HackGit
Kanalga Telegram’da o‘tish
The channel was created for cybersecurity specialists. • Offensive Security • RedTeam • Malware Research • BugBounty • OSINT • etc Disclaimer: t.me/hackgit/2082 Donations - Ads: t.me/hackgit/5423
Ko'proq ko'rsatish📈 Telegram kanali HackGit analitikasi
HackGit (@hackgit) Ingliz til segmentidagi kanali faol ishtirokchi. Hozirda hamjamiyat 21 579 obunachidan iborat bo'lib, Texnologiyalar & Aralashmalar toifasida 4 526-o'rinni va AQSH mintaqasida 1 853-o'rinni egallagan.
📊 Auditoriya ko‘rsatkichlari va dinamika
невідомо sanasidan buyon loyiha tez o‘sib, 21 579 obunachiga ega bo‘ldi.
02 Mart, 2025 dagi oxirgi ma’lumotlarga ko‘ra kanal barqaror faollikka ega. Oxirgi 30 kunda obunachilar soni 19 ga, so‘nggi 24 soatda esa 0 ga o‘zgardi va umumiy qamrov yuqori darajada qolmoqda.
- Tasdiqlash holati: Tasdiqlanmagan
- Jalb etish (ER): Auditoriya o‘rtacha 0% darajada jalb etiladi. Nashrdan keyingi dastlabki 24 soatda kontent odatda umumiy obunachilar sonining N/A% ini tashkil etuvchi reaksiyalarni to‘playdi.
- Post qamrovi: Har bir post o‘rtacha 0 marta ko‘riladi; birinchi sutkada odatda 0 ta ko‘rish yig‘iladi.
- Reaksiyalar va o‘zaro ta’sir: Auditoriya faol: har bir postga o‘rtacha 0 ta reaksiya keladi.
📝 Tavsif va kontent siyosati
Muallif resursni shaxsiy fikrni ifoda etish maydoni sifatida ta’riflaydi:
“The channel was created for cybersecurity specialists.
• Offensive Security
• RedTeam
• Malware Research
• BugBounty
• OSINT
• etc
Disclaimer:
t.me/hackgit/2082
Donations - Ads:
t.me/hackgit/5423”
Yuqori yangilanish chastotasi (oxirgi ma’lumot 11 Noyabr, 2026 da olingan) sababli kanal doimo dolzarb va katta qamrovli bo‘lib qoladi. Analitika auditoriya kontent bilan faol hamkorlik qilishini, uni Texnologiyalar & Aralashmalar toifasidagi muhim ta’sir nuqtasiga aylantirishini ko‘rsatadi.
21 579
Obunachilar
Ma'lumot yo'q24 soatlar
-37 kun
+1930 kun
Postlar arxiv
21 579
gpu poisoning
hide the payload inside the gpu memory.
after my older repo, in which i used the thread description to hide the payload, i wanted to find new way, so now im using nividia gpu memory using cuda api's to allocate, write, and free when there is no need for the payload to be found in memory.
https://gitlab.com/ORCA000/gp
21 579
ChopHound
Some scripts for dealing with any challenges that might arise when importing (large) JSON datasets into BloodHound.
https://github.com/bitsadmin/chophound
Blog post:
https://blog.bitsadmin.com/blog/dealing-with-large-bloodhound-datasets
#ad #bloodhound #cypher
21 579
Intrigue Core
Framework for discovering attack surface. It discovers security-relevant assets and exposures within the context of projects and can be used with a human-in-the-loop running individual tasks, and/or automated through the use of workflows.
With a flexible entity model and an incredibly deep enrichment system, it is the most full-featured attack surface discovery framework of its kind.
https://github.com/intrigueio/intrigue-core
@HackGit
21 579
Parsec
Open source Dropbox-like file sharing with full client encryption!
Parsec allows you to easily share your work and data in the cloud in total privacy thanks to end-to-end cryptographic security.
Features:
▫️ Works as a virtual drive on you computer. You can access and modify all the data stored in Parsec with your regular softwares just like you would on your local hard-drive.
▫️ Never lose any data. Synchronization with the remote server never destroy any data, hence you can browse data history and recover from any point in time.
▫️ Client-side cryptographic security. Data and metadata are only visible by you and the ones you choose to share with.
▫️ Cryptographic signature. Each modification is signed by it author making trivial to identify modifications.
▫️ Cloud provider agnostic. Server provides connectors for S3 and swift object storage.
▫️ Simplified enrollment. New user enrollment is simple as sharing a link and a token code.
https://github.com/Scille/parsec-cloud
Homepage:
https://parsec.cloud
Documentation:
https://parsec-cloud.readthedocs.org
21 579
FuzzSSH
Free software tool created to detect #SSH (protocol) vulnerabilities.
https://github.com/epsylon/fuzzssh
@HackGit
21 579
osi.ig
Open Source Information Instagram
▫️ The Instagram OSINT Tool gets a range of information from an Instagram account that you normally wouldn't be able to get from just looking at their profile
The information includes:
▫️ [ profile ] : user id, followers / following, number of uploads, profile img URL, business enum, external URL, joined Recently, etc
▫️ [ tags & mentions ] : most used hashtags and mentioned accounts
▫️ [ email ] : if any email is used anywhere it'll be displayed
▫️ [ posts ] : accessability caption, location, timestamp, caption, picture url, etc
✔️ ( yet not working correctly with posts instagram marks as 'sensitive cotent' )
https://github.com/th3unkn0n/osi.ig
@HackGit
21 579
Repost from Pentesting Shop
BadUSB with MicroSD
This is one of the last developments related to rubberducky or badusb devices. This device is based on the ATMEGA32U4 microprocessor which is able to emulate many USB modes like HID, used for injecting key presses to the target system.
The main processor is based on Arduino Leonardo R3 development board and the improvement is that a microSD card slot is included to allow storing many different payloads. The microSD card has to be FAT32 formatted in order to be recognized.
You can find the firmware and firmware instructions here as well as watch the video.
Buy online:
🛒 https://bit.ly/3HV8UJM
#usb #badusb
21 579
IYPS
A password strength test app with strength, estimated crack times, warnings and suggestions to help make better passwords.
Features:
▫️ Fully open source
▫️ Material design
▫️ Completely offline
▫️ No permissions needed
▫️ Works on Android 6.0 and above devices
▫️ Supports both light and dark theme
▫️ No ads
▫️ No collection of personal data
▫️ Supported languages: English, Dutch, French, German, Italian, Japanese
https://github.com/the-weird-aquarian/IYPS
@HackGit
21 579
Fuzzuli
A url fuzzing tool that aims to find critical backup files by creating a dynamic wordlist based on the domain.
https://github.com/musana/fuzzuli
@HackGit
21 579
kernel-mii
Cobalt Strike Beacon Object File foundation for kernel exploitation using CVE-2021-21551.
This is a #Cobalt Strike (CS) Beacon Object File (BOF) which exploits CVE-2021-21551. It only overwrites the beacon process token with the system process token. But this BOF is mostly just a good foundation for further kernel exploitation via CS.
https://github.com/NorthwaveSecurity/kernel-mii
@HackGit
21 579
Scout
URL fuzzer and spider for discovering undisclosed VHOSTS, files and directories on a web server.
https://github.com/liamg/scout
@HackGit
21 579
Chrome-Android-and-Windows-0day-RCE-SBX
https://github.com/emredavut/Chrome-Android-and-Windows-0day-RCE-SBX
Research:
https://blog.google/threat-analysis-group/new-campaign-targeting-security-researchers/
21 579
Zena
Stored #XSS to #RCE #Exploit #POC
Exploit POC for Rocket Software's Zena application v. 4.2.1 - Stored XSS to RCE
CVE-2021-45025
CVE-2021-45026
POC Process:
▫️ Logs into Zena's webconfig page using default credentials
▫️ Drops Stored XSS payload
▫️ Payload needs to be triggered by someone navigating to the webconfig page
▫️ Triggered payload uses REST API backend of Zena to find an agent and build a Task for that agent
▫️ Task is then triggered for agent thus executing the specified command
https://github.com/JetP1ane/Zena
CookieMonsteRCE - XSS to RCE Exploitation in Zena 4.2.1
https://phoenix-sec.io/2022/06/17/Zena-CookieMonsteRCE.html
#exploit
21 579
Dismember
Dismember is a command-line toolkit for Linux that can be used to scan the memory of all processes (or particular ones) for common secrets and custom regular expressions, among other things.
It will eventually become a full /proc toolkit.
https://github.com/liamg/dismember
@HackGit
21 579
Astra
Astra finds urls, endpoints, aws buckets, api keys, tokens, etc from a given url/s. It combines the paths and endpoints with the given domain and gives full URL. We can use it on js, html, etc files. Astra uses asynchronous method to fetch URLs using python's aiohttp and asyncio.
Its a combination of linkfinder and secretfinder. Uses Regex's from linkfinder, secretfinder and nuclei templates. Although None of them worked exactly because python's regex r way different. So basically everyone of them is modified by me.
https://github.com/Sachin-v3rma/Astra
@HackGit
21 579
Sealighter
Easy ETW Tracing for Security Research
Features:
▫️ Subscribe to multiple ETW and WPP Providers at once
▫️ Automatically parse events into JSON without needing to know format
▫️ Robust Event filtering including filter chaining and filter negation
▫️ Output to Standard out, File, or Windows Event Log (to be ingested by other tools)
▫️ Get event stack traces
▫️ Configurable Buffering many events in a time period into one with a count, to reduce the number of events generated
https://github.com/pathtofile/Sealighter
21 579
Repost from Pentesting News
A Few Ways to Get TrustedInstaller Privileges
GetTrustedInstaller
Make an executable run with TrustedInstaller permissions under SYSTEM account.
https://github.com/rara64/GetTrustedInstaller
NtObjectManager
This module adds a provider and cmdlets to access the NT object manager namespace.
Example. Apply TrustedInstaller impersonation token to the current PowerShell process:
Install-Module -Name NtObjectManager -Confirm:$false Restart-Service TrustedInstaller $procId = (Get-Process TrustedInstaller).Id $token = Get-NtTokenFromProcess -ProcessId $procId $current = Get-NtThread -Current -PseudoHandle $ctx = $current.Impersonate($token) $impToken = Get-NtToken -Impersonation $impToken.Groupshttps://github.com/googleprojectzero/sandbox-attacksurface-analysis-tools/tree/main/NtObjectManager #localsystem #trustedinstaller
21 579
resolvers.txt
Fresh list of periodically validated public #DNS resolvers.
https://github.com/janmasarik/resolvers
@HackGit
21 579
ShoMon
ShoMon is a Shodan alert feeder for TheHive written in GoLang. With version 2.0, it is more powerful than ever!
https://github.com/KaanSK/shomon
@HackGit
