~/hackyfeed $

The Kirby & The Amazing Mirror repository provides a complete disassembly of the USA version of the game, allowing users to compile the ROM file katam.gba. Its primary use case is to facilitate game modifications and reverse engineering for fans and developers. Notable features include detailed source code and setup instructions, enhancing the modding community's ability to understand and modify the game.

Kagura is an LLVM-based code obfuscation and anti-tamper toolkit designed for mobile, desktop, and WebAssembly applications. It supports extensive protection mechanisms against threats such as static string extraction, decompiler-readable control flows, and dynamic instrumentation, employing techniques like string encryption, control flow flattening, and runtime checks. The toolkit integrates seamlessly with multiple platforms without requiring modification of the LLVM source tree, making it versatile for developers seeking enhanced security for their applications.

Jesso Decompiler is a static analysis tool that disassembles and converts compiled binaries into C code for both Windows (PE files) and Linux (ELF files), specifically targeting binaries coded in x86/x86-64 machine language. It features a GUI built with wxWidgets, allowing users to visualize the disassembly process, although it is still in development and does not yet fully support the entire Intel instruction set. The tool analyzes binaries to extract function details and generate an intermediate representation of the program's logic, assisting in reverse engineering efforts.

jd-gui-duo is a dual-function Java decompiler that integrates JD-Core versions 0 and 1, utilizing different algorithms for code analysis. Its primary use case is aiding developers in reverse engineering Java bytecode to recover source code. Notable features include support for the transformer-api, which enables additional decompiler compatibility beyond the original JD-Core implementations.

The Ioniq 5 CAN repository provides an open-source hardware retrofit kit designed to add preconditioning functionality to Hyundai Ioniq 5, 6, and EV6 vehicles by utilizing existing buttons in the car. Key features include the reverse-engineering of CAN messages for preconditioning, a microcontroller that sends these messages, and a user interface to activate or cancel preconditioning. The software and firmware are continuously developed to enhance the functionality and user experience while detailed documentation supports installation and operation.

Instagram iOS SSL Pinning Bypass is a modified version of the Instagram app for iOS that disables SSL/TLS certificate pinning, facilitating HTTPS traffic inspection for security research and reverse engineering. Key features include no requirement for jailbreak or Frida, compatibility with popular HTTPS proxies such as Burp Suite and mitmproxy, and support for iOS without introducing additional complexities. This tool is intended strictly for educational and research purposes in understanding mobile application security.

Haruspex is an advanced headless plugin for IDA Pro that efficiently extracts pseudocode from binaries, formatted for integration with IDEs or further parsing by static analysis tools like Semgrep. Notable features include its high-speed performance, compatibility with various architectures supported by IDA's Hex-Rays decompiler, and structured output where each function's pseudocode is saved separately for easy analysis.

The half-life1_win32_722 repository provides a reverse-engineered version of the source code for Half-Life 1 Net Test 1 (engine build 722), designed for developers looking to explore or modify this early pre-release iteration of the GoldSrc engine. It includes restored source code for critical components like the engine, client, and localization module, along with a reimplemented lightweight launcher. The tool is particularly useful for those interested in game development or historical software analysis of the Half-Life franchise.

Haggle Mod SDK is a modding tool specifically designed for Peggle Deluxe, enabling users to exploit the game's SexyFramework and Peggle functions through an external wrapper. Its primary use case includes facilitating the creation and loading of custom mods into the game, using the Haggle Mod Loader to inject mod code at startup. Notable features include an intuitive installation process, mod file management, and support for community-driven mod development through DLL integration.

GPMC is a cross-platform Python library and CLI tool designed for uploading media files to Google Photos using a reverse-engineered mobile API. Its notable features include unlimited uploads in original quality, automatic detection of existing files to prevent duplicates, album creation based on directory structure, and configurable multithreaded uploads for enhanced performance. The tool supports individual file and entire directory uploads with real-time progress tracking and optional JSON output for programmatic consumers.

The `ghidra-scripts` repository comprises a collection of scripts designed for Ghidra to enhance reverse engineering and vulnerability research. It features tools that locate insecure function calls, extract pseudocode, and resolve iOS and MIPS syscalls, thereby streamlining the analysis process for security researchers. Compatibility is maintained with Ghidra version 12.0.2.

Game Tracking: Deadlock is a tool designed for automated tracking of in-game activities, allowing users to monitor various events without manual intervention. Its primary use case is to simplify the process of game analytics by aggregating data from multiple sources. Notable features include integration with a comprehensive tracking system as referenced in the main GameTracking repository and community support through a dedicated Discord channel.

FromSoftware-rs provides Rust bindings for mod creation in From Software games, enabling developers to interact with and manipulate game structures programmatically. The tool includes bindings for popular titles such as Dark Souls 3, Sekiro, and Elden Ring, along with shared utilities, making it highly versatile for game modding. Notable features include a well-defined crate structure for each game, extensive documentation, and a derive macro for streamlined trait implementation.

`flutterdec` is a static analysis tool designed for decompiling Flutter applications packaged as APKs or `libapp.so` files, specifically targeting Android ARM64 binaries. Its primary use case is for reverse engineering Flutter apps, providing readable pseudo-Dart code along with additional artifacts such as intermediate representation (IR), assembly, and symbol reports to aid in validation against lower-level codes. Notable features include the ability to extract and compare builds, enhance symbol naming from matched binaries, and various output options for deeper analysis.

Fireman is a versatile decompiler designed to allow users to interactively modify Intermediate Representation (IR) through a graphical user interface (GUI), command-line interface (CLI), or text-based user interface (TUI) while observing real-time updates to C-like code. It features a complete instruction parsing routine for x64, IR-based analysis routines including data flow analysis, control flow analysis, and variable analysis, along with support for IR pattern matching and basic simulation functionalities. The tool aims to simplify the decompilation process while providing multiple interfaces for varying user preferences.

The Facebook iOS SSL Pinning Bypass tool provides a modified version of the Facebook app for iOS with SSL/TLS certificate pinning disabled, facilitating HTTPS traffic inspection for security research and analysis. Notable features include compatibility without requiring a jailbreak or Frida, as well as support for various HTTPS proxy tools such as mitmproxy, Burp Suite, and Charles Proxy. This tool is strictly intended for educational use, allowing researchers to better understand mobile application security mechanisms.

dz6 is a fast Vim-inspired hex editor designed for terminal environments, enabling efficient editing of large files in hex or ASCII formats. Notable features include Vim-like key bindings, customizable options, regex string filtering, and the ability to parse PE/ELF headers, making it suitable for tasks involving low-level file inspection and manipulation. The tool is cross-platform, open-source, and offers a variety of navigation and editing commands to enhance user experience.

Dungeon Blitz: R is an open-source revival project designed to modernize and preserve the multiplayer experience of the original Dungeon Blitz game, focusing on stability, maintainability, and community-driven features. Notable capabilities include robust multiplayer support, localized gameplay, bug fixes, and quality-of-life improvements, all while enabling standalone single-player functionality through a local server setup. The tool is actively developed and allows users to manage their game experience without reliance on external servers, ensuring seamless play with local save storage.

disrobe is a static Rust binary designed for decompiling, deobfuscating, and unpacking compiled software across more than 20 programming ecosystems, including Python, JVM, .NET, JavaScript, and native binaries. It operates without executing the sample code, ensuring byte-identical outputs across platforms, supported by rigorous testing and validation against known references. Key features include automated pipeline composition for various formats and robust reporting on coverage and limits, with an option to run in-browser for experimentation.

Digital Fauxice is an open-source tool that emulates the infrared dust and scratch removal functionality of Nikon's Digital ICE, producing identical image outputs without utilizing Nikon's code. Its primary use case is to process scanned film images by leveraging a four-channel input (RGB and infrared) to accurately identify and repair surface defects, while an optional hybrid mode enhances defect handling by integrating modern inpainting techniques for severe damage. Notable features include a validation mechanism that ensures output fidelity to Nikon's original processing and a CUDA-backed implementation for accelerated processing times.

DeepZero is an automated vulnerability research pipeline engine that allows users to define and orchestrate data processing workflows using YAML configuration files. Notable features include support for parallel execution, resumable runs, integration with language model providers, and extensibility for custom processing components, making it ideal for analyzing and assessing vulnerabilities in a target corpus of files. The tool is built to enhance efficiency in vulnerability research while ensuring fault tolerance and state management during execution.

Decomp.me is a collaborative online platform for decompilation and reverse engineering, leveraging Next.js and Django technologies. It facilitates the decompilation process, allowing users to contribute and share compilers, and provides comprehensive documentation for setups, contributions, and maintenance. Key features include community engagement through a Discord server and the ability to run the platform locally via Docker.

D-810 ng is an IDA Pro plugin designed to enhance reverse engineering by deobfuscating code during the decompilation process. It integrates seamlessly into the IDA workflow and allows for the rapid creation and configuration of deobfuscation rules, significantly simplifying complex expressions and restoring natural control flow. Notable features include a wide array of instruction-level optimizations, such as mixed Boolean arithmetic and constant folding, as well as control-flow unflatteners that tackle various obfuscation techniques, making it a comprehensive tool for malware analysis.

BG3SE-macOS is a native implementation of the Baldur's Gate 3 Script Extender for macOS, enabling the use of mods that require scripting capabilities, including gameplay tweaks and UI enhancements. It aims for full parity with the Windows version, supporting a wide range of modding functionalities while specifically omitting certain features like UI scripting and input injection. The tool is built from the ground up, offering compatibility with both Apple Silicon and Intel Macs, and allows users to easily integrate and manage mods directly through Steam.

Augur is an advanced IDA headless plugin designed for efficient analysis of binary files by extracting strings and associated pseudocode. Its primary use case is to streamline vulnerability research by organizing and storing the pseudocode of functions that reference specific strings in an intuitive directory structure, leveraging the Hex-Rays decompiler's capabilities. Notable features include rapid processing, support for various architectures, and a robust decompilation process using the `decompile_to_file` API from the Haruspex library.