HackGit
Kanalga Telegram’da o‘tish
The channel was created for cybersecurity specialists. • Offensive Security • RedTeam • Malware Research • BugBounty • OSINT • etc Disclaimer: t.me/hackgit/2082 Donations - Ads: t.me/hackgit/5423
Ko'proq ko'rsatish📈 Telegram kanali HackGit analitikasi
HackGit (@hackgit) Ingliz til segmentidagi kanali faol ishtirokchi. Hozirda hamjamiyat 21 579 obunachidan iborat bo'lib, Texnologiyalar & Aralashmalar toifasida 4 526-o'rinni va AQSH mintaqasida 1 853-o'rinni egallagan.
📊 Auditoriya ko‘rsatkichlari va dinamika
невідомо sanasidan buyon loyiha tez o‘sib, 21 579 obunachiga ega bo‘ldi.
02 Mart, 2025 dagi oxirgi ma’lumotlarga ko‘ra kanal barqaror faollikka ega. Oxirgi 30 kunda obunachilar soni 19 ga, so‘nggi 24 soatda esa 0 ga o‘zgardi va umumiy qamrov yuqori darajada qolmoqda.
- Tasdiqlash holati: Tasdiqlanmagan
- Jalb etish (ER): Auditoriya o‘rtacha 0% darajada jalb etiladi. Nashrdan keyingi dastlabki 24 soatda kontent odatda umumiy obunachilar sonining N/A% ini tashkil etuvchi reaksiyalarni to‘playdi.
- Post qamrovi: Har bir post o‘rtacha 0 marta ko‘riladi; birinchi sutkada odatda 0 ta ko‘rish yig‘iladi.
- Reaksiyalar va o‘zaro ta’sir: Auditoriya faol: har bir postga o‘rtacha 0 ta reaksiya keladi.
📝 Tavsif va kontent siyosati
Muallif resursni shaxsiy fikrni ifoda etish maydoni sifatida ta’riflaydi:
“The channel was created for cybersecurity specialists.
• Offensive Security
• RedTeam
• Malware Research
• BugBounty
• OSINT
• etc
Disclaimer:
t.me/hackgit/2082
Donations - Ads:
t.me/hackgit/5423”
Yuqori yangilanish chastotasi (oxirgi ma’lumot 11 Noyabr, 2026 da olingan) sababli kanal doimo dolzarb va katta qamrovli bo‘lib qoladi. Analitika auditoriya kontent bilan faol hamkorlik qilishini, uni Texnologiyalar & Aralashmalar toifasidagi muhim ta’sir nuqtasiga aylantirishini ko‘rsatadi.
21 579
Obunachilar
Ma'lumot yo'q24 soatlar
-37 kun
+1930 kun
Postlar arxiv
21 579
peetch
peetch is a collection of tools aimed at experimenting with different aspects of eBPF to bypass TLS protocol protections.
Currently, peetch includes two subcommands. The first called dump aims to sniff network traffic by associating information about the source process with each packet. The second called tls allows to identify processes using OpenSSL to extract cryptographic keys.
Combined, these two commands make it possible to decrypt TLS exchanges recorded in the PCAPng format.
https://github.com/quarkslab/peetch
21 579
nps-auth-bypass
nps authentication bypass exploit tool, use this tool to easily access the web console, or bulk get socks5 and http proxy
https://github.com/carr0t2/nps-auth-bypass
21 579
Windows-WiFi-Extractor
Extract Windows Wi-Fi Passwords to a Remote URL
https://github.com/hmaverickadams/Windows-WiFi-Extractor
21 579
Velociraptor
Endpoint visibility and collection tool.
Velociraptor is a tool for collecting host based state information using The Velociraptor Query Language (VQL) queries.
To learn more about Velociraptor, read the documentation on:
https://github.com/Velocidex/velociraptor
Docs:
https://docs.velociraptor.app/
21 579
A TCP proxy using HTTP
Reach SSH behind a Nginx reverse proxy
https://github.com/julianbuettner/tcp-over-http
21 579
Antnium
A C2 framework and RAT written in Go.
This source code is publicly published as reference for my presentation Develop your own RAT - AV & EDR Defense. Antnium inteded to fulfill my own requirements, and not those of others. Works for the campaigns i performed, but is not necessarily meant to be a generic C2 framework.
There are two components:
▫️ client.exe: The actual RAT / beacon / agent / implant
▫️ server.exe: C2 server
https://github.com/dobin/antnium
21 579
cve-2021-3060 POC
https://gist.github.com/rqu1/8ed4f51fd90dd82fc89111340e26a756
sloppy certificate enrollment protocol, for ghosts (cve-2021-3060)
https://forum.spacehey.com/topic?id=83646
#cve #poc
21 579
follina (POC)
All about CVE-2022-30190, aka follina, that is a RCE vulnerability that affects Microsoft Support Diagnostic Tools (MSDT) on Office apps such as Word. This is a very simple POC, feel free to check the sources below for more threat intelligence.
https://github.com/Noxtal/follina
Follina – CVE-2022-30190 RTF: https://0xsp.com/offensive/follina-cve-2022-30190-rtf/
#cve #poc
21 579
Repost from HackGit
💰 Donate
If you like the channel please support us ❣️
https://www.buymeacoffee.com/HackGit
BTC:
1987zNaVX53v7tzpKRRde84uXbDYjuNykLTON:
UQAAZ1BFX5OsybSryoFunzyJN3F7oKWMbZNPlwMTcVK8mEzAUSDT – ERC20❗️:
0x1e7fa9e9c42f71e6d155aca39951f23355178163You can buy crypto here #donate #support
21 579
iCULeak.py
Tool to find and extract credentials from phone configuration files in environments managed by Cisco's CUCM (Call Manager).
When using Cisco's CUCM (Call Manager), phone configuration files are stored on a TFTP server. These VoIP phone configuration files quite frequently contain sensitive data, including phone SSH/admin credentials.
There is also an issue with how some browsers autofill fields such as the SSH Username & Password fields with their CUCM credentials (commonly their AD credentials), if the administrator has saved the credentials in their browser. This issue has also been faced by administrators using password managers that automatically plug in credentials, where they found that their credentials were being automatically inputted into the SSH Username & Password fields, and then being saved (and stored in plaintext in the configuration files).
https://github.com/llt4l/iCULeak.py
#ad #cisco
21 579
SeeYouCM Thief
Simple tool to automatically download and parse configuration files from Cisco phone systems searching for SSH credentials. Will also optionally enumerate active directory users from the UDS API.
https://github.com/trustedsec/SeeYouCM-Thief
Seeyoucm-thief: exploiting common misconfigurations in cisco phone systems: https://www.trustedsec.com/blog/seeyoucm-thief-exploiting-common-misconfigurations-in-cisco-phone-systems/
Unauthenticated Dumping of Usernames via Cisco Unified Call Manager (CUCM):
https://www.n00py.io/2022/01/unauthenticated-dumping-of-usernames-via-cisco-unified-call-manager-cucm/
#ad #cisco
21 579
TurboDataMine
Turbo Data Miner is a #Burp Suite Extension, which adds a new tab Turbo Miner to Burp Suite's UI as well as a new entry Turbo Data Miner to Burp Suite's Extensions context menu entry. In the new tab, you are able to write new or select existing Python scripts that are executed on each request/response item currently stored in the Proxy History, Side Map, or on each request/response item that is sent or received by Burp Suite.
The objective of these Python scripts is the flexible and dynamic extraction, correlation, and structured presentation of information from the Burp Suite state as well as the flexible and dynamic on-the-fly modification of outgoing or incoming HTTP requests. Thus, Turbo Data Miner shall aid in gaining a better and faster understanding of the data collected and processed by Burp Suite.
https://github.com/chopicalqui/TurboDataMiner
21 579
CirrusGo
A fast tool to scan SAAS, PAAS App written in Go
https://github.com/Ph33rr/cirrusgo
21 579
SAMLRaider
SAML2 Burp Extension.
#Burp Suite extension for testing SAML infrastructures. It contains two core functionalities: Manipulating SAML Messages and manage X.509 certificates
Features:
▫️ Sign SAML messages & assertions (signature spoofing attack)
▫️ Remove signatures (signature exclusion attack)
▫️ Edit SAML messages (SAMLRequest, SAMLResponse & custom parameter names)
▫️ Perform eight common XSW attacks
▫️ Insert XXE and XSLT attack payloads
▫️ Supported Profiles: SAML Webbrowser Single Sign-on Profile, Web Services Security SAML Token Profile
▫️ Supported Bindings: POST Binding, Redirect Binding, SOAP Binding, URI Binding
https://github.com/CompassSecurity/SAMLRaider
21 579
XLMMacroDeobfuscator
XLMMacroDeobfuscator can be used to decode obfuscated XLM macros (also known as Excel 4.0 macros). It utilizes an internal XLM emulator to interpret the macros, without fully performing the code.
It supports both xls, xlsm, and xlsb formats.
https://github.com/DissectMalware/XLMMacroDeobfuscator
21 579
Protections Artifacts
Elastic Security prevents ransomware and malware, detects advanced threats, and arms responders with vital context. It’s free and open, ready for every endpoint.
Protections-Artifacts is the home of our detection logic (rules, yara, etc) for Elastic Security for endpoint. At Elastic, we believe that being open and transparent is critical for the success of us and our users. Check out our blog post if you are interested in additional background.
https://github.com/elastic/protections-artifacts
