HackGit
Відкрити в Telegram
The channel was created for cybersecurity specialists. • Offensive Security • RedTeam • Malware Research • BugBounty • OSINT • etc Disclaimer: t.me/hackgit/2082 Donations - Ads: t.me/hackgit/5423
Показати більше📈 Аналітичний огляд Telegram-каналу HackGit
Канал HackGit (@hackgit) у мовному сегменті Англійська є активним учасником. На даний момент спільнота об'єднує 21 579 підписників, посідаючи 4 526 місце в категорії Технології та додатки та 1 853 місце у регіоні США.
📊 Показники аудиторії та динаміка
З моменту свого створення невідомо, проект продемонстрував стрімке зростання, зібравши аудиторію у 21 579 підписників.
За останніми даними від 02 березня, 2025, канал демонструє стабільну активність. Хоча за останні 30 днів спостерігається зміна кількості учасників на 19, а за останні 24 години на 0, загальне охоплення залишається високим.
- Статус верифікації: Не верифікований
- Рівень залученості (ER): Середній показник залученості аудиторії становить 0%. Протягом перших 24 годин після публікації контент зазвичай збирає N/A% реакцій від загальної кількості підписників.
- Охоплення публікацій: В середньому кожен допис отримує 0 переглядів. Протягом першої доби публікація в середньому набирає 0 переглядів.
- Реакції та взаємодія: Аудиторія активно підтримує контент: середня кількість реакцій на один пост – 0.
📝 Опис та контентна політика
Автор описує ресурс як майданчик для висловлення суб'єктивної думки:
“The channel was created for cybersecurity specialists.
• Offensive Security
• RedTeam
• Malware Research
• BugBounty
• OSINT
• etc
Disclaimer:
t.me/hackgit/2082
Donations - Ads:
t.me/hackgit/5423”
Завдяки високій частоті оновлень (останні дані отримано 03 березня, 2025), канал підтримує актуальність та високий рівень охоплення публікацій. Аналітика показує, що аудиторія активно взаємодіє з контентом, що робить його важливою точкою впливу в категорії Технології та додатки.
21 579
Підписники
Немає даних24 години
-37 днів
+1930 днів
Архів дописів
21 579
Self-Service Security Assessment tool
Cybersecurity remains a very important topic and point of concern for many CIOs, CISOs, and their customers. To meet these important concerns, AWS has developed a primary set of services customers should use to aid in protecting their accounts.
Amazon GuardDuty, AWS Security Hub, AWS Config, and AWS Well-Architected reviews help customers maintain a strong security posture over their AWS accounts.
As more organizations deploy to the cloud, especially if they are doing so quickly, and they have not yet implemented the recommended AWS Services, there may be a need to conduct a rapid security assessment of the cloud environment.
https://github.com/awslabs/aws-security-assessment-solution
21 579
Malware analysis and #Reverse engineering
Some of my publicly available Malware analysis and Reverse engineering. (Reports, tips, tricks...)
https://github.com/Dump-GUY/Malware-analysis-and-Reverse-engineering
21 579
PPLcontrol
This tool allows you to list protected processes, get the protection level of a specific process, or set an arbitrary protection level. For more information, you can read this blog post: Debugging Protected Processes.
https://github.com/itm4n/PPLcontrol
21 579
Facebook SSL Pinning Bypass
Bypass Facebook SSL pinning on Android devices.
https://github.com/Eltion/Facebook-SSL-Pinning-Bypass
21 579
Auth Analyzer
The Burp extension helps you to find authorization bugs. Just navigate through the web application with a high privileged user and let the Auth Analyzer repeat your requests for any defined non-privileged user. With the possibility to define Parameters the Auth Analyzer is able to extract and replace parameter values automatically. With this for instance, CSRF tokens or even whole session characteristics can be auto extracted from responses and replaced in further requests. Each response will be analyzed and tagged on its bypass status.
https://github.com/simioni87/auth_analyzer
21 579
Repost from Pentesting Shop
Cactus WHID
This device allows keystrokes to be sent via WiFi to a target machine. The target recognizes the Ducky as both a standard HID keyboard and a serial port, allows interactive commands and scripts to be executed on the target remotely.
It stands for WiFi HID Injector. It is a WiFi remotely-controlled {Keyboard, Mouse} Emulator. Practically is an USB Rubberducky or BadUSB device on Steroids!
This attack video shows 👇 an attacker can plug this device into a system and then execute Mimikatz remotly.
Repository:
https://github.com/whid-injector/WHID
Buy online:
🛒 https://amzn.to/3FoAFL9
🛒 https://ali.ski/3P9oU
#wifi #badusb #usb
21 579
xSMTP
The One And Only Open-Relay SMTP Servers Scanner Tool On Github
xSMTP is a lightning fast, multithreaded scanner written in Python, capable of scanning massive network ranges and find open-relay and unsecured SMTP servers inside. ranges can be directly setted in the ranges.txt file or gathered by performing an ASN Lookup, the user can input any website in mind and the tool will make an API Call to external third party services ( ipinfo.io and api.hackertarget.com ) where all the IP Ranges of the website's ASN will be fetched and saved in ranges.txt file.
with the gathered ranges, xSMTP generates all available hosts and can perform a very fast check and see if hosts can listen on the most used smtp ports (2525,587..) and saves the good hosts on list.txt file, then a mass SMTP scan can be performed, where the tool will try to send a test email with the hosts gathered in list.txt containing the smtp info in the email body, if the smtp server is open-relay/unsecured!
https://github.com/c99tn/xSMTP
21 579
reverse-engineering-workshop
Here are some slides and hands-on about Linux x86-64 reverse engineering:
https://github.com/romainthomas/reverse-engineering-workshop
21 579
AWS-malware-lab
Creation of a laboratory for malware analysis in AWS
https://github.com/adanalvarez/AWS-malware-lab
21 579
House of Gods - Arena Hijacking Technique
House-of-Gods is a new heap exploitation technique for older versions of the GNU C Library (< glibc 2.27). There are currently two different revisions of the same exploit. The first revision is way more inefficient and less applicable in real world scenarios compared to the second revision.
https://github.com/Milo-D/house-of-gods
21 579
go-exploitdb
This is a tool for searching Exploits from some Exploit Databases. Exploits are inserted at sqlite database(go-exploitdb) can be searched by command line interface. In server mode, a simple Web API can be used.
As the following vulnerabilities database
▫️ ExploitDB(OffensiveSecurity) by CVE number or Exploit Database ID.
▫️ GitHub Repositories
▫️ Awesome Cve Poc
▫️ inTheWild DB
https://github.com/vulsio/go-exploitdb
21 579
DeTTECT
Detect Tactics, Techniques & Combat Threats
DeTT&CT aims to assist blue teams in using ATT&CK to score and compare data log source quality, visibility coverage, detection coverage and threat actor behaviours. All of which can help, in different ways, to get more resilient against attacks targeting your organisation. The DeTT&CT framework consists of a Python tool (DeTT&CT CLI), YAML administration files, the DeTT&CT Editor (to create and edit the YAML administration files) and scoring tables for detections, data sources and visibility.
DeTT&CT provides the following functionality for the ATT&CK domains Enterprise, ICS and Mobile:
▫️ Administrate and score the quality of your data sources*.
▫️ Get insight on the visibility you have on for example endpoints.
▫️ Map your detection coverage.
▫️ Map threat actor behaviours.
▫️ Compare visibility, detection coverage and threat actor behaviours to uncover possible improvements in detection and visibility (which is based on your available data sources). This can help you to prioritise your blue teaming efforts.
▫️ Get statistics (per platform) on the number of techniques covered per data source.
https://github.com/rabobank-cdc/DeTTECT
21 579
SilentMoonwalk
PoC Implementation of a true call stack spoofer
SilentMoonwalk is a PoC implementation of a true call stack spoofer, implementing a technique to remove the original caller from the call stack, using ROP to desynchronize unwinding from control flow.
https://github.com/klezVirus/SilentMoonwalk
21 579
Neton
A sandbox information gathering tool
Neton is a tool for getting information from Internet connected sandboxes. It is composed by an agent and a web interface that displays the collected information.
The Neton agent gets information from the systems on which it runs and exfiltrates it via HTTPS to the web server.
Some of the information it collects:
▫️ Operating system and hardware information
▫️ Find files on mounted drives
▫️ List unsigned microsoft drivers
▫️ Run SharpEDRChecker
▫️ Run Pafish
▫️ Run Al-Khaser
▫️ Detect hooks
▫️ Take screenshots of the desktop
https://github.com/Aetsu/Neton
21 579
IKEA Vindriktning WisBlock Hack
This repository holds the code to connect a WisBlock RAK4631 to an IKEA Vindriktning air quality sensor and send the aire quality data over LoRaWAN to your LNS of choice. The code also expects a Bosch BME680 sensor connected to the WisBlock using a WisBlock Environment Sensor (RAK1906).
These are the components required for this hack:
▫️ IKEA Vindriktning
▫️ RAKwireless WisBlock Mini Base Board (RAK19003)
▫️ RAKwireless nRF52840 Core (RAK4631)
▫️ RAKwireless Environment Sensor (RAK1906)
▫️ A JST1.0 battery connector and some wire
▫️ USB Type-C cable to flash the WisBlock
https://github.com/xoseperez/wisblock-vindriktning
21 579
Paralus
Paralus is a free, open source tool that enables controlled, audited access to Kubernetes infrastructure for your users, user groups, and services. Ships as a GUI, API, and CLI.
https://github.com/paralus/paralus
21 579
cvedata
A collection of CVE and related data. This python package is caught somewhere between a data collection tool and a CVE data API. Much more the former than the latter.
https://github.com/clearbluejar/cvedata
21 579
friTap
The goal of this project is to help researchers to analyze traffic encapsulated in SSL or TLS. For details have a view into the OSDFCon webinar slides or in this blog post.
This project was inspired by SSL_Logger and currently supports all major operating systems (Linux, Windows, Android). More platforms and libraries will be added in future releases.
https://github.com/fkie-cad/friTap
21 579
tinyfw
tinyfw is a toy firewall built in Rust and leveraging the eBPF technology. The network policies can be attached to any supported network interface. It is also containers aware, the containerd runtime is supported.
https://github.com/angelopoerio/tinyfw
