HackGit
رفتن به کانال در Telegram
The channel was created for cybersecurity specialists. • Offensive Security • RedTeam • Malware Research • BugBounty • OSINT • etc Disclaimer: t.me/hackgit/2082 Donations - Ads: t.me/hackgit/5423
نمایش بیشتر📈 تحلیل کانال تلگرام HackGit
کانال HackGit (@hackgit) در بخش زبانی انگلیسی بازیگری فعال است. در حال حاضر جامعه شامل 21 579 مشترک است و جایگاه 4 526 را در دسته فناوری و برنامه‌ها و رتبه 1 853 را در منطقه الولايات المتحدة الأمريكية دارد.
📊 شاخص‌های مخاطب و پویایی
از زمان ایجاد در невідомо، پروژه رشد سریعی داشته و 21 579 مشترک جذب کرده است.
بر اساس آخرین داده‌ها در تاریخ 02 مارس, 2025، کانال فعالیت پایداری دارد. در ۳۰ روز گذشته تغییر اعضا برابر 19 و در ۲۴ ساعت گذشته برابر 0 بوده و همچنان دسترسی گسترده‌ای حفظ شده است.
- وضعیت تأیید: تأیید نشده
- نرخ تعامل (ER): میانگین تعامل مخاطب 0% است و در ۲۴ ساعت نخست پس از انتشار، محتوا معمولاً N/A% واکنش نسبت به کل مشترکان کسب می‌کند.
- دسترسی پست‌ها: هر پست به طور میانگین 0 بازدید دریافت می‌کند. در اولین روز معمولاً 0 بازدید جمع‌آوری می‌شود.
- واکنش‌ها و تعامل: مخاطبان به‌طور فعال حمایت می‌کنند؛ میانگین واکنش به هر پست 0 است.
📝 توضیح و سیاست محتوایی
نویسنده این فضا را محل بیان دیدگاه‌های شخصی توصیف می‌کند:
“The channel was created for cybersecurity specialists.
• Offensive Security
• RedTeam
• Malware Research
• BugBounty
• OSINT
• etc
Disclaimer:
t.me/hackgit/2082
Donations - Ads:
t.me/hackgit/5423”
به لطف به‌روزرسانی‌های پرتکرار (آخرین داده در تاریخ 11 نوامبر, 2026)، کانال همواره به‌روز و دارای دسترسی بالاست. تحلیل‌ها نشان می‌دهد مخاطبان به‌طور فعال با محتوا تعامل دارند و آن را به نقطه اثرگذاری مهم در دسته فناوری و برنامه‌ها تبدیل کرده‌اند.
21 579
مشترکین
اطلاعاتی وجود ندارد24 ساعت
-37 روز
+1930 روز
آرشیو پست ها
21 579
Repost from Pentesting News
FwHunt Community Scanner
Tools for analyzing UEFI firmware and checking UEFI modules with FwHunt rules.
https://github.com/binarly-io/fwhunt-scan
21 579
StegoCracker
Stego is an open-source and free steganography tool that lets you hide your secret message in an image or audio file. You will not notice any change in the image or audio file. However, your secret message will be inside the original image or audio file.
https://github.com/W1LDN16H7/StegoCracker
21 579
qBitMF (qBittorrent-MultiFace)
qBitMF is a docker container that runs qBittorrent over multiple VPN (or other) interfaces simultaneously. This is an example of a "multiface" torrent client, multiface being a portmanteau of "multiple" and "interface".
https://github.com/qBitMF/qBitMF
21 579
sauron
Sauron is a minimalistic cross-platform malware scanner with non-blocking realtime filesystem monitoring using YARA rules, written in Rust.
https://github.com/evilsocket/sauron
21 579
EDRSandBlast
EDRSandBlast is a tool written in C that weaponize a vulnerable signed driver to bypass EDR detections (Kernel callbacks and ETW TI provider) and LSASS protections. Multiple userland unhooking techniques are also implemented to evade userland monitoring.
As of release, combination of userland (--usermode) and Kernel-land (--kernelmode) techniques were used to dump LSASS memory under EDR scrutiny, without being blocked nor generating "OS Credential Dumping"-related events in the product (cloud) console. The tests were performed on 3 distinct EDR products and were successful in each case.
https://github.com/wavestone-cdt/EDRSandblast/tree/DefCon30Release
21 579
ApiHashing
just a stable replacement, that is fast and efficient.
▫️ no imported functions
▫️ easy to use
▫️ compile time seed / string hashes (different hashes everybuild with no need to change anything)
▫️ saves the module handle by hash, for the next possible api, so that it wont search for the module in peb, but by hash in our map
▫️ handles forwarded functions
https://github.com/ORCx41/ApiHashing
#Donate @HackGit
21 579
RATata
A simple python RAT to setup and use.
It works with a third-party #API so you don't have to open ports of your Wi-Fi box.
Tools:
▫️ execute bash commands
▫️ download files
▫️ inject python scripts
Characteristics:
▫️ auto run on computer boot
▫️ hash a score of 9/70 on virus total, but can easily put to 0 with a crypter
https://github.com/loTus04/RATata
21 579
secureCodeBox
A kubernetes based, modularized toolchain for continuous security scans of your software project. Its goal is to orchestrate and easily automate a bunch of security-testing tools out of the box.
https://github.com/secureCodeBox/secureCodeBox
21 579
Siembol
An open-source, real-time Security Information & Event Management tool based on big data technologies, providing a scalable, advanced security analytics framework.
Siembol provides a scalable, advanced security analytics framework based on open-source big data technologies. Siembol normalizes, enriches, and alerts on data from various sources, which allows security teams to respond to attacks before they become incidents.
https://github.com/G-Research/siembol
21 579
WpCrack Tool
A tool used to force login into the WordPress CMS web application and is built in the Python programming language.
Features:
▫️ Very fast login
▫️ Use of HTTP proxies
▫️ Multithreading or Multiprocessor
https://github.com/22XploiterCrew-Team/WpCrack
#Donate @HackGit
21 579
Determining AD domain name via NTLM Auth
If you have nmap (http-ntlm-info) unable to determine the FQND of an Active Directory domain via OWA, for example due to Citrix NetScaler or other SSO solutions, do it manually!
1.
curl -I -k -X POST -H 'Authorization: NTLM TlRMTVNTUAABAAAAB4IIogAAAAAAAAAAAAAAAAAAAAAKANc6AAAADw==' -H 'Content-Length: 0' https://autodiscover.exmaple.com/ews
2. echo 'TlRMTVNTUAACAAAADAAMAD...' | python2 ./ntlmdecoder.py
https://gist.github.com/aseering/829a2270b72345a1dc42
#ntlm #auth #sso #tricks #pentest21 579
Matos
An open-source cloud security tool for analyzing multi-cloud infrastructure security.
▫️ Discover cloud assets (e.g. virtual machines, storage, databases, disks, and containers), and gather configuration and metadata of all the assets in the cloud environment.
▫️ Assess the configurations of your cloud assets to help identify misconfiguration, non-conformance to best practices and compliance standards.
▫️ Provides out-of-the-box Ansible scripts to remediate problems efficiently.
▫️ Support multi-cloud environment - Amazon Web Services (AWS), Google Cloud Platform (GCP) and Microsoft Azure cloud service providers.
https://github.com/cloudmatos/Matos
21 579
email-header-analyzer
E-Mail header analyzer is a tool written in flask for parsing email headers and converting them to a human readable format and it also can:
▫️ Identify hop delays.
▫️ Identify the source of the email.
▫️ Identify hop country.
https://github.com/cyberdefenders/email-header-analyzer
21 579
CallMeWin32kDriver
Load your driver like win32k.sys
https://github.com/gmh5225/CallMeWin32kDriver
21 579
Repost from Pentesting Shop
Raspberry Pi Pico
Raspberry Pi Pico is a tiny, fast, and versatile board built using RP2040, the flagship microcontroller.
From light displays and IoT devices to signage and manufacturing processes, Raspberry Pi Pico gives you the power to control countless home, hobby, and industrial operations.
Programmable in C and MicroPython, Pico is adaptable to a vast range of applications and skill levels, and getting started is as easy as dragging and dropping a file.
More experienced users can take advantage of Raspberry Pi Pico's rich peripheral set, including SPI, I2C, and eight Programmable I/O (PIO) state machines for custom peripheral support.
Make a cheap but powerful USB Rubber Ducky with a Raspberry Pi Pico: https://github.com/dbisu/pico-ducky
Buy online:
🛒 https://ali.ski/ur1YN3
#raspberrypi #pico #rp2040
21 579
Nuclei Zimbra:)
Release of CVE-2022-37042 Zimbra Authentication Bypass Causing RCE Non-Destructive Vulnerability Detection Template.
https://github.com/projectdiscovery/nuclei-templates/pull/5134/files
#cve #nuclei
21 579
ScanReflectedXSS - Nuclei
This script allows to find XSS vulnerabilities with nuclei, taking advantage of this resource in its maximum analysis capacity.
In the community I have not seen XSS Fuzzing with nuclei in general, only focused on exploitations by CVE
https://github.com/HernanRodriguez1/ScanReflectedXSS
21 579
VLANPWN
DoubleTagging.py - This tool is designed to carry out a VLAN Hopping attack. As a result of injection of a frame with two 802.1Q tags, a test ICMP request will also be sent.
DTPHijacking.py - A script for conducting a DTP Switch Spoofing/Hijacking attack. Sends a malicious DTP-Desirable frame, as a result of which the attacker's machine becomes a trunk channel. The impact of this attack is that you can bypass the segmentation of VLAN networks and see all the traffic of VLAN networks.
https://github.com/in9uz/VLANPWN
21 579
