HackGit

​​KRWX Kernel Read Write eXecute Play with kernel memory, allocate and free kernel objects directly from user-land! https://github.com/kiks7/KRWX More details here: https://1day.dev/2022-03/krwx.html

Penetration Testing Mindset Xmind Map For Web Penetration Testing & Red Teaming https://github.com/N1arut/Pentesting-Mind-Map

We already have 3,000 thousand subscribers! Thank you for being with us! ❤️

iCopy-XS The iCopy-XS is a powerful portable RFID cloning device which uses proxmark3 software under the hood and contains an easy to use user interface that takes the hassle out of RFID cloning. It supports the majority of HF and LF cards on the market, and is a must have for penetration testers and security researchers. Card Support: ▫️ 125khz ▫️ EM Marin ▫️ HID Proxi ▫️ ioPROX ▫️ G-prox ▫️ Viking (FDI) ▫️ Pyramid ▫️ AWID ▫️ HID Indala (Motorola) ▫️ Paradox ▫️ And many more… Buy online: 🛒 https://ali.ski/pJxQV #copy #card #rfid

​​PINKPANTHER Windows x64 kernel-mode handcrafted #shellcode to replace primary access token of executing process with SYSTEM process token for Elevation of Privilege(EoP). https://github.com/winterknife/PINKPANTHER

​​XDEBUG-RCE-Exploit An automated exploit to the xdebug 2.5.5 RCE vulnerability. https://github.com/D3Ext/XDEBUG-Exploit

​​TripleCross A Linux eBPF rootkit with a backdoor, C2, library injection, execution hijacking, persistence and stealth capabilities. https://github.com/h3xduck/TripleCross #rootkit #redteam #linux #kernel

​​AMP-Research Research on exotic UDP/TCP amplification vectors, payloads and mitigations The subfolders in this repository will contain the following: ▫️ Overview README.md » Name, Ports, Amplification factors, Update Info » Request <> Response Example with test IP (netcat yay!) » Potential official documentation » Potential mitigation strategies ▫️ The raw payload (e.g. for use in zmap) OR potential scanning script (C). ▫️ Raw socket flood script (C) for analysis to build flowspec or ACL mitigations. https://github.com/Phenomite/AMP-Research

​​GDA(GJoy Dex Analyzer) GDA, a new Dalvik bytecode decompiler, is implemented in C++, which has the advantages of faster analysis and lower memory&disk consumption and an stronger ability to decompiling the APK, DEX, ODEX, OAT files(supports JAR, CLASS and AAR files since 3.79). GDA is completely self-independent and works without Java VM and installation, so it works well in any newly installed windows system and virtual machine system without additional configuration. GDA Decompiler project started in 2013 and its first version 1.0 released in 2015 at GDA website. GDA is also a powerful and fast reverse analysis platform. Which does not only supports the basic decompiling operation, but also many excellent functions like Malicious behavior detection, Privacy leaking detection, Vulnerability detection, Path solving, Packer identification, Variable tracking analysis, Deobfuscation, Python& Java scripts, Device memory extraction, Data decryption and encryption etc. https://github.com/charles2gan/GDA-android-reversing-Tool

​​nacs Event-driven pentest scanner Features: ▫️ Detect if the target machine is alive ▫️ Service scan (regular & non-regular ports) ▫️ poc detection (xray & nuclei format) ▫️ Weak password blasting for services such as databases ▫️ Common Vulnerability Exploitation of Intranet https://github.com/u21h2/nacs

debian11-dirty_pipe-patcher Since the Debian 11 still comes with the kernel version 5.10, which is vulnerable to the Dirty Pipe Vulnerability, this scirpt is made for manually compile and install the kernel version 5.18 which is not vulnerable. https://github.com/ih3na/debian11-dirty_pipe-patcher

​​LAN Tap Pro Throwing Star LAN Tap Pro is very popular, small and simple device for monitoring Ethernet communication. This powerful and “must have” device, for monitoring networks, comes in two similar but different versions: ▫️ LAN Tap (in kit form to assemble) and ▫️ LAN Tap Pro (an assembled device). Network TAP (Test Access Point) is a hardware tool that allows you to access and monitor networks. TAPs are capable of transmitting both send/receive data traffic simultaneously on separate dedicated ports/channels in real time. They usually have four ports (2 of them to connect to network nodes and additional 2 to connect to the monitoring devices) and most of them are passive devices which means that they are completely invisible to the end user/network (no IP nor MAC address). LAN Tap Pro is electrically same as LAN Tap, but it’s fully assembled and comes in a plastic enclosure. It’s completely passive, which means it won’t disrupt your current network connectivity/configuration, and if we compare it to some of the competitive TAPs, it’s fairly affordable worldwide. Basically, it’s a sniffing packet tool made for sole purpose to monitor one direction PER TAP network traffic. If you are in desperate need to monitor two way traffic, you simply need to monitor on two ports. It’s passive, unpowered Ethernet TAP device, requiring no power for operation. Because of its passive nature it’s looks like a section of cable to the targeted network. How it works? There are four available ports. Each port monitors traffic in one direction only. Two monitoring ports marked J3 and J4 are receive only, they connect to the receive data lines on the monitoring station but do not connect to the station’s transmit lines, so it becomes impossible for the monitoring station to accidentally transmit data packets onto the target network. While a Gigabit network may not be passively tapped, the Throwing Star LAN Tap Pro features two specially placed capacitors which force 1000BASET networks to negotiate at lower speeds, typically 100BASETX transparently to the end user. (HAK5) You need to keep in mind that it degrades signal quality to some extent. Sometimes, it can cause problems on the target network, especially if there is a very long cable in use. The signal degradation could reduce network performance, so try to avoid long cables. Features: ▫️ Passive tapping ▫️ TX and RX tapping ▫️ 10BASET and 100BASETX networks ▫️ 1000BASET tapping at lower speed ▫️ Portability, requires no power Buy online: 🛒 https://ali.ski/pIKzW #ethernet #network #tap

Payloads Payloads Arsenal for Penetration Tester and Bug Bounty Hunters https://github.com/sh377c0d3/Payloads

​​Anti-Virus-Evading-Payloads During the exploitation phase of a pen test or ethical hacking engagement, you will ultimately need to try to cause code to run on target system computers. Whether accomplished by phishing emails, delivering a payload through an exploit, or social engineering, running code on target computers is part of most penetration tests. That means that you will need to be able to bypass antivirus software or other host-based protection for successful exploitation. The most effective way to avoid antivirus detection on your target's computers is to create your own customized backdoor. Here is a simple way to evade anti-virus software when creating backdoors! https://github.com/RoseSecurity/Anti-Virus-Evading-Payloads

​​shellfire Exploitation shell which focuses on exploiting LFI, RFI, and command injection vulnerabilities. https://github.com/unix-ninja/shellfire

​​PSFuzz ProvieSec Fuzz Scanner - Web path discovery https://github.com/Proviesec/PSFuzz

Secret Regex List List of regex for scraping secret API keys and juicy information. https://github.com/h33tlit/secret-regex-list