HackGit

2022-07-17 17:17:00 ​​Dirble

Fast directory scanning and scraping tool.

Dirble is a website directory scanning tool for Windows and Linux. It's designed to be fast to run and easy to use.

Features:
Cookies
Custom Headers
Extensions and prefixes
HTTP basic auth
Listable directory detection and scraping
Save output to file
Save output in XML and JSON formats
Proxy support
Recursion
Status code blacklisting and whitelisting
Threading
Request throttling
Detect not found code of each directory based on response code and length
Ability to provide a list of URLs to be scanned
User agents
Scanning with GET, POST or HEAD requests
Exclude ranges of response lengths from the output

https://github.com/nccgroup/dirble Открыть/Комментировать

2022-07-17 16:29:50 xhunter

Android Penetration Tool (RAT for Android)

There are many great Android RAT available on GitHub; however, I didn't find one that really suited my needs so I created this enhanced one. I want to create a RAT so amazing that it'll be the last one you ever need -- I think this is it.

Here's why:
The main reason, I did started on this project is to simplify the problem of connection between attacker and victim.[Eliminated all port forwarding and over the internet issues]

Followed by, I wanted to have control over victims using smartphone with a simple UI app rather then a pc or remote virtual machine with command line interface.

Features:
Real time
receive any file or folder from target device
bind with other apps
fetch all whatsapp messages
fetch all whatsapp contacts
receive all target message
send sms with target device to any number
recive all target contacts
receive list of all installedd apps in target device

https://github.com/anirudhmalik/xhunter Открыть/Комментировать

2022-07-17 16:29:28 NodeJS Ransomware

This is a proof-of-concept Node.js #ransomware.

https://github.com/EL-MTN/Ransomware Открыть/Комментировать

2022-07-17 16:26:04 CVE-2022-32119

Arox-Unrestricted-File-Upload

https://github.com/JC175/CVE-2022-32119

#cve #exploit Открыть/Комментировать

2022-07-17 16:16:02 ​​Sliver GUI client.

Features:
You can click on stuff!
Sandboxed JavaScript scripting engine (with built-in script editor)
i18n Language Support (French, Spanish, Japanese, Chinese)

https://github.com/BishopFox/sliver-gui Открыть/Комментировать

2022-07-17 16:16:01 Salus - SBOM Tool

The SBOM tool is a highly scalable and enterprise ready tool to create SPDX 2.2 compatible SBOMs for any variety of artifacts.

https://github.com/microsoft/sbom-tool Открыть/Комментировать

2022-07-17 16:16:00 ​​Oralyzer

Open Redirection Analyzer.

Simple #python script, capable of identifying the open redirection vulnerability on a website. It does that by fuzzing the URL i.e. provided as the input.

Features:
Improved DOM XSS detection mechanism
Test multiple parameters in one run
CRLF Injection Detection

https://github.com/r0075h3ll/Oralyzer Открыть/Комментировать

2022-07-17 14:14:01 ​​Awesome Privacy

Large data-hungry corporations dominate the digital world but with little, or no respect for your privacy. Migrating to open-source applications with a strong emphasis on security will help stop corporations, governments, and hackers from logging, storing or selling your personal data.

https://github.com/Lissy93/awesome-privacy

Website:
https://awesome-privacy.xyz/ Открыть/Комментировать

2022-07-17 10:10:03 ​​ProcessGhosting

Small POC for process ghosting

This is a C# implementation of the original Process Ghosting written in C Original #POC.

For easier understanding, the target file name and path have been hardcoded.

https://github.com/dosxuz/ProcessGhosting

Understanding Process Ghosting in detail
https://dosxuz.gitlab.io/post/processghosting/ Открыть/Комментировать

2022-07-17 10:10:02 ​​Pretender

Cross-platform tool to obtain a machine-in-the-middle position inside Windows networks.

https://github.com/RedTeamPentesting/pretender

Introducing pretender - your new sidekick for relaying attacks
https://blog.redteam-pentesting.de/2022/introducing-pretender Открыть/Комментировать