HackGit
رفتن به کانال در Telegram
The channel was created for cybersecurity specialists. • Offensive Security • RedTeam • Malware Research • BugBounty • OSINT • etc Disclaimer: t.me/hackgit/2082 Donations - Ads: t.me/hackgit/5423
نمایش بیشتر📈 تحلیل کانال تلگرام HackGit
کانال HackGit (@hackgit) در بخش زبانی انگلیسی بازیگری فعال است. در حال حاضر جامعه شامل 21 579 مشترک است و جایگاه 4 526 را در دسته فناوری و برنامه‌ها و رتبه 1 853 را در منطقه الولايات المتحدة الأمريكية دارد.
📊 شاخص‌های مخاطب و پویایی
از زمان ایجاد در невідомо، پروژه رشد سریعی داشته و 21 579 مشترک جذب کرده است.
بر اساس آخرین داده‌ها در تاریخ 02 مارس, 2025، کانال فعالیت پایداری دارد. در ۳۰ روز گذشته تغییر اعضا برابر 19 و در ۲۴ ساعت گذشته برابر 0 بوده و همچنان دسترسی گسترده‌ای حفظ شده است.
- وضعیت تأیید: تأیید نشده
- نرخ تعامل (ER): میانگین تعامل مخاطب 0% است و در ۲۴ ساعت نخست پس از انتشار، محتوا معمولاً N/A% واکنش نسبت به کل مشترکان کسب می‌کند.
- دسترسی پست‌ها: هر پست به طور میانگین 0 بازدید دریافت می‌کند. در اولین روز معمولاً 0 بازدید جمع‌آوری می‌شود.
- واکنش‌ها و تعامل: مخاطبان به‌طور فعال حمایت می‌کنند؛ میانگین واکنش به هر پست 0 است.
📝 توضیح و سیاست محتوایی
نویسنده این فضا را محل بیان دیدگاه‌های شخصی توصیف می‌کند:
“The channel was created for cybersecurity specialists.
• Offensive Security
• RedTeam
• Malware Research
• BugBounty
• OSINT
• etc
Disclaimer:
t.me/hackgit/2082
Donations - Ads:
t.me/hackgit/5423”
به لطف به‌روزرسانی‌های پرتکرار (آخرین داده در تاریخ 03 مارس, 2025)، کانال همواره به‌روز و دارای دسترسی بالاست. تحلیل‌ها نشان می‌دهد مخاطبان به‌طور فعال با محتوا تعامل دارند و آن را به نقطه اثرگذاری مهم در دسته فناوری و برنامه‌ها تبدیل کرده‌اند.
21 579
مشترکین
اطلاعاتی وجود ندارد24 ساعت
-37 روز
+1930 روز
آرشیو پست ها
21 579
CVE-2022–34718
TCP/IP RCE Vulnerability (CVE-2022–34718) PoC Restoration and Analysis.
https://github.com/numencyber/VulnerabilityPoC
Details:
https://medium.com/@numencyberlabs/analysis-and-summary-of-tcp-ip-protocol-remote-code-execution-vulnerability-cve-2022-34718-8fcc28538acf
#cve #poc
21 579
Get-AppLockerEventlog
This script will parse all the channels of events from the win-event log to extract all the log relatives to AppLocker. The script will gather all the important pieces of information relative to the events for forensic or threat-hunting purposes, or even in order to troubleshoot. Here are the logs we fetch from win-event:
▫️ EXE and DLL,
▫️ MSI and Script,
▫️ Packaged app-Deployment,
▫️ Packaged app-Execution.
https://github.com/RomaissaAdjailia/Get-AppLockerEventlog
#Donate t.me/hackgit🍻»»»
21 579
DragonCastle
A PoC that combines AutodialDLL lateral movement technique and SSP to scrape NTLM hashes from LSASS process.
Upload a DLL to the target machine. Then it enables remote registry to modify AutodialDLL entry and start/restart BITS service. Svchosts would load our DLL, set again AutodiaDLL to default value and perform a RPC request to force LSASS to load the same DLL as a Security Support Provider. Once the DLL is loaded by LSASS, it would search inside the process memory to extract NTLM hashes and the key/IV.
https://github.com/mdsecactivebreach/DragonCastle
21 579
Background
A phishing framework for OAuth 2.0 device code authentication grant flow
https://github.com/dunderhay/phishsticks
21 579
L2Fuzz
A stateful fuzzer to detect vulnerabilities in Bluetooth BR/EDR Logical Link Control and Adaptation Protocol (L2CAP) layer.
https://github.com/haramel/l2fuzz
21 579
Redshift-jdbc file write RCE
In Amazon AWS Redshift JDBC Driver (aka amazon-redshift-jdbc-driver or redshift-jdbc42) with the newest version, the loggerFile properties does not check the file suffix,which a knowledgeable attacker with control over the JDBC URL can use to create a jsp webshell and achieve remote code execution.
https://github.com/p1n93r/redshift-jdbc-RCE
t.me/hackgit
21 579
UbSym
A unit-based symbolic execution method for detecting memory corruption vulnerabilities in executable codes
https://github.com/SoftwareSecurityLab/UbSym
21 579
RePulsar
This is a PoC implementation of an SMB backdoor based on our own research into the Windows kernel and the SMB mechanism. Since this is just a PoC, there is no special functionality. In the future, it is planned to support the basic functionality:
▫️ Arbitrary read/write memory
▫️ Shellcode execution
▫️ Etc.
https://github.com/APT64/RePulsar
21 579
EvilSmurf2
Project Description: Finding Bluetooth Vulnerabilities and Methods of Exploitation/Weaponization as well as Mitigation/Prevention
This repository serves as storage as well as a collaborating area for C code developed and written by the group Deep Blue Devs (DBD)
https://github.com/joshuar49/EvilSmurf2
21 579
eJPT-Notes
eLearnSecurity Junior Penetration Tester
Collection of notes to prepare for the eLearnSecurity eJPT certification exam.
https://github.com/grumpzsux/eJPT-Notes
21 579
Wapiti
A web vulnerability scanner written in Python.
Features:
▫️ Generates vulnerability reports in various formats (HTML, XML, JSON, TXT, CSV).
▫️ Can suspend and resume a scan or an attack (session mechanism using sqlite3 databases).
▫️ Can give you colors in the terminal to highlight vulnerabilities.
▫️ Different levels of verbosity.
▫️ Fast and easy way to activate/deactivate attack modules.
▫️ Adding a payload can be as easy as adding a line to a text file.
▫️ Configurable number of concurrent tasks to perform HTTP requests.
https://github.com/wapiti-scanner/wapiti
Website:
https://wapiti-scanner.github.io/
#scanner #best
21 579
PENTESTING-BIBLE
Explore more than 2156 hacking articles saved over time as PDF. BROWSE HISTORY.
https://github.com/blaCCkHatHacEEkr/PENTESTING-BIBLE
t.me/hackgit
21 579
ShoMon
A Shodan alert feeder for TheHive written in GoLang. With version 2.0, it is more powerful than ever!
https://github.com/KaanSK/shomon
21 579
The JSON Web Token Toolkit v2
jwt_tool.py is a toolkit for validating, forging, scanning and tampering JWTs (JSON Web Tokens).
Its functionality includes:
▫️ Checking the validity of a token
▫️ Testing for known exploits:
→ (CVE-2015-2951) The alg=none signature-bypass vulnerability
→ (CVE-2016-10555) The RS/HS256 public key mismatch vulnerability
→ (CVE-2018-0114) Key injection vulnerability
→ (CVE-2019-20933/CVE-2020-28637) Blank password vulnerability
→ (CVE-2020-28042) Null signature vulnerability
▫️ Scanning for misconfigurations or known weaknesses
▫️ Fuzzing claim values to provoke unexpected behaviours
▫️ Testing the validity of a secret/key file/Public Key/JWKS key
▫️ Identifying weak keys via a High-speed Dictionary Attack
▫️ Forging new token header and payload contents and creating a new signature with the key or via another attack method
▫️ Timestamp tampering
▫️ RSA and ECDSA key generation, and reconstruction (from JWKS files)
...and lots more!
https://github.com/ticarpi/jwt_tool
t.me/hackgit
21 579
ghoulbond
System Utility , Scanner and OSINT tool.
https://github.com/hitesh22rana/ghoulbond
21 579
ethereum-exploit
Analysis of the major exploits that took place on the Ethereum blockchain
https://github.com/MikeSpa/ethereum-exploit
21 579
s3cXSSer
This extension will help you to detect GET/POST based XSS vulnerability in any website easily
https://github.com/s3c-krd/s3cXSSer
t.me/hackgit
21 579
CVE-2022-42045
We discovered an Arbitrary code injection in Zemana amsdk.sys kernel-mode driver, a part of Zemana Antimalware SDK. The vulnerability allows to inject an arbitrary code into the one of the driver code sections and then to execute it with kernel-mode privileges (local privileges escalation from admin to kernel mode). This vulnerability could be used, for example, to disable Driver Signature Enforcement and then to install unsigned kernel-mode drivers.
https://github.com/ReCryptLLC/CVE-2022-42045
#cve
