~/hackyfeed $

The ESP32 NAT Router firmware enables the ESP32 device to function as a WiFi NAT router, facilitating routing between the access point and uplink networks while offering VPN capabilities via WireGuard. Key features include NAT routing with over 15 Mbps throughput, DHCP reservations, port forwarding, a web interface for configuration, dual-band support, and robust monitoring options such as live packet capture and integration with home automation systems via MQTT. This tool is suitable for scenarios like extending WiFi range, creating guest networks, and connecting corporate networks to standard WiFi.

The ESP32 Hacking Tool provides a suite of features for network disruption and exploitation, including WiFi beacon spamming, deauthentication attacks, captive portal creation, and Evil Twin attacks. Its notable capabilities facilitate the redirection of connections to fraudulent login pages and the impersonation of legitimate networks, enabling users to capture sensitive credentials. Additionally, the tool supports various scanning and spoofing functionalities, making it a versatile asset for penetration testing and network security assessments.

ESP-IDF is a comprehensive development framework designed for ESP32 and ESP8266 microcontrollers, enabling developers to build IoT applications across multiple platforms, including Windows, Linux, and macOS. It features a modular architecture that supports various hardware configurations, extensive documentation, and built-in examples to facilitate project setup and management. Notable capabilities include project configuration, building, and flashing directly to compatible devices through structured command-line tools.

Es is an extensible shell that draws from the Plan 9 shell, rc, and functional programming languages, allowing users to leverage higher-order functions within a shell environment. It is designed for script execution and interactive use, featuring a built-in debugger and various examples for user customization. The tool is maintained as public domain software with no restrictions on distribution, making it accessible for further development and adaptation.

emuMMC is a replacement SDMMC driver for Nintendo's Filesystem Services that allows users to load emulated eMMC data from an SD card or vice versa. Notable features include arbitrary backend selection, on-the-fly hooking and patching with a single payload for all supported Horizon versions, and full support for the redirection of the `/Nintendo` folder to arbitrary paths without character restrictions. Additionally, emuMMC supports file-based SDMMC backends, enabling the loading of eMMC images from backups.

The EEPROM File System (EEFS) is a lightweight file system designed for memory-based devices such as EEPROM, RAM, and ROM, offering an efficient means to boot embedded systems without requiring a traditional operating system. It features easy-to-create file system images for deployment on target devices, a microeefs interface for quick file lookup, and drivers for both RTEMS and vxWorks, with planned support for multiple EEFS volumes in future releases.

eCapture is a Linux and Android tool that captures SSL/TLS plaintext data without requiring a CA certificate, utilizing eBPF technology. It supports various libraries such as OpenSSL, GnuTLS, and GoTLS, and also includes auditing capabilities for Bash, Zsh, and MySQL operations. Notable features include its ability to run with minimal privileges in Docker and automatic detection of libraries for seamless operation.

Dyninst is a dynamic instrumentation tool designed to facilitate the analysis and manipulation of running binary applications. Its primary use case includes enhancing performance for debugging, profiling, and monitoring applications in a dynamic environment. Notable features include support for building custom tools within Docker containers, as well as the ability to work with CMake for configuration and installation.

duti is a command-line utility for macOS that allows users to set default applications for various file types using Apple's Uniform Type Identifiers (UTIs). Notable features include the ability to read settings from multiple sources such as standard input, settings files, and XML property lists, as well as providing functionality to retrieve default application information for specific file extensions. This tool is particularly useful for managing application associations for different document types efficiently.

dumpdecrypted is a tool designed for obtaining decrypted copies of iPhone applications, serving as a more effective alternative to GDB scripts in scenarios where GDB is not functional. Its primary use case is for security researchers, allowing them to inspect application binaries by dumping the decrypted executable while addressing sandboxing challenges encountered during operation. Notable features include automated detection of encrypted data, support for FAT binaries, and the capability to write decrypted output to designated locations, accommodating various sandbox constraints.

The dji-firmware-tools repository provides a suite of utilities for extracting, modifying, and repackaging the firmware of DJI multirotor drones. Its primary use case includes calibration, parameter modification, firmware hacking, and research into DJI hardware and software, enabling advanced users to unlock features and alter firmware behavior. Notable features include support for triggering calibration processes, modifying flight parameters without OEM software, and the ability to analyze and manipulate firmware binaries for enhanced drone capabilities.

The "db_tutorial" repository provides a comprehensive guide for building a simple database from scratch, aimed at developers interested in understanding database internals. It features step-by-step instructions and insights, enhancing the learning experience for those looking to grasp database concepts and implementation details. Notably, users can easily run the tutorial site locally using Jekyll, facilitating hands-on experimentation.

ctf_import is a lightweight library that facilitates the execution of functions from stripped binaries across different operating systems, provided the appropriate function offset and signature are known. It is primarily used for reverse engineering tasks where users can quickly invoke specific functions without needing complete binary access. Notable features include simplicity of use with minimal setup and compatibility across various OS environments, though it does not support cross-architecture execution or handle system calls and global variables.

The CTF Field Guide by Trail of Bits is an educational resource designed to enhance skills in Capture The Flag (CTF) competitions, which simulate real-world cybersecurity challenges. It provides comprehensive walkthroughs of past challenges, guidance on toolkit creation, and case studies of attacker behavior, aiming to prepare users for success in both competitive and professional security environments. Notable features include curated reference materials from experts and an encouragement for community collaboration to keep the content relevant.

The Situational Awareness BOF provides a collection of essential situational awareness commands compiled into a Beacon Object File (BOF) format for use in reconnaissance on target hosts prior to executing more intrusive actions. Its primary use case is to facilitate the enumeration of Active Directory objects and configurations, alongside system information retrieval, to enhance pre-attack visibility and planning. Notable features include various commands for enumerating certificate authorities, access checks, and environmental variables, making it a practical resource for developers aiming to create their own BOFs.

CodeRunnerVS is a Visual Studio extension that enables the execution of code snippets in multiple programming languages including JavaScript, PHP, Python, and Ruby. Its primary use case is to streamline the coding and testing workflow within the Visual Studio environment, providing a quick and efficient way to run code without needing to switch contexts. Notable features include support for various languages and the capability to execute scripts directly from the IDE.

codealignment

cdecl is a C gibberish translator that converts English-like declarations into valid C and C++ syntax, including support for Apple's blocks syntax. Notable features include the ability to handle typecasts, command line editing, and history functionality through the GNU readline library. It serves as a useful tool for developers needing to translate complex C declarations or to aid in understanding C syntax.

Catimg is a terminal-based image rendering tool written in C that allows users to display images in formats such as JPEG, PNG, and GIF directly within the command line interface. It features support for high-resolution rendering using Unicode characters, and provides options to adjust resolution with command-line flags, making it a lightweight alternative to existing image manipulation scripts that rely on external libraries like ImageMagick.

Capstone is a versatile disassembly framework designed for binary analysis and reverse-engineering, catering to the security community. It supports a wide array of hardware architectures and provides a lightweight, intuitive API with detailed disassembly output and semantics of instructions, making it suitable for high-performance malware analysis and integration into various applications, including firmware and OS kernels. With native compatibility across multiple platforms and extensive language bindings, Capstone is a powerful tool for developers and security professionals.

Binbloom is a binary analysis tool designed to automatically extract key features from raw binary firmware regardless of architecture. Its primary use case includes identifying the binary's loading address, determining endianness, and parsing for UDS command IDs within the firmware. Notable features include heuristic-based endianness detection, customizable architecture selection, and the ability to specify base addresses for more accurate parsing results.

The binary-visualization tool provides innovative methods for visualizing and reverse-engineering binary files through directed graphs (digraphs) and tuples. It supports the extraction and representation of various file types, including images and audio, converting compressed data into visual formats that can be plotted on Cartesian planes or displayed as 3D point clouds. Notable features include compatibility with multiple compilers, a straightforward command-line interface for file input/output, and the ability to decompress and visualize complex binary formats.

BBQX0KBD is an I2C keyboard device driver designed for specific products from Solder Party, including the BB Q10 Keyboard PMOD and Keyboard FeatherWing. Its primary use case is to facilitate keyboard input on Raspberry Pi SBCs, providing features like Caps Lock, Num Lock, and customizable trackpad functionalities, while ensuring minimal hardware interrupts are necessary for operation. Notable features include control over screen and keyboard brightness, volume adjustments via key presses, and the ability to change the I2C peripheral address with ease.

The Beepy keyboard driver provides an enhanced input experience for the RP2040 platform, incorporating features such as sticky modifier keys, customizable key mappings, and integration with the Sharp DRM driver for visual feedback. Notable functionalities include a meta mode for efficient cursor control, adjustable LED and keyboard backlight settings, and support for alternative touchpad functionalities. The driver is designed to replace the older `bbqX0kbd`, ensuring compatibility while offering extended capabilities for advanced users.

Arkime is an open-source, large-scale network analysis and packet capture system designed to enhance security infrastructure by storing and indexing network traffic in standard PCAP format. Its primary use case is to provide fast, indexed access to captured packets via an intuitive web interface, while also supporting APIs for data consumption. Notable features include scalability to handle high traffic volumes, seamless integration with existing PCAP tools like Wireshark, and options for contextual intelligence and enhanced security measures.