HackGit
Відкрити в Telegram
The channel was created for cybersecurity specialists. • Offensive Security • RedTeam • Malware Research • BugBounty • OSINT • etc Disclaimer: t.me/hackgit/2082 Donations - Ads: t.me/hackgit/5423
Показати більше📈 Аналітичний огляд Telegram-каналу HackGit
Канал HackGit (@hackgit) у мовному сегменті Англійська є активним учасником. На даний момент спільнота об'єднує 21 579 підписників, посідаючи 4 526 місце в категорії Технології та додатки та 1 853 місце у регіоні США.
📊 Показники аудиторії та динаміка
З моменту свого створення невідомо, проект продемонстрував стрімке зростання, зібравши аудиторію у 21 579 підписників.
За останніми даними від 02 березня, 2025, канал демонструє стабільну активність. Хоча за останні 30 днів спостерігається зміна кількості учасників на 19, а за останні 24 години на 0, загальне охоплення залишається високим.
- Статус верифікації: Не верифікований
- Рівень залученості (ER): Середній показник залученості аудиторії становить 0%. Протягом перших 24 годин після публікації контент зазвичай збирає N/A% реакцій від загальної кількості підписників.
- Охоплення публікацій: В середньому кожен допис отримує 0 переглядів. Протягом першої доби публікація в середньому набирає 0 переглядів.
- Реакції та взаємодія: Аудиторія активно підтримує контент: середня кількість реакцій на один пост – 0.
📝 Опис та контентна політика
Автор описує ресурс як майданчик для висловлення суб'єктивної думки:
“The channel was created for cybersecurity specialists.
• Offensive Security
• RedTeam
• Malware Research
• BugBounty
• OSINT
• etc
Disclaimer:
t.me/hackgit/2082
Donations - Ads:
t.me/hackgit/5423”
Завдяки високій частоті оновлень (останні дані отримано 11 листопада, 2026), канал підтримує актуальність та високий рівень охоплення публікацій. Аналітика показує, що аудиторія активно взаємодіє з контентом, що робить його важливою точкою впливу в категорії Технології та додатки.
21 579
Підписники
Немає даних24 години
-37 днів
+1930 днів
Архів дописів
21 579
Paragon
Paragon is a #RedTeam engagement platform. It aims to unify offensive tools behind a simple UI, abstracting much of the backend work to enable operators to focus on writing implants and spend less time worrying about databases and css.
The repository also provides some offensive tools already integrated with Paragon that can be used during engagements.
Features:
▫️ Easily integrate custom tools to unify operations behind a single interface
▫️ Query the Red Team knowledge graph using a provided GraphQL API
▫️ Event emission for low latency automation and real time processing
▫️ Python-like scripting language for deployments, post-exploitation, and more
▫️ Cross-platform implants & deployment included
▫️ Record operator activity to conviniently aggregate into a post-engagement report for review
https://github.com/KCarretto/paragon
21 579
CrackerJack
Web GUI for #Hashcat developed in #Python.
Features:
▫️ Web interface for mask generation (?a?l?u).
▫️ Web Push notifications when a password is cracked.
▫️ Swagger 2.0 API.
▫️ Create wordlists from already cracked passwords and feedback into the cracking session.
▫️ Session history to track which attacks you have already performed.
▫️ Multi-user support (local and/or LDAP).
▫️ Wordlist/Mask/Rule support.
https://github.com/ctxis/crackerjack
21 579
haxx
Untethered + Unsandboxed code execution haxx as root on iOS 14 - iOS 14.8.1.
https://github.com/asdfugil/haxx
21 579
PE-infector
Crossplatform tool for inject shellcode into .exe binaries (x86 and 64).
https://github.com/MastMind/PE-infector
21 579
PostDump
PostDump is a C# tool developt by COS team (Cyber Offensive and Security) of POST Luxembourg.
It is yet another simple tool to perform a memory dump (lsass) using several technics to bypass EDR hooking and lsass protection.
Unlike tools like EDRSandBlast, it focused on unhooking only functions stricly required in order to dump the memory, thus done by using DInvoke to map required unhooked DLL. With an exception for NtReadVirtualMemory which is dynamicly patched if hook is detected.
Project in constant improvement (hook detection, direct syscalls).
https://github.com/post-cyberlabs/Offensive_tools/tree/main/PostDump
21 579
Repost from N/a
Doenerium
Fully undetected #stealer (0/67)
▫️ Exodus wallet injection (get the password whenever the user logs in the wallet)
▫️ More grabbers (VPN's, Gaming, Messengers)
▫️ Keylogger
▫️ Growtopia stealer
▫️ Discord bot to build within discord ($build <webhook_url>)
▫️ Dynamic encryption
https://github.com/doener2323/doenerium
21 579
Chisel-Strike
A .NET XOR encrypted cobalt strike aggressor implementation for chisel to utilize faster proxy and advanced socks5 capabilities.
https://github.com/m3rcer/Chisel-Strike
21 579
family-of-client-ids-research
Abusing Family Refresh Tokens for Unauthorized Access and Persistence in Azure Active Directory
▫️ Ryan Marcotte Cobb, CTU Special Operations
▫️ Tony Gore, CTU Special Operations
Undocumented functionality in Azure Active Directory allows a group of Microsoft OAuth client applications to obtain special “family refresh tokens,” which can be redeemed for bearer tokens as any other client in the family. We will discuss how this functionality was uncovered, the mechanism behind it, and various attack paths to obtain family refresh tokens.
We will demonstrate how this functionality can be abused to access sensitive data. Lastly, we will share relevant information to mitigate the theft of family refresh tokens.
https://github.com/secureworks/family-of-client-ids-research
#ad
21 579
AD description password finder
The purpose of this tool is to check if passwords are stored in clear text in the description of Active Directory accounts.
https://github.com/AssuranceMaladieSec/AD-description-password-finder
#ad
21 579
OWASP Mobile Security Testing Guide (MSTG)
This is the official GitHub Repository of the OWASP Mobile Security Testing Guide (MSTG). The MSTG is a comprehensive manual for mobile app security testing and reverse engineering.
It describes technical processes for verifying the controls listed in the OWASP Mobile Application Verification Standard (MASVS).
📖 Read it on Gitbook
⬇️ Download the latest PDF
✅ Get the latest Mobile App Security Checklists
⚡️ Contribute!
💥 Play with our Crackmes
https://github.com/OWASP/owasp-mstg
21 579
Grawler
The best tool ever, made for automating google dorks it's a tool written in PHP which comes with a web interface that automates the task of using google dorks, scrapes the results, and stores them in a file, version 1.0 is the more powerful than ever supporting multiple proxies.
https://github.com/A3h1nt/Grawler
21 579
CVE-2022-29554
Mishandling of Input to API in PrintixService.exe
https://github.com/ComparedArray/printix-CVE-2022-29554
#exploit #cve
21 579
Repost from Pentesting Shop
USB Ninja Cable
USB Ninja is an information security and penetration testing tool that looks and functions just like a regular USB cable (both power and data) until a wireless remote control triggers it to deliver your choice of attack payload to the host machine. In essence, USB Ninja is the next step in the evolution of BadUSB, embedding the attack in the USB cable itself.
Emulating keyboard and mouse actions, payloads can be completely customized and can be highly targeted. Undetectable by firewalls, AV software (depending on payload of course) or visual inspection, the USB Ninja is an ideal tool for penetration testers, police and government.
Official documentation.
USB Ninja Cable:
🛒 https://ali.ski/7q4-ex
Wireless trigger device for the USB Ninja. Can trigger two different payloads via toggle buttons. Accepts RP-SMA antennas if you want greater distances for remote payload triggering.
USB Ninja Bluetooth Remote:
https://ali.ski/c_5OXw
#usb #badusb
21 579
Repost from N/a
KIZAGAN
A python backdoor(Remote Access Trojan) and it can take camera pictures,screenshots,getting microphone sounds... etc.
https://github.com/st4inl3s5/kizagan
#rat
21 579
Repost from Pentesting News
MITRE ATT&CK
Version 11.3 added tactics and methods for Android/iOS mobile devices
MITRE ATT&CK® is a globally-accessible knowledge base of adversary tactics and techniques based on real-world observations. The ATT&CK knowledge base is used as a foundation for the development of specific threat models and methodologies in the private sector, in government, and in the cybersecurity product and service community.
With the creation of ATT&CK, MITRE is fulfilling its mission to solve problems for a safer world — by bringing communities together to develop more effective cybersecurity. ATT&CK is open and available to any person or organization for use at no charge.
https://attack.mitre.org/versions/v11
#redteam
21 579
CVE-2022-33980
Apache Commons Configuration-RCE
https://github.com/tangxiaofeng7/CVE-2022-33980-Apache-Commons-Configuration-RCE
#exploit
21 579
Faceboom
Social Engineering Application for #Facebook.
How does it work?
▫️ Faceboom is social engineering application, User can only hack the victim's account if they are good at guessing and assuming other people's trades and values.
▫️ It uses a wordlist to perform a successful hack, all the way the user has to update the wordlist.txt file which is already provided to make a hack attempt.
https://github.com/thehassantahir/Faceboom
