HackGit
Открыть в Telegram
The channel was created for cybersecurity specialists. • Offensive Security • RedTeam • Malware Research • BugBounty • OSINT • etc Disclaimer: t.me/hackgit/2082 Donations - Ads: t.me/hackgit/5423
Больше📈 Аналитический обзор Telegram-канала HackGit
Канал HackGit (@hackgit) языкового сегмента Английский является активным участником. Сейчас сообщество объединяет 21 579 подписчиков, занимая 4 526 место в категории Технологии и приложения и 1 853 место в регионе США.
📊 Показатели аудитории и динамика
С момента создания невідомо проект демонстрирует стремительный рост, собрав аудиторию из 21 579 подписчиков.
Согласно последним данным от 02 марта, 2025, канал показывает стабильную активность. За последние 30 дней изменение числа участников составило 19, а за последние 24 часа — 0, при этом общий охват остаётся высоким.
- Статус верификации: Не верифицирован
- Уровень вовлечённости (ER): Средний показатель вовлечённости аудитории составляет 0%. В первые 24 часа после публикации контент обычно набирает N/A% реакций от общего числа подписчиков.
- Охват публикаций: В среднем каждый пост получает 0 просмотров. В течение первых суток публикация набирает 0 просмотров.
- Реакции и взаимодействия: Аудитория активно поддерживает контент: среднее количество реакций на один пост — 0.
📝 Описание и контентная политика
Автор описывает ресурс как площадку для выражения субъективного мнения:
“The channel was created for cybersecurity specialists.
• Offensive Security
• RedTeam
• Malware Research
• BugBounty
• OSINT
• etc
Disclaimer:
t.me/hackgit/2082
Donations - Ads:
t.me/hackgit/5423”
Благодаря высокой частоте обновлений (последние данные получены 11 ноября, 2026) канал поддерживает актуальность и высокий уровень охвата публикаций. Аналитика показывает, что аудитория активно взаимодействует с контентом, что делает его важной точкой влияния в категории Технологии и приложения.
21 579
Подписчики
Нет данных24 часа
-37 дней
+1930 дней
Архив постов
21 579
Repost from Pentesting News
FwHunt Community Scanner
Tools for analyzing UEFI firmware and checking UEFI modules with FwHunt rules.
https://github.com/binarly-io/fwhunt-scan
21 579
StegoCracker
Stego is an open-source and free steganography tool that lets you hide your secret message in an image or audio file. You will not notice any change in the image or audio file. However, your secret message will be inside the original image or audio file.
https://github.com/W1LDN16H7/StegoCracker
21 579
qBitMF (qBittorrent-MultiFace)
qBitMF is a docker container that runs qBittorrent over multiple VPN (or other) interfaces simultaneously. This is an example of a "multiface" torrent client, multiface being a portmanteau of "multiple" and "interface".
https://github.com/qBitMF/qBitMF
21 579
sauron
Sauron is a minimalistic cross-platform malware scanner with non-blocking realtime filesystem monitoring using YARA rules, written in Rust.
https://github.com/evilsocket/sauron
21 579
EDRSandBlast
EDRSandBlast is a tool written in C that weaponize a vulnerable signed driver to bypass EDR detections (Kernel callbacks and ETW TI provider) and LSASS protections. Multiple userland unhooking techniques are also implemented to evade userland monitoring.
As of release, combination of userland (--usermode) and Kernel-land (--kernelmode) techniques were used to dump LSASS memory under EDR scrutiny, without being blocked nor generating "OS Credential Dumping"-related events in the product (cloud) console. The tests were performed on 3 distinct EDR products and were successful in each case.
https://github.com/wavestone-cdt/EDRSandblast/tree/DefCon30Release
21 579
ApiHashing
just a stable replacement, that is fast and efficient.
▫️ no imported functions
▫️ easy to use
▫️ compile time seed / string hashes (different hashes everybuild with no need to change anything)
▫️ saves the module handle by hash, for the next possible api, so that it wont search for the module in peb, but by hash in our map
▫️ handles forwarded functions
https://github.com/ORCx41/ApiHashing
#Donate @HackGit
21 579
RATata
A simple python RAT to setup and use.
It works with a third-party #API so you don't have to open ports of your Wi-Fi box.
Tools:
▫️ execute bash commands
▫️ download files
▫️ inject python scripts
Characteristics:
▫️ auto run on computer boot
▫️ hash a score of 9/70 on virus total, but can easily put to 0 with a crypter
https://github.com/loTus04/RATata
21 579
secureCodeBox
A kubernetes based, modularized toolchain for continuous security scans of your software project. Its goal is to orchestrate and easily automate a bunch of security-testing tools out of the box.
https://github.com/secureCodeBox/secureCodeBox
21 579
Siembol
An open-source, real-time Security Information & Event Management tool based on big data technologies, providing a scalable, advanced security analytics framework.
Siembol provides a scalable, advanced security analytics framework based on open-source big data technologies. Siembol normalizes, enriches, and alerts on data from various sources, which allows security teams to respond to attacks before they become incidents.
https://github.com/G-Research/siembol
21 579
WpCrack Tool
A tool used to force login into the WordPress CMS web application and is built in the Python programming language.
Features:
▫️ Very fast login
▫️ Use of HTTP proxies
▫️ Multithreading or Multiprocessor
https://github.com/22XploiterCrew-Team/WpCrack
#Donate @HackGit
21 579
Determining AD domain name via NTLM Auth
If you have nmap (http-ntlm-info) unable to determine the FQND of an Active Directory domain via OWA, for example due to Citrix NetScaler or other SSO solutions, do it manually!
1.
curl -I -k -X POST -H 'Authorization: NTLM TlRMTVNTUAABAAAAB4IIogAAAAAAAAAAAAAAAAAAAAAKANc6AAAADw==' -H 'Content-Length: 0' https://autodiscover.exmaple.com/ews
2. echo 'TlRMTVNTUAACAAAADAAMAD...' | python2 ./ntlmdecoder.py
https://gist.github.com/aseering/829a2270b72345a1dc42
#ntlm #auth #sso #tricks #pentest21 579
Matos
An open-source cloud security tool for analyzing multi-cloud infrastructure security.
▫️ Discover cloud assets (e.g. virtual machines, storage, databases, disks, and containers), and gather configuration and metadata of all the assets in the cloud environment.
▫️ Assess the configurations of your cloud assets to help identify misconfiguration, non-conformance to best practices and compliance standards.
▫️ Provides out-of-the-box Ansible scripts to remediate problems efficiently.
▫️ Support multi-cloud environment - Amazon Web Services (AWS), Google Cloud Platform (GCP) and Microsoft Azure cloud service providers.
https://github.com/cloudmatos/Matos
21 579
email-header-analyzer
E-Mail header analyzer is a tool written in flask for parsing email headers and converting them to a human readable format and it also can:
▫️ Identify hop delays.
▫️ Identify the source of the email.
▫️ Identify hop country.
https://github.com/cyberdefenders/email-header-analyzer
21 579
CallMeWin32kDriver
Load your driver like win32k.sys
https://github.com/gmh5225/CallMeWin32kDriver
21 579
Repost from Pentesting Shop
Raspberry Pi Pico
Raspberry Pi Pico is a tiny, fast, and versatile board built using RP2040, the flagship microcontroller.
From light displays and IoT devices to signage and manufacturing processes, Raspberry Pi Pico gives you the power to control countless home, hobby, and industrial operations.
Programmable in C and MicroPython, Pico is adaptable to a vast range of applications and skill levels, and getting started is as easy as dragging and dropping a file.
More experienced users can take advantage of Raspberry Pi Pico's rich peripheral set, including SPI, I2C, and eight Programmable I/O (PIO) state machines for custom peripheral support.
Make a cheap but powerful USB Rubber Ducky with a Raspberry Pi Pico: https://github.com/dbisu/pico-ducky
Buy online:
🛒 https://ali.ski/ur1YN3
#raspberrypi #pico #rp2040
21 579
Nuclei Zimbra:)
Release of CVE-2022-37042 Zimbra Authentication Bypass Causing RCE Non-Destructive Vulnerability Detection Template.
https://github.com/projectdiscovery/nuclei-templates/pull/5134/files
#cve #nuclei
21 579
ScanReflectedXSS - Nuclei
This script allows to find XSS vulnerabilities with nuclei, taking advantage of this resource in its maximum analysis capacity.
In the community I have not seen XSS Fuzzing with nuclei in general, only focused on exploitations by CVE
https://github.com/HernanRodriguez1/ScanReflectedXSS
21 579
VLANPWN
DoubleTagging.py - This tool is designed to carry out a VLAN Hopping attack. As a result of injection of a frame with two 802.1Q tags, a test ICMP request will also be sent.
DTPHijacking.py - A script for conducting a DTP Switch Spoofing/Hijacking attack. Sends a malicious DTP-Desirable frame, as a result of which the attacker's machine becomes a trunk channel. The impact of this attack is that you can bypass the segmentation of VLAN networks and see all the traffic of VLAN networks.
https://github.com/in9uz/VLANPWN
21 579
