~/hackyfeed $

Atlos is a collaborative platform designed for investigators to catalog and verify eyewitness media efficiently at scale, addressing the unique requirements of visual investigations. It features automatic media archiving and incorporates industry-standard safety measures for researchers, making it a dual-purpose tool that functions as both a collaborative workspace and a robust database. Notably, it supports high-profile investigations, such as those conducted by Bellingcat on civilian harm in Ukraine.

Hackwifi is a modular Python-based Wi-Fi penetration testing toolkit designed for automating tasks such as network scanning, packet capturing, deauthentication attacks, and Wi-Fi password cracking. It facilitates the identification of target networks and the extraction of handshake packets for offline password cracking, while requiring a Linux environment and necessary tools like Aircrack-ng. The tool emphasizes ethical use, necessitating proper authorization before any testing.

BugHunter is an AI-powered bug bounty toolkit designed for effective vulnerability assessment and reporting directly from the terminal. It automates the processes from reconnaissance to reporting, generating submission-ready documents for various platforms while utilizing an intelligent session management feature that retains discovered patterns across targets. This tool can operate independently without a subscription, enhancing accessibility for users in the cybersecurity domain.

Awesome ROS & Robotics Security is a comprehensive resource repository focused on the security aspects of the Robot Operating System (ROS) and robotics in general. It includes verified tools, checklists, known vulnerabilities (CVEs), and research related to pentesting, AI attacks, and secure robotics frameworks, making it an essential reference for security professionals working on robotic systems. Notably, each entry is individually verified against primary sources to ensure accuracy and credibility.

PwnRM is an advanced WinRM post-exploitation tool designed for conducting authorized security assessments in Windows Active Directory environments. It features an interactive PowerShell runspace, support for various authentication methods, stealthy payload delivery, and a built-in Active Directory triage engine, enabling users to perform a wide range of assessment tasks through a command-line interface as well as via a Python library. Notable functionalities include file transfer capabilities, remote command execution, and comprehensive AD enumeration and session management features.

OSINT Skills is an open-source intelligence tool designed for automated investigations, enabling users to pivot between various data points such as emails, domains, and social accounts. Its main use case involves conducting comprehensive reconnaissance and attribution, with 28 integrated skills that utilize techniques like reverse image search and breach checks to generate detailed reports complete with sources and confidence levels. Notably, the tool allows interaction with AI agents to streamline the investigation process and provides extensive reference materials for each skill.

Mimic is a lightweight JavaScript library designed for conducting realistic phishing simulations by creating a fake browser interface on top of an existing webpage without the need for iframes. Utilizing Shadow DOM and MutationObserver technologies, it successfully renders the actual website’s content within a customizable fake browser viewport while preserving original styling and information, enabling more effective testing and demonstration of phishing attacks in a seamless manner. Notable features include a dependency-free design, automatic content injection, and the ability to mimic various browser elements like the address bar and site information.

The 'redteam-skill' tool facilitates a semi-automated workflow for red teaming engagements, allowing operators to select modules that assist in penetration testing while recording findings in a `notes.md` file. It features a modular architecture encompassing various attack and reconnaissance techniques, with an emphasis on human oversight to ensure critical judgment and decision-making during operations. Notable functionalities include the automatic retrieval of previous notes and detailed process references for each module, enhancing the efficiency of security assessments.

DorkAgent is a LLM-powered tool designed for automated Google Dorking to assist in bug hunting and penetration testing. It allows users to retrieve and customize search results through various LLM APIs, streamlining the process of exploiting Google search vulnerabilities. Notable features include automatic package installation, dynamic model selection at runtime, and extensive customization options for search parameters.

Zanadir is a tool designed to analyze CI/CD setups within repositories, providing enhancements and suggestions for security practices and best practices across various supported CI actions including GitHub Actions, CircleCI, and GitLab. It features a repository scanning capability that identifies issues in categories such as software composition analysis, secrets detection, and static application security testing, with customizable output formats including table, JSON, and SARIF for integration with other tools. Contributions to further enhance its features are encouraged within the open-source community.

Vex8s is a tool that generates VEX documents by analyzing container vulnerabilities and correlating them with Kubernetes security settings to assess the exploitability of CVEs within workloads. It utilizes machine learning models to classify vulnerabilities and determine mitigable conditions based on Kubernetes configurations, offering both passive and active scanning modes for versatility. Notable features include integration with existing vulnerability scanners like Trivy and Grype, facilitating the suppression of reported vulnerabilities based on real-time assessments.

Secutils.dev is an open-source security toolbox designed for engineers and researchers, bridging the gap between complex enterprise solutions and scattered simple tools. It offers a guided experience for managing diverse security tasks, including webhooks for rapid API mocking, templates for cryptographic testing, and tools for Content Security Policy management. Notable features include user-friendly access to single-page tools, which do not require sign-up and provide stable URLs for easy sharing and AI-agent skills for enhanced automation.

x64dbg-MCP Server is a native plugin for x64dbg that enables programmatic control of the debugger over HTTP, utilizing the Model Context Protocol (MCP). Its primary use case is for enhanced reverse engineering, allowing users to manage breakpoints, step through code, and access memory and registers via any MCP-compatible AI assistant. Notable features include zero dependencies, dual transport methods (streamable HTTP and SSE), and comprehensive debugger control with 71 available tools and 22 event callbacks.

VanBus is an Arduino library designed for reading and writing packets on the VAN bus of Peugeot and Citroën vehicles, which communicates using a protocol similar to CAN bus. It supports ESP8266 and ESP32 platforms, facilitating interactions with comfort-related equipment in vehicles manufactured by PSA up until around 2009. Notable features include compatibility with various hardware setups and comprehensive schematics for implementation, ensuring ease of use for developers working on automotive applications.

Desvendando o Elifoot 98 é uma ferramenta de engenharia reversa que analisa o motor do jogo clássico Elifoot 98, utilizando Ghidra e Cheat Engine para explorar algoritmos, fórmulas, e mitos relacionados ao jogo. O repositório documenta as mecânicas internas do código, como a influência das nacionalidades dos jogadores e a estrutura de dados, desmistificando crenças populares que circularam por anos. Notáveis recursos incluem a verificação de mecânicas de jogo e a demonstração de como são calculadas as forças dos times, com uma abordagem técnica para dissecação de um jogo de 16 bits.

OpenRecet is an open-source C reimplementation of the Win32 engine for Recettear: An Item Shop's Tale, designed as a drop-in replacement for the original executable for users with a legitimate copy. This educational reverse-engineering project focuses on game preservation, ensuring no copyrighted content is included, and implements rigorous verification methods to achieve behavioral parity with the original game engine. While the project is in early stages and not yet playable, it has made significant progress in rendering key components of the game.

DanyAPI is an OpenAI-compatible HTTP API implemented using Python and FastAPI, designed to interact with the internal APIs of free web clients, enabling users to bypass the need for paid API keys. It utilizes server-side accounts created from user-supplied tokens for chat services, allowing seamless API consumption without requiring additional authentication from end users. Notable features include ease of integration with existing fast API setups and support for multiple Python versions.

bosectl is a command-line tool designed for controlling Bose headphones on Linux and macOS without the need for an app or cloud services. It utilizes the Bose BMAP protocol over Bluetooth RFCOMM, providing users direct access to manage features such as noise cancellation, equalization, spatial audio, button mapping, and device profiles. The tool supports various Bose devices, ensuring comprehensive customization options and functionalities.

The Google Antigravity Custom Model Proxy is a tool designed to enable seamless integration of various large language models (LLMs) into the Google Antigravity IDE. It supports multiple providers such as Anthropic, OpenAI, and DeepSeek, and features real-time bi-directional SSE streaming, native UI integration, and robust AES-256-GCM encryption for secure communications. This proxy acts as a bridge, translating requests between the IDE and LLMs while maintaining high interoperability and performance.

The Camera Scanner is a Python command-line tool that facilitates the discovery and assessment of publicly accessible or vulnerable cameras via integration with Shodan and Nmap scanning. Key features include command-line options to initiate searches, check a database of cameras, and perform scans over specified IP ranges, with user-configurable settings for API keys and credential wordlists. This tool is intended for educational purposes, emphasizing responsible use in cybersecurity assessments.

Stackray is a self-hosted site intelligence application designed to scan domains and URLs to identify and record the technologies powering websites over time. It features multi-phase scanning capabilities, including HTTP probing, browser rendering, and cloud resource integration, allowing users to gather comprehensive technology stacks, monitor changes, and collaborate effectively within teams. Notable functionalities include the ability to enrich targets with public signals, run templated checks, and support for API integrations and recurring scans.

Otwarte Źródła is a Polish extension of the OSINT Framework that focuses exclusively on Polish tools and data sources for open-source intelligence (OSINT) investigations. Key features include an organized catalog of local resources, the ability to contribute new entries via GitHub pull requests, and support for various tool installation and registration requirements. This tool enhances the accessibility and functionality of open-source intelligence efforts within Poland by centralizing relevant data.

IP Radar is a self-hosted threat intelligence tool that aggregates data from 29 public threat feeds to provide comprehensive IP lookups, returning a conclusive verdict with evidence, confidence scores, geographic information, and ASN details. It features a streamlined setup process requiring minimal configuration, allows for rapid deployment via Docker, and complements its user interface with real-time data updates while ensuring all queries remain local and private. Notably, it supports STIX 2.1 export for further integration with threat analysis workflows.

CorpTrace is a framework designed for automating the collection of information about a target company during red team assessments. It integrates multiple modules from various sources, allowing users to execute diverse reconnaissance tasks while managing risk levels and API key consumption. Notable features include customizable timeout settings, thread management for concurrent execution, and visualization of collected data.

The Cyber Security 101 repository provides comprehensive technical documentation for beginners engaged in the TryHackMe Cyber Security learning path. It includes structured notes, commands, and walkthroughs across 14 modules covering vital topics such as networking, cryptography, operating systems, offensive and defensive security, and career guidance, along with over 56 hands-on labs and essential cybersecurity tools and methodologies. This resource serves as a detailed study notebook, supporting learners in building foundational knowledge and skills in cybersecurity.