HackGit

​​Privatezilla Privatezilla is the simplest way to perform a quick privacy and security check of your Windows 10 copy. Privatezilla integrates the most critical Windows 10 privacy settings and allows you to quickly perform a privacy check against these settings. Active settings are marked with the status "Configured" and indicates that your privacy is protected. The inactive ones are declared as "Not configured". All available settings (currently 60) can be enabled as well as disabled. https://github.com/builtbybel/privatezilla

​​Rizin Rizin is a fork of the radare2 reverse engineering framework with a focus on usability, working features and code cleanliness. Rizin is portable and it can be used to analyze binaries, disassemble code, debug programs, as a forensics tool, as a scriptable command-line hexadecimal editor able to open disk files, and much more! To learn more on Rizin you may want to read the official Rizin book. https://github.com/rizinorg/rizin

​​Evil Crow Cable Evil Crow BadUSB Cable is an information security and penetration testing tool that looks and functions just like a regular USB cable (both power and data) until a wireless remote control triggers it to deliver your choice of attack payload to the host machine. In essence, Evil Crow is the next step in the evolution of BadUSB, embedding the attack in the USB cable itself. Emulating keyboard and mouse actions, payloads can be completely customized and can be highly targeted. Undetectable by firewalls, AV software (depending on payload of course) or visual inspection, the Evil Crow Cable is an ideal tool for penetration testers, police and government. For more information you can read the following repository: https://github.com/joelsernamoreno/BadUSB-Cable You can get payloads in the following repository: https://github.com/joelsernamoreno/badusb_examples/tree/master/attiny85_digispark Buy online: 🛒 https://bit.ly/3bAZs23 #badusb #cable #usb

​​OpenBukloit Minecraft plugin backdoor injector. OpenBukloit is modern and powerful universal backdoor injector compatible with all Bukkit/Spigot/Paper/etc plugins. Its feature is ability to integrate with absolutely any plugin without the need to modify backdoor every time. Moreover, it provides powerful camouflage engine, which makes nearly impossible to find it without sufficient knowledge or advanced automated tools. OpenBukloit was developed to test the security systems of Minecraft servers, VoxelHax team is not responsible for its misuse. https://github.com/VoxelHax/OpenBukloit

​​Red-Rabbit The Red Rabbit project is a cyber security framework designed to touch on the most popular hacking and security topics today, such as digital fornsics, stegonography, network forensics, packet sniffing and forensics, brute forcing, hash cracking, file parsing, filepath pillaging, SSH/FTP/TELNET/SQL recon, web recon, web scanning, vulnerability recon, OSINT and much more among that list. With over 260+ utilities all built into red rabbit locally you should have just enough to help you in say a report, or gathering information on a target such as the hostnames, MX records, A records, even getting information such as mac information or phone number information. Red Rabbit really tries to impliment only the best features into its scripts and programs, adding things most frameworks today dont have, while also using raw pure source code to filter out response bodies, response types and even load configuration files https://github.com/ArkAngeL43/Red-Rabbit

​​Payloads All The Things Tweet A list of useful payloads and bypasses for Web Application Security. Feel free to improve with your payloads and techniques ! Every section contains the following files, you can use the template_vuln folder to create a new chapter: ▫️ Vulnerability description and how to exploit it, including several payloads ▫️ Intruder - a set of files to give to Burp Intruder ▫️ Images - pictures for the README ▫️ Files - some files referenced in the README https://github.com/swisskyrepo/PayloadsAllTheThings

​​awacs-scanner Fully automated cyber security scanner. awacs-scanner is a fully automated scanner that uses a combination of genocide_engine, nmap, vulners, osint to get as much as possible info and vulnerabilities about a system/systems. Functions: ▫️ Genocide engine ▫️ Python module so you can make a tool yourself with the awacs_core ▫️ vulners api to search for exploits ▫️ searchsploit to search for exploits https://github.com/R00tendo/awacs-scanner

​​CVE-2021-4204 https://github.com/tr3ee/CVE-2021-4204 #cve

Skid-Scammers-list Warning Before purchasing anything from NFT/Crypto Scam, please read this or you will get scam by those scammers. This repositories will have 3 parts: ▫️ Scammer list ▫️ Backdoor wallet (uploaded on github only) ▫️ Informations about scammers https://github.com/captaingreem/Skid-Scammers-list

CVE-2022-32532 This is a demo project, which only shows one of the conditions for exploiting this vulnerability (CVE-2022-32532). In fact, there are more ways to exploit it, as long as developers use RegExPatternMatcher, there will be a possible bypass vulnerability. https://github.com/4ra1n/CVE-2022-32532 #cve

CVE-2022-28219 POC for CVE-2022-28219 affecting ManageEngine ADAudit Plus builds < 7060 https://github.com/horizon3ai/CVE-2022-28219 CVE-2022-28219: Unauthenticated XXE to RCE and Domain Compromise in ManageEngine ADAudit Plus https://www.horizon3.ai/red-team-blog-cve-2022-28219/ #cve #poc

​​yesitsme Simple #OSINT script to find Instagram profiles by name and e-mail/phone yesitsme is a simple Python script which tries to find Instagram account associated with a specific name, e-mail and phone number. Leveraging dumpor.com indexing capabilities, it retrieves all usernames associated with a certain name and automatically compares the fetched toutatis obfuscated e-mail/phone with the given one, saving time and energy while doing online investigations. https://github.com/blackeko/yesitsme

​​Blackbird An #OSINT tool to search fast for accounts by username across 131 sites. https://github.com/p1ngul1n0/blackbird

​​nimc2 nimc2 is a very lightweight C2 written fully in nim (implant & server). If you want to give it a try check out the wiki to learn how to install and use nimc2. It's features include: ▫️ Windows & Linux implant generation ▫️ TCP socket communication (with HTTP communication coming soon) ▫️ Ability to create as many listeners as you want ▫️ A nice task system ▫️ Easy to use CLI ▫️ Loot system ▫️ ...and a lot more features coming soon https://github.com/d4rckh/nimc2

​​waymore The idea behind waymore is to find even more links from the Wayback Machine than other existing tools. 👉 The biggest difference between waymore and other tools is that it can also download the archived responses for URLs on wayback machine so that you can then search these for even more links, developer comments, extra parameters, etc. etc. Anyone who does bug bounty will have likely used the amazing waybackurls by @TomNomNoms. This tool gets URLs from web.archive.org and additional links (if any) from one of the index collections on index.commoncrawl.org. You would have also likely used the amazing gau by @hacker_ which also finds URL's from wayback archive, Common Crawl, but also from Alien Vault and URLScan. Now waymore gets URL's from ALL of those sources too (with ability to filter more to get what you want): ▫️ Wayback Machine (web.archive.org) ▫️ Common Crawl (index.commoncrawl.org) ▫️ Alien Vault OTX (otx.alienvault.com) ▫️ URLScan (urlscan.io) https://github.com/xnl-h4ck3r/waymore

​​Pandora Pandora is now an open-source project allowing to control different agents (Windows & Linux machine) from server(s) and master. Features: ▫️ Auto-Updater ▫️ This RAT updates automatically each time the computer starts so that you (remote) can update all agents at the same time ▫️ Auto-Start ▫️ The agent launches on the PC automatically each time the OS is started ▫️ Download other file with the agent ▫️ When the victim launches the file for the first time, you can make sure to launch a real other program at the same time to make it more believable (for example a video game) ▫️ Encryption ▫️ All data between agents, servers, masters is encrypted so that no one can read the content ▫️ AV Bypass ▫️ As you can see, the virus is not detected by any antivirus on VT (nor on victim machines) Logo ▫️ Botnet Attack ▫️ You can carry out massive attacks on websites: the power of the attack will mainly depend on your number of victims (to give you an idea, with 750-1000 victims you can crash some big Russian government sites) ▫️ Chrome & Opera Stealer ▫️ Information that Google Chrome and Opera saves on victims' computers can be recovered ▫️ Remote Desktop ▫️ You can see victim's screens as well as control their computer ▫️ Remote Camera ▫️ This module allows you to see the camera (if the person has one) of your victim ▫️ Keylogger ▫️ This allows you to recover all keystrokes (including passwords and sensitive information) ▫️ Discord Token Grabber ▫️ Discord account tokens are necessarily stored on the PC of a user with Discord. This grabber grabs tokens from any version of Discord (Normal, Canary, PTB, Dev etc) as well as in browsers ▫️ FileManager ▫️ You will be able to delete, download and browse files from a remote computer ▫️ Process Manager ▫️ You can see all the programs running on the computer and you can close the ones you want ▫️ Ransomware ▫️ Encrypting files on all disks with a specific algorithm ▫️ Shell ▫️ Allows to execute shell commands (as administrator) ▫️ And more https://github.com/swagkarna/Pandora

$donate

Scrapy A fast high-level #web crawling & scraping framework for #Python. Scrapy is a fast high-level web crawling and web scraping framework used to crawl websites and extract structured data from their pages. It can be used for a wide range of purposes, from data mining to monitoring and automated testing. https://github.com/scrapy/scrapy Website: https://scrapy.org/

Awesome Hacking Tweet A collection of awesome lists for hackers, pentesters & security researchers. https://github.com/Hack-with-Github/Awesome-Hacking