~/hackyfeed $

OSWatcher is a tool designed for the preservation and analysis of historical operating system releases, allowing users to query a comprehensive graph of changes across OS versions from Windows 95 through 11 and Ubuntu 6.10 to 25.04. Using a Merkle graph model stored in Neo4j, it enables users to explore file evolutions, provenance of artifacts, and commonalities across releases, akin to a version control system for OS images. Notably, OSWatcher emphasizes offline image analysis rather than real-time monitoring, differentiating itself from similar tools like Oracle's OSWatcher Black Box.

openevv is a portable implementation of IBM's Embedded ViaVoice text-to-speech engine, reengineered in C for compilation on non-Windows platforms, enabling text-to-speech functionality with byte-for-byte fidelity to IBM's original audio outputs. Its primary use case includes generating audio from text and serving as an add-on for screen readers, with features like multiple voice presets and the ability to produce wave files for playback on Linux systems. The tool is built entirely from scratch without reliance on IBM's SDK, and includes both command-line and graphical interfaces for user interaction.

MikuSB is an open-source server emulator for a specific dungeon anime game, designed to enable local gameplay and testing by mimicking server functionalities. It features distinct components including `SdkServer` for HTTP API responses, `GameServer` for TCP connections, and an optional local proxy for domain redirection. Key capabilities include account management, player data handling, inventory, and weapon functionalities, while supporting research and educational purposes within a safe environment.

JavaShroud is a comprehensive obfuscation and hardening toolchain for Java applications, utilizing bytecode transformation through a Kotlin engine and enabling the execution of lowered methods within a Native bytecode VM (NBVM). It offers various features, including class and method renaming, string encryption, control flow obfuscation, method virtualization, and integrated runtime protections, designed to enhance security by increasing the costs associated with reverse engineering and code analysis. The tool emphasizes the generation of unique keys and layouts for each output, adhering to the Kerckhoffs principle, ensuring that the strength of the protection does not rely on implementation secrecy.

The dmg-schematics repository provides comprehensive reverse-engineered schematics of the Game Boy DMG-CPU B chip and the SM83 CPU core using KiCad. It includes detailed layouts, parsable netlists, and exportable formats such as PDF. Notable features consist of an Electric VLSI cell library for standard cells, modified overlay SVGs that sync with the schematics, and a netlist formatting tool that generates readable outputs and simulation code.

crossroads-2-disassembly is a reverse engineering tool designed to disassemble and analyze the C64 game Crossroads 2, originally published in 1988. It allows users to generate ASM files that replicate the original game, with optional variations to enhance gameplay, such as always displaying credits and modifying escalation levels. Notable features include handling complex assembly language constructs, such as the "BIT NOP trick" and self-modifying code challenges, enabling a clearer understanding of the game's underlying mechanics.

Arkana is a comprehensive malware analysis tool that streamlines the investigation process by integrating 308 specialized analysis tools through a single AI-driven interface. It allows users to submit natural language prompts to conduct extensive malware evaluations, including decompilation, vulnerability detection, and real-time data enrichment without switching between multiple applications. Notable features include automated risk scoring, MITRE ATT&CK mapping, and interactive debugging capabilities, all designed to enhance efficiency in analyzing PE, ELF, and other binary formats.

Surveillance-Industry is a comprehensive resource mapping the global surveillance ecosystem, detailing the companies and entities involved in the development of mass-monitoring tools across various jurisdictions. With 21 dossiers covering responses from multiple nations, including a deep-dive into companies like Palantir, it provides in-depth insights into state surveillance practices, industry vendors, and associated scandals, all presented in a Markdown format for ease of navigation. This tool serves as an essential guide for researchers and policymakers interested in the implications of surveillance technologies.

NEO-Radar is a lightweight network scanner designed for Linux and Termux, aimed at simplifying network scanning for users without extensive networking or cybersecurity knowledge. Its primary use case is to provide essential scanning functionalities akin to more complex tools like Nmap, while also including a command reference for learning purposes. Notable features include ease of installation via a single command, compatibility with mobile devices, and a focus on user-friendly operations, making it accessible for a wider audience.

XingDumper is a Python 3 script designed to extract employee data from the XING social networking platform via its unofficial API. The tool facilitates the retrieval of essential employee information such as name, position, and location using just two API calls, and it includes a feature for auto-generating email addresses based on specified formats. Users must provide a valid XING login cookie and the company URL to initiate the data dump.

`osintgpt` is a Python package that utilizes large language models (LLMs) to perform text analysis tasks relevant to open-source intelligence (OSINT), such as calculating text embeddings and searching for similar documents. Key features include an interactive mode for dynamic user interaction with the GPT model, SQLite database integration for efficient data management, and connectivity to the Qdrant vector similarity search engine for high-performance embedding storage and retrieval.

Meta Scan is an OSINT tool designed to extract comprehensive public profile data from Facebook pages, leveraging the RapidAPI Facebook Pages Scraper. Key features include the ability to retrieve detailed information such as profile and business details, transparency data, and generate JSON reports, all while ensuring secure API key handling and a user-friendly CLI interface. The tool is intended for educational purposes and supports batch processing of usernames, enhancing its usability for researchers.

Hostagram is an OSINT tool designed to extract and monitor extensive information from public Instagram accounts. Its primary use case is for research and analysis in the realm of social media intelligence, offering features such as user verification, email and phone number checks, and insights into follower activity. Currently in version 1.4, the tool is under active development with plans for future enhancements.

Cyberseek is a comprehensive, local threat intelligence and defensive analysis tool designed for security teams, integrating asset visibility, reconnaissance, and indicator enrichment into a unified workspace. Key features include continuous monitoring of domains and IPs, email exposure checks, and robust reporting capabilities, while it also enables the mapping of observed behaviors to the MITRE ATT&CK framework and utilizes AI for evidence-bound summaries. The tool aims to facilitate investigation workflows by preserving local task history and analyst context, enhancing operational efficiency in cybersecurity tasks.

Web Security Analyzer Pro is an advanced web security analysis tool designed for system administrators, developers, and security professionals, providing detailed examination of HTTP headers, cookies, common vulnerabilities, and SSL/TLS configuration. It operates without external queries, generating comprehensive security reports using only HTTP responses, and includes features such as CVE detection from a vast offline database, automated security scoring, and an interactive visual interface. Notable capabilities include in-depth analysis of security headers, cookie security flags, and the identification of technologies used in web applications.

The Offensive Linux Privilege Escalation tool serves as a comprehensive guide to help users escalate from low-privileged Linux access to root, covering various techniques such as sudo and SUID abuse, kernel exploits, and credential mining. Its primary use case is educational, providing detailed methodology, enumeration scripts, and a structured approach to experience in privilege escalation while emphasizing lawful and authorized testing. Notable features include over 50 documented techniques, automated enumeration scripts, a methodology checklist, and practical lab setups for hands-on learning.

Offensive Windows Privilege Escalation is a comprehensive guide designed for escalating privileges from a low-privileged Windows environment to Administrator or SYSTEM level, utilizing various techniques such as service misconfigurations, registry exploits, UAC bypass, and token-privilege abuse. The tool emphasizes an offensive security methodology, offering over 75 structured notes complete with hands-on exploitation and detection guidance, alongside ready-to-use commands and methodology checklists. It serves as an educational resource exclusively for authorized testing scenarios, ensuring ethical use in cybersecurity practices.

Offensive File Transfer Techniques is an extensive guide designed for transferring files to and from target systems during security engagements, emphasizing staging payloads and exfiltrating data. It covers a diverse range of transport mechanisms, including HTTP, SMB, FTP, TFTP, and more obscure methods like base64 encoding, while also providing detection and defense mappings for each technique. The tool features organized notes with ready-to-use commands for both client and server setups, ensuring comprehensive coverage of file transfer methods in offensive security contexts.

The wifi-deauther tool is a Python-based application that automates deauthentication attacks to help users understand 802.11 management frame injection. Primarily intended for testing on networks with proper authorization, it allows users to select a wireless interface and target access points for deauthentication. Notable features include support for Linux systems, the necessity for a wireless card with monitor mode, and the recommendation to use two wireless cards for optimal performance.

SearchToolkit is an advanced collection of resources designed for penetration testers, red teamers, blue teamers, and forensic analysts. It includes tools, hardware, cheatsheets, and references across various cybersecurity domains such as geolocation tracking, OSINT, malware analysis, and bug bounties. Notable features include a comprehensive navigation system for quick access to specific areas of cyber defense and offense, highlighting its utility in diverse cybersecurity tasks.

The Ethical-Hacking repository provides a comprehensive step-by-step guide for learning cybersecurity and ethical hacking using Kali Linux. It covers foundational knowledge in networking and Linux commands, introduces tools like Nmap and Metasploit, and offers practice platforms for hands-on experience. Notable features include recommended resources, structured learning paths, and additional guidance on specialized areas like web application security and certifications.

B1ackOS is a privacy-focused operating system based on Debian, designed to simplify software package installation and enhance user security. It features a lightweight and versatile environment, allowing for both live usage and easy assembly tailored to individual needs, with a rolling release model that ensures access to the latest software versions. Key functionalities include improved package management, extensive application availability, and compatibility with a wide range of hardware.

The Pass-the-Passkey repository offers a suite of tools designed to exploit and assess the vulnerabilities of WebAuthn and FIDO2 authentication methods in Windows. Key features include the Passkey Injector for intercepting and modifying authentication assertions, SharpPasskeys for executing payloads to retrieve user credentials, and the WebAuthn Hook for tampering with the assertion workflow through API interception. This toolkit is invaluable for security researchers and penetration testers aiming to understand and enhance the security of passkey-based authentication systems.

Kontext is a runtime governance tool designed for AI agents that enables local policy decisions, pre-action enforcement, and maintains an authorization ledger. It captures tool-use events, evaluates policies prior to action execution, and provides mechanisms for recording decisions, facilitating a balance between security and agent utility. Key features include local enforcement of policies, an observation mode for testing policy impacts, and compatibility with various execution environments, ensuring that security actions are seamlessly integrated into AI workflows without constant reliance on external services.

GitGuardian Shield (ggshield-action) is a GitHub Action designed to detect exposed credentials and other security vulnerabilities across commits and pull requests. Utilizing GitGuardian's public API, it identifies over 400 types of secrets in your code, allowing for integration into CI/CD workflows to enhance security. Key features include seamless GitHub integration, a stateless scan mechanism, and customizable scanning options.