HackGit

​​Run That Shellcode! This repository and all the code contained in it is part of my learning experience as I go through RED TEAM Operator: Malware Development Essentials Course try to obfuscate as much of the code as possible. https://github.com/whokilleddb/a-noobs-implant @HackGit

CVE-2022-32832 Proof-of-concept and write-up for the CVE-2022-32832 vulnerability patched in iOS 15.6 https://github.com/Muirey03/CVE-2022-32832

​​hoaxshell hoaxshell is an unconventional Windows reverse shell, currently undetected by Microsoft Defender and other AV solutions as it is solely based on http(s) traffic. The tool is easy to use, it generates it's own PowerShell payload and it supports encryption (ssl). So far, it has been tested on fully updated Windows 11 Enterprise and Windows 10 Pro boxes (see video and screenshots). https://github.com/t3l3machus/hoaxshell @HackGit

​​vsctool Implements Powershell functions which allow you to interact with volume shadow copies. Available functions are explained below in more detail. https://github.com/cfalta/vsctool #ad

​​linux-rootkit Magic ping - shell execution Features: ▫️ Romete shell command execution by ping. ▫️ Hiding (or Showing) Kernel Module from Userspace https://github.com/Zhang1933/linux-rootkit @HackGit

​​LoGiC.NET Free and open-source .NET obfuscator that uses dnlib for folks who want to see how obfuscation works with more complex protections than Goldfuscator for example. https://github.com/AnErrupTion/LoGiC.NET #dotnet #obfuscator

​​UNiD E2E Secure Messaging Platform. UNiD is an open-source libraries for building end-to-end secure messaging between all devices including IoT, micro services, and on-premise servers, using features of decentralized identifiers (DIDs) as a basis of security and privacy. Build atop DIDComm messaging protocol which works over any transports, it makes end-to-end messaging reliable, secure, and easy. Features: ▫️ Device's identity, keys, and profiles management with RoT ▫️ Automated provisioning without centralized servers and certificate authorities and intermediaries ▫️ Mutual authentication and end-to-end encrypted messaging ▫️ ABAC & Dynamic policy management ▫️ Libraries for multiple language - Rust, C, NodeJS, Python ▫️ Middleware for multiple OS - Linux kernel x86(32bit) & x86-64(64bit), FreeRTOS ARM Cortex-M33(32bit) ▫️ RoT support - TPM, ARM TrustZone, Renesas SCE, Azure KeyVault https://github.com/getunid/unid

​​Carcosa C2 Profiles for Cobalt Strike https://github.com/OrneLibrary/Carcosa

​​KubeAudit Tool To Audit Your Kubernetes Clusters Against Common Security Controls. Command line tool and a Go package to audit Kubernetes clusters for various different security concerns, such as: ▫️ run as non-root ▫️ use a read-only root filesystem ▫️ drop scary capabilities, don't add new ones ▫️ don't run privileged https://github.com/Shopify/kubeaudit

​​CVE-2022-34918 LPE PoC LPE exploit for CVE-2022-34918. This exploit has been written for the kernel Linux ubuntu 5.15.0-39-generic https://github.com/randorisec/CVE-2022-34918-LPE-PoC Research: https://www.randorisec.fr/crack-linux-firewall/ #cve #poc

​​Enhance Data Privacy With Turbo VPN, you can browse any websites, watch any videos or access to any of your favorite content anonymously. Meanwhile, any of your browsing history from the public Wi-Fi connection will be concealed without any data leakage. ▫️ Military-grade encryption ▫️ Bypass site-blocking to access any content you need. ▫️ Protect your privacy by surfing anonymously under WiFi hotspot. ▫️ Only one tap to connect and switch to any free VPN proxy fast and securely. ✅ Unlimited and free VPN The best unlimited free VPN proxy for android. You can enjoy unlimited free VPN service and free VPN proxy servers anytime, anywhere. ✅ Access websites with secure Turbo VPN Unblock sites and apps at super stable and fast VPN speed. Connect to Turbo VPN free vpn proxy servers, access geo-blocked content, forum, news, social network such as Twitter or Facebook, immediately. ✅ Anonymous connection by Turbo VPN Turbo VPN protects your network under WiFi hotspot or any network condition. You can browse anonymously and securely without being tracked. Military-grade AES 128-bit encryption to secure WiFi hotspot. IPsec protocols and OpenVPN protocols(UDP / TCP) to mask your online identity. Secure your internet connection and guard your sensitive data wherever you are. ✅ Streaming and gaming with super fast VPN Stream videos, live sports and TV shows on YouTube, Netflix without buffering. Listen to popular songs on any music player whenever you want. Improve your gaming experience with fast Turbo VPN servers. ✅ Turbo library is out now! Let's read all the free books together. Relax and immerse yourself in the most exciting and addictive stories. Discover free novels on Turbo anytime, anywhere. Turbo VPN puts free eBooks at your fingertips. Find your favorite genre to read now! ✅ User-friendly VPN experience One tap to connect to a free VPN proxy server. Turbo VPN works with WiFi, LTE, 3G, and all mobile data carriers. Get Turbo VPN | 70% Off the secure, fast and free Turbo VPN! Secure your online activities and enjoy your favorite sites now! #vpn #promo

​​vscan An open source, lightweight, fast, and cross-platform website vulnerability scanning tool that helps you quickly detect potential website security risks. https://github.com/nirsarkar/vscan @HackGit

​​afrog afrog is an excellent performance, fast and stable, PoC customizable vulnerability scanning (hole digging) tool. PoC involves CVE, CNVD, default password, information leakage, fingerprint identification, unauthorized access, arbitrary file reading, command execution, etc. It helps network security practitioners quickly verify and fix vulnerabilities in a timely manner. https://github.com/zan8in/afrog/blob/main/docs/README_en.md @HackGit

​​pinecone WLAN networks auditing tool, suitable for red team usage. It is extensible via modules, and it is designed to be run in Debian-based operating systems. Pinecone is specially oriented to be used with a Raspberry Pi, as a portable wireless auditing box. https://github.com/pinecone-wifi/pinecone @HackGit

​​Pown CDB Chrome Debug Protocol utility. The main goal of the tool is to automate common tasks to help debug web applications from the command-line and actively monitor and intercept HTTP requests and responses. This is particularly useful during penetration tests and other types of security assessments and investigations. https://github.com/pownjs/cdb @HackGit

​​Galer A fast tool to fetch URLs from HTML attributes by crawl-in. https://github.com/dwisiswant0/galer @HackGit

​​scan4all Vulnerabilities Scan; 15000+PoC vulnerability scanning; 20 kinds of application password blasting; 7000+Web fingerprints; 146 protocols and 90000+ rules Port scanning; Fuzz, HW management, BugBounty artifact https://github.com/hktalent/scan4all/blob/main/README_EN.md @HackGit

KF/x - Kernel Fuzzer for Xen Project Hypervisor-based fuzzing using Xen and AFL. The tool utilizes Xen VM forks to perform the fuzzing, thus allowing for parallel fuzzing/multiple AFL instances to fuzz at the same time. Coverage guidance for AFL is achieved using Intel® Processor Trace or breakpoints. https://github.com/intel/kernel-fuzzer-for-xen-project

L3MON Clone of real L3MON a cloud based remote android managment suite for termux, powered by NodeJS Features: ▫️ GPS Logging ▫️ Microphone Recording ▫️ View Contacts ▫️ SMS Logs ▫️ Send SMS ▫️ Call Logs ▫️ View Installed Apps ▫️ View Stub Permissions ▫️ Live Clipboard Logging ▫️ Live Notification Logging ▫️ View WiFi Networks (logs previously seen) ▫️ File Explorer & Downloader ▫️ Command Queuing ▫️ Built In APK Builder https://github.com/rootuserdj/L3MON-Termux

​​UnhookMe Dynamically unhooking imports resolver Universal Windows API resolver & unhooker addressing problem of invoking unmonitored system calls from within of your Red Teams malware. In the era of intrusive AVs and EDRs that introduce hot-patches to the running processes for their enhanced optics requirements, modern adversaries must have a robust tool to slide through these watchguards. The propsed implementation of dynamic imports resolver that would be capable of unhooking used functions in-the-fly is yet another step towards strengthening adversary resilience efforts. https://github.com/mgeeky/UnhookMe