HackGit
Kanalga Telegram’da o‘tish
The channel was created for cybersecurity specialists. • Offensive Security • RedTeam • Malware Research • BugBounty • OSINT • etc Disclaimer: t.me/hackgit/2082 Donations - Ads: t.me/hackgit/5423
Ko'proq ko'rsatish📈 Telegram kanali HackGit analitikasi
HackGit (@hackgit) Ingliz til segmentidagi kanali faol ishtirokchi. Hozirda hamjamiyat 21 579 obunachidan iborat bo'lib, Texnologiyalar & Aralashmalar toifasida 4 526-o'rinni va AQSH mintaqasida 1 853-o'rinni egallagan.
📊 Auditoriya ko‘rsatkichlari va dinamika
невідомо sanasidan buyon loyiha tez o‘sib, 21 579 obunachiga ega bo‘ldi.
02 Mart, 2025 dagi oxirgi ma’lumotlarga ko‘ra kanal barqaror faollikka ega. Oxirgi 30 kunda obunachilar soni 19 ga, so‘nggi 24 soatda esa 0 ga o‘zgardi va umumiy qamrov yuqori darajada qolmoqda.
- Tasdiqlash holati: Tasdiqlanmagan
- Jalb etish (ER): Auditoriya o‘rtacha 0% darajada jalb etiladi. Nashrdan keyingi dastlabki 24 soatda kontent odatda umumiy obunachilar sonining N/A% ini tashkil etuvchi reaksiyalarni to‘playdi.
- Post qamrovi: Har bir post o‘rtacha 0 marta ko‘riladi; birinchi sutkada odatda 0 ta ko‘rish yig‘iladi.
- Reaksiyalar va o‘zaro ta’sir: Auditoriya faol: har bir postga o‘rtacha 0 ta reaksiya keladi.
📝 Tavsif va kontent siyosati
Muallif resursni shaxsiy fikrni ifoda etish maydoni sifatida ta’riflaydi:
“The channel was created for cybersecurity specialists.
• Offensive Security
• RedTeam
• Malware Research
• BugBounty
• OSINT
• etc
Disclaimer:
t.me/hackgit/2082
Donations - Ads:
t.me/hackgit/5423”
Yuqori yangilanish chastotasi (oxirgi ma’lumot 03 Mart, 2025 da olingan) sababli kanal doimo dolzarb va katta qamrovli bo‘lib qoladi. Analitika auditoriya kontent bilan faol hamkorlik qilishini, uni Texnologiyalar & Aralashmalar toifasidagi muhim ta’sir nuqtasiga aylantirishini ko‘rsatadi.
21 579
Obunachilar
Ma'lumot yo'q24 soatlar
-37 kun
+1930 kun
Postlar arxiv
21 579
CVE-2022-45472
The CAE Learning Space Enterprise management software is vulnerable to a DOM Based XSS attack.
A DOM Based XSS attack is when a user sends an executed payload to the host and as a result, it modifies the DOM environment in the victim's browser from the original client-side script.
This attack was found through manually searching burp requests, running tested parameters through a XSS finder tool called Dalfox, then verifying the DOM of the affected host to view the behavior of the application.
https://github.com/nicbrinkley/CVE-2022-45472
#cve
21 579
wireguard-initramfs
Use dropbear over wireguard.
Enables wireguard networking during kernel boot, before encrypted partitions are mounted. Combined with dropbear this can enable FULLY ENCRYPTED remote booting without storing key material or exposing ports on the remote network. An Internet connection simply needs to exist that can reach the wireguard server endpoint.
Normal dropbear connections and DNS resolution can be used to find wireguard endpoints. This essentially enables the creation of a fully encrypted remote managed node, with the ability to prevent all local access.
https://github.com/r-pufky/wireguard-initramfs
21 579
reconX
ReconX It An Automation Script For Bug Bounty Hunter This tool allows you to gather some information that should help you identify what to do next and where to look and save your time !
Features:
▫️ Subdomain enum
▫️ Port scan
▫️ Filter Subdomain and screenshot
▫️ Filter Intrested sub and ports
▫️ Collect ip from shodan
▫️ Find Admin Panels
▫️ Identify Technology
▫️ Parameter Discovery
▫️ Wayback history
▫️ Filter php,jsp,aspx,js file from wayback
▫️ Filter & Scan js file
▫️ Collect Api-Endpoint
▫️ Vulnerability Scan
▫️ Notify system
https://github.com/YazeedOliwah/reconX
21 579
CVE-2022-32060
An arbitrary file upload vulnerability in the Update Branding Settings component of Snipe-IT v6.0.2 allows attackers to execute arbitrary code via a crafted file.
We found a vulnerability file upload, when we upload malicious file at Update Branding Settings page.
https://github.com/bypazs/CVE-2022-32060
Details:
https://grimthereaperteam.medium.com/snipe-it-version-v6-0-2-file-upload-cross-site-scripting-b15becc1a5ea
#cve
21 579
stegoWiper
A powerful and flexible active attack for disrupting stegomalware
Over the last 10 years, many threat groups have employed stegomalware or other steganography-based techniques to attack organizations from all sectors and in all regions of the world. Some examples are: APT15/Vixen Panda, APT23/Tropic Trooper, APT29/Cozy Bear, APT32/OceanLotus, APT34/OilRig, APT37/ScarCruft, APT38/Lazarus Group, Duqu Group, Turla, Vawtrack, Powload, Lokibot, Ursnif, IceID, etc.
https://github.com/mindcrypt/stegowiper
21 579
Fuzzing Forum
This project aims at hosting tutorials, examples, discussions, research proposals, and other resources related to fuzzing.
https://github.com/google/fuzzing
21 579
sniffnet
Application to comfortably monitor your network traffic
Sniffnet is a simple yet insightful application to let you have a glance into your network traffic in a straightforward and appealing way
Multithreaded, cross-platform, reliable.
https://github.com/GyulyVGC/sniffnet
21 579
Zeek
An Open Source Network Security Monitoring Tool
Zeek (formerly Bro) is the world’s leading platform for network security monitoring.
Flexible, open source, and powered by defenders.
https://github.com/zeek/zeek
Website:
https://zeek.org/
21 579
Bug Bounty Platforms
Open-Sourced Collection of Bug Bounty Platforms
A ongoing community-powered collection of all known bug bounty platforms, vulnerability disclosure platforms, and crowdsourced security platforms currently active on the Internet.
https://github.com/disclose/bug-bounty-platforms
21 579
Face Recognition
Recognize and manipulate faces from Python or from the command line with the world's simplest face recognition library.
https://github.com/ageitgey/face_recognition
#OSINT
21 579
Kiwi TCMS
Kiwi TCMS is the leading open source test management system for both manual and automated testing. It features bug tracker integration, search pages, powerful access control, test automation framework plugins, visual reports and rich API layer.
Our mission is to transform the testing process by making it more organized, transparent & accountable for everyone on your team; to improve engineering productivity and participation in testing.
https://github.com/kiwitcms/kiwi
21 579
Change-Lockscreen
Change-Lockscreen is a tool to trigger network authentications as SYSTEM by changing the Windows lock screen image from the command line to perform privilege escalation attacks such as the one described in the post linked.
https://github.com/nccgroup/Change-Lockscreen
21 579
REcollapse
REcollapse is a helper tool for black-box regex fuzzing to bypass validations and discover normalizations in web applications.
It can also be helpful to bypass WAFs and weak vulnerability mitigations. For more information, take a look at the REcollapse blog post.
The goal of this tool is to generate payloads for testing. Actual fuzzing shall be done with other tools like Burp (intruder), ffuf, or similar.
https://github.com/0xacb/recollapse
21 579
dnssecuritytxt
A standard allowing organizations to nominate security contact points and policies via DNS TXT records.
https://github.com/disclose/dnssecuritytxt
21 579
Red-Team-Assessment
Important documents for you to start a Red Team management
▫️ Tools
▫️ Law Suit
▫️ Methodologies
▫️ Tips and Tricks
https://github.com/CyberSecurityUP/Red-Team-Management
21 579
TJ-OSINT-Notebook
This OSINT Notebook provides an overview of the tools, techniques, and resources that I use for a variety of situations for performing reconaissance and #OSINT operations.
This Notebook has helped me in many situations to learn more about OSINT and how to analyze the data that is out there on the internet.
Included in the notebook are three templates that you can copy, fill in, or repurpose depending on the information you need to document for the operations you are working on. These case templates helped me keep a track of things I found online depending on the situation that I was assigned to assess.
https://github.com/tjnull/TJ-OSINT-Notebook
#OSINT
21 579
osm-finder
One of the most prominent tools that assists in geolocating images using openstreetmap data is Overpass Turbo. This requires learning and using the Overpass Query Language and restricts your geolocation abilities to only what's permitted by the query language.
This tool attempts to make it easier for researchers to find locations with a simple click-and-drag interface. No need to learn a new query language. It also adds capabilities not present in existing tools, like the ability to search by the angle between roads, power lines, and railways.
This tool currently supports all highway, railway, and a couple power line (namely, 'line' and 'minor_line') types.
https://github.com/Xetnus/osm-finder
The UI is now accessible from anywhere on Netlify: https://osm-finder.netlify.app/
21 579
RedTeaming_CheatSheet
Pentesting / RedTeaming cheatsheet with all the commands and techniques I learned during my learning journey. Will keep it up to date. If you have any recommendations for courses or links or have any questions feel free to dm me on discord. 0xjs#9027
https://github.com/0xJs/RedTeaming_CheatSheet
21 579
451 Corporate Risk Miner
451 Corporate Risk Miner allows a user to navigate over different corporate ownership networks extracted from UK Companies House (UKCH) to identify and visualise those exhibiting risk signatures associated with financial crime. Example risk signatures include:
▫️ Cyclic ownership: measure of network interconnectedness (e.g. Company A owns Company B which owns Company C which owns Company A, or case when the same people direct multiple companies.)
▫️ Links to tax havens: Corporate networks which involve companies/people associated with tax haven or secrecy jurisdictions
▫️ Presence of proxy directors: Proxy directors are entities that have links to more than 50 companies.
▫️ Links to politically-exposed persons (PEPs)
▫️ Links to russian politicians
https://github.com/sahanmar/451
#OSINT
