HackGit
رفتن به کانال در Telegram
The channel was created for cybersecurity specialists. • Offensive Security • RedTeam • Malware Research • BugBounty • OSINT • etc Disclaimer: t.me/hackgit/2082 Donations - Ads: t.me/hackgit/5423
نمایش بیشتر📈 تحلیل کانال تلگرام HackGit
کانال HackGit (@hackgit) در بخش زبانی انگلیسی بازیگری فعال است. در حال حاضر جامعه شامل 21 579 مشترک است و جایگاه 4 526 را در دسته فناوری و برنامه‌ها و رتبه 1 853 را در منطقه الولايات المتحدة الأمريكية دارد.
📊 شاخص‌های مخاطب و پویایی
از زمان ایجاد در невідомо، پروژه رشد سریعی داشته و 21 579 مشترک جذب کرده است.
بر اساس آخرین داده‌ها در تاریخ 02 مارس, 2025، کانال فعالیت پایداری دارد. در ۳۰ روز گذشته تغییر اعضا برابر 19 و در ۲۴ ساعت گذشته برابر 0 بوده و همچنان دسترسی گسترده‌ای حفظ شده است.
- وضعیت تأیید: تأیید نشده
- نرخ تعامل (ER): میانگین تعامل مخاطب 0% است و در ۲۴ ساعت نخست پس از انتشار، محتوا معمولاً N/A% واکنش نسبت به کل مشترکان کسب می‌کند.
- دسترسی پست‌ها: هر پست به طور میانگین 0 بازدید دریافت می‌کند. در اولین روز معمولاً 0 بازدید جمع‌آوری می‌شود.
- واکنش‌ها و تعامل: مخاطبان به‌طور فعال حمایت می‌کنند؛ میانگین واکنش به هر پست 0 است.
📝 توضیح و سیاست محتوایی
نویسنده این فضا را محل بیان دیدگاه‌های شخصی توصیف می‌کند:
“The channel was created for cybersecurity specialists.
• Offensive Security
• RedTeam
• Malware Research
• BugBounty
• OSINT
• etc
Disclaimer:
t.me/hackgit/2082
Donations - Ads:
t.me/hackgit/5423”
به لطف به‌روزرسانی‌های پرتکرار (آخرین داده در تاریخ 11 نوامبر, 2026)، کانال همواره به‌روز و دارای دسترسی بالاست. تحلیل‌ها نشان می‌دهد مخاطبان به‌طور فعال با محتوا تعامل دارند و آن را به نقطه اثرگذاری مهم در دسته فناوری و برنامه‌ها تبدیل کرده‌اند.
21 579
مشترکین
اطلاعاتی وجود ندارد24 ساعت
-37 روز
+1930 روز
آرشیو پست ها
21 579
SysmonEnte
This is a POC attack on the integrity of Sysmon which emits a minimal amount of observable events even if a SACL is in place.
To our understanding, this attack is difficult to detect in environments where no security sensors other than Sysmon or the Windows Event Log are in use.
For more technical information on the attack and possible mitigations, please see our blogpost.
https://github.com/codewhitesec/SysmonEnte
t.me/hackgit
21 579
iscsicpl_bypassUAC
UAC bypass for x64 Windows 7-11
https://github.com/zha0gongz1/iscsicpl_bypassUAC
21 579
MsSettingsDelegateExecute
Bypass UAC on Windows 10/11 x64 using ms-settings DelegateExecute registry key. This visual studio project will compile a static x64 binary to test this issue.
https://github.com/hackerhouse-opensource/MsSettingsDelegateExecute
21 579
Grit
STP & RSTP Root Hijacking Exploits
The basic principle of the tools is to generate an STP/RSTP frame with the lowest priority value. Which in turn allows you to intercept the role of the root switch. After that, an opportunity will open for a MITM attack, you will partially intercept traffic, not all of it. Keep that in mind. But don't forget that the BPDU GUARD system can stop you.
Before performing the injection, you should first analyze what type of STP protocol is used. And based on this, to start further... By the way, nothing prevents an attack against the classic STP using an exploit for RSTP. If a MITM attack fails, feel free to experiment and try two versions of exploits at once (STP exploit for RSTP, RSTP exploit for STP) Also, after injection, switch will generate TCN messages (Topology Change Notification)
https://github.com/in9uz/Grit
Author:
https://t.me/in6uz
21 579
ScoutSuite
Scout Suite is an open source multi-cloud security-auditing tool, which enables security posture assessment of cloud environments. Using the APIs exposed by cloud providers,
Scout Suite gathers configuration data for manual inspection and highlights risk areas. Rather than going through dozens of pages on the web consoles, Scout Suite presents a clear view of the attack surface automatically.
▫️ https://github.com/nccgroup/ScoutSuite
▫️ https://github.com/nccgroup/sadcloud
#aws #azure #gcp #auditing #tool
21 579
Aura
A static analysis framework developed as a response to the ever-increasing threat of malicious packages and vulnerable code published on PyPI.
Project goals:
▫️ provide an automated monitoring system over uploaded packages to PyPI, alert on anomalies that can either indicate an ongoing attack or vulnerabilities in the code
▫️ enable an organization to conduct automated security audits of the source code and implement secure coding practices with a focus on auditing 3rd party code such as python package dependencies
▫️ allow researches to scan code repositories on a large scale, create datasets and perform analysis to further advance research in the area of vulnerable and malicious code dependencies
https://github.com/SourceCode-AI/aura
t.me/hackgit
21 579
NoFaxGiven
A fax routing extension is a DLL that adds routing functionality to the fax service
https://github.com/hackerhouse-opensource/NoFaxGiven
t.me/hackgit
21 579
CheeseOunce
This Simple POC make windows machines auth to another via MS-EVEN.
https://github.com/evilashz/CheeseOunce
t.me/hackgit
21 579
Pyramid
A set of Python scripts and module dependencies that can be used to evade EDRs
https://github.com/naksyn/Pyramid
21 579
SubEvil
An advanced open source intelligence framework (OSINT) for grouping subdomains.
https://github.com/Evil-Twins-X/SubEvil
t.me/hackgit
21 579
PackMyPayload
Emerging Threat of Containerized Malware
This tool takes a file or directory on input and embeds them into an output file acting as an archive/container. It can serve purpose for a Proof-of-Concept presenting emerging risk of container file formats with embedded malware, as well as helper for professional Red Team Operators to sharpen their Initial Access maneuvers.
Currently Threat Actors are known to smuggle their malware archived in various container file formats, to name a few:
▫️ 7zip
▫️ zip
▫️ ISO
▫️ IMG
They do that to get their payloads pass file content scanners, but more importantly to avoid having Mark-Of-The-Web flag on their files. There're various motives on why adversaries don't want MOTW on their files: Protected View in Microsoft Office was always among them.
Should they provide container file to their victims, a foundation for disabling VBA macros in Internet-originated Office documents might be bypassed.
https://github.com/mgeeky/PackMyPayload
21 579
ColorDataProxyUACBypass
Exploits undocumented elevated COM interface ICMLuaUtil via process spoofing to edit registry then calls ColorDataProxy to trigger UAC bypass. Win 7 & up.
https://github.com/hackerhouse-opensource/ColorDataProxyUACBypass
t.me/hackgit
21 579
Connect
Command and Control Framework
Connect is a tool for testing the security posture of internal environments by simulating real world tactics performed by threat actors. It features an extensible command set and server architecture to deploy and maintain agents for multiple languages and platforms. This extensibility provides operators the ability to rapidly conduct and repeat specific scenarios.
Connect is only to be used for legal applications when the explicit permission of the targeted organization has been obtained.
https://github.com/skylerknecht/connect
21 579
CVE-2022-2639
Linux kernel openvswitch local privilege escalation.
https://github.com/veritas501/CVE-2022-2639-PipeVersion
#exploit #linux
21 579
ADSearch
A tool written for cobalt-strike's execute-assembly command that allows for more efficent querying of AD.
Key Features:
▫️ List all Domain Admins
▫️ Custom LDAP Search
▫️ Connect to LDAPS Servers
▫️ Output JSON data from AD instances
▫️ Retrieve custom attributes from a generic query (i.e. All computers)
https://github.com/tomcarver16/ADSearch
21 579
ActiveDirectoryAttackTool
ADAT tool is used to assist CTF players and Penetration testers with helpful commands to run against an Active Directory Domain Controller. This tool is best utilized using a set of known working credentials against the host.
https://github.com/The-Viper-One/ActiveDirectoryAttackTool
21 579
TheSprayer
A cross-platform tool designed to help penetration testers spray passwords against an Active Directory domain without locking out accounts.
Several helpful features are enabled by default such as user auto-discovery, current user discovery and a local sqlite db to track sprayed passwords.
https://github.com/coj337/TheSprayer
t.me/hackgit
21 579
QEMU
A generic and open source machine & userspace emulator and virtualizer.
QEMU is capable of emulating a complete machine in software without any need for hardware virtualization support. By using dynamic translation, it achieves very good performance. QEMU can also integrate with the Xen and KVM hypervisors to provide emulated hardware while allowing the hypervisor to manage the CPU. With hypervisor support, QEMU can achieve near native performance for CPUs. When QEMU emulates CPUs directly it is capable of running operating systems made for one machine (e.g. an ARMv7 board) on a different machine (e.g. an x86_64 PC board).
QEMU is also capable of providing userspace API virtualization for Linux and BSD kernel interfaces. This allows binaries compiled against one architecture ABI (e.g. the Linux PPC64 ABI) to be run on a host using a different architecture ABI (e.g. the Linux x86_64 ABI). This does not involve any hardware emulation, simply CPU and syscall emulation.
https://github.com/TrungNguyen1909/qemu-t8030
21 579
BLACKHAT_USA2022
Just About BLACKHAT USA2022 PDF Public
https://github.com/Mr-xn/BLACKHAT_USA2022
21 579
Sysadmin
Sysadmin makes easier to administer multidomain Active Directory-based networks by providing a single tool to do whatever you need - use it to manage domains, servers, computers, users, and groups.
Features:
▫️ Add, edit and delete objects in Active Directory
▫️ View software and hardware
▫️ Events, processes, services on computers
▫️ Add and delete objects from groups
▫️ Reset a user's password
▫️ Add photos
▫️ Restart and shutdown remote computers
▫️ Computers performance
▫️ Patterns for add new users
▫️ Reports (20+)
https://github.com/sysadminanywhere/sysadmin
