HackGit
Kanalga Telegram’da o‘tish
The channel was created for cybersecurity specialists. • Offensive Security • RedTeam • Malware Research • BugBounty • OSINT • etc Disclaimer: t.me/hackgit/2082 Donations - Ads: t.me/hackgit/5423
Ko'proq ko'rsatish📈 Telegram kanali HackGit analitikasi
HackGit (@hackgit) Ingliz til segmentidagi kanali faol ishtirokchi. Hozirda hamjamiyat 21 579 obunachidan iborat bo'lib, Texnologiyalar & Aralashmalar toifasida 4 526-o'rinni va AQSH mintaqasida 1 853-o'rinni egallagan.
📊 Auditoriya ko‘rsatkichlari va dinamika
невідомо sanasidan buyon loyiha tez o‘sib, 21 579 obunachiga ega bo‘ldi.
02 Mart, 2025 dagi oxirgi ma’lumotlarga ko‘ra kanal barqaror faollikka ega. Oxirgi 30 kunda obunachilar soni 19 ga, so‘nggi 24 soatda esa 0 ga o‘zgardi va umumiy qamrov yuqori darajada qolmoqda.
- Tasdiqlash holati: Tasdiqlanmagan
- Jalb etish (ER): Auditoriya o‘rtacha 0% darajada jalb etiladi. Nashrdan keyingi dastlabki 24 soatda kontent odatda umumiy obunachilar sonining N/A% ini tashkil etuvchi reaksiyalarni to‘playdi.
- Post qamrovi: Har bir post o‘rtacha 0 marta ko‘riladi; birinchi sutkada odatda 0 ta ko‘rish yig‘iladi.
- Reaksiyalar va o‘zaro ta’sir: Auditoriya faol: har bir postga o‘rtacha 0 ta reaksiya keladi.
📝 Tavsif va kontent siyosati
Muallif resursni shaxsiy fikrni ifoda etish maydoni sifatida ta’riflaydi:
“The channel was created for cybersecurity specialists.
• Offensive Security
• RedTeam
• Malware Research
• BugBounty
• OSINT
• etc
Disclaimer:
t.me/hackgit/2082
Donations - Ads:
t.me/hackgit/5423”
Yuqori yangilanish chastotasi (oxirgi ma’lumot 11 Noyabr, 2026 da olingan) sababli kanal doimo dolzarb va katta qamrovli bo‘lib qoladi. Analitika auditoriya kontent bilan faol hamkorlik qilishini, uni Texnologiyalar & Aralashmalar toifasidagi muhim ta’sir nuqtasiga aylantirishini ko‘rsatadi.
21 579
Obunachilar
Ma'lumot yo'q24 soatlar
-37 kun
+1930 kun
Postlar arxiv
21 579
Dumpscan
Command-line tool to extract and dump secrets from kernel and Windows Minidump formats
https://github.com/daddycocoaman/dumpscan
@HackGit
21 579
Rönd
A lightweight container for distributed security policy evaluation.
Features:
▫️ Allow or reject request
▫️ Query generation during the request flow
▫️ Response body patching
https://github.com/rond-authz/rond
@HackGit
21 579
Awesome Hacker Search Engines
Search engines for different tasks: search exploits, attack surfaces, certificates, leaks credentials, source code repos and much more.
https://github.com/edoardottt/awesome-hacker-search-engines
#osint #infosec #cybersecurity
21 579
Cerbos
Painless access control for cloud-native applications
Cerbos helps you super-charge your authorization implementation by writing context-aware access control policies for your application resources.
Author access rules using an intuitive YAML configuration language, use your Git-ops infrastructure to test and deploy them and, make simple API requests to the Cerbos PDP to evaluate the policies and make dynamic access decisions.
https://github.com/cerbos/cerbos
@HackGit
21 579
PEResourceInject
A way to avoid using VirtualAllocEx/WriteProcessMemory to inject shellcode into a process. You need access to modify the target executable.
▫️ Write shellcode to the target's .rsrc as a bitmap using the UpdateResource APIs
▫️ Spawn the exe suspended
▫️ Calculate the shellcode location by parsing the PE header
▫️ VirtualProtectEx to RX
▫️ Get/SetThreadContext to execute
https://github.com/Wra7h/PEResourceInject
@HackGit
21 579
PoW Shield
Project dedicated to fighting #DDoS and spam with proof of work, featuring an additional WAF. Docker images are available for rapid and lightweight deployment.
Features:
▫️ Web Service Structure
▫️ Proxy Functionality
▫️ PoW Implementation
▫️ Dockerization
▫️ IP Blacklisting
▫️ Rate-limiting
▫️ Unit Testing
▫️ WAF Implementation
▫️ Multi-Instance Syncing (Redis)
https://github.com/RuiSiang/PoW-Shield
@HackGit
21 579
Repost from Pentesting Shop
DSTIKE WIFI Duck
This open source project aims to provide a user-friendly tool to learn about keystroke injection attacks. A microcontroller acts as a USB keyboard that is programmable over WiFi. It’s using the Ducky Script language that Hak5 introduced with the USB Rubber Ducky.
A keyboard is trusted by most operating systems by default, which enables for a variety of attacks. Humans might not type very fast, but an automated device like this can. It can open a terminal and mess with your computer in a matter of a milliseconds!
Spacehuhn has a lot of interesting projects, WiFi duck is a new version different from old WiFi ducky. For more details please check. Schematic pdf.
What makes it special?
▫️ 4MB Flash ESP-WROOM-02
▫️ Atmega32u4
▫️ IIC connection between ESP8266 and Atmega32u4
▫️ RGB LED
▫️ DIP Switch for different mode:
▫️ Arduino Flash Mode: 10101010
▫️ ESP8266 Flash Mode: 01011101
▫️ Work Mode: 10101101
🛒 https://bit.ly/3ngEDLR
#wifi #duck
21 579
CVE-2022-34305
Apache Tomcat Cross-Site Scripting Vulnerability
https://github.com/zeroc00I/CVE-2022-34305
#exploit
21 579
nim-loader
WIP shellcode loader in nim with EDR evasion techniques
https://github.com/adamsvoboda/nim-loader
@HackGit
21 579
ADFSRelay
This repository includes two utilities NTLMParse and #ADFSRelay. NTLMParse is a utility for decoding base64-encoded NTLM messages and printing information about the underlying properties and fields within the message.
Examining these NTLM messages is helpful when researching the behavior of a particular NTLM implementation. ADFSRelay is a proof of concept utility developed while researching the feasibility of NTLM relaying attacks targeting the ADFS service.
This utility can be leveraged to perform NTLM relaying attacks targeting ADFS. We have also released a blog post discussing ADFS relaying attacks in more detail [1].
https://github.com/praetorian-inc/ADFSRelay
Relaying to ADFS Attacks
https://www.praetorian.com/blog/relaying-to-adfs-attacks
21 579
kernel-mii
Cobalt Strike Beacon Object File foundation for kernel exploitation using CVE-2021-21551.
This is a Cobalt Strike (CS) Beacon Object File (BOF) which exploits CVE-2021-21551. It only overwrites the beacon process token with the system process token. But this BOF is mostly just a good foundation for further kernel exploitation via CS.
https://github.com/tijme/kernel-mii
#cobalt #cve
21 579
tlsx
A fast and configurable TLS grabber focused on TLS based data collection and analysis.
Features:
▫️ Fast And fully configurable TLS Connection
▫️ Multiple Modes for TLS Connection
▫️ Multiple TLS probes
▫️ Auto TLS Fallback for older TLS version
▫️ Pre Handshake TLS connection (early termination)
▫️ Customizable Cipher / SNI / TLS selection
▫️ TLS Misconfigurations
▫️ HOST, IP, URL and CIDR input
▫️ STD IN/OUT and TXT/JSON output
https://github.com/projectdiscovery/tlsx
21 579
Repost from Pentesting News
ldeep
In-depth LDAP enumeration utility.
https://github.com/franc-pentest/ldeep
Usage Example:
Enumerate ACEs on AdminSDHolder object
$ ldeep ldap -s 'ldap://10.10.13.37' -d megacorp -u j.doe -p 'Passw0rd!' -b 'CN=System,DC=megacorp,DC=local' sddl AdminSDHolder | jq '.[].nTSecurityDescriptor.DACL.ACEs[] | select(.Type | contains("Allowed")) | .SID + " :: " + .Type'
Convert SID to name
$ ldeep ldap -s 'ldap://10.10.13.37' -d megacorp -u j.doe -p 'Passw0rd!' from_sid <SID>#ad #ldap
21 579
EMUX
The EMUX Firmware Emulation Framework is a collection of scripts, kernels and filesystems to be used with QEMU to emulate ARM and MIPS Linux IoT devices. EMUX is aimed to facilitate IoT research by virtualising as much of the physical device as possible. It is the closest we can get to an actual IoT VM.
Devices successfully emulated with EMUX so far:
▫️ Damn Vulnerable ARM Router
▫️ Damn Vulnerable MIPS Router (Little Endian) [NEW!]
▫️ Damn Vulnerable MIPS Router (Big Endian) [NEW!]
▫️ Trivision NC227WF Wireless IP Camera
▫️ Tenda AC15 Wi-Fi Router (Github Docs)
▫️ Archer C9 Wi-Fi Router
https://github.com/therealsaumil/emux
@HackGit
21 579
ExtractedDefender
Just an attempt to group extracted data from Defender for research purposes.
https://github.com/HackingLZ/ExtractedDefender
@HackGit
21 579
firefucks.py
This is a tool for patching Firefox Web Browser into allowing unsigned addons.
Can be used as an apt hook.
Mozilla, requiring extensions signing and signing in and getting 2FA for AMO is not nice. 🖕🔥
This tool has been created as a response to:
▫️ will of Mozilla to disallow unsigned extensions in regular builds of Firefox;
▫️ will of Mozilla to disallow WebExtensions Experiments in regular builds of Firefox;
▫️ will of Mozilla to require authentication on AMO in order to sign extensions;
▫️ unwillingness of devs of some distros to provide "Developer Edition" builds of Firefox.
https://github.com/KOLANICH-tools/firefucks.py
@HackGit
21 579
AuthCov
Web app authorisation coverage scanning.
AuthCov crawls your web application using a Chrome headless browser while logged in as a pre-defined user. It intercepts and logs API requests as well as pages loaded during the crawling phase.
In the next phase it logs in under a different user account, the "intruder", and attempts to access each of one of the API requests or pages discovered previously. It repeats this step for each intruder user defined. Finally it generates a detailed report listing the resources discovered and whether or not they are accessible to the intruder users.
https://github.com/authcov/authcov
@HackGit
21 579
Norimaci
"Norimaci" is a simple and lightweight malware analysis sandbox for macOS. This tool was inspired by "Noriben". Norimaci uses the features of OpenBSM or Monitor.app to monitor macOS system activity instead of Sysinternals Process Monitor (procmon).
Norimaci consists of 3 Python scripts.
▫️ norimaci.py : Main script
▫️ openbsmconv.py : OpenBSM audit log converter
▫️ monitorappconv.py : Monitor.app data converter
OpenBSM is a framework to audit activities on macOS. Please see their web site for details.
Monitor.app is a free tool which is made by FireEye. Please see their web site for details.
https://github.com/mnrkbys/norimaci
@HackGit
21 579
TrelloC2
Simple C2 over Trello's API (Proof-of-Concept)
https://github.com/secmode/TrelloC2
@HackGit
