HackGit
رفتن به کانال در Telegram
The channel was created for cybersecurity specialists. • Offensive Security • RedTeam • Malware Research • BugBounty • OSINT • etc Disclaimer: t.me/hackgit/2082 Donations - Ads: t.me/hackgit/5423
نمایش بیشتر📈 تحلیل کانال تلگرام HackGit
کانال HackGit (@hackgit) در بخش زبانی انگلیسی بازیگری فعال است. در حال حاضر جامعه شامل 21 579 مشترک است و جایگاه 4 526 را در دسته فناوری و برنامه‌ها و رتبه 1 853 را در منطقه الولايات المتحدة الأمريكية دارد.
📊 شاخص‌های مخاطب و پویایی
از زمان ایجاد در невідомо، پروژه رشد سریعی داشته و 21 579 مشترک جذب کرده است.
بر اساس آخرین داده‌ها در تاریخ 02 مارس, 2025، کانال فعالیت پایداری دارد. در ۳۰ روز گذشته تغییر اعضا برابر 19 و در ۲۴ ساعت گذشته برابر 0 بوده و همچنان دسترسی گسترده‌ای حفظ شده است.
- وضعیت تأیید: تأیید نشده
- نرخ تعامل (ER): میانگین تعامل مخاطب 0% است و در ۲۴ ساعت نخست پس از انتشار، محتوا معمولاً N/A% واکنش نسبت به کل مشترکان کسب می‌کند.
- دسترسی پست‌ها: هر پست به طور میانگین 0 بازدید دریافت می‌کند. در اولین روز معمولاً 0 بازدید جمع‌آوری می‌شود.
- واکنش‌ها و تعامل: مخاطبان به‌طور فعال حمایت می‌کنند؛ میانگین واکنش به هر پست 0 است.
📝 توضیح و سیاست محتوایی
نویسنده این فضا را محل بیان دیدگاه‌های شخصی توصیف می‌کند:
“The channel was created for cybersecurity specialists.
• Offensive Security
• RedTeam
• Malware Research
• BugBounty
• OSINT
• etc
Disclaimer:
t.me/hackgit/2082
Donations - Ads:
t.me/hackgit/5423”
به لطف به‌روزرسانی‌های پرتکرار (آخرین داده در تاریخ 11 نوامبر, 2026)، کانال همواره به‌روز و دارای دسترسی بالاست. تحلیل‌ها نشان می‌دهد مخاطبان به‌طور فعال با محتوا تعامل دارند و آن را به نقطه اثرگذاری مهم در دسته فناوری و برنامه‌ها تبدیل کرده‌اند.
21 579
مشترکین
اطلاعاتی وجود ندارد24 ساعت
-37 روز
+1930 روز
آرشیو پست ها
21 579
Facebook Friend List Scraper
#OSINT tool to scrape names and usernames from large friend lists on #Facebook, without being rate limited.
https://github.com/narkopolo/fb_friend_list_scraper
21 579
Building a TLS-compatible Honeypot
This guide illustrates how to set up a honeypot that, next to unencrypted network traffic, is also capable of decrypting TLS traffic with the help of PolarProxy.
It is part of my master's thesis that uses a version of this setup to analyze attacks on specific HTTP(S) web-based applications.
https://github.com/Nirusu/how-to-setup-a-honeypot
21 579
21 579
💰 Donate
If you like the channel please support us ❣️
https://www.buymeacoffee.com/HackGit
BTC:
bc1qq2kuplw92csl0yz9xcqmrcrcmnutvvuvj3s7h7TON:
UQAAZ1BFX5OsybSryoFunzyJN3F7oKWMbZNPlwMTcVK8mEzAUSDT – ERC20❗️:
0x1e7fa9e9c42f71e6d155aca39951f23355178163You can buy crypto here #donate #support
21 579
JSshell
A JavaScript reverse shell. This is used for executing JS code remotely, exploiting blind XSS, ...
https://github.com/shelld3v/JSshell
21 579
PyRDP
A Python Remote Desktop Protocol (RDP) Monster-in-the-Middle (MITM) tool and library.
RDP Monster-in-the-Middle:
▫️ Logs plaintext credentials or NetNTLM hashes used when connecting
▫️ Steals data copied to the clipboard
▫️ Saves a copy of the files transferred over the network
▫️ Crawls shared drives in the background and saves them locally
▫️ Saves replays of connections so you can look at them later
▫️ Runs console commands or PowerShell payloads automatically on new connections
RDP Player:
▫️ See live RDP connections coming from the MITM
▫️ View replays of RDP connections
▫️ Take control of active RDP sessions while hiding your actions
▫️ List the client's mapped drives and download files from them during active sessions
Converter tool:
▫️ Convert RDP replays to videos for easier sharing
▫️ Convert RDP replays to a sequence of low-level events serialized in JSON format
▫️ Convert PCAPs to replays, videos or JSON events
▫️ Convert decrypted PCAPs (L7 PDUs) to replays, videos or JSON events
▫️ RDP Certificate Cloner:
▫️ Create a self-signed X509 certificate with the same fields as an RDP server's certificate
https://github.com/GoSecure/pyrdp
21 579
UAParser.js
JavaScript library to detect Browser, Engine, OS, CPU, and Device type/model from User-Agent data with relatively small footprint (~17KB minified, ~6KB gzipped) that can be used either in browser (client-side) or node.js (server-side).
https://github.com/faisalman/ua-parser-js
demo:
https://faisalman.github.io/ua-parser-js/#demo
21 579
Vernet
Network Analyzer and Monitoring Tool
Features:
▫️ Shows Wi-Fi details
▫️ Scans for devices(or hosts) on network
▫️ Scans for open ports of target IP
▫️ Shows ISP details
https://github.com/git-elliot/vernet
21 579
OctopusWAF
Open-source Web application #firewall entirely created in C language that uses libevent to make multiple connections.
The event-driven architecture is optimized for many parallel connections (keep-alive), vital for high-performance AJAX applications. This tool is very light. You can deploy in any, please.
This resource turns perfect for protecting specific endpoints that need custom protection.
Features:
▫️ Reverse proxy function.
▫️ Detect anomaly using regex using lib PCRE resources.
▫️ Detect security anomaly using algorithms for match string like DFA, horspool or karp-rabin.
▫️ Detect security anomaly using libinjection.
▫️ Options to save log.
https://github.com/CoolerVoid/OctopusWAF
21 579
CVE-2022-24934
wpsupdater.exe in Kingsoft WPS Office < 11.2.0.10382 allows RCE by modifying HKEY_CURRENT_USER in the registry
https://github.com/MagicPiperSec/WPS-CVE-2022-24934
#exploit
21 579
FTP-Inspector
Simple command line tool for performing dictionary attacks in #FTP servers, with multi threading.
At the moment this tool, only work with a custom [USER:PASSWORD] wordlist. If you don't have one, dont't worry, you can generate it with WORDLISTGEN script.
Example of usage:
python3 FTP-Inspector.py -F USER_PASS -T 5 -S 192.169.0.177https://github.com/alechilczenko/Inspector
21 579
CVE-2022-31138
RCE and Domain Admin privilege escalation for Mailcow
https://github.com/ly1g3/Mailcow-CVE-2022-31138
#cve #poc
21 579
Repost from Pentesting Shop
Sim card reader/writer/copy/cloner/backup GSM/CDMA
▫️ You can backup and modify even if you are using multiple SIM cards simultaneously
▫️ You can copy the SIM card contents to another SIM card
▫️ Independence computer backup different SIM cards
▫️ Information security, set to relieve, manage mobile PIN password
▫️ Support 2.0 fast read and write
▫️ Beautiful appearance, no external power supply, USB interface plug and play
Buy online:
🛒 https://ali.ski/VmOawR
#sim #reader
21 579
Repost from Pentesting News
FUGIO
Automatic Exploit Generation for PHP Object Injection Vulnerabilities
https://github.com/WSP-LAB/FUGIO
21 579
SysmonQuiet Reflective DLL
Most of the codes come from SEKTOR7 - Windows Evasion Course. This RDLL (requires SeDebugPrivilege privilege) will automatically locate sysmon process and patch its EtwEventWrite API, causing sysmon malfunctioning while the process and its threads are still running.
https://github.com/ScriptIdiot/SysmonQuiet
21 579
cgaty
Hooking the GDT Installing a Call Gate. POC for Rootkit Arsenal Book
https://github.com/therealdreg/cgaty
21 579
http redirector
this is a lightweight http server that redirects requests to another http server.
https://github.com/d4rckh/http-redirector
21 579
Kerberoast implemented in VBA Macro
Retrieve SPNs via LDAP queries, then ask a TGS Ticket with RC4 Etype for each one. The ticket is exported in KiRBi format (like mimikatz does)
https://github.com/Adepts-Of-0xCC/VBA-macro-experiments/blob/main/kerberoast.vba
Research:
https://adepts.of0x.cc/kerberoast-vba-macro/
#vba #kerberoast
21 579
Link
Link is a general RL framework to find reflected XSS vulnerabilities in a black-box and fully automatic manner. It implemented on top of Wapiti a popular open source web scanner.
And reinforcement learning components are implemeted based on OpenAI gym and Stable baselines. The details of Link is in our paper, "Link: Black-Box Detection of Cross-Site Scripting Vulnerabilities Using Reinforcement Learning" which appeared in The Web Conference 2022.
https://github.com/WSP-LAB/Link
