~/hackyfeed $

The HackTheBox-Active-Directory-Labs repository provides a collection of walkthroughs focused on Active Directory enumeration and attacks as part of the Hack The Box CPTS career path. Notable features include the inclusion of visual Obsidian .canvas files for enhanced understanding and thoroughly documented processes to uncover flags, with partial censorship to prevent scraping. This resource is intended for learners and security practitioners aiming to deepen their knowledge in Active Directory security.

SMBScan is a tool designed for enumerating file shares on internal networks, allowing users to scan either a single target or a range of targets. Notable features include the capability to identify potentially sensitive files, support for guest and domain user authentication, and tactics to minimize detection by security teams. Additionally, it generates log files for comprehensive output analysis following scans.

py-gitguardian is a Python client library for the GitGuardian API, designed to detect over 200 types of secrets and potential security vulnerabilities in various text contents. It enables developers to integrate scanning capabilities into their applications, whether scanning individual files, entire codebases, or content from chat applications. Notable features include the ability to perform multi-file scans, handle API responses, and easily convert results to JSON or dictionaries for further processing.

Mastyf.ai is a perimeter security tool designed to enforce security policies for AI agents by intercepting and analyzing tool calls in real-time to prevent unauthorized actions. Its primary use case is to mitigate threats such as prompt injection, data exfiltration, and shell injection while providing a full audit trail of all AI activities. Notable features include multi-agent swarm analysis for policy evaluation, a comprehensive dashboard for activity visibility, and the ability to block malicious actions before execution.

`omp-re` is a reverse-engineering plugin for the Oh My Pi framework that utilizes Radare2 and offers a suite of 22 tools for in-depth binary analysis. Its primary use case is to facilitate the examination of binary files, featuring an interactive function navigator, decompilation capabilities, and a robust evidence storage system that ensures claims in reports are substantiated by gathered facts. Notable features include an HMAC-signable audit log and an evidence citation system, enhancing the reliability and traceability of the analysis process.

XRefer is a Python plugin for the IDA Pro disassembler that enhances binary analysis through a custom navigation interface. It clusters related functions, highlights execution paths, and integrates external data sources to provide context-rich path graphs, significantly speeding up manual static analysis. Notable features include LLM integration for generating natural language descriptions of code relationships and the ability to incorporate API traces and custom xrefs for improved insights.

memory-forensic is a cross-platform memory forensics toolkit designed for analyzing Windows kernel memory through an independent implementation that matches the output of Volatility 3. It reads various memory dump formats and allows users to retrieve detailed process and network connection information without needing Python or pre-staged symbol catalogs. Notably, it offers a self-profiling capability to locate kernel symbols and validate its results through rigorous comparison with reference implementations, ensuring high correctness in process recovery.

Awesome Memory Forensics is a curated repository focused on digital forensic tools and resources specifically for memory forensics, a critical approach for investigating sophisticated cyber attacks that evade traditional detection methods. The repository includes a variety of software tools for memory acquisition, analysis, as well as educational resources such as books, courses, and articles, facilitating a comprehensive exploration of volatile memory analysis in digital forensics. Notable features include a selection of both commercial and open-source tools that allow investigators to capture and analyze critical data in memory, ensuring enhanced effectiveness in digital investigations.

Robinhood CLI (MCP + API) is an unofficial command-line interface and server designed for managing Robinhood accounts directly from the terminal. It offers comprehensive access to brokerage features, including options trading, recurring investments, dividends, and more, allowing users to execute trades while ensuring control over their investment strategies with real-time updates and dry-run capabilities. Notably, it leverages Robinhood's private web API for account interactions, providing a streamlined management experience not dependent on the official platform.

DarkDex is a powerful tool designed to extract and reconstruct the real dex file from packed Android applications, including those protected by advanced packers like ijiami 4th generation. It operates in two modes: a host script that leverages memory reading from outside the Android sandbox, and an APK that runs directly on the device, facilitating full memory dumps in root mode or disk dex pulls without root. Notable features include an event-driven capture system that captures decrypted dex in real-time, as well as utilities for validating, deduplicating, and testing the output disassemblies.

rr-decomp is a decompilation tool for the PlayStation 1 game Ridge Racer, enabling users to reconstruct the game's source code from their legally-owned copy of the original disc. This tool generates assembly listings and a native runtime, facilitating a static recompilation approach that allows for incremental function replacement without breaking the gameplay experience. Notable features include the ability to verify progress in decompilation, ensuring no copyrighted assets are included, and the provision to create a playable version of the game using user-supplied data.

ida-headless-mcp is a Rust-native server designed for headless interactions with IDA Pro, allowing for multi-session handling of databases through a supervisor-worker model. It provides public tools for database management and analysis, supports both stdio and Streamable HTTP modes, and is optimized for a headless environment with no GUI components involved. Notable features include individual worker processes for each database session and a limit on the number of simultaneous worker processes for efficient resource management.

The HP Laser 1008a on macOS project provides a solution for printing with specific HP Laser printers that lack native macOS support by utilizing a Linux container to run HP's rastertospl driver. This tool enables users to print directly from any application via the standard Cmd-P method without reliance on terminal commands or external scripts, making it user-friendly for Apple Silicon macOS environments. Key features include automatic installation via a single command and seamless integration with the CUPS printing system, circumventing multiple compatibility limitations.

The Discord Badge Spoofer is a tool designed to artificially inflate the "hours played" and "games played" badges on Discord profiles by sending spoofed game events to Discord's analytics endpoint. This experimental Python application requires user authentication, including an account token and a cookie, to simulate playtime through commands for claiming hours and marking games as played. Notably, while the tool can track playtime without additional setup, the games-played count necessitates a legitimate executable fingerprint obtained from the user's own client, emphasizing its experimental nature and potential violation of Discord's terms of service.

newserv is a comprehensive game server and proxy tool specifically designed for the Phantasy Star Online (PSO) community, facilitating reverse-engineering and custom gameplay experiences. It supports features such as user accounts, server-side saves, cross-version play, and a REST API, while also allowing users to connect through a proxy to mitigate command vulnerabilities that could disrupt gameplay. Additionally, newserv incorporates community-driven reverse-engineering efforts, making it a stable and dynamic platform for both players and developers.

The lm-decomp repository provides a work-in-progress decompilation of the game Luigi's Mansion, enabling users to analyze and understand the game's code without including any proprietary assets. It supports multiple versions of the game across various regions, including USA, Japan, and multiple PAL revisions, allowing for robust examination and potential modification of the code. Notably, the project strictly prohibits AI contributions to maintain code integrity and legal compliance.

KeyDot is a high-performance command-line tool that extracts encryption keys and detects engine versions from compiled Godot Engine games, specifically targeting Windows x64 executables and WebAssembly (`.wasm`) files. Its primary use case is static analysis of game files without requiring runtime execution, which enhances safety and efficiency. Notable features include optimized C++ code for rapid extraction, memory-mapped file usage for low memory consumption, and unique support for WASM files, making it an essential tool for developers working with Godot Engine games.

BeoSound 5c is a software tool that modernizes the Bang & Olufsen BeoSound 5 experience by utilizing web technologies on a Raspberry Pi 5. It features a circular arc-based touch UI and integrates with various music services and devices, offering seamless remote control, configuration options, and support for legacy hardware like the original BS5 rotary encoder and display. Additionally, it incorporates a security model that ensures a trusted home network environment and protects sensitive configuration data.

TikTok-SSL-Pinning-Bypass is a tool designed to intercept network traffic from the TikTok application on Android devices without the need for rooting. It supports Android versions 6.0 and above, and has been successfully tested using Mitmproxy in a non-root environment, specifically for the arm64-v8a architecture. Notable features include the ability to bypass SSL pinning, compatibility with real Android devices and AVD emulators, and the provision of a free patched APK that resolves specific login errors.

IG-Detective is a Python-based Open Source Intelligence (OSINT) tool designed for in-depth analysis of Instagram accounts, enabling users to extract location history, map social interactions, and generate automated reports. Notable features include advanced evasion techniques for stealthy data collection, interactive geospatial mapping, and various forensic modules such as account recovery enumeration and engagement audits. The tool optimizes performance with asynchronous data export and intelligent caching for efficient query handling.

The Counter-OSINT & Privacy Guide is a comprehensive resource designed to help individuals safeguard their personal data against online threats. It covers essential topics such as digital hygiene, data breaches, and privacy measures across various platforms, providing users with actionable strategies to enhance their online security and maintain privacy. Notable features include a detailed section on software development privacy and region-specific considerations, making it a versatile tool for a diverse audience.

BlastDNS is an ultra-fast DNS resolver implemented in Rust, optimized for mass DNS lookups with superior performance when multiple resolvers are provided. Its notable features include built-in caching, support for various record types, and configurable parameters for fine-tuning performance, such as timeout settings and error handling. The tool can be utilized through a command-line interface, Rust library, or Python library, making it versatile for integration into broader applications or for use as a standalone resolver.

MetaView is a web-based interface for the Metasploit Framework that provides multi-user support and an intuitive user interface built on Vue3. Its primary use case is to facilitate project management and data visualization within penetration testing, enabling users to manage workspaces, visualize database entries such as hosts and vulnerabilities, and generate live dashboards. Notable features include integration with external tools (like MaxPatrol and Nmap), role-based access control, and task management functionalities.

TCPK (Thick Client Pentest Kit) is a Windows-based security audit tool designed for comprehensive testing of thick-client applications, including MSIX, .NET, and Electron binaries. Noteworthy features include a PowerShell engine, live auditing with real-time findings, CVSS scoring, AI triage capabilities, and automated report generation in multiple formats, providing an exhaustive analysis for authorized testing environments. This tool emphasizes evidence-based findings and offers extensive checks, making it suitable for security professionals conducting in-depth application audits.

nmap-vulners is a set of Nmap scripts designed to enhance network vulnerability assessments by converting service scan results into a detailed list of known Common Vulnerabilities and Exposures (CVEs) along with their respective CVSS scores and exploits. Notable features include three independent scripts that can perform various vulnerability lookups—one leveraging the public Vulners database, another utilizing the Vulners API for advanced scoring, and a regex-based script that identifies web software through HTTP headers. This tool aims to streamline the process of gathering security-related information during Nmap scans, improving the effectiveness of vulnerability management.