HackGit

HackGit 🎓 Open Source Pe*******on Testing Tools
💰 Donate: https://bit.ly/3JV0qDp

YWH Logo Vulnerable Code SnippetsCode snippets containing several different vulnerabilities to practice your code analys...
05/02/2024

YWH Logo Vulnerable Code Snippets

Code snippets containing several different vulnerabilities to practice your code analysis in a safe dockerized envoriment. The vulnerable code snippets are suitable for all skill levels.

https://github.com/yeswehack/vulnerable-code-snippets

APIDetectorA powerful and efficient tool designed for testing exposed Swagger endpoints in various subdomains with uniqu...
05/02/2024

APIDetector

A powerful and efficient tool designed for testing exposed Swagger endpoints in various subdomains with unique smart capabilities to detect false-positives. It's particularly useful for security professionals and developers who are engaged in API testing and vulnerability scanning.

https://github.com/brinhosa/apidetector

CVE-2024-21893 is server-side request forgery vulnerability in the SAML component of Ivanti Connect Secure (9.x, 22.x) a...
03/02/2024

CVE-2024-21893

is server-side request forgery vulnerability in the SAML component of Ivanti Connect Secure (9.x, 22.x) and Ivanti Policy Secure (9.x, 22.x) and Ivanti Neurons for ZTA allows an attacker to access certain restricted resources without authentication.

https://github.com/h4x0r-dz/CVE-2024-21893.py

SiCatSiCat is an advanced exploit search tool designed to identify and gather information about exploits from both open ...
03/02/2024

SiCat

SiCat is an advanced exploit search tool designed to identify and gather information about exploits from both open sources and local repositories effectively. With a focus on cybersecurity, SiCat allows users to quickly search online, finding potential vulnerabilities and relevant exploits for ongoing projects or systems.

https://github.com/justakazh/sicat

CVEMapNavigate the Common Vulnerabilities and Exposures (CVE) jungle with ease using CVEMAP, a command-line interface (C...
02/02/2024

CVEMap

Navigate the Common Vulnerabilities and Exposures (CVE) jungle with ease using CVEMAP, a command-line interface (CLI) tool designed to provide a structured and easily navigable interface to various vulnerability databases.

https://github.com/projectdiscovery/cvemap

ThievingFoxA collection of post-exploitation tools to gather credentials from various password managers and windows util...
02/02/2024

ThievingFox

A collection of post-exploitation tools to gather credentials from various password managers and windows utilities. Each module leverages a specific method of injecting into the target process, and then hooks internals functions to gather crendentials.

https://github.com/Slowerzs/ThievingFox

oss-fuzz-genThis framework generates fuzz targets for real-world C/C++ projects with various Large Language Models (LLM)...
02/02/2024

oss-fuzz-gen

This framework generates fuzz targets for real-world C/C++ projects with various Large Language Models (LLM) and benchmarks them via the OSS-Fuzz platform.

https://github.com/google/oss-fuzz-gen

Frameless BITBA new approach to Browser In The Browser (BITB) without the use of iframes, allowing the bypass of traditi...
01/02/2024

Frameless BITB

A new approach to Browser In The Browser (BITB) without the use of iframes, allowing the bypass of traditional framebusters implemented by login pages like Microsoft and the use with Evilginx.

https://github.com/waelmas/frameless-bitb

RemoteTLSCallbackInjectionThis method utilizes TLS callbacks to execute a payload without spawning any threads in a remo...
29/01/2024

RemoteTLSCallbackInjection

This method utilizes TLS callbacks to execute a payload without spawning any threads in a remote process. This method is inspired by Threadless Injection as RemoteTLSCallbackInjection does not invoke any API calls to trigger the injected payload.

https://github.com/Maldev-Academy/RemoteTLSCallbackInjection

PurpleLablab solution, providing a swift setup for professionals to test detection rules, simulate logs, and various s...
29/01/2024

PurpleLab

lab solution, providing a swift setup for professionals to test detection rules, simulate logs, and various security tasks

https://github.com/Krook9d/PurpleLab

EnumSSNEnumerate SSN (System Service Numbers or Syscall ID) and syscall instruction return address in ntdll module by pa...
29/01/2024

EnumSSN

Enumerate SSN (System Service Numbers or Syscall ID) and syscall instruction return address in ntdll module by parsing the PEB of the current process (no use of GetModuleHandleA and GetProcAddress).

https://github.com/ProcessusT/EnumSSN

Ligolo-mpA more specialized version of Ligolo-ng, with client-server architecture, enabling pentesters to play with mult...
29/01/2024

Ligolo-mp

A more specialized version of Ligolo-ng, with client-server architecture, enabling pentesters to play with multiple concurrent tunnels collaboratively. Also, with a sprinkle of less important bells and whistles.

https://github.com/ttpreport/ligolo-mp

SOAPHoundA custom-developed .NET data collector tool which can be used to enumerate Active Directory environments via th...
29/01/2024

SOAPHound

A custom-developed .NET data collector tool which can be used to enumerate Active Directory environments via the Active Directory Web Services (ADWS) protocol.

https://github.com/FalconForceTeam/SOAPHound

Address


Website

Alerts

Be the first to know and let us send you an email when HackGit posts news and promotions. Your email address will not be used for any other purpose, and you can unsubscribe at any time.

Videos

Extensible Azure Security Tool Later referred as E.A.S.T is tool for assessing Azure and to some extent Azure AD security controls. Primary use case of EAST is Security data collection for evaluation in Azure Assessments. This information (JSON content) can then be used in various reporting tools, which we use to further correlate and investigate the data. https://github.com/jsa2/EAST via https://t.me/HackGit/6545

Shortcuts

  • Address
  • Alerts
  • Videos
  • Claim ownership or report listing

  • Want your business to be the top-listed Media Company?

Share