HackGit
Открыть в Telegram
The channel was created for cybersecurity specialists. • Offensive Security • RedTeam • Malware Research • BugBounty • OSINT • etc Disclaimer: t.me/hackgit/2082 Donations - Ads: t.me/hackgit/5423
Больше📈 Аналитический обзор Telegram-канала HackGit
Канал HackGit (@hackgit) языкового сегмента Английский является активным участником. Сейчас сообщество объединяет 21 579 подписчиков, занимая 4 526 место в категории Технологии и приложения и 1 853 место в регионе США.
📊 Показатели аудитории и динамика
С момента создания невідомо проект демонстрирует стремительный рост, собрав аудиторию из 21 579 подписчиков.
Согласно последним данным от 02 марта, 2025, канал показывает стабильную активность. За последние 30 дней изменение числа участников составило 19, а за последние 24 часа — 0, при этом общий охват остаётся высоким.
- Статус верификации: Не верифицирован
- Уровень вовлечённости (ER): Средний показатель вовлечённости аудитории составляет 0%. В первые 24 часа после публикации контент обычно набирает N/A% реакций от общего числа подписчиков.
- Охват публикаций: В среднем каждый пост получает 0 просмотров. В течение первых суток публикация набирает 0 просмотров.
- Реакции и взаимодействия: Аудитория активно поддерживает контент: среднее количество реакций на один пост — 0.
📝 Описание и контентная политика
Автор описывает ресурс как площадку для выражения субъективного мнения:
“The channel was created for cybersecurity specialists.
• Offensive Security
• RedTeam
• Malware Research
• BugBounty
• OSINT
• etc
Disclaimer:
t.me/hackgit/2082
Donations - Ads:
t.me/hackgit/5423”
Благодаря высокой частоте обновлений (последние данные получены 03 марта, 2025) канал поддерживает актуальность и высокий уровень охвата публикаций. Аналитика показывает, что аудитория активно взаимодействует с контентом, что делает его важной точкой влияния в категории Технологии и приложения.
21 579
Подписчики
Нет данных24 часа
-37 дней
+1930 дней
Архив постов
21 579
CVE-2022-45472
The CAE Learning Space Enterprise management software is vulnerable to a DOM Based XSS attack.
A DOM Based XSS attack is when a user sends an executed payload to the host and as a result, it modifies the DOM environment in the victim's browser from the original client-side script.
This attack was found through manually searching burp requests, running tested parameters through a XSS finder tool called Dalfox, then verifying the DOM of the affected host to view the behavior of the application.
https://github.com/nicbrinkley/CVE-2022-45472
#cve
21 579
wireguard-initramfs
Use dropbear over wireguard.
Enables wireguard networking during kernel boot, before encrypted partitions are mounted. Combined with dropbear this can enable FULLY ENCRYPTED remote booting without storing key material or exposing ports on the remote network. An Internet connection simply needs to exist that can reach the wireguard server endpoint.
Normal dropbear connections and DNS resolution can be used to find wireguard endpoints. This essentially enables the creation of a fully encrypted remote managed node, with the ability to prevent all local access.
https://github.com/r-pufky/wireguard-initramfs
21 579
reconX
ReconX It An Automation Script For Bug Bounty Hunter This tool allows you to gather some information that should help you identify what to do next and where to look and save your time !
Features:
▫️ Subdomain enum
▫️ Port scan
▫️ Filter Subdomain and screenshot
▫️ Filter Intrested sub and ports
▫️ Collect ip from shodan
▫️ Find Admin Panels
▫️ Identify Technology
▫️ Parameter Discovery
▫️ Wayback history
▫️ Filter php,jsp,aspx,js file from wayback
▫️ Filter & Scan js file
▫️ Collect Api-Endpoint
▫️ Vulnerability Scan
▫️ Notify system
https://github.com/YazeedOliwah/reconX
21 579
CVE-2022-32060
An arbitrary file upload vulnerability in the Update Branding Settings component of Snipe-IT v6.0.2 allows attackers to execute arbitrary code via a crafted file.
We found a vulnerability file upload, when we upload malicious file at Update Branding Settings page.
https://github.com/bypazs/CVE-2022-32060
Details:
https://grimthereaperteam.medium.com/snipe-it-version-v6-0-2-file-upload-cross-site-scripting-b15becc1a5ea
#cve
21 579
stegoWiper
A powerful and flexible active attack for disrupting stegomalware
Over the last 10 years, many threat groups have employed stegomalware or other steganography-based techniques to attack organizations from all sectors and in all regions of the world. Some examples are: APT15/Vixen Panda, APT23/Tropic Trooper, APT29/Cozy Bear, APT32/OceanLotus, APT34/OilRig, APT37/ScarCruft, APT38/Lazarus Group, Duqu Group, Turla, Vawtrack, Powload, Lokibot, Ursnif, IceID, etc.
https://github.com/mindcrypt/stegowiper
21 579
Fuzzing Forum
This project aims at hosting tutorials, examples, discussions, research proposals, and other resources related to fuzzing.
https://github.com/google/fuzzing
21 579
sniffnet
Application to comfortably monitor your network traffic
Sniffnet is a simple yet insightful application to let you have a glance into your network traffic in a straightforward and appealing way
Multithreaded, cross-platform, reliable.
https://github.com/GyulyVGC/sniffnet
21 579
Zeek
An Open Source Network Security Monitoring Tool
Zeek (formerly Bro) is the world’s leading platform for network security monitoring.
Flexible, open source, and powered by defenders.
https://github.com/zeek/zeek
Website:
https://zeek.org/
21 579
Bug Bounty Platforms
Open-Sourced Collection of Bug Bounty Platforms
A ongoing community-powered collection of all known bug bounty platforms, vulnerability disclosure platforms, and crowdsourced security platforms currently active on the Internet.
https://github.com/disclose/bug-bounty-platforms
21 579
Face Recognition
Recognize and manipulate faces from Python or from the command line with the world's simplest face recognition library.
https://github.com/ageitgey/face_recognition
#OSINT
21 579
Kiwi TCMS
Kiwi TCMS is the leading open source test management system for both manual and automated testing. It features bug tracker integration, search pages, powerful access control, test automation framework plugins, visual reports and rich API layer.
Our mission is to transform the testing process by making it more organized, transparent & accountable for everyone on your team; to improve engineering productivity and participation in testing.
https://github.com/kiwitcms/kiwi
21 579
Change-Lockscreen
Change-Lockscreen is a tool to trigger network authentications as SYSTEM by changing the Windows lock screen image from the command line to perform privilege escalation attacks such as the one described in the post linked.
https://github.com/nccgroup/Change-Lockscreen
21 579
REcollapse
REcollapse is a helper tool for black-box regex fuzzing to bypass validations and discover normalizations in web applications.
It can also be helpful to bypass WAFs and weak vulnerability mitigations. For more information, take a look at the REcollapse blog post.
The goal of this tool is to generate payloads for testing. Actual fuzzing shall be done with other tools like Burp (intruder), ffuf, or similar.
https://github.com/0xacb/recollapse
21 579
dnssecuritytxt
A standard allowing organizations to nominate security contact points and policies via DNS TXT records.
https://github.com/disclose/dnssecuritytxt
21 579
Red-Team-Assessment
Important documents for you to start a Red Team management
▫️ Tools
▫️ Law Suit
▫️ Methodologies
▫️ Tips and Tricks
https://github.com/CyberSecurityUP/Red-Team-Management
21 579
TJ-OSINT-Notebook
This OSINT Notebook provides an overview of the tools, techniques, and resources that I use for a variety of situations for performing reconaissance and #OSINT operations.
This Notebook has helped me in many situations to learn more about OSINT and how to analyze the data that is out there on the internet.
Included in the notebook are three templates that you can copy, fill in, or repurpose depending on the information you need to document for the operations you are working on. These case templates helped me keep a track of things I found online depending on the situation that I was assigned to assess.
https://github.com/tjnull/TJ-OSINT-Notebook
#OSINT
21 579
osm-finder
One of the most prominent tools that assists in geolocating images using openstreetmap data is Overpass Turbo. This requires learning and using the Overpass Query Language and restricts your geolocation abilities to only what's permitted by the query language.
This tool attempts to make it easier for researchers to find locations with a simple click-and-drag interface. No need to learn a new query language. It also adds capabilities not present in existing tools, like the ability to search by the angle between roads, power lines, and railways.
This tool currently supports all highway, railway, and a couple power line (namely, 'line' and 'minor_line') types.
https://github.com/Xetnus/osm-finder
The UI is now accessible from anywhere on Netlify: https://osm-finder.netlify.app/
21 579
RedTeaming_CheatSheet
Pentesting / RedTeaming cheatsheet with all the commands and techniques I learned during my learning journey. Will keep it up to date. If you have any recommendations for courses or links or have any questions feel free to dm me on discord. 0xjs#9027
https://github.com/0xJs/RedTeaming_CheatSheet
21 579
451 Corporate Risk Miner
451 Corporate Risk Miner allows a user to navigate over different corporate ownership networks extracted from UK Companies House (UKCH) to identify and visualise those exhibiting risk signatures associated with financial crime. Example risk signatures include:
▫️ Cyclic ownership: measure of network interconnectedness (e.g. Company A owns Company B which owns Company C which owns Company A, or case when the same people direct multiple companies.)
▫️ Links to tax havens: Corporate networks which involve companies/people associated with tax haven or secrecy jurisdictions
▫️ Presence of proxy directors: Proxy directors are entities that have links to more than 50 companies.
▫️ Links to politically-exposed persons (PEPs)
▫️ Links to russian politicians
https://github.com/sahanmar/451
#OSINT
