HackGit
Kanalga Telegram’da o‘tish
The channel was created for cybersecurity specialists. • Offensive Security • RedTeam • Malware Research • BugBounty • OSINT • etc Disclaimer: t.me/hackgit/2082 Donations - Ads: t.me/hackgit/5423
Ko'proq ko'rsatish📈 Telegram kanali HackGit analitikasi
HackGit (@hackgit) Ingliz til segmentidagi kanali faol ishtirokchi. Hozirda hamjamiyat 21 579 obunachidan iborat bo'lib, Texnologiyalar & Aralashmalar toifasida 4 526-o'rinni va AQSH mintaqasida 1 853-o'rinni egallagan.
📊 Auditoriya ko‘rsatkichlari va dinamika
невідомо sanasidan buyon loyiha tez o‘sib, 21 579 obunachiga ega bo‘ldi.
02 Mart, 2025 dagi oxirgi ma’lumotlarga ko‘ra kanal barqaror faollikka ega. Oxirgi 30 kunda obunachilar soni 19 ga, so‘nggi 24 soatda esa 0 ga o‘zgardi va umumiy qamrov yuqori darajada qolmoqda.
- Tasdiqlash holati: Tasdiqlanmagan
- Jalb etish (ER): Auditoriya o‘rtacha 0% darajada jalb etiladi. Nashrdan keyingi dastlabki 24 soatda kontent odatda umumiy obunachilar sonining N/A% ini tashkil etuvchi reaksiyalarni to‘playdi.
- Post qamrovi: Har bir post o‘rtacha 0 marta ko‘riladi; birinchi sutkada odatda 0 ta ko‘rish yig‘iladi.
- Reaksiyalar va o‘zaro ta’sir: Auditoriya faol: har bir postga o‘rtacha 0 ta reaksiya keladi.
📝 Tavsif va kontent siyosati
Muallif resursni shaxsiy fikrni ifoda etish maydoni sifatida ta’riflaydi:
“The channel was created for cybersecurity specialists.
• Offensive Security
• RedTeam
• Malware Research
• BugBounty
• OSINT
• etc
Disclaimer:
t.me/hackgit/2082
Donations - Ads:
t.me/hackgit/5423”
Yuqori yangilanish chastotasi (oxirgi ma’lumot 11 Noyabr, 2026 da olingan) sababli kanal doimo dolzarb va katta qamrovli bo‘lib qoladi. Analitika auditoriya kontent bilan faol hamkorlik qilishini, uni Texnologiyalar & Aralashmalar toifasidagi muhim ta’sir nuqtasiga aylantirishini ko‘rsatadi.
21 579
Obunachilar
Ma'lumot yo'q24 soatlar
-37 kun
+1930 kun
Postlar arxiv
21 579
phoneinfoga
Advanced information gathering & OSINT framework for phone numbers
PhoneInfoga is one of the most advanced tools to scan international phone numbers. It allows you to first gather standard information such as country, area, carrier and line type on any international phone number, then search for footprints on search engines to try to find the VoIP provider or identify the owner.
Features:
▫️ Check if phone number exists and has connectivity status with HLR lookups
▫️ Gather standard informations such as country, line type and carrier
▫️ OSINT footprinting using external APIs, Google Hacking, phone books & search engines
▫️ Check for reputation reports, social media, disposable numbers and more
▫️ Use the graphical user interface to run scans from the browser
▫️ Programmatic usage with the REST API and Go modules
https://github.com/sundowndev/PhoneInfoga
#osint #best
21 579
CVE-2022-24342
JetBrains TeamCity - account takeover via CSRF in GitHub authentication (PoC)
https://github.com/yuriisanin/CVE-2022-24342
#cve #poc
21 579
VoIP Caller by 1vere$k
This is simple 5060 port exploit that calls to a receiver VoIP device with pre-defined phrase.
The app establishes a TCP connection and write a VoIP Payload with the INVITE method which initiates a call with pre-defined "caller-name" which is our phrase.
https://github.com/iveresk/voip-caller
21 579
NinjaShell
Golang Netcat/Socat/Ncat-like with file transfer, encrypted transfer and traffic.
https://github.com/7RU7H/ninjashell
21 579
X-Access-Dumper
Dumps everything web accessible: .git, .DS_Store, sql dumps, backups...
https://github.com/tz4678/x-access-dumper
21 579
PEzor
Open-Source PE Packer
Red teamers often have the necessity of bypassing AV solutions and I recently needed a more powerful tool than x0rro in order to perform some tasks and bypass a solution that I was targeting. At the end of my development journey, I was satisfied enough with the result that I decided to open-source the design and the implementation processes that I have followed in order to build my solution.
https://github.com/phra/PEzor
Read the blog posts here:
https://iwantmore.pizza/posts/PEzor.html
https://iwantmore.pizza/posts/PEzor2.html
https://iwantmore.pizza/posts/PEzor3.html
https://iwantmore.pizza/posts/PEzor4.html
21 579
Shelltropy
The more predictable you are, the less you get detected
A technique of hiding malicious shellcode based on low-entropy via Shannon encoding.
Entropy is the measure of the randomness in a set of data (here: shellcode). The higher the entropy, the more random the data is. Shannon Entropy is an algorithm that will produce a result between 0 and 8, where 8 means there is no pattern in the data, thereby it's very random and 0 means data follows a pattern.
Note: Check out my blog article for a more detailed explanation of my research, and a simple Vanilla Shellcode Injection PoC as well.
https://github.com/kleiton0x00/Shelltropy
#av #edr #bypass #entropy
21 579
Detect hidden threats with GlassWire's Firewall
🕵🏻 Instantly see your current & past network activity. Detect malware, & block badly behaving apps.
🔎 Instantly see who or what your PC is talking to on GlassWire's network monitoring graph, plus see what your PC may have connected to in the past.
🔥 Detect spyware, malware, badly behaving apps, and bandwidth hogs, then block their connections.
❗️ GlassWire warns you of network related changes to your PC, or unusual changes to your apps that could indicate malware.
👁 Monitor other PCs on your network and get alerted when new unknown devices join your WiFi.
🔔 Keep track of your data usage on your PC or mobile phone and get alerted before going over data limits.
🕔 Go back in time with GlassWire's network time machine to see what your PC was doing while you were away.
🚨 Get alerted every time a new app accesses the network, and block it if necessary.
📊 See detailed network usage statistics broken down by IP/Host, app, network traffic types, and more.
👉🏻 Download GlassWire's Firewall Soft
21 579
H Y D R A
Hydra is a parallelized login cracker which supports numerous protocols to attack. It is very fast and flexible, and new modules are easy to add.
This tool makes it possible for researchers and security consultants to show how easy it would be to gain unauthorized access to a system remotely.
It supports:
Cisco AAA, Cisco auth, Cisco enable, CVS, FTP, HTTP(S)-FORM-GET, HTTP(S)-FORM-POST, HTTP(S)-GET, HTTP(S)-HEAD, HTTP-Proxy, ICQ, IMAP, IRC, LDAP, MS-SQL, MySQL, NNTP, Oracle Listener, Oracle SID, PC-Anywhere, PC-NFS, POP3, PostgreSQL, RDP, Rexec, Rlogin, Rsh, SIP, SMB(NT), SMTP, SMTP Enum, SNMP v1+v2+v3, SOCKS5, SSH (v1 and v2), SSHKEY, Subversion, Teamspeak (TS2), Telnet, VMware-Auth, VNC and XMPP.
https://github.com/vanhauser-thc/thc-hydra
A Detailed Guide on Hydra:
https://www.hackingarticles.in/a-detailed-guide-on-hydra/
#brute #best
21 579
Repost from Pentesting Shop
Chameleon Mini
The Chameleon Tiny Pro is a pocket friendly powerful NFC emulation & manipulation tool which is based on the open-source project ChameleonMini.
It can create perfect clones of various existing commercial smart cards, including cryptographic function and UID Changeable functions.
The genesis of the Chameleon Tiny is to be a smaller ChameleonMini and to be more end-consumer friendly. The Pro version adds Bluetooth connectivity for quicker interaction via the Android application.
Wiki:
https://github.com/iceman1001/ChameleonMini-rebooted/wiki/
Buy online:
🛒 https://bit.ly/3yzh0EK
#nfc #rf #chameleon #mini
21 579
CodeIgniter-session-unsign
Command line tool to fetch, decode and brute-force CodeIgniter session cookies by guessing secret keys.
https://github.com/p0dalirius/CodeIgniter-session-unsign
21 579
dlinject.py
Inject a shared library (i.e. arbitrary code) into a live linux process, without ptrace. Inspired by Cexigua and linux-inject, among other things.
https://github.com/DavidBuchanan314/dlinject
21 579
goGetJS
goGetJS extracts, searches, and saves JavaScript files. Includes an optional browser (playwright) for dealing with JavaScript-heavy sites.
https://github.com/davemolk/goGetJS
21 579
CVE-2022-28117
Navigate CMS <= 2.9.4 - Server-Side Request Forgery (Authenticated)
https://github.com/cheshireca7/CVE-2022-28117
#cve #exploit
21 579
RBCD_Abuse_Checker.ps1
Tool to check if RBCD can be abused by checking both ms-ds-machineaccountquota & SeMachineAccountPrivilege
https://github.com/LuemmelSec/Pentest-Tools-Collection/blob/main/tools/RBCD_Abuse_Checker.ps1
21 579
Repost from Pentesting News
HDiff
A Semi-automatic Framework for Discovering Semantic Gap Attack in HTTP Implementations", IEEE/IFIP 2022.
https://github.com/mo-xiaoxi/HDiff
21 579
DeFiVulnLabs
This was an internal Web3 solidity security training in XREX. I want to share these materials with everyone interested in Web3 security and how to find vulnerabilities in code and exploit them. Every vulnerability testing uses Foundry. Faster and easier!
https://github.com/SunWeb3Sec/DeFiVulnLabs
21 579
U-Boat
The malware target Ukraine by default you can choose other countries from the macro list in header file or create new one if it does not exist .
It has to be run as Administrator in order to work , the shellcodes has been modified for this task so they get executed from the very beginning.
https://github.com/ZeroMemoryEx/U-Boat
