HackGit
Kanalga Telegram’da o‘tish
The channel was created for cybersecurity specialists. • Offensive Security • RedTeam • Malware Research • BugBounty • OSINT • etc Disclaimer: t.me/hackgit/2082 Donations - Ads: t.me/hackgit/5423
Ko'proq ko'rsatish📈 Telegram kanali HackGit analitikasi
HackGit (@hackgit) Ingliz til segmentidagi kanali faol ishtirokchi. Hozirda hamjamiyat 21 579 obunachidan iborat bo'lib, Texnologiyalar & Aralashmalar toifasida 4 526-o'rinni va AQSH mintaqasida 1 853-o'rinni egallagan.
📊 Auditoriya ko‘rsatkichlari va dinamika
невідомо sanasidan buyon loyiha tez o‘sib, 21 579 obunachiga ega bo‘ldi.
02 Mart, 2025 dagi oxirgi ma’lumotlarga ko‘ra kanal barqaror faollikka ega. Oxirgi 30 kunda obunachilar soni 19 ga, so‘nggi 24 soatda esa 0 ga o‘zgardi va umumiy qamrov yuqori darajada qolmoqda.
- Tasdiqlash holati: Tasdiqlanmagan
- Jalb etish (ER): Auditoriya o‘rtacha 0% darajada jalb etiladi. Nashrdan keyingi dastlabki 24 soatda kontent odatda umumiy obunachilar sonining N/A% ini tashkil etuvchi reaksiyalarni to‘playdi.
- Post qamrovi: Har bir post o‘rtacha 0 marta ko‘riladi; birinchi sutkada odatda 0 ta ko‘rish yig‘iladi.
- Reaksiyalar va o‘zaro ta’sir: Auditoriya faol: har bir postga o‘rtacha 0 ta reaksiya keladi.
📝 Tavsif va kontent siyosati
Muallif resursni shaxsiy fikrni ifoda etish maydoni sifatida ta’riflaydi:
“The channel was created for cybersecurity specialists.
• Offensive Security
• RedTeam
• Malware Research
• BugBounty
• OSINT
• etc
Disclaimer:
t.me/hackgit/2082
Donations - Ads:
t.me/hackgit/5423”
Yuqori yangilanish chastotasi (oxirgi ma’lumot 11 Noyabr, 2026 da olingan) sababli kanal doimo dolzarb va katta qamrovli bo‘lib qoladi. Analitika auditoriya kontent bilan faol hamkorlik qilishini, uni Texnologiyalar & Aralashmalar toifasidagi muhim ta’sir nuqtasiga aylantirishini ko‘rsatadi.
21 579
Obunachilar
Ma'lumot yo'q24 soatlar
-37 kun
+1930 kun
Postlar arxiv
21 579
ZoomPersistence
Zoom Persistence via Symlink Abuse
By default Zoom gets installed under a User's "AppData" directory (C:\Users{USER}\AppData\Roaming\Zoom) which is writeable by the user in question. If the Zoom executable located in the the Zoom "bin" directory gets replaced with another. All the Symbolic links (short cuts) will point to the new exe.
https://github.com/aahmad097/ZoomPersistence
21 579
Save the Environment
Many applications appear to rely on Environment Variables such as
%SYSTEMROOT% to load DLLs from protected locations.
By changing these variables on process level, it is possible to let a legitimate program load arbitrary DLLs.
https://github.com/wietze/windows-dll-env-hijacking
Research:
https://www.wietzebeukema.nl/blog/save-the-environment-variables
#maldev #dll #hijacking #environment21 579
BurpFeeder
Passive web scanner with backup-files finder, technologies detector (server, waf, ...) capabilities...
https://github.com/w00dyl3g/BurpFeeder
21 579
DoLTEst
A negative testing framework to uncover the non-standard-compliant behaviors in LTE implementations of end-user devices.
Despite numerous implementation vulnerabilities reported, a lack of negative testing in specification still leaves other implementation vulnerabilities unchecked.
It is an abbreviation for "Downlink LTE Test" or "(Let's) Do LTE Test" 😉.
https://github.com/SysSec-KAIST/DoLTEst
21 579
CrossC2 Kit
CrossC2Kit is an infiltration expansion around the Unix platform derived from CrossC2. Use Aggressor Script Open Source Script engine. It can be used to create automation to simulate the operation process of the Red Team and expand the CobaltStrike client.
CrossC2Kit is inherited from the original features of CobaltStrike, so the development and writing grammar still refer to the official documentation: https://trial.cobaltstrike.com/aggressor-script/index.html
https://github.com/CrossC2/CrossC2Kit
#redteam #cobalt
21 579
Repost from Pentesting News
Return to sender - Detecting kernel exploits with eBPF
https://github.com/Gui774ume/krie
#blackhat
21 579
The Way
The Way is a tool for unpacking, repacking, and creating malicious Cisco Adaptive Security Device Manager (ASDM) packages. ASDM is the Java-based administrative GUI for Adaptive Security Appliance (ASA) systems (e.g. firewalls and VPNs). The ASDM package is hosted on the ASA and sub-components are downloaded each time an administrator connects to the ASA via ASDM. An attacker that can plant a malicious ASDM package on the ASA can achieve code execution on administrator systems.
The vulnerability is the result of a few issues. Most specifically, malicious ASDM packages are possible due to the lack of package signing by Cisco. An attacker that can craft a proper package and computer a file hash can load arbitrary packages on the ASA. This has been assigned CVE-2022-20829.
https://github.com/jbaines-r7/theway
21 579
CVE-2022-27255
Realtek eCos SDK SIP ALG buffer overflow.
This repository contains de materials for the talk "Exploring the hidden attack surface of OEM IoT devices: pwning thousands of routers with a vulnerability in Realtek’s SDK for eCos OS.", which was presented at DEFCON30.
https://github.com/infobyte/cve-2022-27255
#cve
21 579
21 579
blackhat-arsenal-tools
Official Black Hat Arsenal Tools Github Repository
https://github.com/toolswatch/blackhat-arsenal-tools
21 579
wtfis
Passive host and domain name lookup tool for non-robots
wtfis is a commandline tool that gathers information about a domain or FQDN using various OSINT services. Unlike other tools of its kind, it's built specifically for human consumption, providing results that are pretty (YMMV) and easy to read and understand.
This tool assumes that you are using free tier / community level accounts, and so makes as few API calls as possible to minimize hitting quotas and rate limits.
https://github.com/pirxthepilot/wtfis
21 579
DEF CON 30 Workshop Mainframe Container
The scripts here are used to build the MVS 3.8j virtual mainframe for the DEFCON 30 workshop.
https://github.com/mainframed/DC30_Workshop
21 579
Burp2Malleable
This is a quick python utility I wrote to turn HTTP requests from burp suite into Cobalt Strike Malleable C2 profiles.
As of now, it currently does not perform custom mangling such as prepend, append and encodings, but rather generates the rough profile with a default encoding of mask+base64. You are expected to add your own prepends, appends and encoding if you want to make it more convincing. I am working on ways to automate this as well.
https://github.com/CodeXTF2/Burp2Malleable
21 579
STrace
Steve's Tracer. A DTrace on windows syscall hook reimplementation. Think of this like a patchguard compatible SSDT hook, but without hacks. This doesn't support SSSDT (win32k apis), as the DTrace system call APIs themselves do not support this additional table. Zw* kernel apis can be traced in addition to all usermode SSDT syscalls.
https://github.com/mandiant/STrace
21 579
ntlmscan
scan for NTLM directories
reliable targets are:
▫️ OWA servers
▫️ Skype for Business/Lync servers
▫️ Autodiscover servers (autodiscover.domain.com and lyncdiscover.domain.com)
▫️ ADFS servers
https://github.com/nyxgeek/ntlmscan
21 579
Power Pwn
Power Pwn is a demo showing how to repurpose Microsoft-trusted executables, service accounts and cloud services to power a malware operation.
This tool was released as part of DEFCON30. For more details, see No-Code Malware: Windows 11 At Your Service.
https://github.com/mbrg/power-pwn
21 579
ElfPack
ELF Binary Section Docking for Stageless Payload Delivery
https://github.com/xforcered/elfpack
21 579
Repost from Pentesting Shop
LILYGO® TTGO T-WATCH 2020 V2
LILYGO T-WATCH-2020 is based on a design concept that can be programmed, can be worn, can be networked, and can be interactive. Integrated ESP32 with WIFI/Bluetooth, easy to program and develop, and more convenient to connect to the Internet.
2D IPS 1.54 inch watch capacitive touch screen using OCA process, zinc alloy metal process frame, making the device structure more robust and beautiful. Suitable for wearable use, The sensitive capacitive touch screen makes human-computer interaction smoother.
V2 is used by replacing the MAX98357 speaker function of T-WATCH-2020 V1 with GPS and 13pin expansion TF card holder, and adding DRV2605L tactile vibration sensor, which can be programmed to set different vibration status reminders
Hackers-TTGO-Watch:
https://github.com/linuxthor/Hackers-TTGO-Watch
Buy online:
🛒 https://ali.ski/1k_Og
#watch #ttgo #esp32
21 579
TeamFiltration
A cross-platform framework for enumerating, spraying, exfiltration and backdooring O365 AAD accounts.
https://github.com/Flangvik/TeamFiltration
