HackGit
Відкрити в Telegram
The channel was created for cybersecurity specialists. • Offensive Security • RedTeam • Malware Research • BugBounty • OSINT • etc Disclaimer: t.me/hackgit/2082 Donations - Ads: t.me/hackgit/5423
Показати більше📈 Аналітичний огляд Telegram-каналу HackGit
Канал HackGit (@hackgit) у мовному сегменті Англійська є активним учасником. На даний момент спільнота об'єднує 21 579 підписників, посідаючи 4 526 місце в категорії Технології та додатки та 1 853 місце у регіоні США.
📊 Показники аудиторії та динаміка
З моменту свого створення невідомо, проект продемонстрував стрімке зростання, зібравши аудиторію у 21 579 підписників.
За останніми даними від 02 березня, 2025, канал демонструє стабільну активність. Хоча за останні 30 днів спостерігається зміна кількості учасників на 19, а за останні 24 години на 0, загальне охоплення залишається високим.
- Статус верифікації: Не верифікований
- Рівень залученості (ER): Середній показник залученості аудиторії становить 0%. Протягом перших 24 годин після публікації контент зазвичай збирає N/A% реакцій від загальної кількості підписників.
- Охоплення публікацій: В середньому кожен допис отримує 0 переглядів. Протягом першої доби публікація в середньому набирає 0 переглядів.
- Реакції та взаємодія: Аудиторія активно підтримує контент: середня кількість реакцій на один пост – 0.
📝 Опис та контентна політика
Автор описує ресурс як майданчик для висловлення суб'єктивної думки:
“The channel was created for cybersecurity specialists.
• Offensive Security
• RedTeam
• Malware Research
• BugBounty
• OSINT
• etc
Disclaimer:
t.me/hackgit/2082
Donations - Ads:
t.me/hackgit/5423”
Завдяки високій частоті оновлень (останні дані отримано 03 березня, 2025), канал підтримує актуальність та високий рівень охоплення публікацій. Аналітика показує, що аудиторія активно взаємодіє з контентом, що робить його важливою точкою впливу в категорії Технології та додатки.
21 579
Підписники
Немає даних24 години
-37 днів
+1930 днів
Архів дописів
21 579
Slicer
A tool to automate the recon process on an APK file.
Slicer accepts a path to an extracted APK file and then returns all the activities, receivers, and services which are exported and have null permissions and can be externally provoked.
https://github.com/mzfr/slicer
21 579
Osmedeus Core Engine
Osmedeus is a Workflow Engine for Offensive Security. It was designed to build a foundation with the capability and flexibility that allows you to build your own reconnaissance system and run it on a large number of targets.
Features:
▫️ Significantly speed up your recon process
▫️ Organize your scan results
▫️ Efficiently to customize and optimize your recon process
▫️ Seamlessly integrate with new public and private tools
▫️ Easy to scale across large number of targets
▫️ Easy to synchronize the results across many places
https://github.com/j3ssie/osmedeus
Documentation:
https://docs.osmedeus.org/
21 579
Name-That-Hash Description
Name That Hash defines the type of hash. The program supports MD5, SHA256 and over 300 other hashes.
📺 Popularity Ratings - Name that hash will show you the most popular hashes first. In older systems it would prioritise Skype Hash the same as Active Directory's NTLM! Which makes as much sense as saying that my GitHub is as popular as VSCode 📈
✍️ Hash Summaries - no more wondering whether it's MD5 or NTLM. Name-that-hash will summarise the main usage of each hash, allowing you to make an informed & decisive choice ⚡️
🌈 Colour Output - Don't worry, the colours were hand-selected with a designer to be 100% accessible and gnarly 😎
🤖 JSON output && API - Want to use Name-That-Hash in your project? We are API first, CLI second. Use JSON output or import us as a Python module! 💾
👵 Updated! - HashID was last updated in 2015. Hash-Identifier in 2011! Name-That-Hash is a 2021 project 🦧
♿️ Accessible - We are 100% committed to making this an accessible hacking tool 🙏
🎫 Extensible - Add new hashes as quickly as you can edit this README. No, seriously -- it's that easy! 🎱
https://github.com/HashPals/Name-That-Hash
21 579
Artfuscator
A better approach towards psychological warfare against reverse engineers.
https://github.com/JuliaPoo/Artfuscator
21 579
WonkaVision
WonkaVision is a proof of concept (POC) tool to analyze Kerberos tickets and attempt to determine if they are forged. This tool was created by Charlie Clark and Andrew Schwartz.
It should be noted that this POC is not intended to be a production-ready enterprise application, but rather to generate ideas on how to better detect forged tickets while publicizing discovered IOAs.
https://github.com/0xe7/WonkaVision
21 579
nuvola
nuvola (with the lowercase n) is a tool to dump and perform automatic and manual security analysis on AWS environments configurations and services using predefined, extensible and custom rules created using a simple Yaml syntax.
https://github.com/primait/nuvola
21 579
Orpheus
Bypassing Kerberoast Detections with Modified KDC Options and Encryption Types!
Orpheus is a wrapper for a modified version of Impacket's GetUserSPNs.py and kerberosv5.py which alters the KDC Options (Ticket Options) and the Encryption Type for Kerberoasting.
https://github.com/trustedsec/orpheus
Details:
https://www.trustedsec.com/blog/the-art-of-bypassing-kerberoast-detections-with-orpheus/
Demo:
https://www.youtube.com/watch?v=SwbSq1dTz7Y
21 579
o365sprayer
Offensive security tool to enumerate/spray passwords for O365 accounts on both Managed and Federated AD services.
Features:
▫️ Distinguishes Managed O365 & Federated O365 for the target domain
▫️ Enumerates emails for valid O365 accounts
▫️ Sprays passwords to check for valid credentials
▫️ Provide custom delay between each request
▫️ Provide number of attempts which triggers account lockout
▫️ Provide cool down time for account lockout
▫️ Provide maximum number of account lockouts to tolerate while spraying
https://github.com/securebinary/o365sprayer
21 579
Invisible Backdoor Detector
Invisible Backdoor Detector is a little Python script that allows you to spot and remove Bidi characters that could lead to an invisible backdoor. If you don't know what that is you should check the related paragraph.
https://github.com/cybersecsi/invisible-backdoor-detector
21 579
refreshing-soap-exploit
This is a proof of concept for CVE-2022-41622, which is a CSRF in F5 Big-IP that leads to remote code execution. Using this is a bit finnicky, but I'll walk you through my favourite usecases.
https://github.com/rbowes-r7/refreshing-soap-exploit
21 579
NetLlix
A project created with an aim to emulate and test exfiltration of data over different network protocols. The emulation is performed w/o the usage of native API's. This will help blue teams write correlation rules to detect any type of C2 communication or data exfiltration.
https://github.com/advanced-threat-research/NetLlix
21 579
P4-IPsec
This projects implements IPsec in BMv2 together with an controller based operation of IPsec. For details, please see the corresponding paper.
The code in this repository is intended to work with the versions of p4c, BMv2 and PI referenced in
dependencies/user-bootstrap.sh. More recent version are likely to break things.21 579
TiEtwAgent
ETW-based process injection detection.
PoC memory injection detection agent based on ETW, for offensive and defensive research purposes.
https://github.com/xuanxuan0/TiEtwAgent
21 579
ExecASLR
Abusing Intel branch predictors to bypass ASLR
Address Space Layout Randomization is a mitigation used to make harder to exploit memory corruption attacks. In a scenario of a buffer overflow vulnerability, for example, an attacker that tries to make a Return Oriented Programing exploit needs to know the addresses of the gadgets in the chain. If the code segment of the exploited binary is randomized, then it's much harder for an attacker to pick the correct address for the exploit, making the exploitation unfeasible.
https://github.com/es0j/ExecASLR-ekoparty
21 579
GoTestWAF
GoTestWAF is a tool for API and OWASP attack simulation that supports a wide range of API protocols including REST, GraphQL, gRPC, WebSockets, SOAP, XMLRPC, and others.
It was designed to evaluate web application security solutions, such as API security proxies, Web Application Firewalls, IPS, API gateways, and others.
https://github.com/wallarm/gotestwaf
21 579
Repost from Pentesting Shop
DT2000 Encrypted USB Flash Drive
Alphanumeric Keypad and FIPS 140-2 Level 3 Certified.
Kingston’s DataTraveler® 2000 is designed to be secure, with an alphanumeric keypad that locks the drive with a word or number combination, for easy-to-use PIN protection.
DT2000 features hardware-based, Full Disk AES 256-bit data encryption in XTS mode. Encryption is done on the drive and no trace of the PIN is left on the system. It’s FIPS 140-2 Level 3 certified, to meet a frequently requested corporate IT requirement.
▫️ Alphanumeric keypad makes it easy to unlock your device
▫️ Full-disk AES 256-bit hardware-based encryption
▫️ Can be used on any device with a USB 2.0 or USB 3.1 Gen 1 (USB 3.0) port
▫️ FIPS 140-2 Level 3
▫️ Administrator (Admin) PIN – Enables Admin access to the drive and ability to issue new User PIN if user forgets PIN
▫️ Read-Only Access – Admin can pre-provision a drive with pre-loaded content as read-only for the User
Buy online:
🛒 https://amzn.to/3EE3qTw
🛒 https://ali.ski/x6tisQ
#usb #drive #kingston
21 579
TripleCross
TripleCross is a Linux eBPF rootkit that demonstrates the offensive capabilities of the eBPF technology.
https://github.com/h3xduck/TripleCross
21 579
ProxyNotShell-PoC
Working PoC for CVE-2022-41040 and CVE-2022-41082 (A.K.A ProxyNotShell)
https://github.com/testanull/ProxyNotShell-PoC
#cve #poc
