HackGit
رفتن به کانال در Telegram
The channel was created for cybersecurity specialists. • Offensive Security • RedTeam • Malware Research • BugBounty • OSINT • etc Disclaimer: t.me/hackgit/2082 Donations - Ads: t.me/hackgit/5423
نمایش بیشتر📈 تحلیل کانال تلگرام HackGit
کانال HackGit (@hackgit) در بخش زبانی انگلیسی بازیگری فعال است. در حال حاضر جامعه شامل 21 579 مشترک است و جایگاه 4 526 را در دسته فناوری و برنامه‌ها و رتبه 1 853 را در منطقه الولايات المتحدة الأمريكية دارد.
📊 شاخص‌های مخاطب و پویایی
از زمان ایجاد در невідомо، پروژه رشد سریعی داشته و 21 579 مشترک جذب کرده است.
بر اساس آخرین داده‌ها در تاریخ 02 مارس, 2025، کانال فعالیت پایداری دارد. در ۳۰ روز گذشته تغییر اعضا برابر 19 و در ۲۴ ساعت گذشته برابر 0 بوده و همچنان دسترسی گسترده‌ای حفظ شده است.
- وضعیت تأیید: تأیید نشده
- نرخ تعامل (ER): میانگین تعامل مخاطب 0% است و در ۲۴ ساعت نخست پس از انتشار، محتوا معمولاً N/A% واکنش نسبت به کل مشترکان کسب می‌کند.
- دسترسی پست‌ها: هر پست به طور میانگین 0 بازدید دریافت می‌کند. در اولین روز معمولاً 0 بازدید جمع‌آوری می‌شود.
- واکنش‌ها و تعامل: مخاطبان به‌طور فعال حمایت می‌کنند؛ میانگین واکنش به هر پست 0 است.
📝 توضیح و سیاست محتوایی
نویسنده این فضا را محل بیان دیدگاه‌های شخصی توصیف می‌کند:
“The channel was created for cybersecurity specialists.
• Offensive Security
• RedTeam
• Malware Research
• BugBounty
• OSINT
• etc
Disclaimer:
t.me/hackgit/2082
Donations - Ads:
t.me/hackgit/5423”
به لطف به‌روزرسانی‌های پرتکرار (آخرین داده در تاریخ 11 نوامبر, 2026)، کانال همواره به‌روز و دارای دسترسی بالاست. تحلیل‌ها نشان می‌دهد مخاطبان به‌طور فعال با محتوا تعامل دارند و آن را به نقطه اثرگذاری مهم در دسته فناوری و برنامه‌ها تبدیل کرده‌اند.
21 579
مشترکین
اطلاعاتی وجود ندارد24 ساعت
-37 روز
+1930 روز
آرشیو پست ها
21 579
SSL Checker
Python script that collects SSL/TLS information from hosts
It's a simple script running in python that collects SSL/TLS information then it returns the group of information in JSON. It can also connect through your specified SOCKS server.
One of the good things about this script is that it will fully analyze the SSL certificate for security issues and will include the report in the output, CSV, HTML, or a JSON file.
https://github.com/narbehaj/ssl-checker
21 579
Overkill
Exploit for a patched vulnerability affecting QNAP QTS. Due to the way QNAP discloses vulnerabilities, I'm unsure if this issue has a CVE or not. However, it was likely patched in November 2020 and April 2021. The n-day was "discovered" while doing diff analysis for CVE-2020-2509.
https://github.com/jbaines-r7/overkill
#cve #exploit
21 579
TerraformGoat
TerraformGoat is selefra research lab's "Vulnerable by Design" multi cloud deployment tool.
Currently supported cloud vendors include Alibaba Cloud, Tencent Cloud, Huawei Cloud, Amazon Web Services, Google Cloud Platform, Microsoft Azure.
https://github.com/selefra/TerraformGoat
21 579
go-shellcode-loader
GO obfuscation, shellcode loader AES encryption.
https://github.com/HZzz2/go-shellcode-loader
21 579
WinPwnage
Windows UAC bypass, Elevate, Persistence methods
https://github.com/rootm0s/WinPwnage
#uac #bypass #persistence #elevate
21 579
WireGuard Easy
You have found the easiest way to install & manage WireGuard on any Linux host!
Features:
▫️ All-in-one: WireGuard + Web UI.
▫️ Easy installation, simple to use.
▫️ List, create, edit, delete, enable & disable clients.
▫️ Show a client's QR code.
▫️ Download a client's configuration file.
▫️ Statistics for which clients are connected.
▫️ Tx/Rx charts for each connected client.
▫️ Gravatar support.
https://github.com/WeeJeWel/wg-easy
21 579
PowerShellForPentesters
PowerShell for Pentesters is a basic introduction to using PowerShell on internal penetration tests. This course is essentially the PowerShell module from my popular Movement, Pivoting, and Persistence course on TCM Academy and Udemy.
In the course we will cover:
▫️ User, group, and workstation enumeration
▫️ Domain enumeration
▫️ Downloading with PowerShell
▫️ Group Policy Enumeration
▫️ ACL Enumeration
▫️ PowerShell Remoting
▫️ PowerView and other popular offensive PowerShell scripts
▫️ Mimikatz exploitation
https://github.com/dievus/PowerShellForPentesters
Playlist Link:
https://youtube.com/playlist?list=PLJQHPJLj_SQatUsJy3O4k-VQlllquDmDr
21 579
gofetch
This could have been a bash one-liner but guess what. It's a small Go tool that lists the trending CVEs from cvetrends.com
https://github.com/tr3ss/gofetch
#CVE
21 579
WinMalDev
Various methods of executing shellcode
All shellcodes in the example code are messagebox with the exception of the one used in the FunctionCast and ReflectiveLoader sample. These spawn a calc.exe process.
https://github.com/Kr0ff/WinMalDev
21 579
Vault
A tool for securely accessing secrets. A secret is anything that you want to tightly control access to, such as API keys, passwords, certificates, and more. Vault provides a unified interface to any secret, while providing tight access control and recording a detailed audit log.
A modern system requires access to a multitude of secrets: database credentials, API keys for external services, credentials for service-oriented architecture communication, etc. Understanding who is accessing what secrets is already very difficult and platform-specific. Adding on key rolling, secure storage, and detailed audit logs is almost impossible without a custom solution. This is where Vault steps in.
https://github.com/hashicorp/vault
Website:
https://www.vaultproject.io/
21 579
Istio
Connect, secure, control, and observe services. An open platform to connect, manage, and secure microservices.
https://github.com/istio/istio
21 579
goCabrito
Super organized and flexible script for sending phishing campaigns.
Features:
▫️ Sends to a single email
▫️ Sends to lists of emails (text)
▫️ Sends to lists emails with first, last name (csv)
▫️ Supports attachments
▫️ Splits emails in groups
▫️ Delays sending emails between each group
▫️ Support Tags to be placed and replaced in the message's body
▫️ Supports individual profiles for different campaigns to avoid mistakes and confusion.
▫️ Supports creating database for sent emails, each email with its unique hash (useful with getCabrito)
▫️ Supports dry test, to run the script against your profile without sending the email to test your campaign before the launch.
https://github.com/KINGSABRI/goCabrito
21 579
VECTR
A tool that facilitates tracking of your red and blue team testing activities to measure detection and prevention capabilities across different attack scenarios.
VECTR provides the ability to create assessment groups, which consist of a collection of Campaigns and supporting Test Cases to simulate adversary threats.
Campaigns can be broad and span activity across the kill chain, from initial compromise to privilege escalation and lateral movement and so on, or can be a narrow in scope to focus on specific detection layers, tools, and infrastructure.
VECTR is designed to promote full transparency between offense and defense, encourage training between team members, and improve detection & prevention success rate across the environment.
https://github.com/SecurityRiskAdvisors/VECTR
21 579
Repost from N/a
rust-stealer / Luca Stealer
https://github.com/luca364/rust-stealer
Research:
https://blog.cyble.com/2022/07/25/luca-stealer-source-code-leaked-on-a-cybercrime-forum/
21 579
Repost from N/a
rust-stealer / Luca Stealer
https://github.com/luca364/rust-stealer
Research:
https://blog.cyble.com/2022/07/25/luca-stealer-source-code-leaked-on-a-cybercrime-forum/
21 579
BloodHound-Tools
A collection of tools that integrate to BloodHound.
Bloodhound is the defacto standard that both blue and red security teams use to find lateral movement and privilege escalation paths that can potentially be exploited inside an enterprise environment. A typical environment can yield millions of paths, representing almost endless opportunities for red teams to attack and creating a seemingly insurmountable number of attack vectors for blue teams to tackle.
However, a critical dimension that Bloodhound ignores, namely network access, could hold the key to shutting down excessive lateral movement. This repository contains tools that integrate with Bloodhound’s database in order to reflect network access, for the benefit of both red and blue teams.
https://github.com/zeronetworks/BloodHound-Tools
Research:
https://zeronetworks.com/blog/adversary-resilience-via-least-privilege-networking-part-1/
21 579
House-of-Gods
New heap exploitation technique for older versions of the GNU C Library (<= glibc 2.26).
This technique hijacks the arena within only 8 allocations and drops a shell after a total of 10 allocations. Furthermore, only a single UAF (write-after-free) bug on an unsorted-chunk is needed to initiate House-of-Gods.
https://github.com/Milo-D/house-of-gods
Research:
https://github.com/Milo-D/house-of-gods/blob/master/HOUSE_OF_GODS.TXT
21 579
Repost from N/a
CookedGrabber
Discord , Twitter, Instagram cookies and token grabber.
Features:
▫️ Easy to use
▫️ Alls navigators compatibility
▫️ Steal discord token
▫️ Steal discord payment informations
▫️ Steal IP adress and location
▫️ Steal Instagram connection cookies
▫️ Steal Twitter connection cookies
▫️ Can be converted to exe
https://github.com/h4x0r-project/CookedGrabber
21 579
bane
This is a python module that contains functions and classes which are used to test the security of web applications. It can easily detect: XSS , RCE (RCE), SSTI, SSRF, CORS Misconfigurations, File Upload, CSRF, Path Traversal
https://github.com/AlaBouali/bane
#python #redteam
21 579
collector
Collect #XSS vulnerable parameters from entire domain.
Features:
▫️ Find XSS vulnerable patameters.
▫️ Crwal entire website and collect every URL
▫️ Advance Error Handling.
▫️ Collect GET parameters.
https://github.com/thenurhabib/collector
