~/hackyfeed $

DeepSeek Harness (`dsh`) is an open-source agent framework designed for spatiotemporal composability, leveraging a plugin architecture powered by Cordis. Primarily intended for developers, it enables easy web interface deployment and supports rapid iteration with potential compatibility-breaking changes. Key features include a customizable Web UI, community support through GitHub Discussions and Discord, and straightforward setup instructions for both npm and source installations.

NetWatch is a local-first visibility tool designed for IT admins and small security teams to monitor and assess changes within their authorized local networks. This tool provides a dashboard for asset discovery, TCP service exposure review, and maintaining context around significant changes, while emphasizing the importance of operating within authorized boundaries. Notable features include a repeatable workflow for local asset awareness, integration with Docker for easy deployment, and a focus on defensive visibility rather than exploitation.

Boggart is a low-interaction experimental honeypot designed for mimicking specific host behaviors to attract and analyze potential threats in a home lab environment. Its notable features include a customizable configuration via `config.yaml`, support for multiple open ports (including a honeypot, dashboard, and API service), and deployment capabilities using Docker. This tool serves primarily for educational and experimental purposes, providing insights into attacker behaviors without being intended for professional or industrial use.

DetectionForge is a specialized detection engineering environment that enables security engineers to create, validate, and test detection rules specifically for the LimaCharlie platform. Key features include syntax checking, historical testing with LimaCharlie’s replay capabilities, and an intuitive workflow for iterative rule development using a modern Progressive Web Application architecture built with Vue 3 and TypeScript. The tool emphasizes seamless integration with LimaCharlie, allowing for comprehensive impact analysis and configuration management.

The ExploitDB MCP Server is a Model Context Protocol server designed to provide AI assistants with access to security exploit and vulnerability data from ExploitDB. Its primary use case is to enhance cybersecurity research and threat intelligence through functionalities like searching for exploits by various criteria, retrieving detailed exploit information, and tracking newly added exploits, all while supporting automatic database updates to ensure up-to-date information. Notable features include comprehensive search and analysis tools, statistics on exploit distribution, and batch retrieval capabilities for efficient data access.

The Converged Security Suite is a comprehensive toolkit designed to implement and validate security features for Intel platforms, including Intel Trusted Execution Technology and Intel Boot Guard. Its primary use case involves providing both testing and provisioning capabilities for various Intel security features, along with support for some AMD Secure Processor functionalities. Notable features include dedicated test suites for validation and the ability to provision multiple security technologies, ensuring enhanced platform integrity and security compliance.

IDA Skill is an AI-powered tool that enables automated malware analysis using IDA Pro, mimicking the capabilities of human security analysts. It features automatic identification of malicious behavior, code functionality understanding, key information extraction, and threat indicator localization, enhancing malware investigation efficiency. Notable components include REAI for AI function analysis and FindCrypt for detecting encryption algorithms, facilitating comprehensive and advanced threat assessment.

The ANY.RUN SDK is a Python client library designed to interact with the ANY.RUN REST API, facilitating automated malware analysis and threat intelligence workflows. It provides features for file and URL submissions to an interactive sandbox, real-time monitoring of analysis progress, and access to comprehensive threat intelligence, including IOC searches and feeds. Notable functionalities include support for both synchronous and asynchronous operations, along with built-in exception handling and detailed reporting capabilities.

NotDec is a WebAssembly decompiler and static analysis framework that focuses on enhancing decompiler techniques through variable recovery and structural analysis. Its primary use case is to facilitate detailed type recovery experiments, allowing developers to gain insights into the inner workings of decompilation processes while improving their algorithms iteratively. Notable features include customizable environment variables for debugging type recovery and a robust setup for experimenting with LLVM and C code generation.

FitFace Studio is an Android application designed for customizing Fit3 (SM-R390) watch faces by allowing users to browse, edit, and install them directly to their watches via Bluetooth. The tool features a catalogue for searching and sorting watch faces, a layout editor for altering backgrounds and widgets, and does not redistribute watch face packages; instead, it edits the original binary directly. With functionalities such as widget movement, color adjustments, and real-time validation before installation, it facilitates a user-friendly interface for personalizing watch faces without the need for app re-signing or installation on the device.

Onyx External ESP is a tool designed for emulation on Android x86_64 architecture, specifically for the MuMu Player, providing users with external ESP (Extra Sensory Perception) features such as skeletons, snaplines, bounding boxes, health indicators, and off-screen markers. Primarily aimed at educational purposes, it serves as a foundational codebase for understanding and modifying ESP implementations in games, though it currently lacks support for physical ARM devices and certain advanced features due to game obfuscation. The tool includes automated batch scripts for straightforward building and deployment, enhancing the user experience for developers and researchers.

Metaforce is a reverse-engineered reimplementation of the video game Metroid Prime, currently in alpha state and focused on providing a native, cross-platform gaming experience on Windows, macOS, and Linux. Its notable features include support for multiple graphics APIs (D3D12, Vulkan, OpenGL, Metal), a console logging option, and developer functionalities such as world/area warping, enabling users to explore and debug the game more effectively. The project is supported by ongoing contributions from its decompilation counterpart, enhancing bug fixes and new implementations.

swift-dwarf is a Swift library designed for parsing binary files to extract DWARF debugging information from Mach-O and ELF binary formats. It utilizes MachOKit for Mach-O files and ELFKit for ELF files, supporting various DWARF sections such as `.debug_info`, `.debug_str`, and `.debug_line`. The tool provides interfaces to easily access string tables, abbreviation sets, and compilation units, facilitating a streamlined debugging process for developers working with low-level binaries.

The SOMtoday REST API provides comprehensive documentation for integrating with the SOMtoday educational management platform. Its primary use case is to facilitate access to various educational data endpoints, including student information, grades, schedules, and homework assignments via RESTful API calls. Notable features include authentication mechanisms, support for fetching specific student and school data, and options for accessing data in iCalendar format.

smali/baksmali is an assembler and disassembler for the dex format utilized by Android's Dalvik Virtual Machine, enabling users to manipulate Android bytecode effectively. It supports comprehensive features of the dex format, including annotations and debugging information, while providing a command line interface for building and testing. The tool is a maintained fork of the original smali project, ensuring ongoing updates and support through Google Maven distribution.

The `rockchip-npu-notes` repository provides comprehensive reverse-engineering documentation for the Rockchip RK3588 Neural Processing Unit (NPU), focusing on the hardware's register-command interface and its integration with the mainline `rocket` DRM-accel driver. It includes subsystem-organized notes detailing machine parameters, register offset maps, precision encodings, and operational quirks, aiming to assist users constructing custom compute solutions using the RK3588. Notable features include empirical observations tagged with their verification methods, alongside in-depth explanations of NPU architecture and operational capabilities.

OSWatcher is a tool designed for the preservation and analysis of historical operating system releases, allowing users to query a comprehensive graph of changes across OS versions from Windows 95 through 11 and Ubuntu 6.10 to 25.04. Using a Merkle graph model stored in Neo4j, it enables users to explore file evolutions, provenance of artifacts, and commonalities across releases, akin to a version control system for OS images. Notably, OSWatcher emphasizes offline image analysis rather than real-time monitoring, differentiating itself from similar tools like Oracle's OSWatcher Black Box.

openevv is a portable implementation of IBM's Embedded ViaVoice text-to-speech engine, reengineered in C for compilation on non-Windows platforms, enabling text-to-speech functionality with byte-for-byte fidelity to IBM's original audio outputs. Its primary use case includes generating audio from text and serving as an add-on for screen readers, with features like multiple voice presets and the ability to produce wave files for playback on Linux systems. The tool is built entirely from scratch without reliance on IBM's SDK, and includes both command-line and graphical interfaces for user interaction.

MikuSB is an open-source server emulator for a specific dungeon anime game, designed to enable local gameplay and testing by mimicking server functionalities. It features distinct components including `SdkServer` for HTTP API responses, `GameServer` for TCP connections, and an optional local proxy for domain redirection. Key capabilities include account management, player data handling, inventory, and weapon functionalities, while supporting research and educational purposes within a safe environment.

JavaShroud is a comprehensive obfuscation and hardening toolchain for Java applications, utilizing bytecode transformation through a Kotlin engine and enabling the execution of lowered methods within a Native bytecode VM (NBVM). It offers various features, including class and method renaming, string encryption, control flow obfuscation, method virtualization, and integrated runtime protections, designed to enhance security by increasing the costs associated with reverse engineering and code analysis. The tool emphasizes the generation of unique keys and layouts for each output, adhering to the Kerckhoffs principle, ensuring that the strength of the protection does not rely on implementation secrecy.

The dmg-schematics repository provides comprehensive reverse-engineered schematics of the Game Boy DMG-CPU B chip and the SM83 CPU core using KiCad. It includes detailed layouts, parsable netlists, and exportable formats such as PDF. Notable features consist of an Electric VLSI cell library for standard cells, modified overlay SVGs that sync with the schematics, and a netlist formatting tool that generates readable outputs and simulation code.

crossroads-2-disassembly is a reverse engineering tool designed to disassemble and analyze the C64 game Crossroads 2, originally published in 1988. It allows users to generate ASM files that replicate the original game, with optional variations to enhance gameplay, such as always displaying credits and modifying escalation levels. Notable features include handling complex assembly language constructs, such as the "BIT NOP trick" and self-modifying code challenges, enabling a clearer understanding of the game's underlying mechanics.

Arkana is a comprehensive malware analysis tool that streamlines the investigation process by integrating 308 specialized analysis tools through a single AI-driven interface. It allows users to submit natural language prompts to conduct extensive malware evaluations, including decompilation, vulnerability detection, and real-time data enrichment without switching between multiple applications. Notable features include automated risk scoring, MITRE ATT&CK mapping, and interactive debugging capabilities, all designed to enhance efficiency in analyzing PE, ELF, and other binary formats.

Surveillance-Industry is a comprehensive resource mapping the global surveillance ecosystem, detailing the companies and entities involved in the development of mass-monitoring tools across various jurisdictions. With 21 dossiers covering responses from multiple nations, including a deep-dive into companies like Palantir, it provides in-depth insights into state surveillance practices, industry vendors, and associated scandals, all presented in a Markdown format for ease of navigation. This tool serves as an essential guide for researchers and policymakers interested in the implications of surveillance technologies.

NEO-Radar is a lightweight network scanner designed for Linux and Termux, aimed at simplifying network scanning for users without extensive networking or cybersecurity knowledge. Its primary use case is to provide essential scanning functionalities akin to more complex tools like Nmap, while also including a command reference for learning purposes. Notable features include ease of installation via a single command, compatibility with mobile devices, and a focus on user-friendly operations, making it accessible for a wider audience.