~/hackyfeed $

Hekate is a custom graphical bootloader and firmware patcher for the Nintendo Switch, designed to facilitate various boot configurations, including CFW Sys/Emu and stock systems. Its notable features include a fully configurable GUI with touchscreen support, tools for eMMC/emuMMC backup and restoration, SD card partitioning, and the ability to flash Android and Linux operating systems. Additionally, Hekate offers hardware and peripheral information, as well as multiple utility tools to enhance the overall user experience and system management.

hashcat is a high-performance password recovery tool that supports various attack modes and over 300 hashing algorithms, leveraging CPUs, GPUs, and hardware accelerators across multiple operating systems. Its primary use case is to facilitate distributed password cracking, making it suitable for security professionals and penetration testers. Notable features include extensive algorithm support, optimized performance for different hardware configurations, and a well-developed community for support and collaboration.

HackRF Treasure Chest is a collaborative repository that consolidates software and capture files for Software-Defined Radio (SDR) applications, enabling users to explore the radio spectrum effectively. It features a curated list of notable SDR software tools such as SDR++, CubicSDR, and Universal Radio Hacker, which are designed for signal analysis, protocol investigation, and general radio spectrum navigation. The repository encourages contributions, fostering a community-driven approach to SDR experimentation and development.

HackRF-tools is a suite of tools designed for the HackRF software-defined radio (SDR) platform, optimized for use on Windows 10 x64 and newer. It provides a LabVIEW API allowing users to interface with connected HackRF devices for data transmission and reception, offering control over various device properties such as frequency and gain settings. Notable features include a straightforward installation process and the ability to manage streaming operations through a C# wrapper, which facilitates integration with LabVIEW.

HackRF is an open-source Software Defined Radio (SDR) platform designed for a wide range of radio frequency applications. Its primary use case is to allow users to explore and manipulate radio signals across a broad spectrum, with notable features including low-cost hardware designs, comprehensive documentation, and an active community for support and collaboration.

H3 is a geospatial indexing system that utilizes a hexagonal grid for hierarchical spatial indexing, allowing for efficient representation and subdivision of geographical data. Its primary use case includes enabling scalable geospatial queries and data representation, similar to features found in the S2 geometry library. Notable features include cross-platform support with bindings for multiple programming languages and the capability to construct varying levels of hexagonal cell resolutions for detailed geospatial analysis.

`graftcp` is a Linux tool designed to redirect TCP connections from any process to SOCKS5 or HTTP proxies by tracing socket syscalls using `ptrace(2)`. It supports the redirection of UDP/53 DNS queries to an embedded DNS-over-TCP forwarder and allows for proxying generic UDP traffic through either SOCKS5 or direct connections. Notable features include the ability to trace statically linked binaries without relying on `LD_PRELOAD`, and a single command structure that simplifies usage compared to previous versions.

GoAccess is an open-source real-time web log analyzer that provides system administrators, DevOps engineers, and security professionals with immediate HTTP statistics and server reports through a terminal interface or live HTML dashboard. Key features include minimal configuration, support for various log formats, real-time metrics updates, and tools for tracking application response times and visitor data. It also supports incremental log processing, WebSocket authentication, and can efficiently handle large datasets, making it an effective tool for monitoring web traffic and troubleshooting issues.

fxIP is a TCP/IP stack and IRC client designed for Casio fx-9750/fx-9860 calculators, facilitating network connectivity through SLIP encapsulation over a serial port. It enables users to connect to IRC channels and supports features like log message storage and display. The tool requires specific hardware and software environments, with robust setup instructions for networking configurations.

The fuzzer-test-suite provides a collection of benchmarks designed for evaluating fuzzing engines such as libFuzzer and AFL. It aims to facilitate the discovery of vulnerabilities in real-world libraries by offering challenging tests that expose complex code paths and bugs. Notably, the project has been largely superseded by FuzzBench, which enhances fuzzer benchmarking with improved usability and a broader feature set.

Frida-Gum is a cross-platform instrumentation and introspection library primarily designed for dynamic analysis and debugging of applications. It offers a variety of features including inline hooking, stealthy code tracing, and memory monitoring, along with capabilities for inspecting process state, loaded modules, and memory scanning. Additionally, it provides developers with tools for code generation, relocation, and detailed heap allocation tracking.

The Flipper Zero SubGHz BruteForcer is an application designed to brute-force radio protocols to gain access to incompatible devices. It supports multiple SubGHz protocols, allowing users to select specific frequencies and control the number of repetitions for probing, optimizing the chances of key recovery. Notable features include a user-friendly menu navigation, protocol selection, and the default setting for the most common CAME protocol, emphasizing legality and ethical use.

The Sentry Safe plugin for Flipper Zero exploits vulnerabilities to unlock Sentry Safe and Master Lock electronic safes. It provides functionalities to input a 5-digit code and select code types, enabling users to bypass security mechanisms with a simple interface and GPIO wire setup. Notable features include direct installation via the Flipper Zero Plugin Manager and the option for manual build if desired.

The flipperzero-nrf24 tool provides a driver for integrating NRF24 radio transceivers with the Flipper Zero device, enabling functionalities such as sniffing NRF24 addresses and executing mousejack attacks. It is intended for educational use, focusing on security research and responsible testing on personal equipment. Notable features include the capability to utilize two Flipper Zero applications leveraging the NRF24 driver for real-time radio communications analysis.

RogueMaster Flipper Zero Firmware

Flipper Zero firmware source code

Flipper Authenticator is a software-based multi-factor authentication tool designed for the Flipper Zero device, implementing both TOTP and HOTP standards for user authentication in software applications. It provides a companion desktop app for enhanced user interaction and supports common security practices for maintaining application integrity. This tool serves as an alternative to traditional authenticators like Google Authenticator, tailored for the Flipper Zero ecosystem.

The Flipper POCSAG Receiver plugin allows users to decode POCSAG messages at multiple baud rates (512, 1200, and 2400) on CC1101 supported frequencies, with a default configuration for DAPNET at 439987500. Key features include customizable frequency settings via a configuration file, which enables users to add new presets and frequencies, enhancing the flexibility of the tool for various radio communication applications.

Playground (and dump) of stuff I make or modify for the Flipper Zero

http://firmware-mod-kit.googlecode.com/svn/trunk

The Firmware Mod Kit is a comprehensive set of scripts and utilities designed for extracting and rebuilding Linux-based firmware images, primarily targeting embedded systems such as routers. Key features include the ability to deconstruct firmware into its components, modify the file system and web UI, and then rebuild the firmware for installation, albeit with a warning of potential device bricking. This tool is aimed at embedded systems software engineers familiar with the risks and complexities involved in firmware modification.

exrs is a collection of exercises focused on reverse engineering and exploitation, specifically using 64-bit ELF binaries. The tool primarily serves as a training platform, enabling users to solve challenges by reverse engineering binaries to achieve objectives such as executing code or spawning shells. Notably, the exercises enforce a clear separation from traditional cracking methods, emphasizing interaction via standard input/output as if engaging with a remote service while maintaining compatibility with NX and ASLR protections.

EvenDemoApp is a tool designed for interacting with smart glasses through Bluetooth, enabling functionalities such as audio recording, image transmission, and text display. Its primary use case is to capture real-time audio, process it into text responses via a large model, and transmit visual content like 1-bit BMP images and text messages to the glasses. Notable features include separate BLE connections for both arms of the glasses, customized text display formatting, and manual operation modes during audio feedback.

ESP32Berry was designed as a development platform for enhancing user interfaces using the ESP32 microcontroller, specifically targeting the T-Deck hardware. Key features included a home screen, app management, dynamic WiFi selection, and a ChatGPT client, utilizing the LovyanGFX library for faster screen updates. However, the project has been retired following the official release of a similar framework by Espressif, and users are directed to the author's new project, PocketSSH.

The ESP32 Wi-Fi Penetration Tool is a versatile framework designed for executing various Wi-Fi attacks on the ESP32 platform, facilitating functionalities such as PMKID and WPA/WPA2 handshake capturing, deauthentication, and denial-of-service attacks. It features a user-friendly web-based management interface for configuration, passive traffic sniffing, and the ability to format captured data into PCAP or HCCAPX formats, making it suitable for integration with tools like Hashcat. This tool's extensibility allows users to implement new attack methodologies easily, enhancing its utility in wireless security assessments.