HackGit
Kanalga Telegram’da o‘tish
The channel was created for cybersecurity specialists. • Offensive Security • RedTeam • Malware Research • BugBounty • OSINT • etc Disclaimer: t.me/hackgit/2082 Donations - Ads: t.me/hackgit/5423
Ko'proq ko'rsatish📈 Telegram kanali HackGit analitikasi
HackGit (@hackgit) Ingliz til segmentidagi kanali faol ishtirokchi. Hozirda hamjamiyat 21 579 obunachidan iborat bo'lib, Texnologiyalar & Aralashmalar toifasida 4 526-o'rinni va AQSH mintaqasida 1 853-o'rinni egallagan.
📊 Auditoriya ko‘rsatkichlari va dinamika
невідомо sanasidan buyon loyiha tez o‘sib, 21 579 obunachiga ega bo‘ldi.
02 Mart, 2025 dagi oxirgi ma’lumotlarga ko‘ra kanal barqaror faollikka ega. Oxirgi 30 kunda obunachilar soni 19 ga, so‘nggi 24 soatda esa 0 ga o‘zgardi va umumiy qamrov yuqori darajada qolmoqda.
- Tasdiqlash holati: Tasdiqlanmagan
- Jalb etish (ER): Auditoriya o‘rtacha 0% darajada jalb etiladi. Nashrdan keyingi dastlabki 24 soatda kontent odatda umumiy obunachilar sonining N/A% ini tashkil etuvchi reaksiyalarni to‘playdi.
- Post qamrovi: Har bir post o‘rtacha 0 marta ko‘riladi; birinchi sutkada odatda 0 ta ko‘rish yig‘iladi.
- Reaksiyalar va o‘zaro ta’sir: Auditoriya faol: har bir postga o‘rtacha 0 ta reaksiya keladi.
📝 Tavsif va kontent siyosati
Muallif resursni shaxsiy fikrni ifoda etish maydoni sifatida ta’riflaydi:
“The channel was created for cybersecurity specialists.
• Offensive Security
• RedTeam
• Malware Research
• BugBounty
• OSINT
• etc
Disclaimer:
t.me/hackgit/2082
Donations - Ads:
t.me/hackgit/5423”
Yuqori yangilanish chastotasi (oxirgi ma’lumot 11 Noyabr, 2026 da olingan) sababli kanal doimo dolzarb va katta qamrovli bo‘lib qoladi. Analitika auditoriya kontent bilan faol hamkorlik qilishini, uni Texnologiyalar & Aralashmalar toifasidagi muhim ta’sir nuqtasiga aylantirishini ko‘rsatadi.
21 579
Obunachilar
Ma'lumot yo'q24 soatlar
-37 kun
+1930 kun
Postlar arxiv
21 579
Repost from Pentesting Shop
Screen Privacy Filter
Privacy Filters keep confidential information private. Only persons directly in front of the monitor can see the image on screen; others on either side of them see a darkened screen.
Buy online:
🛒 https://ali.ski/-mNAQ
#laptop #privacy
21 579
EvilnoVNC
A Ready to go Phishing Platform.
Unlike other phishing techniques, EvilnoVNC allows 2FA bypassing by using a real browser over a noVNC connection.
In addition, this tool allows us to see in real time all of the victim's actions, access to their downloaded files and the entire browser profile, including cookies, saved passwords, browsing history and much more.
https://github.com/JoelGMSec/EvilnoVNC
Research:
https://darkbyte.net/robando-sesiones-y-bypasseando-2fa-con-evilnovnc/
21 579
Sim-Ba
Sim-Ba is an in-memory PE Loader designed to simulate the behaviour of Bazar Loader. It downloads the payload from C2 URL (http or https) and uses Process Hollowing method to inject downloaded PE into the new process created in suspended state.
Process Hollowing is already a well-known and commonly used injection technique by malware developers. Sim-Ba is a modified version of another Process Hollowing repository: idan1288/ProcessHollowing32-64
https://github.com/OccamsXor/sim-ba
21 579
Win32 Offensive Cheatsheet
Win32 and Kernel abusing techniques for pentesters & red-teamers
https://github.com/matthieu-hackwitharts/Win32_Offensive_Cheatsheet
t.me/hackgit
21 579
ToRat
A Cross Platform Remote Administration tool written in Go using Tor as its transport mechanism currently supporting Windows, Linux, MacOS clients.
https://github.com/lu4p/ToRat
21 579
Siofra
A tool designed to identify and exploit DLL hijacking vulnerabilities in Windows programs. It is able to simulate the Windows loader in order to give visibility into all of the dependencies (and corresponding vulnerabilities) of a PE on disk, or alternatively an image file in memory corresponding to an active process. More significantly, the tool has the ability to easily generate DLLs to exploit these types of vulnerabilities via PE infection with dynamic shellcode creation.
These infected DLLs retain the code (DllMain, exported functions) as well as the resources of a DLL to seamlessly preserve the functionality of the application loading them, while at the same time allowing the researcher to specify an executable payload to be either run as a separate process or loaded into the target as a module. Additionally, the tool contains automated methods of combining UAC auto-elevation criteria with the aforementioned functionality in order to scan for UAC bypass vulnerabilities.
https://github.com/Cybereason/siofra
21 579
Amlele Backdoor
Amlele Backdoor is One-Client Open Source Backdoor/Reverse-Shell For Each Linux And Windows Systems Made In Python3 Which Contains Limited Features.
Features:
▫️ Send Commands To A Client
▫️ Capture Screenshot
▫️ Windows Persistence
▫️ Download Files
▫️ Upload Files
▫️ Get The Current Working Directory
▫️ Get The Machine Infos
▫️ Download Files Over Internet
https://github.com/amaitou/4ML3L3-Backdoor
21 579
NetHunt
Local network recon tool, ipsweep extension.
▫️ scan address range in local network for active devices
▫️ config port scan for live hosts
https://github.com/Keyj33k/NetHunt
21 579
BlackHeart
A simple python script to demonstrate reverse shell gaining without Microsoft Defender restrictions.
https://github.com/CYB3RMX/BlackHeart
t.me/hackgit
21 579
Laika
Cross-platform RAT, written in Modern C.
A simple cross-platform Remote Access Toolkit stack for educational purposes. It allows encrypted communication across a custom binary protocol.
The bot client supports both Windows & Linux environments, while the shell & CNC server specifically target Linux environments. Laika is meant to be small and discreet, Laika believes in hiding in plain sight.
https://github.com/CPunch/Laika
21 579
torsh
A tool that simplifies the creation of a reverse shell. It operates over Tor network. This is great for anonymity and also helps with the setup. You don't need to do port forwarding or any other kind of presetup. It just works!
Features:
▫️ Creating reverse shell as a Tor hidden service
▫️ End to end Tor connection (no Tor2Web etc...)
▫️ No need for port forwarding
▫️ Easy & Quick to use!
https://github.com/pisoj/torsh
21 579
penelope
Penelope is an advanced shell handler. Its main aim is to replace netcat as shell catcher during exploiting RCE vulnerabilities. It works on Linux and macOS and the only requirement is Python >= 3.6. It is a single script, it needs no installation or any 3rd party dependency and hopefully it will stay that way.
Among the main features are:
▫️ Auto-upgrade shells to PTY (auto-resize included)
▫️ Logging interaction with the targets
▫️ Download files from targets
▫️ Upload files to targets
▫️ Upload preset scripts to targets
▫️ Spawn shells on multiple tabs and/or hosts
▫️ Maintain X amount of active shells per host no matter what
▫️ Multiple sessions
▫️ Multiple listeners
▫️ Can be imported by python3 exploits and get shell on the same terminal (see Extras)
Penelope can work in conjunction with metasploit exploits by disabling the default handler with
set DisablePayloadHandler True
https://github.com/brightio/penelope
t.me/hackgit21 579
ReversePowerShell
Functions that can be used to gain Reverse Shells with PowerShell. Invoke-ReversePowerShell function can be used to connect to Start-Listener as well as #netcat and Metasploit modules or whatever other listeners you use.
This is a PowerShell module meaning it only contains functions/cmdlets to be imported into a PowerShell session. If you wish to execute one of the commands whenever the file is run just add the command you wish to execute to the bottom of the file.
https://github.com/tobor88/ReversePowerShell
t.me/hackgit
21 579
HardeningKitty
This is the stable version of HardeningKitty from the Windows Hardening Project by Michael Schneider. The stable version of HardeningKitty is signed with the code signing certificate of scip AG. Since this is the stable version, we do not accept pull requests in this repo, please send them to the development repo.
HardeningKitty supports hardening of a Windows system. The configuration of the system is retrieved and assessed using a finding list. In addition, the system can be hardened according to predefined values. HardeningKitty reads settings from the registry and uses other modules to read configurations outside the registry.
The script was developed for English systems. It is possible that in other languages the analysis is incorrect. Please create an issue if this occurs.
https://github.com/scipag/HardeningKitty
t.me/hackgit
21 579
HTTP3-attacks (CVE-2022-30592)
The current repository serves the purpose of sharing the scripts we used for educational usage. These attacks were a part of our study, and were tested against 6 different QUIC-enabled servers (IIS, NGINX, LiteSpeed, Cloudflare, H2O, and Caddy) that were configured to communicate with HTTP/3. The http-stream script is the exploit of the CVE-2022-30592 issue that affected lsquic library. This script can also be exploited against Litespeed server.
https://github.com/efchatz/HTTP3-attacks
#cve
21 579
EntropyFix
A tool to reduce the entropy of your payload, It works By adding null bytes, in an ordered sequence: every 10 bytes it adds 5 null bytes.
https://github.com/ORCx41/EntropyFix
21 579
SentryPeer
Protect your SIP Servers from bad actors
SentryPeer® is a fraud detection tool. It lets bad actors try to make phone calls and saves the IP address they came from and number they tried to call. Those details can then be used to raise notifications at the service providers network and the next time a user/customer tries to call a collected number, you can act anyway you see fit.
https://github.com/SentryPeer/SentryPeer
21 579
Doldrums
A reverse engineering tool for Flutter apps targetting Android. Concretely, it is a parser and information extractor for the Flutter/Dart Android binary, conventionally named libapp.so, for all Dart version 2.10 releases. When run, it outputs a full dump of all classes present in the isolate snapshot.
https://github.com/rscloura/Doldrums
21 579
pip-audit
pip-audit is a tool for scanning Python environments for packages with known vulnerabilities. It uses the Python Packaging Advisory Database (https://github.com/pypa/advisory-database) via the PyPI JSON API as a source of vulnerability reports.
This project is maintained in part by Trail of Bits with support from Google. This is not an official Google or Trail of Bits product.
https://github.com/pypa/pip-audit
