HackGit
Відкрити в Telegram
The channel was created for cybersecurity specialists. • Offensive Security • RedTeam • Malware Research • BugBounty • OSINT • etc Disclaimer: t.me/hackgit/2082 Donations - Ads: t.me/hackgit/5423
Показати більше📈 Аналітичний огляд Telegram-каналу HackGit
Канал HackGit (@hackgit) у мовному сегменті Англійська є активним учасником. На даний момент спільнота об'єднує 21 579 підписників, посідаючи 4 526 місце в категорії Технології та додатки та 1 853 місце у регіоні США.
📊 Показники аудиторії та динаміка
З моменту свого створення невідомо, проект продемонстрував стрімке зростання, зібравши аудиторію у 21 579 підписників.
За останніми даними від 02 березня, 2025, канал демонструє стабільну активність. Хоча за останні 30 днів спостерігається зміна кількості учасників на 19, а за останні 24 години на 0, загальне охоплення залишається високим.
- Статус верифікації: Не верифікований
- Рівень залученості (ER): Середній показник залученості аудиторії становить 0%. Протягом перших 24 годин після публікації контент зазвичай збирає N/A% реакцій від загальної кількості підписників.
- Охоплення публікацій: В середньому кожен допис отримує 0 переглядів. Протягом першої доби публікація в середньому набирає 0 переглядів.
- Реакції та взаємодія: Аудиторія активно підтримує контент: середня кількість реакцій на один пост – 0.
📝 Опис та контентна політика
Автор описує ресурс як майданчик для висловлення суб'єктивної думки:
“The channel was created for cybersecurity specialists.
• Offensive Security
• RedTeam
• Malware Research
• BugBounty
• OSINT
• etc
Disclaimer:
t.me/hackgit/2082
Donations - Ads:
t.me/hackgit/5423”
Завдяки високій частоті оновлень (останні дані отримано 03 березня, 2025), канал підтримує актуальність та високий рівень охоплення публікацій. Аналітика показує, що аудиторія активно взаємодіє з контентом, що робить його важливою точкою впливу в категорії Технології та додатки.
21 579
Підписники
Немає даних24 години
-37 днів
+1930 днів
Архів дописів
21 579
DynamicSyscalls
This is a library written in .net resolves the syscalls dynamically (Has nothing to do with hooking/unhooking)
https://github.com/Shrfnt77/DynamicSyscalls
21 579
PurpleCloud
Terraform code generator to create different Azure security labs.
For full documentation visit: https://www.purplecloud.network
https://github.com/iknowjason/PurpleCloud
21 579
LDAP Relay Scan
A tool to check Domain Controllers for LDAP server protections regarding the relay of NTLM authentication.
https://github.com/zyn3rgy/LdapRelayScan
#ad #ldap #scan #tools
21 579
Subdomain enumeration
Based on my last live stream created a deep enumeration of subdomain
https://github.com/Virdoexhunter/Subenum_deep_subdomain_enumeration
21 579
SharpGmailC2
Our Friendly Gmail will act as Server and implant will exfiltrate data via smtp and will read commands from C2 (Gmail) via imap protocol.
https://github.com/reveng007/SharpGmailC2
Demo:
https://youtu.be/6SoKeeEUKfA
21 579
wa-tunnel
HTTP Tunneling through Whatsapp
This is a Baileys based piece of code that lets you tunnel TCP data through two Whatsapp accounts.
This can be usable in different situations, for example network carriers that give unlimited whatsapp data or airplanes where you also get unlimited social network data.
It's using Baileys since it's a WS based multi-device whatsapp library and therefore could be used in android in the future, using Termux for example.
The idea is to use it with a proxy setup on the server like this:
[Client (restricted access) -> Whatsapp -> Server -> Proxy -> Internet]
Apologizes in advance since Javascript it's not one of my primary coding languages :/
https://github.com/aleixrodriala/wa-tunnel
#Donate t.me/hackgit🍻»»»21 579
Gaiated
An addon to exploit potential open traces of Google ID (GaiaID).
https://github.com/Seeraiwer/gaiated
#OSINT
21 579
nse-exchange
Nmap NSE scripts to check against exchange vulnerability (CVE-2022-44228). NSE scripts check most popular exposed services on the Internet. It is basic script which checks if virtual patching works.
https://github.com/Diverto/nse-exchange
#cve #nmap
21 579
Repost from HackGit
💰 Donate
If you like the channel please support us ❣️
https://www.buymeacoffee.com/HackGit
BTC:
1987zNaVX53v7tzpKRRde84uXbDYjuNykLTON:
UQAAZ1BFX5OsybSryoFunzyJN3F7oKWMbZNPlwMTcVK8mEzAUSDT – ERC20❗️:
0x1e7fa9e9c42f71e6d155aca39951f23355178163You can buy crypto here Every donation gives us the motivation to do better and more content! #donate #support
21 579
CVE-2022-41352
Zimbra Unauthenticated RCE
is an arbitrary file write vulnerability in Zimbra mail servers due to the use of a vulnerable cpio version.
https://github.com/Cr4ckC4t/cve-2022-41352-zimbra-rce
t.me/hackgit
21 579
CVE-2022-3949
XSS in Simple Cashiering System
Simple Cashiering System is vulnerable to Cross Site Scripting (XSS) - a malicious actor can change the fullname of a compromised user to a XSS Payload and whenever a admin visits the user-tab or the sales tab (and looks into sales made by the malicious actor) the payload is triggered. This can lead to session takeover because the cookie does not have an HttpOnly Flag.
https://github.com/maikroservice/CVE-2022-3949
21 579
Triton
A dynamic binary analysis library. It provides internal components that allow you to build your program analysis tools, automate reverse engineering, perform software verification or just emulate code.
▫️ Dynamic symbolic execution
▫️ Dynamic taint analysis
▫️ AST representation of the x86, x86-64, ARM32 and AArch64 ISA semantic
▫️ Expressions synthesis
▫️ SMT simplification passes
▫️ Lifting to LLVM as well as Z3 and back
▫️ SMT solver interface to Z3 and Bitwuzla
▫️ C++ and Python API
https://github.com/jonathansalwan/Triton
21 579
TTexplore
library that performs path exploration on binary code using symbolic execution.
https://github.com/JonathanSalwan/ttexplore
21 579
cve-2022-31898
Exploit POC code for CVE-2022-31898, a command injection for GL-iNet routers with firmware below 3.215.
https://github.com/gigaryte/cve-2022-31898
#cve #poc
21 579
Bomber
bomber is an application that scans SBOMs for security vulnerabilities.
So you've asked a vendor for an Software Bill of Materials (SBOM) for one of their closed source products, and they provided one to you in a JSON file... now what?
The first thing you're going to want to do is see if any of the components listed inside the SBOM have security vulnerabilities, and what kind of licenses these components have. This will help you identify what kind of risk you will be taking on by using the product.
Finding security vulnerabilities and license information for components identified in an SBOM is exactly what bomber is meant to do. bomber can read any JSON or XML based CycloneDX format, or a JSON SPDX or Syft formatted SBOM, and tell you pretty quickly if there are any vulnerabilities.
https://github.com/devops-kung-fu/bomber
21 579
Fzf
A general-purpose command-line fuzzy finder.
It's an interactive Unix filter for command-line that can be used with any list; files, command history, processes, hostnames, bookmarks, git commits, etc.
Pros:
▫️ Portable, no dependencies
▫️ Blazingly fast
▫️ The most comprehensive feature set
▫️ Flexible layout
▫️ Batteries included
https://github.com/junegunn/fzf
fzf - command line fuzzy finder: https://www.youtube.com/watch?v=qgG5Jhi_Els
21 579
Repost from Pentesting Shop
CJMCU BadUSB with MicroSD
This is one of the last developments related to rubberducky or badusb devices. This device is based on the ATMEGA32U4 microprocessor which is able to emulate many USB modes like HID, used for injecting key presses to the target system.
The main processor is based on Arduino Leonardo R3 development board and the improvement is that a microSD card slot is included to allow storing many different payloads. The microSD card has to be FAT32 formatted in order to be recognized.
Repository:
https://github.com/asciiterminal/CJMCU_ATMEGA32U4_BADUSB
Buy online:
🛒 https://bit.ly/3HV8UJM (ali)
🛒 https://amzn.to/3TEuC9i (amazon)
#usb #badusb #atmega32u4
21 579
Awesome IDA, Ghidra, x64DBG & OllyDBG plugins
A curated list of IDA x64DBG and OllyDBG plugins. IDA is a powerful disassembler and debugger that allows to analyze binary, it also includes a decompiler. X64DBG is an open-source x64/x32 debugger for Windows. OllyDbg is a 32-bit assembler level analysing debugger for Windows.
https://github.com/fr0gger/awesome-ida-x64-olly-plugin
t.me/hackgit
21 579
Web3 Decoder
Web3 Decoder is a Burp Suite Extension that helps to analyze what is going on with the operations involving smart contracts of the web3. This is mainly JSON-RPC calls to Ethereum Nodes, and nodes of other compatible networks (like Polygon, Arbitrum, BSC...)
https://github.com/nccgroup/web3-decoder
t.me/hackgit
