HackGit
رفتن به کانال در Telegram
The channel was created for cybersecurity specialists. • Offensive Security • RedTeam • Malware Research • BugBounty • OSINT • etc Disclaimer: t.me/hackgit/2082 Donations - Ads: t.me/hackgit/5423
نمایش بیشتر📈 تحلیل کانال تلگرام HackGit
کانال HackGit (@hackgit) در بخش زبانی انگلیسی بازیگری فعال است. در حال حاضر جامعه شامل 21 579 مشترک است و جایگاه 4 526 را در دسته فناوری و برنامه‌ها و رتبه 1 853 را در منطقه الولايات المتحدة الأمريكية دارد.
📊 شاخص‌های مخاطب و پویایی
از زمان ایجاد در невідомо، پروژه رشد سریعی داشته و 21 579 مشترک جذب کرده است.
بر اساس آخرین داده‌ها در تاریخ 02 مارس, 2025، کانال فعالیت پایداری دارد. در ۳۰ روز گذشته تغییر اعضا برابر 19 و در ۲۴ ساعت گذشته برابر 0 بوده و همچنان دسترسی گسترده‌ای حفظ شده است.
- وضعیت تأیید: تأیید نشده
- نرخ تعامل (ER): میانگین تعامل مخاطب 0% است و در ۲۴ ساعت نخست پس از انتشار، محتوا معمولاً N/A% واکنش نسبت به کل مشترکان کسب می‌کند.
- دسترسی پست‌ها: هر پست به طور میانگین 0 بازدید دریافت می‌کند. در اولین روز معمولاً 0 بازدید جمع‌آوری می‌شود.
- واکنش‌ها و تعامل: مخاطبان به‌طور فعال حمایت می‌کنند؛ میانگین واکنش به هر پست 0 است.
📝 توضیح و سیاست محتوایی
نویسنده این فضا را محل بیان دیدگاه‌های شخصی توصیف می‌کند:
“The channel was created for cybersecurity specialists.
• Offensive Security
• RedTeam
• Malware Research
• BugBounty
• OSINT
• etc
Disclaimer:
t.me/hackgit/2082
Donations - Ads:
t.me/hackgit/5423”
به لطف به‌روزرسانی‌های پرتکرار (آخرین داده در تاریخ 11 نوامبر, 2026)، کانال همواره به‌روز و دارای دسترسی بالاست. تحلیل‌ها نشان می‌دهد مخاطبان به‌طور فعال با محتوا تعامل دارند و آن را به نقطه اثرگذاری مهم در دسته فناوری و برنامه‌ها تبدیل کرده‌اند.
21 579
مشترکین
اطلاعاتی وجود ندارد24 ساعت
-37 روز
+1930 روز
آرشیو پست ها
21 579
api_wordlist
A wordlist of API names used for fuzzing web application APIs.
https://github.com/chrislockard/api_wordlist
21 579
2022-07-21-malware-tricks-22
Malware development trick. Run payload as Lazarus Group. C++ malware implementation.
Malware development: shellcode run via UuidFromStringA and EnumDesktopA (or another suitable candidate). C++ malware implementation example.
https://github.com/cocomelonc/2022-07-21-malware-tricks-22
Research:
https://cocomelonc.github.io/malware/2022/07/21/malware-tricks-22.html
21 579
CVE-2022-29593
Authentication Bypass by Capture Replay (Dingtian-DT-R002).
https://github.com/9lyph/CVE-2022-29593
#cve
21 579
CVE-2022-36946
Reported-by: Domingo Dirutigliano and Nicola Guerrera
While we were working on firegex, our application firewall for CTF Attack-Defence competitions, we stumbled upon a few kernel panics.
This strange behavour was than isolated and anlayzed, leading to the dicovery of this potential security flaw in the netfilter module, specifically with nfnetlink.
https://github.com/Pwnzer0tt1/CVE-2022-36946
#cve
21 579
Exploit-Development
Weaponized Exploit and Proof of Concepts (PoC)
https://github.com/VoidSec/Exploit-Development
21 579
canTot
A python-based cli framework based on sploitkit and is easy to use because it is similar to working with Metasploit. This similar to an exploit framework but focused on known CAN Bus vulnerabilities or fun CAN Bus hacks.
It can also be used as a guide for pentesting vehicles and learning python for Car Hacking the easier way. This is not to reinvent the wheel of known CAN fuzzers, car exploration tools like caring caribou, or other great CAN analyzers out there. But to combine all the known vulnerabilities and fun CAN bus hacks in automotive security.
https://github.com/shipcod3/canTot
21 579
AMDH
Android Mobile Device Hardening.
AMDH was created to help automate scanning installed applications on Android devices, detect some known malware and also to protect privacy.
https://github.com/A-YATTA/AMDH
21 579
LastenZug
This project implements a Socka4a proxy based on websockets.
The client component is implemented in C compiling down to fully position independent code (PIC).
During the compilation process, obfuscation is applied on assembly level by leveraging a second tool: SpiderPIC located in LastenPIC/SpiderPIC
https://github.com/codewhitesec/Lastenzug
21 579
Holehe
Efficiently finding registered accounts from emails.
Holehe checks if an email is attached to an account on sites like twitter, instagram, imgur and more than 120 others.
https://github.com/megadose/holehe
#OSINT
21 579
socialscan
socialscan offers accurate and fast #checks for #email address and username usage on online platforms.
Given an email address or username, socialscan returns whether it is available, taken or invalid on online platforms.
100% accuracy: socialscan's query method eliminates the false positives and negatives that often occur in similar tools, ensuring that results are always accurate.
Speed: socialscan uses asyncio along with aiohttp to conduct all queries concurrently, providing fast searches even with bulk queries involving hundreds of usernames and email addresses. On a test computer with average specs and Internet speed, 100 queries were executed in ~4 seconds.
Library / CLI: socialscan can be executed through a CLI, or imported as a Python library to be used with existing code.
Email support: socialscan supports queries for both email addresses and usernames.
https://github.com/iojw/socialscan
21 579
Zeratool
Automatic Exploit Generation (AEG) and remote flag capture for exploitable CTF problems
This tool uses angr to concolically analyze binaries by hooking printf and looking for unconstrained paths. These program states are then weaponized for remote code execution through pwntools and a series of script tricks. Finally the payload is tested locally then submitted to a remote CTF server to recover the flag.
https://github.com/ChrisTheCoolHut/Zeratool
21 579
Erebus
Fast and customisable parameter based vulnerability scanner based on simple YAML Rules
Erebus is used to test every parameter across targets based on Yaml templates leading to zero false positives and providing fast scanning on large number of hosts. Erebus offers many useful features including an intercepting proxy which allows researchers to browse the web, click on links and erebus will test every parameter that passes through the proxy.
https://github.com/ethicalhackingplayground/erebus
21 579
Winpayloads
Undetectable Windows Payload Generation.
Features:
1. Persistence - Adds payload persistence on reboot
2. Psexec Spray - Spray hashes until successful connection and psexec payload on target
3. Upload to local webserver - Easy deployment
4. Powershell stager - allows invoking payloads in memory & more
5. Anti sandboxing techniques
6. Custom shellcode
https://github.com/nccgroup/Winpayloads
21 579
bopscrk
Tool to generate smart and powerful wordlists.
Targeted-attack wordlist creator: introduce personal info related to target, combines every word and transforms results into possible passwords. The lyricpass module allows to search lyrics related to artists and include them to the wordlists.
Customizable case and leet transforms: create custom charsets and transforms patterns trough a simple config file.
Wordlists exclusion: Exclude words from another wordlist (to avoid passwords that you have already tested).
Interactive mode and one-line command interface supported.
https://github.com/r3nt0n/bopscrk
21 579
TropX
The best penetration testing and tech tools unified into one beatiful command line interface!
Command line application to run penetration testing scripts. It aims to more efficiently run long processes and tedious tasks by allowing the creation of custom scripts in the CLI that can be run whenever.
To make scripting even easier, there are premade functions and variables for bash and python to be used to simplify the process. TropX also allows for maximum customization and optimization by providing a settings menu controlled trough the CLI.
https://github.com/troopek/TropX
21 579
APIKit
Discovery, Scan and Audit APIs Toolkit All In One.
https://github.com/API-Security/APIKit
21 579
Athena OS
Born for InfoSec Professionals, Bug Bounty Hunters, Passionate Students and Spicy Hackers
Pentesting: Athena can access to BlackArch repository, the biggest pentesting tool warehouse, whereas Debian-based distros cannot.
User-oriented: if Arch is born for experienced users, Athena is conceived for decreasing complexity and improving user experience.
Lightweight: Athena optimizes the disk space consumption by retrieving the tools you need only when you use them. Tools you never use won't be stored and the space is only used for what you really need.
Performance: Athena is based on Arch Linux so it is configured to load the bare minimum for its purpose. No useless services, no useless modules consuming your resources.
Flexibility: for its Arch nature, Athena is flexible and can easily evolve to the new needs of the users.
https://github.com/Athena-OS/athena-iso
21 579
AntiDDOS-system
Protect your web app from #DDOS attack or the Dead Ping + CAPTCHA VERIFICATION in one line!
At each connection, the system temporarily saves the IP address of the client and monitors its connection frequency, if this connection frequency is abnormal, then the system considers it as a black IP address and sends a verification request in the form of verification.
Captcha integrated into the system, if he passes this check, then it is a human and not a robot!
https://github.com/Sanix-Darker/AntiDDOS-system
21 579
Repost from Pentesting Shop
Disaster-Radio LoRa32
Disaster-radio is an off-grid, solar-powered, long-range mesh network built on free, open source software and affordable hardware. Designed to be open, distributed, and decentralized.
With this device you can create your own network to exchange messages! And you don't need anything but this device and sunlight :)
Repository:
https://github.com/sudomesh/disaster-radio
Website:
https://disaster.radio/
Buy online:
🛒 https://ali.ski/jXRsIy
#radio #mesh
21 579
Oauth-scan
#Burp Suite Extension written in Java with the aim to provide some automatic security checks, which could be useful during penetration testing on applications implementing OAUTHv2 and OpenID standards.
▫️ Open Redirect issues on Redirect_Uri parameter
▫️ Authorization Code Replay issues
▫️ Leakage of secrets (i.e. Tokens, Codes)
▫️ PKCE misconfigurations
▫️ Nonce parameter misconfigurations
▫️ State parameter misconfiguration
▫️ Input Validation issues on Scope parameter
▫️ Detection of inerently insecure Flows
▫️ SSRF issues via Request_Uri parameter
▫️ Detection of Well-Known and WebFinger resources
And others...
https://github.com/PortSwigger/oauth-scan
