HackGit
Kanalga Telegram’da o‘tish
The channel was created for cybersecurity specialists. • Offensive Security • RedTeam • Malware Research • BugBounty • OSINT • etc Disclaimer: t.me/hackgit/2082 Donations - Ads: t.me/hackgit/5423
Ko'proq ko'rsatish📈 Telegram kanali HackGit analitikasi
HackGit (@hackgit) Ingliz til segmentidagi kanali faol ishtirokchi. Hozirda hamjamiyat 21 579 obunachidan iborat bo'lib, Texnologiyalar & Aralashmalar toifasida 4 526-o'rinni va AQSH mintaqasida 1 853-o'rinni egallagan.
📊 Auditoriya ko‘rsatkichlari va dinamika
невідомо sanasidan buyon loyiha tez o‘sib, 21 579 obunachiga ega bo‘ldi.
02 Mart, 2025 dagi oxirgi ma’lumotlarga ko‘ra kanal barqaror faollikka ega. Oxirgi 30 kunda obunachilar soni 19 ga, so‘nggi 24 soatda esa 0 ga o‘zgardi va umumiy qamrov yuqori darajada qolmoqda.
- Tasdiqlash holati: Tasdiqlanmagan
- Jalb etish (ER): Auditoriya o‘rtacha 0% darajada jalb etiladi. Nashrdan keyingi dastlabki 24 soatda kontent odatda umumiy obunachilar sonining N/A% ini tashkil etuvchi reaksiyalarni to‘playdi.
- Post qamrovi: Har bir post o‘rtacha 0 marta ko‘riladi; birinchi sutkada odatda 0 ta ko‘rish yig‘iladi.
- Reaksiyalar va o‘zaro ta’sir: Auditoriya faol: har bir postga o‘rtacha 0 ta reaksiya keladi.
📝 Tavsif va kontent siyosati
Muallif resursni shaxsiy fikrni ifoda etish maydoni sifatida ta’riflaydi:
“The channel was created for cybersecurity specialists.
• Offensive Security
• RedTeam
• Malware Research
• BugBounty
• OSINT
• etc
Disclaimer:
t.me/hackgit/2082
Donations - Ads:
t.me/hackgit/5423”
Yuqori yangilanish chastotasi (oxirgi ma’lumot 03 Mart, 2025 da olingan) sababli kanal doimo dolzarb va katta qamrovli bo‘lib qoladi. Analitika auditoriya kontent bilan faol hamkorlik qilishini, uni Texnologiyalar & Aralashmalar toifasidagi muhim ta’sir nuqtasiga aylantirishini ko‘rsatadi.
21 579
Obunachilar
Ma'lumot yo'q24 soatlar
-37 kun
+1930 kun
Postlar arxiv
21 579
ESP32 Linux WiFi OTA Crasher
This is a small POC running on an ESP32, exploiting CVE-2022-42722 to crash Linux devices over the air.
The exact config I tested (works reliably):
▫️ ESP32-WROOM-32D board
▫️ Linux 5.15.0-48-generic #54~20.04.1-Ubuntu SMP
https://github.com/jo-m/linux-wifi-ota-crash
21 579
IFaultrepElevatedDataCollectionUAC
PoC for UAC bypass using arbitrary file delete in auto-elevated IFaultrepElevatedDataCollection COM object. Arbitrary file delete is abused to get SYSTEM shell using method described here
This PoC will just execute cmd.exe as system so in order to performe other actions such as executing different binary new RBS file should be created (using wix or other tools).
If you want to test this PoC it is the best to do it on system with minimum of 4 processor cores.
https://github.com/Wh04m1001/IFaultrepElevatedDataCollectionUAC
21 579
NoRunPI
Run Your Payload Without Running Your Payload
Since "SettingSyncHost.exe -Embedding" Runs a Thread On "SHCore.dll!Ordinal172+0x100", We can hijack the flow before this thread start, to do that:
▫️ Load shcore.dll to calculate the thread's entry
▫️ Create "SettingSyncHost.exe -Embedding" Process
▫️ Wait for ~ 5 ms ~ just make sure that the newly created process loads shcore.dll [NOTE ON THIS IN THE CODE]
▫️ suspend the process
▫️ inject the payload to the calculated address
▫️ resume the process
▫️ $$
https://github.com/ORCx41/NoRunPI
21 579
CloudFlair
CloudFlair is a tool to find origin servers of websites protected by CloudFlare who are publicly exposed and don't restrict network access to the CloudFlare IP ranges as they should.
https://github.com/christophetd/CloudFlair
Details:
https://blog.christophetd.fr/bypassing-cloudflare-using-internet-wide-scan-data/
21 579
XorStringsNET
A tool for simple and quick XOR based string encryption of .NET binaries
XORStrings implements a simple XOR based cipher, I call RXOR. RXOR does not only encrypt the string but also reverses its character order. Each string is encrypted with a unique key. The arguments used by the decryption routine are also XOR encrypted.
https://github.com/dr4k0nia/XorStringsNET
21 579
SteaLinG v0.3
The SteaLinG is an open-source penetration testing framework designed for social engineering After the hack, you can upload it to the victim's device and run it
https://github.com/De3vil/SteaLinG
21 579
Repost from Pentesting Shop
TicWatch Pro
Smart watch with official Kali NetHunter support.
What is Kali NetHunter?
Kali NetHunter is an Android ROM overlay that turns an ordinary phone into the ultimate Mobile Penetration Testing Platform. Now it's available for your smartwatch with some limitations.
The overlay includes a custom kernel, a Kali Linux chroot, an accompanying Android application, which allows for easier interaction with various security tools and attacks.
Beyond the penetration testing tools arsenal within Kali Linux, NetHunter also supports several additional classes, such as HID Keyboard Attacks, BadUSB attacks, WPS attacks, and much more.
NetHunter is an open-source project developed by Offensive Security and the community.
Installing NetHunter On the TicWatch Pro:
https://www.kali.org/docs/nethunter/installing-nethunter-on-the-ticwatch-pro/
Buy online:
🛒 https://ali.ski/Wtihm (aliexpress)
🛒 https://amzn.to/3CCtooj (amazon)
#watch #kali
21 579
The Soaring Eagle C2
I developed this tool for whoever wants to learn the basics regarding C2 and Malware Development, it is not intended to be used in real world scenarios and engagements you will get caught guaranteed, I developed it for learning not evasion.
https://github.com/ItsCyberAli/The-Soaring-Eagle
21 579
CVE-2021-46422
Telesquare SDT-CW3B1 - OS command injection vulnerability
https://github.com/Awei507/CVE-2021-46422
#cve
21 579
Ghauri
An advanced cross-platform tool that automates the process of detecting and exploiting SQL injection security flaws
https://github.com/r0oth3x49/ghauri
21 579
CVE-2022-41852
Remote Code Execution in JXPath Library (CVE-2022-41852) Proof of Concept
https://github.com/Warxim/CVE-2022-41852
#cve
21 579
phomber
A Infomation Grathering tool that reverse search phone numbers and get their details !
https://github.com/s41r4j/phomber
21 579
osintui
Open Source Intelligence Terminal User Interface
https://github.com/wssheldon/osintui
#OSINT
21 579
csdroid
Cobalts Srike mobile client, cobaltstrike mobile version, cs mobile version, cobaltstrike android.
https://github.com/linshaoSec/csdroid
t.me/hackgit
21 579
Repost from Pentesting Shop
WiFi Pineapple Mark VII by Hak5
The Hak5 WiFi Pineapple is a highly advanced WiFi auditing and MITM platform. The original "RougeAP" device - the WiFi Pineapple provides an end-to-end workflow to bring WiFi clients from their trusted network to your rouge network.
Hak5's latest generation V7 brings sees updates in three key area: performance, management tools and framework upgrades.
The PineAP suite is a cross-platform control panel for the WiFi Pineapple devices, providing fine-grained control over all elements of your audit.
The elegance of the WiFi Pineapple Platform is in its simplicity. Previously onerous, inefficient and prone to collateral damage - WiFi Auditing and Offensive Operations are now highly targeted, covert and very simple.
Advanced mitm attacks: Perfectly mimicks target networks, allowing for seamless client capture via the highly targeted deAuth mechanisms. Once captured, all standard network vectors are available: DNSSpoofing, Packet Capture, etc.
Wifi reconnaissance: Covertly discover, visualise and map WiFi networks and client hierarchies. Build lists of existing networks, and even client historical SSID connections. Continuously scan, add notes, filter clients, networks, logs and more.
Automated wifi infiltration: Capture and pipe WiFi Encryption credentials in pcap / hashcat or JTR formats. WEP, WPA & WPA Enterprise.
Highly targeted, highly covert: Keep your "Get Out of Jail Free" letter firmly in your pocket. The PineAP suite allows for fine-grained, highly targeted actions, ensuring no detection and no collateral damage.
Buy online:
🛒 https://ali.ski/aRCSNt (aliexpress)
🛒 https://amzn.to/3VxMHbd (amazon)
#pineapple #wifi
21 579
Locksmith
A tool to identify and remediate common misconfigurations in Active Directory Certificate Services
https://github.com/TrimarcJake/Locksmith
21 579
RedEye
RedEye is an open-source analytic tool developed by CISA and DOE’s Pacific Northwest National Laboratory to assist Red Teams with visualizing and reporting command and control activities. This tool, released in October 2022 on GitHub, allows an operator to assess and display complex data, evaluate mitigation strategies, and enable effective decision making in response to a Red Team assessment.
The tool parses logs, such as those from Cobalt Strike, and presents the data in an easily digestible format. The users can then tag and add comments to activities displayed within the tool. The operators can use the RedEye’s presentation mode to present findings and workflow to stakeholders.
https://github.com/cisagov/RedEye
21 579
matano
Matano is an open source security lake platform for AWS. It lets you ingest petabytes of security and log data from various sources, store and query them in an open Apache Iceberg data lake, and create Python detections as code for realtime alerting. Matano is fully serverless and designed specifically for AWS and focuses on enabling high scale, low cost, and zero-ops. Matano deploys fully into your AWS account.
https://github.com/matanolabs/matano
21 579
PsyloDbg
PsyloDbg is a very simple Windows Debugger that currently only monitor for debug events:
▫️ Exception
▫️ Create Thread
▫️ Create Process
▫️ Exit Thread
▫️ Exit Process
▫️ Load DLL
▫️ Unload DLL
▫️ Debug String
▫️ RIP
https://github.com/DarkCoderSc/PsyloDbg
