریخ 02 مارس, 2025، کانال فعالیت پایداری دارد. در ۳۰ روز گذشته تغییر اعضا برابر 19 و در ۲۴ ساعت گذشته برابر 0 بوده و همچنان دسترسی گسترده‌ای حفظ شده است.
- وضعیت تأیید: تأیید نشده
- نرخ تعامل (ER): میانگین تعامل مخاطب 0% است و در ۲۴ ساعت نخست پس از انتشار، محتوا معمولاً N/A% واکنش نسبت به کل مشترکان کسب می‌کند.
- دسترسی پست‌ها: هر پست به طور میانگین 0 بازدید دریافت می‌کند. در اولین روز معمولاً 0 بازدید جمع‌آوری می‌شود.
- واکنش‌ها و تعامل: مخاطبان به‌طور فعال حمایت می‌کنند؛ میانگین واکنش به هر پست 0 است.
📝 توضیح و سیاست محتوایی
نویسنده این فضا را محل بیان دیدگاه‌های شخصی توصیف می‌کند:
“The channel was created for cybersecurity specialists.
• Offensive Security
• RedTeam
• Malware Research
• BugBounty
• OSINT
• etc
Disclaimer:
t.me/hackgit/2082
Donations - Ads:
t.me/hackgit/5423”
به لطف به‌روزرسانی‌های پرتکرار (آخرین داده در تاریخ 11 نوامبر, 2026)، کانال همواره به‌روز و دارای دسترسی بالاست. تحلیل‌ها نشان می‌دهد مخاطبان به‌طور فعال با محتوا تعامل دارند و آن را به نقطه اثرگذاری مهم در دسته فناوری و برنامه‌ها تبدیل کرده‌اند.
21 579
مشترکین
اطلاعاتی وجود ندارد24 ساعت
-37 روز
+1930 روز
آرشیو پست ها
21 579
CVE-2022-33980
Apache Commons RCE can use url,dns,script key-words to connect any server
https://github.com/HKirito/CVE-2022-33980
#cve #RCE
21 579
DashOverride
This is a pre-authenticated RCE exploit for VMware vRealize Operations Manager (vROPS) that impacts versions <= 8.6.3.19682901.
https://github.com/sourceincite/DashOverride
#exploit #RCE
21 579
SCMKit
Source Code Management Attack Toolkit - SCMKit is a toolkit that can be used to attack SCM systems. SCMKit allows the user to specify the SCM system and attack module to use, along with specifying valid credentials (username/password or API key) to the respective SCM system.
Currently, the SCM systems that SCMKit supports are GitHub Enterprise, GitLab Enterprise and Bitbucket Server. The attack modules supported include reconnaissance, privilege escalation and persistence. SCMKit was built in a modular approach, so that new modules and SCM systems can be added in the future by the information security community.
https://github.com/xforcered/SCMKit
21 579
Hydroxide
General purpose pen-testing tool for games on the Roblox engine
https://github.com/Upbolt/Hydroxide
21 579
PSItems
A PowerShell module that finds files and directories as well as file and directory information the quick and easy way!
The goal of this project is to write simple but (very) fast functions for finding (and perhaps managing) FileSystem Objects and their information.
https://github.com/eizedev/PSItems
21 579
Repost from Pentesting Shop
Smart Chip Reader
Support: DNIE, ATM, IC, ID, CAC, SIM, smart card, intelligent card, tax card, and bank card.
Applicable for SIM card and CAC card.
Support touch chip card operations, such as online banking digital signature, for ActivClient, for AKO, for OWA, for DKO, for JKO, for NKO, for BOL, for GKO, for Marinenet, for AF Portal, for Pure Edge Viewer, for ApproveIt, for DCO, for DTS, for LPS, and for Disa Enterprise Email.
Buy online:
🛒 https://ali.ski/rZafy
#reader #card
21 579
D.RDynamicShellcode
Download & Run Dynamic Shellcode : it reads the shellcode from a url (has to be downloadable) locate it in a RWX section in memory and run it, useful for people looking for a shellcode as a 1st stage
https://gitlab.com/ORCA000/d.rdynamicshellcode
21 579
UnamDownloader
A free silent downloader
A free silent (hidden) open-source downloader (binder) that can be built as a native C file or a managed (.NET C#) file. A downloader is essentially the same as a binder although it downloads the files instead of storing them in memory, you can also see my UnamBinder for a normal file binder.
https://github.com/UnamSanctam/UnamDownloader
21 579
Gobuster
A tool used to brute-force:
▫️ URIs (directories and files) in web sites.
▫️ DNS subdomains (with wildcard support).
▫️ Virtual Host names on target web servers.
▫️ Open Amazon S3 buckets
https://github.com/OJ/gobuster
21 579
DefectDojo
DefectDojo is a security orchestration and vulnerability management platform. DefectDojo allows you to manage your application security program, maintain product and application information, triage vulnerabilities and push findings to systems like JIRA and Slack.
DefectDojo enriches and refines vulnerability data using a number of heuristic algorithms that improve with the more you use the platform.
https://github.com/DefectDojo/django-DefectDojo
Demo:
https://demo.defectdojo.org/
21 579
SprayingToolkit
A set of Python scripts/utilities that tries to make password spraying attacks against Lync/S4B & OWA a lot quicker, less painful and more efficient.
https://github.com/byt3bl33d3r/SprayingToolkit
21 579
Shhhloader
A SysWhispers/GetSyscallStub Shellcode Loader that is currently a Work in Progress. It takes raw shellcode as input and compiles a C++ stub that uses syscalls to try and bypass AV/EDR. The included python builder will work on any Linux system that has Mingw-w64 installed.
Features:
▫️ 7 Different Shellcode Execution Methods (ModuleStomping, QueueUserAPC, ProcessHollow, EnumDisplayMonitors, RemoteThreadContext, RemoteThreadSuspended, CurrentThread)
▫️ PPID Spoofing
▫️ Block 3rd Party DLLs
▫️ GetSyscallStub & SysWhispers2
▫️ Obfuscator-LLVM (OLLVM) Support
▫️ Automatic DLL Proxy Generation
▫️ Syscall Name Randomization
▫️ Store Shellcode as English Word Array
▫️ XOR Encryption with Dynamic Key Generation
▫️ Sandbox Evasion via Loaded DLL, Domain, User, Hostname, and System Enumeration
See below video demonstrating the Module Stomping shellcode injection technique executed via DLL Proxying with Windows Defender fully enabled. As seen in the video, the Obfuscator-LLVM and English word list options were also utilized to help evade detection: 👇
https://github.com/icyguider/Shhhloader
21 579
LDAP Monitor
Monitor creation, deletion and changes to LDAP objects live during your pentest or system administration!
With this tool you can quickly see if your attack worked and if it changed LDAP attributes of the target object.
https://github.com/p0dalirius/LDAPmonitor
21 579
Puwr
Easily expand your attack surface on a local network by discovering more hosts, via SSH. Using a machine running a SSH service, Puwr uses a given subnet range to scope out IP's, sending back any successful ping requests it has.
This can be used to create a pivoting attack from a compromised machine, by returning you hosts you couldn't normally discover from your own device. Open ports can then be probed on these discovered devices, to find a gateway into attacking more devices.
https://github.com/Xeonrx/Puwr
21 579
TamperingSyscalls
This is a 2 part novel project consisting of argument spoofing and syscall retrival which both abuse EH in order to subvert EDRs. This project consists of both of these projects in order to provide an alternative solution to direct syscalls.
https://github.com/rad9800/TamperingSyscalls
#edr #evasion #maldev #syscall #tampering
21 579
MNSPlusTrasher
The best and only MNS+ "hacktool" available
MNSPlusTrasher is designed to show flaws in MNS+ which is used by most schools in Rhineland-Palatinate, Germany
https://github.com/basti564/MNSPlusTrasher
21 579
CVE-2022-31101
Exploit for PrestaShop bockwishlist module 2.1.0 SQLi (CVE-2022-31101)
https://github.com/karthikuj/CVE-2022-31101
#cve #exploit
21 579
BlueHound
BlueHound is an open-source tool that helps blue teams pinpoint the security issues that actually matter. By combining information about user permissions, network access and unpatched vulnerabilities, BlueHound reveals the paths attackers would take if they were inside your network
It is a fork of NeoDash, reimagined, to make it suitable for defensive security purposes.
To get started with BlueHound, check out our introductory video and blog post.
https://github.com/zeronetworks/BlueHound
#blueteam
21 579
BootMii loader
This repository contains the public release of the source code for the BootMii stub loader.
https://github.com/fail0verflow/bootmii
