HackGit
Kanalga Telegram’da o‘tish
The channel was created for cybersecurity specialists. • Offensive Security • RedTeam • Malware Research • BugBounty • OSINT • etc Disclaimer: t.me/hackgit/2082 Donations - Ads: t.me/hackgit/5423
Ko'proq ko'rsatish📈 Telegram kanali HackGit analitikasi
HackGit (@hackgit) Ingliz til segmentidagi kanali faol ishtirokchi. Hozirda hamjamiyat 21 579 obunachidan iborat bo'lib, Texnologiyalar & Aralashmalar toifasida 4 526-o'rinni va AQSH mintaqasida 1 853-o'rinni egallagan.
📊 Auditoriya ko‘rsatkichlari va dinamika
невідомо sanasidan buyon loyiha tez o‘sib, 21 579 obunachiga ega bo‘ldi.
02 Mart, 2025 dagi oxirgi ma’lumotlarga ko‘ra kanal barqaror faollikka ega. Oxirgi 30 kunda obunachilar soni 19 ga, so‘nggi 24 soatda esa 0 ga o‘zgardi va umumiy qamrov yuqori darajada qolmoqda.
- Tasdiqlash holati: Tasdiqlanmagan
- Jalb etish (ER): Auditoriya o‘rtacha 0% darajada jalb etiladi. Nashrdan keyingi dastlabki 24 soatda kontent odatda umumiy obunachilar sonining N/A% ini tashkil etuvchi reaksiyalarni to‘playdi.
- Post qamrovi: Har bir post o‘rtacha 0 marta ko‘riladi; birinchi sutkada odatda 0 ta ko‘rish yig‘iladi.
- Reaksiyalar va o‘zaro ta’sir: Auditoriya faol: har bir postga o‘rtacha 0 ta reaksiya keladi.
📝 Tavsif va kontent siyosati
Muallif resursni shaxsiy fikrni ifoda etish maydoni sifatida ta’riflaydi:
“The channel was created for cybersecurity specialists.
• Offensive Security
• RedTeam
• Malware Research
• BugBounty
• OSINT
• etc
Disclaimer:
t.me/hackgit/2082
Donations - Ads:
t.me/hackgit/5423”
Yuqori yangilanish chastotasi (oxirgi ma’lumot 11 Noyabr, 2026 da olingan) sababli kanal doimo dolzarb va katta qamrovli bo‘lib qoladi. Analitika auditoriya kontent bilan faol hamkorlik qilishini, uni Texnologiyalar & Aralashmalar toifasidagi muhim ta’sir nuqtasiga aylantirishini ko‘rsatadi.
21 579
Obunachilar
Ma'lumot yo'q24 soatlar
-37 kun
+1930 kun
Postlar arxiv
21 579
OffensiveNim
Experiments in weaponizing Nim for implant development and general offensive operations.
https://github.com/byt3bl33d3r/OffensiveNim
21 579
Apache APISIX Remote Code Execution (CVE-2022-24112) Exploit
An attacker can abuse the batch-requests plugin to send requests to bypass the IP restriction of Admin API. A default configuration of Apache APISIX (with default API key) is vulnerable to remote code execution. When the admin key was changed or the port of Admin API was changed to a port different from the data panel, the impact is lower. But there is still a risk to bypass the IP restriction of Apache APISIX's data panel.
There is a check in the batch-requests plugin which overrides the client IP with its real remote IP. But due to a bug in the code, this check can be bypassed.
https://github.com/M4xSec/Apache-APISIX-CVE-2022-24112
21 579
Amsi-Bypass-Powershell
This repo contains some Antimalware Scan Interface (AMSI) bypass / avoidance methods i found on different Blog Posts.
Most of the scripts are detected by AMSI itself. So you have to find the trigger and change the signature at the part via variable/function renaming, string replacement or encoding and decoding at runtime. Alternatively obfuscate them via ISESteroids and or Invoke-Obfuscation to get them working. You can also take a look at my blog post about manually changing the signature to get a valid bypass again.
https://github.com/S3cur3Th1sSh1t/Amsi-Bypass-Powershell
Source:
https://i.blackhat.com/Asia-22/Friday-Materials/AS-22-Korkos-AMSI-and-Bypass.pdf
21 579
IDiagnosticProfileUAC
Just another UAC bypass using auto-elevated COM object Virtual Factory for DiagCpl (12C21EA7-2EB8-4B55-9249-AC243DA8C666).
This COM object can be used to create instance of DiagnosticProfile (D0B7E02C-E1A3-11DC-81FF-001185AE5E76) COM object which exposes SaveDirectoryAsCab method that can be used to move arbitrary file in system32 directory.
This PoC copy user specified dll to C:\Windows\System32\wow64log.dll and trigger MicrosoftEdgeUpdate service by creating instance of Microsoft Edge Update Legacy On Demand COM object (A6B716CB-028B-404D-B72C-50E153DD68DA) which run in SYSTEM context and will load wow64log.dll.
https://github.com/Wh04m1001/IDiagnosticProfileUAC
Research:
https://halove23.blogspot.com/2021/03/google-update-service-being-scum.html
21 579
Black Widow
A collection of Script for Red Team & Incidence Response
https://github.com/Johnng007/Black-Widow
21 579
Async DNS Brute
A Python 3.5+ tool that uses asyncio to brute force domain names asynchronously.
https://github.com/blark/aiodnsbrute
21 579
node-Tor
Javascript open source implementation of the Tor protocol (The Onion Router) on server side and inside browsers
https://github.com/Ayms/node-Tor
21 579
Magisk
Magisk is a suite of open source software for customizing Android, supporting devices higher than Android 5.0.
Features:
▫️ MagiskSU: Provide root access for applications
▫️ Magisk Modules: Modify read-only partitions by installing modules
▫️ MagiskBoot: The most complete tool for unpacking and repacking Android boot images
▫️ Zygisk: Run code in every Android applications' processes
https://github.com/topjohnwu/Magisk
21 579
Androguard
Reverse engineering and pentesting of Android applications.
Features:
▫️ DEX, ODEX
▫️ APK
▫️ Android's binary xml
▫️ Android resources
▫️ Disassemble DEX/ODEX bytecodes
▫️ Basic Decompiler for DEX/ODEX files
https://github.com/androguard/androguard
21 579
node-Tor
Javascript open source implementation of the Tor protocol The Onion Router on server side and inside browsers
https://github.com/Ayms/node-Tor
#privacy #tor #js
21 579
Hunter
Pentesting Assistant: Information Gathering And More.
▫️ A easy to use pentesting toolkit for information gathering and more
▫️ Written with Python 3.10.4 for Linux
https://github.com/Keyj33k/Hunter-Toolkit
21 579
Spring4shell CVE-2022-22965
A python implementation of CVE-2022-22965 that provides a prompt to the user in the style of an ssh session.
This script is designed to be easy to understand and execute, with both readability and accessbility - depending on the user's choice. Designed for exploiting the vulnerability on tomcat servers.
The fileDateFormat field on the server will be set and unset as part of the script which allows the exploit to be run multiple times. Cleanup may be required.
https://github.com/p1ckzi/CVE-2022-22965
Research:
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-22965
