HackGit

CVE-2022-30190 Temporary Fix These are two Python scripts compiled to easily and quickly apply temporary protection against the CVE-2022-30190 vulnerability (Follina) Both can be programmed better, but this is just to implement it as quickly as possible and I did it with no much knowledge on Python, but the important is, it works! Hehe https://github.com/SrCroqueta/CVE-2022-30190_Temporary_Fix #Follina

​DalFox Powerful open source XSS scanning tool and parameter analyzer and utility that fast the process of detecting and verify XSS flaws. It comes with a powerful testing engine, many niche features for the cool hacker! https://github.com/hahwul/dalfox #web #xss

A Survey of Windows RPC Discovery Tools https://clearbluejar.github.io/posts/surveying-windows-rpc-discovery-tools #tools #offensive #security

Toxssin A POST-XSS exploitation tool. Penetration testing tool that automates the process of exploiting Cross-Site Scripting (XSS) vulnerabilities. It consists of an https server that works as an interpreter for the traffic generated by the malicious JavaScript payload that powers this tool (toxin.js). By default, toxssin intercepts: ▫️ cookies (if HttpOnly not present), ▫️ keystrokes, ▫️ paste events, ▫️ input change events, ▫️ file selections, ▫️ form submissions, ▫️ server responses, ▫️ table data (static as well as updates), Most importantly, toxssin: ▫️ attempts to maintain XSS persistence while the user browses the website by intercepting server responses and re-writing the document, ▫️ supports session management, meaning that, you can use it to exploit reflected as well as stored XSS, ▫️ automatically logs every session. https://github.com/t3l3machus/toxssin

​Micro Backdoor for Windows Micro Backdoor is C2 tool for Windows targets with easy customizable code base and small footprint. Micro Backdoor consists from server, client and dropper. It wasn't designed as replacement for your favorite post-exploitation tools but rather as really minimalistic thing with all of the basic features in less than 5000 lines of code, client DLL size is less than 20Kb without compression. https://github.com/Cr4sh/MicroBackdoor #remote

​Ffuf A fast web fuzzer written in Go Features: ▫️ Fast! ▫️ Allows fuzzing of HTTP header values, POST data, and different parts of URL, including GET parameter names and values ▫️ Silent mode (-s) for clean output that's easy to use in pipes to other processes. ▫️ Modularized architecture that allows integration with existing toolchains with reasonable effort ▫️ Easy-to-add filters and matchers (they are interoperable) Research: https://hakin9.org/ffuf-a-fast-web-fuzzer-written-in-go/ Demo: https://asciinema.org/a/211350 https://asciinema.org/a/211360 #web #best

​Aced Aced is a tool to parse and resolve a single targeted Active Directory principal's DACL. Aced will identify interesting inbound access allowed privileges against the targeted account, resolve the SIDS of the inbound permissions, and present that data to the operator. Additionally, the logging features of pyldapsearch have been integrated with Aced to log the targeted principal's LDAP attributes locally which can then be parsed by pyldapsearch's companion tool BOFHound to ingest the collected data into BloodHound. https://github.com/garrettfoster13/aced #ad

Ghost Framework Android post-exploitation framework that exploits the Android Debug Bridge to remotely access an Android device. https://github.com/EntySec/Ghost

HatSploit Framework Modular penetration testing platform that enables you to write, test, and execute exploit code. https://github.com/EntySec/HatSploit

​Turbo VPN Turbo VPN is a secure and fast VPN proxy to let you connect to unlimited free VPN servers with simple one tap. ▫️ Military-grade encryption ▫️ Bypass site-blocking to access any content you need. ▫️ Protect your privacy by surfing anonymously under WiFi hotspot. ▫️ Only one tap to connect and switch to any free VPN proxy fast and securely. ✅ Unlimited and free VPN The best unlimited free VPN proxy for android. You can enjoy unlimited free VPN service and free VPN proxy servers anytime, anywhere. ✅ Access websites with secure Turbo VPN Unblock sites and apps at super stable and fast VPN speed. Connect to Turbo VPN free vpn proxy servers, access geo-blocked content, forum, news, social network such as Twitter or Facebook, immediately. ✅ Anonymous connection by Turbo VPN Turbo VPN protects your network under WiFi hotspot or any network condition. You can browse anonymously and securely without being tracked. Military-grade AES 128-bit encryption to secure WiFi hotspot. IPsec protocols and OpenVPN protocols(UDP / TCP) to mask your online identity. Secure your internet connection and guard your sensitive data wherever you are. ✅ Streaming and gaming with super fast VPN Stream videos, live sports and TV shows on YouTube, Netflix without buffering. Listen to popular songs on any music player whenever you want. Improve your gaming experience with fast Turbo VPN servers. ✅ Turbo library is out now! Let's read all the free books together. Relax and immerse yourself in the most exciting and addictive stories. Discover free novels on Turbo anytime, anywhere. Turbo VPN puts free eBooks at your fingertips. Find your favorite genre to read now! ✅ User-friendly VPN experience One tap to connect to a free VPN proxy server. Turbo VPN works with WiFi, LTE, 3G, and all mobile data carriers. Get Turbo VPN | 65% Off the secure, fast and free Turbo VPN! Secure your online activities and enjoy your favorite sites now! #vpn

​Turbo VPN Turbo VPN is a secure and fast VPN proxy to let you connect to unlimited free VPN servers with simple one tap. ▫️ Unlimited and free VPN servers ▫️ Military-grade encryption ▫️ Bypass site-blocking to access any content you need. ▫️ Protect your privacy by surfing anonymously under WiFi hotspot. ▫️ Only one tap to connect and switch to any free VPN proxy fast and securely. ✅ Unlimited and free VPN The best unlimited free VPN proxy for android. You can enjoy unlimited free VPN service and free VPN proxy servers anytime, anywhere. ✅ Access websites with secure Turbo VPN Unblock sites and apps at super stable and fast VPN speed. Connect to Turbo VPN free vpn proxy servers, access geo-blocked content, forum, news, social network such as Twitter or Facebook, immediately. ✅ Anonymous connection by Turbo VPN Turbo VPN protects your network under WiFi hotspot or any network condition. You can browse anonymously and securely without being tracked. Military-grade AES 128-bit encryption to secure WiFi hotspot. IPsec protocols and OpenVPN protocols(UDP / TCP) to mask your online identity. Secure your internet connection and guard your sensitive data wherever you are. ✅ Streaming and gaming with super fast VPN Stream videos, live sports and TV shows on YouTube, Netflix without buffering. Listen to popular songs on any music player whenever you want. Improve your gaming experience with fast Turbo VPN servers. ✅ Turbo library is out now! Let's read all the free books together. Relax and immerse yourself in the most exciting and addictive stories. Discover free novels on Turbo anytime, anywhere. Turbo VPN puts free eBooks at your fingertips. Find your favorite genre to read now! ✅ User-friendly VPN experience One tap to connect to a free VPN proxy server. Turbo VPN works with WiFi, LTE, 3G, and all mobile data carriers. Get Turbo VPN | 65% Off the secure, fast and free Turbo VPN! Secure your online activities and enjoy your favorite sites now! #vpn

Pulsar Pulsar is a tool for data exfiltration and covert communication that enable you to create a secure data transfer, a bizarre chat or a network tunnel through different protocols, for example you can receive data from tcp connection and resend it to real destination through DNS packets 🎉 https://github.com/jacopodl/Pulsar

Reconnaissance Red Teaming reconnaissance Process   Table of Contents ▫️ What is Reconnaissance? -2 ▫️ MITRE ATT&CK Reconnaissance Techniques -3 ▫️ Passive Recon Techniques -5 3.1 Gathering Domain IP/DNS Information 3.2 Gathering Domain/Website Information 3.3 Gathering Employee Information ▫️ Passive Subdomain Enumeration -9 4.1 Passive Subdomain Enumeration with Sublist3r 4.2 Subdomain Enumeration with Google Dorks ▫️ Active Recon Techniques -10 5.1 DNS Zone Transfers 5.2 Subdomain Brute-force 5.3 Port Scanning 5.4 Directory Brute-Force 5.5 Website Vulnerability Scanning ▫️ Automated Recon Frameworks -14 6.1 Automated Recon with Sn1per 6.2 Automated Recon with OWASP Amass https://github.com/niraj98456/Reconnaissance #redteam

​confluencePot ConfluencePot is a simple #honeypot for the Atlassian Confluence unauthenticated and remote OGNL injection vulnerability (CVE-2022-26134). https://github.com/SIFalcon/confluencePot

DOMDig DOMDig is a DOM XSS scanner that runs inside the Chromium web browser and it can scan single page applications (SPA) recursively. Unlike other scanners, DOMDig can crawl any webapplication (including gmail) by keeping track of DOM modifications and XHR/fetch/websocket requests and it can simulate a real user interaction by firing events. During this process, XSS payloads are put into input fields and their execution is tracked in order to find injection points and the related URL modifications. It is based on htcrawl, a node library powerful enough to easily crawl a gmail account. KEY FEATURES ▫️ Runs inside a real browser (Chromium) ▫️ Recursive DOM crawling engine ▫️ Handles XHR, fetch, JSONP and websockets requests ▫️ Supports cookies, proxy, custom headers, http auth and more ▫️ Scriptable login sequences https://github.com/fcavallarin/domdig

​GoReplay Network monitoring tool which can record your live traffic and use it for shadowing, load testing, monitoring and detailed analysis. As your application grows, the effort required to test it also grows exponentially. GoReplay offers you the simple idea of reusing your existing traffic for testing, which makes it incredibly powerful. Our state of art technique allows you to analyze and record your application traffic without affecting it. This eliminates the risks that come with putting a third party component in the critical path. GoReplay increases your confidence in code deployments, configuration and infrastructure changes. GoReplay offers a unique approach for shadowing. Instead of being a proxy, GoReplay listens in the background for traffic on your network interfaces, requiring no changes in your production infrastructure, other than running GoReplay daemon on the same machine as your service. https://github.com/buger/goreplay

$donate

$Donate