HackGit
Открыть в Telegram
The channel was created for cybersecurity specialists. • Offensive Security • RedTeam • Malware Research • BugBounty • OSINT • etc Disclaimer: t.me/hackgit/2082 Donations - Ads: t.me/hackgit/5423
Больше📈 Аналитический обзор Telegram-канала HackGit
Канал HackGit (@hackgit) языкового сегмента Английский является активным участником. Сейчас сообщество объединяет 21 579 подписчиков, занимая 4 526 место в категории Технологии и приложения и 1 853 место в регионе США.
📊 Показатели аудитории и динамика
С момента создания невідомо проект демонстрирует стремительный рост, собрав аудиторию из 21 579 подписчиков.
Согласно последним данным от 02 марта, 2025, канал показывает стабильную активность. За последние 30 дней изменение числа участников составило 19, а за последние 24 часа — 0, при этом общий охват остаётся высоким.
- Статус верификации: Не верифицирован
- Уровень вовлечённости (ER): Средний показатель вовлечённости аудитории составляет 0%. В первые 24 часа после публикации контент обычно набирает N/A% реакций от общего числа подписчиков.
- Охват публикаций: В среднем каждый пост получает 0 просмотров. В течение первых суток публикация набирает 0 просмотров.
- Реакции и взаимодействия: Аудитория активно поддерживает контент: среднее количество реакций на один пост — 0.
📝 Описание и контентная политика
Автор описывает ресурс как площадку для выражения субъективного мнения:
“The channel was created for cybersecurity specialists.
• Offensive Security
• RedTeam
• Malware Research
• BugBounty
• OSINT
• etc
Disclaimer:
t.me/hackgit/2082
Donations - Ads:
t.me/hackgit/5423”
Благодаря высокой частоте обновлений (последние данные получены 03 марта, 2025) канал поддерживает актуальность и высокий уровень охвата публикаций. Аналитика показывает, что аудитория активно взаимодействует с контентом, что делает его важной точкой влияния в категории Технологии и приложения.
21 579
Подписчики
Нет данных24 часа
-37 дней
+1930 дней
Архив постов
21 579
CVE-2022–34718
TCP/IP RCE Vulnerability (CVE-2022–34718) PoC Restoration and Analysis.
https://github.com/numencyber/VulnerabilityPoC
Details:
https://medium.com/@numencyberlabs/analysis-and-summary-of-tcp-ip-protocol-remote-code-execution-vulnerability-cve-2022-34718-8fcc28538acf
#cve #poc
21 579
Get-AppLockerEventlog
This script will parse all the channels of events from the win-event log to extract all the log relatives to AppLocker. The script will gather all the important pieces of information relative to the events for forensic or threat-hunting purposes, or even in order to troubleshoot. Here are the logs we fetch from win-event:
▫️ EXE and DLL,
▫️ MSI and Script,
▫️ Packaged app-Deployment,
▫️ Packaged app-Execution.
https://github.com/RomaissaAdjailia/Get-AppLockerEventlog
#Donate t.me/hackgit🍻»»»
21 579
DragonCastle
A PoC that combines AutodialDLL lateral movement technique and SSP to scrape NTLM hashes from LSASS process.
Upload a DLL to the target machine. Then it enables remote registry to modify AutodialDLL entry and start/restart BITS service. Svchosts would load our DLL, set again AutodiaDLL to default value and perform a RPC request to force LSASS to load the same DLL as a Security Support Provider. Once the DLL is loaded by LSASS, it would search inside the process memory to extract NTLM hashes and the key/IV.
https://github.com/mdsecactivebreach/DragonCastle
21 579
Background
A phishing framework for OAuth 2.0 device code authentication grant flow
https://github.com/dunderhay/phishsticks
21 579
L2Fuzz
A stateful fuzzer to detect vulnerabilities in Bluetooth BR/EDR Logical Link Control and Adaptation Protocol (L2CAP) layer.
https://github.com/haramel/l2fuzz
21 579
Redshift-jdbc file write RCE
In Amazon AWS Redshift JDBC Driver (aka amazon-redshift-jdbc-driver or redshift-jdbc42) with the newest version, the loggerFile properties does not check the file suffix,which a knowledgeable attacker with control over the JDBC URL can use to create a jsp webshell and achieve remote code execution.
https://github.com/p1n93r/redshift-jdbc-RCE
t.me/hackgit
21 579
UbSym
A unit-based symbolic execution method for detecting memory corruption vulnerabilities in executable codes
https://github.com/SoftwareSecurityLab/UbSym
21 579
RePulsar
This is a PoC implementation of an SMB backdoor based on our own research into the Windows kernel and the SMB mechanism. Since this is just a PoC, there is no special functionality. In the future, it is planned to support the basic functionality:
▫️ Arbitrary read/write memory
▫️ Shellcode execution
▫️ Etc.
https://github.com/APT64/RePulsar
21 579
EvilSmurf2
Project Description: Finding Bluetooth Vulnerabilities and Methods of Exploitation/Weaponization as well as Mitigation/Prevention
This repository serves as storage as well as a collaborating area for C code developed and written by the group Deep Blue Devs (DBD)
https://github.com/joshuar49/EvilSmurf2
21 579
eJPT-Notes
eLearnSecurity Junior Penetration Tester
Collection of notes to prepare for the eLearnSecurity eJPT certification exam.
https://github.com/grumpzsux/eJPT-Notes
21 579
Wapiti
A web vulnerability scanner written in Python.
Features:
▫️ Generates vulnerability reports in various formats (HTML, XML, JSON, TXT, CSV).
▫️ Can suspend and resume a scan or an attack (session mechanism using sqlite3 databases).
▫️ Can give you colors in the terminal to highlight vulnerabilities.
▫️ Different levels of verbosity.
▫️ Fast and easy way to activate/deactivate attack modules.
▫️ Adding a payload can be as easy as adding a line to a text file.
▫️ Configurable number of concurrent tasks to perform HTTP requests.
https://github.com/wapiti-scanner/wapiti
Website:
https://wapiti-scanner.github.io/
#scanner #best
21 579
PENTESTING-BIBLE
Explore more than 2156 hacking articles saved over time as PDF. BROWSE HISTORY.
https://github.com/blaCCkHatHacEEkr/PENTESTING-BIBLE
t.me/hackgit
21 579
ShoMon
A Shodan alert feeder for TheHive written in GoLang. With version 2.0, it is more powerful than ever!
https://github.com/KaanSK/shomon
21 579
The JSON Web Token Toolkit v2
jwt_tool.py is a toolkit for validating, forging, scanning and tampering JWTs (JSON Web Tokens).
Its functionality includes:
▫️ Checking the validity of a token
▫️ Testing for known exploits:
→ (CVE-2015-2951) The alg=none signature-bypass vulnerability
→ (CVE-2016-10555) The RS/HS256 public key mismatch vulnerability
→ (CVE-2018-0114) Key injection vulnerability
→ (CVE-2019-20933/CVE-2020-28637) Blank password vulnerability
→ (CVE-2020-28042) Null signature vulnerability
▫️ Scanning for misconfigurations or known weaknesses
▫️ Fuzzing claim values to provoke unexpected behaviours
▫️ Testing the validity of a secret/key file/Public Key/JWKS key
▫️ Identifying weak keys via a High-speed Dictionary Attack
▫️ Forging new token header and payload contents and creating a new signature with the key or via another attack method
▫️ Timestamp tampering
▫️ RSA and ECDSA key generation, and reconstruction (from JWKS files)
...and lots more!
https://github.com/ticarpi/jwt_tool
t.me/hackgit
21 579
ghoulbond
System Utility , Scanner and OSINT tool.
https://github.com/hitesh22rana/ghoulbond
21 579
ethereum-exploit
Analysis of the major exploits that took place on the Ethereum blockchain
https://github.com/MikeSpa/ethereum-exploit
21 579
s3cXSSer
This extension will help you to detect GET/POST based XSS vulnerability in any website easily
https://github.com/s3c-krd/s3cXSSer
t.me/hackgit
21 579
CVE-2022-42045
We discovered an Arbitrary code injection in Zemana amsdk.sys kernel-mode driver, a part of Zemana Antimalware SDK. The vulnerability allows to inject an arbitrary code into the one of the driver code sections and then to execute it with kernel-mode privileges (local privileges escalation from admin to kernel mode). This vulnerability could be used, for example, to disable Driver Signature Enforcement and then to install unsigned kernel-mode drivers.
https://github.com/ReCryptLLC/CVE-2022-42045
#cve
