~/hackyfeed $

The Assemblyline CAPE Service integrates with CAPEv2 to facilitate the submission of files for automated malware analysis, utilizing a REST API to manage task distribution across virtual victim machines. It retrieves and summarizes analysis reports, providing users with both summarized results and full report access through the Assemblyline UI. This service requires a private CAPE deployment and additional configuration for optimal functionality and reporting.

Assemblyline Base is a foundational package for the Assemblyline suite, providing essential libraries, cachestore, datastore, filestore, and remote datatypes necessary for operational functionality. It is specifically designed for environments running Python 3.11 on Linux systems, with support for both stable and development builds. Key features include robust dependency management and compatibility with containerized deployment via Docker images.

AssemblyLine 4 is an open-source automated malware analysis framework designed to support both manual analysis and large-scale enterprise security operations through scalable file triage. Built on Kubernetes and Docker, it offers extensive integration capabilities with various security tools and provides a REST API for customizable extensions. Notable features include deep file analysis, interoperability with threat knowledge bases, and the ability to create additional analysis services via Python.

ApkClaw is a tool that enables users to control Android devices by sending plain language messages through popular chat applications like WeChat, Telegram, and Discord. Its primary use case involves delegating tasks such as opening apps, tapping buttons, and checking status directly from a computer, leveraging an AI agent for task execution on the Android device. Notable features include multi-platform messaging support, easy setup instructions, and the ability to manage Android tasks remotely, simplifying user interactions with their devices.

A patcher that decompiles WhatsApp APK, patches the smali, recompiles and signs it.

The Mandiant VM-Packages repository provides PowerShell scripts that facilitate the installation and configuration of tools for binary analysis environments, specifically FLARE VM and CommandoVM. Notable features include automated package building and testing using GitHub Actions, a public MyGet package feed for easy access, and community contributions for package development and improvement. This setup enhances transparency and reduces manual maintenance for users, ensuring that tools can be effortlessly integrated into their virtual machine environments.

Unicorn Engine is a versatile, multi-platform CPU emulator framework that supports various architectures, including ARM, x86, and MIPS, enabling users to execute and analyze software in a controlled environment. Its notable features include a simple and lightweight API, high performance through Just-In-Time compilation, and support for instrumentation and thread-safety, making it ideal for security research, software debugging, and development tasks across different programming languages.

Tsuru is a platform designed for modders of New Super Mario Bros. U, providing a comprehensive toolset and API for custom code development. It includes numerous code examples and pre-made patches to assist new modders while aiming to unify various coding projects for easier access. The tool supports the standalone version 1.3.0 of the game and offers a patch installer for seamless integration.

TSA (TON Symbolic Analyzer) is a static analysis tool designed for evaluating smart contracts on the TON blockchain through symbolic execution. Its primary use cases include detecting potential runtime errors, generating regression tests, and identifying malicious contracts, with the capability to analyze any language compiled to TVM bitcode format. Notable features include its test generation capabilities and detailed analysis of integer processing issues and data handling in smart contracts.

Spice86 is a PC emulator designed for reverse engineering and modification of real mode DOS programs where source code is unavailable. It methodically generates a self-contained C# project from the executed code's Control Flow Graph (CFG), facilitating gradual rewriting from low-level assembly to higher-level code, while also supporting Ghidra integration for deeper static analysis. The tool operates across multiple platforms (Windows, macOS, and Linux) and provides extensive runtime data dumps to aid in the analysis and reconstruction process.

The Snowboard Kids 2 decompilation project provides an environment for reverse-engineering the classic Nintendo 64 game by extracting game assets from an existing ROM and combining them with C code to create an identical ROM. Its primary use case is for developers and enthusiasts interested in studying or modifying the game, and it features support for building on Debian/Ubuntu and macOS, with dependencies for C code compilation and asset extraction. The project is strictly non-commercial and emphasizes community contributions for code documentation and compatibility improvements.

The Rootkits Development Starter Pack provides a collection of Windows kernel-mode driver examples that demonstrate fundamental rootkit functionalities such as thread creation, process callbacks, and filesystem filtering. Its primary use case is to educate users on kernel-level development and guide them through creating modular steps for advanced rootkit development. Notable features include a comprehensive set of proof-of-concepts, detailed instructions on building drivers, and essential information on Windows kernel operations and security measures.

Reversecore MCP is an AI-powered server designed to facilitate reverse engineering and security analysis by integrating 120 analysis tools into a unified interface. It utilizes natural language processing to allow AI assistants to perform tasks like malware analysis, vulnerability research, and source code auditing, significantly simplifying the interaction with complex command-line tools. Notable features include structured tool results that AI can reason about and chain into follow-up queries, making it highly efficient for rapid security assessments and investigations.

Reach is a decompilation project for Halo Reach that enables developers to examine and modify the game's code structure. Its primary use case is to facilitate reverse engineering for educational and modding purposes, although it requires a legitimate copy of the game to function. Notable features include detailed progress tracking for both code and data decompilation, alongside support for specific debug tag versions.

Quokka is a binary exporter that facilitates the manipulation of binary files without the need for ongoing disassembly after the initial export, supporting disassembly backends like IDA Pro, Ghidra, and Binary Ninja. It provides a clean interface by abstracting the APIs of various disassemblers and generates .quokka files, which can be loaded for further processing. Notable features include the ability to export in LIGHT mode for block-level data export and the upcoming FULL mode for comprehensive instruction and operand exporting.

Pylabview is a set of Python tools designed for extracting, modifying, and recreating LabVIEW RSRC files, such as VIs and CTLs. Its primary use case involves enabling batch processing of these files, allowing users to make bulk modifications outside the LabVIEW GUI, and facilitating the recovery of files that LabVIEW cannot read. Notable features include the capability to extract RSRC files into a structured format for easier manipulation, support for binary and text extraction, and the generation of outputs that aim for binary-level fidelity to the originals, despite some known exceptions.

Pyamoto is an enhanced level editor for the game Super Mario Maker, designed as an advanced fork of the original Miyamoto editor, primarily aimed at improving functionality and user experience. It features a streamlined installation process, supports automated releases and Homebrew installation for macOS, and includes comprehensive usage documentation on its wiki. Notably, Pyamoto encourages community contributions and offers a dedicated environment for developers to collaborate and contribute to the project.

OpenStrap protocol is a pure Dart package designed for decoding raw byte data from wearable devices, specifically targeting historical records and command/event processing without any external dependencies. Its notable features include byte-level framing, CRC checks, and the ability to parse a variety of record types, such as R24 for heart rate and wearable metrics, all while ensuring that data remains on-device with no reliance on cloud services. This tool is primarily used for reading and interpreting data from personal tracking bands, supporting developers in building applications that analyze this data locally.

This repository features a work-in-progress disassembly of the Pokémon HeartGold and SoulSilver ROMs, facilitating modifications and enhancements for developers. Its primary use case is enabling developers to analyze and modify game code, with notable features including the ability to build specific ROM versions tailored for testing or development.

OpenSKP is an open-source, cross-platform parser for SketchUp (`.skp`) binary files that allows developers to access and manipulate 3D model data programmatically without the need for the SketchUp application or its SDK. It supports both modern and legacy file formats, offering features such as 3D geometry extraction, dynamic component handling, scene baking, and export capabilities to various formats including GLB and OBJ. Built in multiple programming languages, it emphasizes low-memory parsing and includes comprehensive observability for error management.

OpenFusion is a reverse-engineered server for the online game FusionFall, enabling players to access and play versions `beta-20100104` and `beta-20111013`. The tool supports easy installation via a launcher or standalone zip file and allows users to host their own servers with customizable options for IP and game version. Notable features include automatic progress saving and support for Linux through Wine, making it accessible to a wider range of users.

Open Apollo is an open-source project that provides Linux drivers and tools for Universal Audio's Apollo Thunderbolt and USB audio interfaces, enabling full duplex audio routing, preamp and monitor control, and system integration. Key features include comprehensive support for multiple sample rates, low-latency audio capture and playback, a DSP mixer with audio effects, and compatibility with PipeWire for seamless audio management. This experimental project is actively developed to enhance audio interface functionality on Linux but is not yet ready for production use due to potential stability issues.

The EVA-zh-Hans/nge_2_re project is focused on creating a comprehensive and reproducible Chinese localization patch for the PSP game "Neon Genesis Evangelion 2: The World Created." It includes notable features such as text structure parsing, translation management, and automated patch building, enabling it to successfully replicate the game's intricate internal mechanics and narrative elements. The project leverages advanced technologies like machine translation and relational database storage for efficient handling of translation tasks.

The Native Predicate Solver is a C++ plugin for Binary Ninja that efficiently removes opaque predicates from binary functions, thereby optimizing decompilation and analysis. It leverages multi-threading for parallel function processing and conducts iterative analysis to ensure comprehensive removal of constant conditional branches. The tool is designed for speed and performance, making it particularly effective for managing large binaries.

Multivoid is a standalone mod designed to introduce drop-in co-op functionality to the single-player game Voices of the Void without modifying original game files. It supports up to four players via LAN or Internet and offers features such as seamless mid-game joining, 3D positional voice chat, and a comprehensive synchronization system for various game mechanics. The project is currently in its alpha phase, focusing on establishing a solid multiplayer foundation and ensuring game systems are accurately synced.