HackGit
Открыть в Telegram
The channel was created for cybersecurity specialists. • Offensive Security • RedTeam • Malware Research • BugBounty • OSINT • etc Disclaimer: t.me/hackgit/2082 Donations - Ads: t.me/hackgit/5423
Больше📈 Аналитический обзор Telegram-канала HackGit
Канал HackGit (@hackgit) языкового сегмента Английский является активным участником. Сейчас сообщество объединяет 21 579 подписчиков, занимая 4 526 место в категории Технологии и приложения и 1 853 место в регионе США.
📊 Показатели аудитории и динамика
С момента создания невідомо проект демонстрирует стремительный рост, собрав аудиторию из 21 579 подписчиков.
Согласно последним данным от 02 марта, 2025, канал показывает стабильную активность. За последние 30 дней изменение числа участников составило 19, а за последние 24 часа — 0, при этом общий охват остаётся высоким.
- Статус верификации: Не верифицирован
- Уровень вовлечённости (ER): Средний показатель вовлечённости аудитории составляет 0%. В первые 24 часа после публикации контент обычно набирает N/A% реакций от общего числа подписчиков.
- Охват публикаций: В среднем каждый пост получает 0 просмотров. В течение первых суток публикация набирает 0 просмотров.
- Реакции и взаимодействия: Аудитория активно поддерживает контент: среднее количество реакций на один пост — 0.
📝 Описание и контентная политика
Автор описывает ресурс как площадку для выражения субъективного мнения:
“The channel was created for cybersecurity specialists.
• Offensive Security
• RedTeam
• Malware Research
• BugBounty
• OSINT
• etc
Disclaimer:
t.me/hackgit/2082
Donations - Ads:
t.me/hackgit/5423”
Благодаря высокой частоте обновлений (последние данные получены 11 ноября, 2026) канал поддерживает актуальность и высокий уровень охвата публикаций. Аналитика показывает, что аудитория активно взаимодействует с контентом, что делает его важной точкой влияния в категории Технологии и приложения.
21 579
Подписчики
Нет данных24 часа
-37 дней
+1930 дней
Архив постов
21 579
CVE-2022-38766
PoC for vulnerability in Renault ZOE Keyless System CVE-2022-38766
This vulnerability raised the question of whether ZOE electric vehicles are safe form RF hacking. For this reason, the actual ZOE vehicle released this year was targeted and attacked. A study was also conducted on how this attack bypass the rolling codes, a defense technique of RF hacking, and a lot of thought was needed about the handling method in case the car breaks down.
Used to: HackRF One + Portapack H2
https://github.com/AUTOCRYPT-IVS-VnV/CVE-2022-38766
#cve
21 579
CVE-2022-24637
Open Web Analytics (OWA) before 1.7.4 allows an UNAUTHENTICATED remote attacker to obtain sensitive user information, which can be used to gain admin privileges by leveraging cache hashes. This occurs because files generated with '<?php (instead of the intended "<?php sequence) aren't handled by the PHP interpreter.
A temp_passkey can be stolen from the cache leak, used to reset the user's password, then RCE gained by changing the log file to point to a PHP one, and enabling verbose logging to allow for log poisoning.
https://github.com/watchdog2000/cve-2022-24637_open-web-analytics-info-disclosure-to-rce
#cve #RCE
21 579
Heroinn
A cross platform C2/post-exploitation framework implementation by Rust.
This project is for research and study purposes only, and any illegal behavior using this project has nothing to do with this project.
Features:
▫️ GUI
▫️ Interactive PTY shell
▫️ System infomations collect
▫️ File manager support with resume broken transfer and largefile
▫️ Support Win10+(Windows Server 2019+) & Linux & BSD & OSX
▫️ Multiple communication protocols (TCP & HTTP & reliable UDP)
https://github.com/b23r0/Heroinn
@HackGit
21 579
ExchangeFinder
A simple and open-source tool that tries to find Micrsoft Exchange instance for a given domain based on the top common DNS names for Microsoft Exchange.
https://github.com/mhaskar/ExchangeFinder
@HackGit
21 579
RFID Gooseneck
Traditional RFID badge cloning methods require you to be within 3 feet of your target, so how can you conduct a socially distanced physical penetration test and clone a badge if you must stay at least 6 feet from a person? Since 2020, companies have increasingly adopted a hybrid work environment, allowing employees to partially work remotely which has decreased the amount of foot traffic in and out of a building at any given time.
So after throwing around some ideas I thought, why not create a mobile long-range reader device that we could deploy early in the morning at a client site and let it do all the work for us. This project guide contains an entry-level hardware design that you can build in a day and deploy in the field in order to increase your chances of remotely cloning an RFID badge.
Here's the full build guide for making your own RFID Goosneck Long Range Reader!
https://github.com/sh0ckSec/RFID-Gooseneck
@HackGit
21 579
zyxel ipc camera pwn
This is a minimal proof of concept to remotely open a root shell on a Zyxel IP enabled camera. Known vulnerable models are:
▫️ Zyxel IPC-3605N
▫️ Zyxel IPC-4605N
https://github.com/hydrogen18/zyxel_ipc_camera_pwn
21 579
Drone Hacking Tool
A GUI tool that works with a USB Wifi adapter and HackRF One for hacking drones.
Drones, as a high mobility item that can be carried around easily and launched, are becoming cheaper and more popular among the public, they can be seen almost anywhere nowadays.
However, the drone built-in flying cameras could use for illegal usage like candid photos on private property. This shows drones clearly present risks to public safety and personal privacy.
Therefore, we are working on using wireless connection methods (Wi-Fi, GPS) to hack it and take over. In this project, our goal is to capture drones to stop users with malicious intent for proof of concept and a sense of accomplishment.
https://github.com/HKSSY/Drone-Hacking-Tool
@HackGit
21 579
CVE-2021-41349
Microsoft Exchange Server Spoofing Vulnerability Exploit!
https://github.com/0xrobiul/CVE-2021-41349
#cve #exploit
21 579
Repost from N/a
Browser-password-stealer
This python program gets all the saved passwords, credit cards and bookmarks from chromium based browsers supports chromium 80 and above!
Supported browsers:
▫️ Chrome
▫️ Brave
▫️ Edge (Chromium)
https://github.com/henry-richard7/Browser-password-stealer
@HackGit
21 579
Repost from Pentesting Shop
GreatFET One
GreatFET One is a hardware hacker’s best friend. With an extensible, open source design, two USB ports, and 100 expansion pins, GreatFET One is your essential gadget for hacking, making, and reverse engineering. By adding expansion boards called neighbors, you can turn GreatFET One into a USB peripheral that does almost anything.
Whether you need an interface to an external chip, a logic analyzer, a debugger, or just a whole lot of pins to bit-bang, the versatile GreatFET One is the tool for you. Hi-Speed USB and a Python API allow GreatFET One to become your custom USB interface to the physical world. USB Attacks and More with GreatFET
Features:
▫️ Serial protocols: SPI, I²C, UART, and JTAG
▫️ Programmable digital I/O
▫️ Analog I/O (ADC/DAC)
▫️ Logic analysis
▫️ Debugging
▫️ Data acquisition
▫️ Four LEDs
▫️ Versatile USB functions
▫️ High-throughput hardware-assisted streaming serial engine
Repository:
https://github.com/greatscottgadgets/greatfet
Documentation:
https://greatfet.readthedocs.io/en/latest/
Buy online:
🛒 https://ali.ski/Xz68RA
#usb #PentestingShop
21 579
CHIPSEC
A framework for analyzing the security of PC platforms including hardware, system firmware (BIOS/UEFI), and platform components. It includes a security test suite, tools for accessing various low level interfaces, and forensic capabilities.
It can be run on Windows, Linux, Mac OS X and UEFI shell. Instructions for installing and using CHIPSEC can be found in the manual.
https://github.com/chipsec/chipsec
@HackGit
21 579
Redcloud
A powerful and user-friendly toolbox for deploying a fully featured Red Team Infrastructure using Docker. Harness the cloud's speed for your tools. Deploys in minutes. Use and manage it with its polished web interface.
Ideal for your penetration tests, shooting ranges, red teaming and bug bounties!
Self-host your attack infrastructure painlessly, deploy your very own live, scalable and resilient offensive infrastructure in a matter of minutes.
Features:
▫️ Deploy Redcloud locally or remotely using the built-in SSH functions, and even docker-machine.
▫️ Deploy Metasploit, Empire, GoPhish, vulnerable targets, a fully stacked Kali, and many more with a few clicks.
▫️ Monitor and manage your infrastructure with a beautiful web interface.
▫️ Deploy redirections, socks or Tor proxy for all your tools.
▫️ Painless network management and volume sharing.
▫️ User and password management.
▫️ Web terminal
▫️ Overall very comfy 🐣
https://github.com/khast3x/Redcloud
@HackGit
21 579
Repost from Pentesting News
Ghost in the Wireless, iwlwifi edition
https://github.com/Ledger-Donjon/intel-wifi-research-tools
@PentestingNews
21 579
Repost from Pentesting News
BlackHat USA 2022
COW (Container On Windows) Who Escaped the Silo: Isolations are made to be broken
Tools for analyzing Windows containers and break container's isolation:
https://github.com/SafeBreach-Labs/CoWTools
21 579
Unbekannt Framework
A Hacking and Pentesting Tool for Linux and Windows.
Windows:
▫️ pinger - ping an IP with specific port
▫️ lookup - see rough geolocation of an IP & see the IP of a domain
▫️ putty - connect via ssh to a server official site
▫️ box - TCP chat
▫️ scanner - scan an IP of available ports
▫️ lanc - IP puller, IP grabber for PSN/Xbox/PC Resolver. Find, track and locate gamertags official site
▫️ database - a list of 30 free DDos site
▫️ mail - mail spammer
▫️ moba - Enhanced terminal for Windows with X11 server, tabbed SSH client, network tools official site
▫️ pcps - IP puller, IP grabber for PSN/Xbox/PC Resolver. Find, track and locate gamertags official site
Linux:
▫️ pinger - ping an IP with specific port
▫️ lookup - see rough geolocation of an IP & see the IP of a domain
▫️ database - a list of 30 free DDos site
▫️ mail - mail spammer
▫️ beacon - create fake access points
▫️ evil - Evil-Win Windows Reverse TCP Shell for Hacking and Pentesting
▫️ deauther - deauth specific BSSID/CHANNEL
https://github.com/i-am-unbekannt/unbekannt-framework
21 579
Devbox
Instant, easy, and predictable shells and containers
Devbox is a command-line tool that lets you easily create isolated shells and containers. You start by defining the list of packages required by your development environment, and devbox uses that definition to create an isolated environment just for your application.
In practice, Devbox works similar to a package manager like yarn – except the packages it manages are at the operating-system level (the sort of thing you would normally install with brew or apt-get).
https://github.com/jetpack-io/devbox
21 579
Clash
A rule-based tunnel in Go.
Features:
▫️ Local HTTP/HTTPS/SOCKS server with authentication support
▫️ Shadowsocks(R), VMess, Trojan, Snell, SOCKS5, HTTP(S) outbound support
▫️ Built-in fake-ip DNS server that aims to minimize DNS pollution attack impact. DoH/DoT upstream supported.
▫️ Rules based off domains, GEOIP, IP-CIDR or process names to route packets to different destinations
▫️ Proxy groups allow users to implement powerful rules. Supports automatic fallback, load balancing or auto select proxy based off latency
▫️ Remote providers, allowing users to get proxy lists remotely instead of hardcoding in config
▫️ Transparent proxy: Redirect TCP and TProxy TCP/UDP with automatic route table/rule management
▫️ Hot-reload via the comprehensive HTTP RESTful API controller
https://github.com/Dreamacro/clash
21 579
whids
EDR with artifact collection driven by detection. The detection engine is built on top of a previous project Gene specially designed to match Windows events against user defined rules.
https://github.com/0xrawsec/whids
21 579
Bug-Bounty-Methodology
These are my checklists which I use during my bug bounty hunting.
https://github.com/tuhin1729/Bug-Bounty-Methodology
