~/hackyfeed $

Sly1 is a work-in-progress decompilation of the PlayStation 2 game *Sly Cooper and the Thievius Raccoonus*, aiming to reconstruct the game's source code for the NTSC-U version (SCUS_971.98). Its notable features include detailed documentation of the game's internal mechanics, community support via a Discord server, and contributions from developers to enhance its completeness. Users are required to possess their own copy of the original game files to build and run this project.

ReArk is an advanced reverse engineering tool specifically designed for HarmonyOS NEXT applications, capable of analyzing various file formats such as `.hap`, `.app`, and `.abc`. Its primary use case includes security reviews, CTF challenges, and automated interactions on HarmonyOS devices, featuring extensive static analysis capabilities, an integrated ReArk Agent for contextual queries, and device connection functionalities for real-time application testing. Notable features include comprehensive package analysis, signing and re-signing support, and an easy-to-navigate interface for inspecting application metadata and runtime logs.

The PMD-Red tool is a decompilation project for Pokémon Mystery Dungeon: Red Rescue Team, enabling users to build and modify the game ROM (pmd_red.gba). Notable features include a structured build system and documentation for setup, catering primarily to developers and enthusiasts aiming to explore or alter the game's code.

New Yokosuka is a browser-based multiplayer game that recreates the environments and experiences of SEGA's Shenmue I and II, allowing players to explore, interact with characters, and engage in various activities such as forklift driving and arcade games. Utilizing Babylon.js and a Go-based multiplayer server, it features native loading of Dreamcast assets, dynamic gameplay elements like NPC routes and real-time state simulation, and supports a rich multiplayer experience with user account management. The project is in active development, focusing on accurate replication of original game functionalities while providing tools for asset extraction and analysis.

ESP32Drop is a library that implements AirDrop functionality using the ESP32-S3, enabling file transfers between ESP32 devices and Apple devices without the need for pairing or routers. It supports direct communication to send and receive files, including images and various file types, while maintaining compatibility with the Apple Wireless Direct Link (AWDL) protocol. Notably, it operates exclusively over a secure direct link without requiring additional setup or infrastructure.

The Burnout Paradise Decompilation Workflow repository serves as an orchestration workspace for the reverse-engineering of Burnout 5 / Burnout Paradise, facilitating the reconstruction of the Xbox 360 build into compilable PC C++ code. Notable features include detailed analysis databases, tracking of translation units, work progress, and a structured methodology for claiming, verifying, and reviewing reconstruction efforts. The workflow triangulates data from multiple builds and references to ensure accuracy and comprehensiveness in the decompilation process.

agent-bypass is a versatile framework designed for automation and operational tasks in penetration testing, offering a comprehensive suite of tools and methodologies. It integrates seamlessly with any agent that supports its SKILL.md and provides users with direct, efficient interactions through command-line input without external dependencies. Notable features include automatic environment compatibility detection, an array of specialized modules for various cybersecurity tasks, and a focus on delivering actionable outputs and scripts.

Breach Check is a tool designed to verify if a list of email addresses has been compromised in data breaches. Its primary use case is to facilitate the monitoring and protection of personal information by utilizing the LeakCheck and RockHudson APIs to identify leaked credentials and information-stealing threats. Notable features include easy installation via pip, support for batch email checks from a text file, and the capability to search for leaks from multiple sources.

Enteletaor is a Message Queue & Broker Injection tool designed for assessing the security of messaging systems like Redis, RabbitMQ, and ZeroMQ. It enables users to perform various actions such as listing remote tasks, injecting tasks into processes, disconnecting clients, and scanning for open brokers, while also incorporating a password brute-forcing module. This tool is particularly useful for penetration testing and vulnerability assessments in environments that utilize message queues and brokers.

Outrider-recon is an external reconnaissance and attack-surface management tool designed for authorized bug bounty, pentesting, and security teams. It transforms public recon data into prioritized, evidence-backed insights, facilitating the mapping of an organization's attack surface while preserving local evidence and offering structured reporting. Notable features include a focus on ranking leads by confidence and severity, as well as methods for adhering to deterministic scope and approval processes without acting as an exploitation framework.

Jadart is a specialized Flutter decompiler designed for reverse engineers and security reviewers to analyze APKs, providing a detailed class tree, method bodies represented as pseudo-Dart, and accessible embedded data. Notably, it avoids speculative parsing by clearly indicating any uncertainties, instead of providing plausible but potentially incorrect reconstructions, allowing for accurate analysis of compiled Dart code. This tool effectively exposes the intricacies of AOT-compiled applications that are otherwise obscured by traditional analysis methods.

WasmQuay is a static analysis tool for WebAssembly components that inspects and classifies their capabilities while ensuring compliance with specified policies. It decodes `.wasm` binaries offline, assesses their imports against user-defined rules, and generates a typed JSON manifest for further exploration in TypeScript. Notable features include capability classification, policy enforcement during continuous integration (CI), and comparison of component substitutability, all executed without runtime dependencies or execution of the WebAssembly code.

ShareLint is a local privacy tool designed to preemptively scan files, folders, and nested archives for sensitive data such as secrets, personally identifiable information (PII), and hidden metadata before sharing. Its notable features include a fail-closed mechanism that ensures sensitive information is caught without the need for uploading content, and compatibility with multiple operating systems through standalone archives or Python integration.

Log Horizon is a Microsoft Sentinel SIEM log source analyzer designed to evaluate the security value of log tables being ingested in a Sentinel workspace. Its primary use case is to classify logs, score their relevance against detection rules, and provide actionable recommendations to optimize log management and reduce costs while enhancing security posture. Notable features include a comprehensive classification engine, cost-value scoring matrix, detection mapping, and automated recommendations for improving log ingestion practices.

GView is a versatile framework designed for inspecting structured data, including files, buffers, and memory regions, enabling users to analyze and visualize information effectively. It features various smart viewers for different data types, allowing for comprehensive examination and interpretation, while also providing a plugin architecture for developers to extend functionality with custom data parsers. Notable use cases include analyzing compromised systems and suspicious emails, showcasing GView's capability to uncover threats through detailed data presentations.

Emulite is a Python framework designed for emulating native binaries on Android and iOS platforms, focusing on detailed logging, configurable execution profiles, and robust error handling. It supports various emulation architectures and allows users to hook into system calls and memory access with clear, strong typing, making it suitable for debugging and reverse engineering tasks. Currently in alpha, the framework aims for a stable release while incorporating features inspired by similar tools like Unidbg and Chomper.

Wiinject is a cross-platform tool designed for injecting ASM hacks into Wii games through Riivolution memory patches. It allows users to compile PowerPC assembly and C source files, creating a memory file and corresponding XML patches for Riivolution with customizable injection sites. Notable features include support for folder structuring for organized patch creation, integration with devkitPPC and Ninja build systems, and configurations for input and output paths to streamline the patching process.

V-On Patcher is a tool designed to optimize and enhance the gameplay experience of *Cyber Troopers Virtual-On* (PC, 1997) on modern systems. Its primary use case is to install the game from a disc image while addressing common issues such as crashes and frame rate problems, alongside providing features like 1920x1080 rendering, XInput gamepad support for two players, and internet multiplayer capabilities without the need for port forwarding. Notable features include the ability to rip the game soundtrack from files, windowing options, and a straightforward installation interface.

`ui-clone-skills` is a sophisticated tool designed to replicate live websites into functional React and Tailwind implementations by capturing their dynamic behaviors and animated elements. It excels in extracting accurate styles, assets, and motion parameters from live sites, enabling verification against multiple viewports and interaction states to ensure fidelity. Unlike traditional screenshot-to-code tools, it focuses on the underlying motion dynamics and responsive features, creating a more authentic and verified code output.

mzretools is a suite of utilities designed for reverse engineering MS-DOS games by analyzing MZ executables containing 8086 opcodes. It primarily facilitates the reconstruction of instruction-level structures while accommodating variations in executable layouts, and features tools such as `mzhdr` for extracting MZ header information and `mzmap` for tracing and mapping executable routines and variables. Built to integrate with IDA, it also includes a unit testing framework for ensuring tool reliability through the use of GTest and CMake.

BinProv is a tool for identifying compilation provenance by determining which compiler and optimization level was used to compile a binary, all without disassembly. It employs a BERT-style byte-level encoding of the raw bytes from the binary's `.text` section into a classification model, effectively covering architectures like x86_64, x86_32, ARM, and MIPS. Notable features include a pretrained model for various optimization levels, high accuracy on classification tasks, and detailed documentation for reproduction and inference.

CAFED00D is a Java class library focused on class file manipulation and obfuscation support. It provides functionality to read and write JVM classes while enabling anti-obfuscation measures and stripping malformed attributes introduced by obfuscators. Notable features include support for Oak classes, the ability to rewrite JVM instructions, and a customizable system for managing class file transformations.

CyberStrikeAI is an AI-native cybersecurity tool designed for orchestrating authorized security operations through enhanced planning, execution, and human oversight in a unified workspace. Built in Go, it features agentic execution that converts natural-language intent into auditable security actions, integrates with various tools, and provides a comprehensive dashboard for monitoring system status, vulnerabilities, and tool usage. Notable capabilities include task management, vulnerability management, and WebShell management, ensuring a robust framework for managing cybersecurity tasks efficiently.

The Vulnerable Code Snippets repository provides a collection of code examples that illustrate various security vulnerabilities across web applications, APIs, and AI systems. It serves as an educational tool for developers and security practitioners, featuring 60 examples that include both vulnerable and secure code, along with explanations of the associated weaknesses and mitigations. Notable features include its focus on the OWASP Top 10 vulnerabilities for LLM applications and a structured format that facilitates learning about secure coding practices.

zpi-sdk is a universal TypeScript SDK designed for the Zapi (Zest API) scraper platform, enabling seamless interaction with web scraping endpoints through a single API key. It features a zero-dependency approach and supports multiple runtimes including Node, Bun, Deno, and browser environments, allowing developers to execute scraper tasks with structured error handling and automatic method determination. Notably, it includes a built-in MCP client for AI integrations, facilitating tool discovery and interaction in a streamlined manner.