~/hackyfeed $

The Setup Ghidra Action automates the process of configuring a Ghidra environment within GitHub Actions. It allows users to specify different Ghidra versions, including custom forks, while automatically setting the `GHIDRA_INSTALL_PATH` environment variable, facilitating the building of projects that depend on Ghidra. Notable features include support for version control, the ability to specify download URLs, and integration with GitHub's authentication for API calls.

The "Reverse Engineering" repository provides a thorough and free tutorial series focused on reverse engineering across multiple architectures, including x86, x64, ARM, AVR, and RISC-V. Its primary use case is to educate users on the principles and techniques of reverse engineering, complemented by practical resources such as tool links, a Ghidra plugin, and a companion e-book. Notable features include hands-on challenges and links to additional hacking courses and CTFs designed to deepen practitioners' understanding of embedded systems and software security.

Lumina Sentinel is a behavioral anomaly detection and orchestration framework designed for security researchers and threat analysts to analyze the behavior of credential stealers and remote access trojans (RATs) in a controlled environment. Its notable features include a Behavior Replay Engine that reconstructs infostealer actions with MITRE ATT&CK™ mapping, real-time process tree visualization via D3.js, and multilingual intelligence reporting to facilitate global collaboration. The framework emphasizes security and education by operating in isolated containers without affecting the host system.

REDasm is a free and open-source disassembler tailored for reverse engineering, catering to both hobbyists and professionals. Its plugin architecture allows for extensibility and supports various CPU architectures and executable formats, making it a versatile tool in the reverse engineering toolkit. The latest version, 4.0.0, features a completely redesigned foundation, enhancing its performance and usability.

Radare2 is a comprehensive reverse engineering framework designed for Unix environments, providing a suite of tools and libraries to facilitate tasks such as binary analysis, disassembly, and debugging. Notable features include support for scripting through an embedded JavaScript interpreter, local and remote debugging capabilities, and extensive plugin architecture that enables users to extend its functionality with various plugins. This tool is especially aimed at security researchers and developers looking for powerful solutions in binary exploitation and reverse engineering.

Pokemon Stadium (US) is a work-in-progress decompilation project that allows users to build a functioning ROM for the game Pokemon Stadium (US) from its source code. The tool requires a pre-existing ROM and enables users to initialize and reassemble the game through a straightforward make process. Notable features include support for various system dependencies and a Python-based build environment, making it accessible for users familiar with development practices.

Phobos is a community-driven engine extension for Yuri's Revenge that enhances gameplay by introducing new features and fixes based on modified YRpp and SyringeEx for code injection. It is designed to complement the existing Ares tool without introducing incompatibilities, offering users both stable and development builds for testing and integration of new features. Key attributes include its independence from Ares, active community engagement, and the ability to provide nightly builds with the latest changes for development purposes.

The Pharos Static Binary Analysis Framework facilitates automated analysis of binary programs, leveraging the ROSE compiler infrastructure for disassembly, control flow analysis, and instruction semantics. Notable features include the OOAnalyzer for object-oriented construct recovery, ApiAnalyzer for detecting API call sequences, and tools like FN2Yara and FN2Hash for generating signatures and properties for function analysis. The framework is designed for research purposes and actively supports discussions in the domain of binary static analysis.

PCM-Forge is an open-source activation code generator and diagnostic toolkit specifically designed for Porsche PCM 3.1 infotainment systems, utilizing a fully cracked RSA-64 encryption algorithm to generate activation codes for any vehicle identification number (VIN) at no cost. The tool features a web application that includes functionalities for creating activation codes, building USB sticks for installation, and providing modular diagnostic utilities tailored for various Porsche models, ensuring compatibility with different hardware revisions.

The repository provides a comprehensive French translation patch for the PSP game "Persona 2: Innocent Sin" (ULES01557), enabling users to play the game entirely in French. Key features include a fully playable main storyline, modifications to dialogue formatting, and ongoing updates to enhance the patch, which is built alongside custom romhacking tools tailored for the game. The project emphasizes legal use, requiring users to obtain their original game disc to apply the patch.

Orion is a local AI runtime designed explicitly for training and running small language models (LLMs) on Apple Silicon devices utilizing the Neural Engine (ANE) for enhanced performance. It bypasses traditional frameworks such as CoreML, offering features like direct ANE training, delta compilation for efficient weight reloading, and LoRA hot-swap capabilities, all while ensuring that data remains on-device for privacy. The tool targets a unique niche, leveraging the dedicated NPU in Apple's hardware to optimize both model training and inference, achieving superior speed and efficiency compared to standard CPU or GPU-based solutions.

Nauz File Detector is a portable utility designed to identify linkers, compilers, and packers used in files across macOS, Linux, and Windows platforms. Its primary use case is for reverse engineering and malware analysis, providing users with the ability to quickly analyze file formats. Notable features include cross-platform compatibility and easy access to detailed documentation for setup and usage.

Kreo Hive 65 is a Linux utility for controlling the RGB lighting of the Kreo Hive 65 keyboard without requiring Windows software. It allows users to set individual key colors, create gradients, and utilize an audio-reactive mode that transforms the keyboard's lighting into a dynamic visualizer synchronized with sound output. Notable features include the ability to run complex lighting effects based on audio input, with customizable options via command-line parameters.

`jingle` is a tool for modeling and analyzing Ghidra's `p-code` using SMT (Satisfiability Modulo Theories) logic, specifically within the context of formal verification and program analysis. It features a Configurable Program Analysis algorithm that allows for flexible custom analyses of `p-code` operations, leveraging a high-level Rust API and providing Python bindings for integration with existing tools. This alpha software is intended for research purposes, facilitating the generation of SMT models and supporting the disassembly and analysis of hex-encoded instructions.

ImHex is a powerful hex editor designed for reverse engineers and programmers, providing a user-friendly interface suitable for working in low-light conditions. Its primary use case includes inspecting binary files and conducting memory analysis, with notable features such as plugin support, an online version, and comprehensive documentation. This tool enhances visibility and usability with its built-in dark theme and various customization options, facilitating efficient data manipulation and analysis.

HikariSystem HexCore is an open-source IDE designed for reverse engineering, binary analysis, and controlled emulation within the VS Code environment. It features a comprehensive disassembly and decompilation pipeline, supporting targeted analyses of PE and ELF binaries, and offers automated batch processing for pipeline tasks. Notably, it integrates sophisticated tools like LLVM IR lifting, semantic queries via HikariSystem Query Language, and a vulnerability audit engine, positioning itself as a powerful solution for analyzing complex binaries and improving the reverse engineering workflow.

The "HCAPTCHA HSJ HSW Reversed" tool offers byte-accurate extraction of master keys from hCaptcha's JavaScript bundles `hsj.js` and `hsw.js`, revealing six build-static AES-256 master keys in under twenty-five seconds. Its primary use case is for capturing and verifying keys used in encrypted communications by leveraging a reverse-engineered AES-256-CTR cipher, ensuring all keys are verified through structured analysis. Notable features include deterministic fingerprinting for builds and end-to-end verification for five of the keys, enhancing reliability in cryptographic applications.

Go Hacking is a comprehensive online tutorial designed for reverse engineering Golang applications, utilizing x64, ARM64, and ARM32 architectures. It systematically guides users through the process of setting up a development environment, debugging, and hacking various aspects of Go programs, including primitive types and control flow. Notable features include step-by-step lessons, free downloadable resources, and a focus on hands-on learning that caters to both beginners and seasoned practitioners in the field of reverse engineering.

Glaurung is a modern reverse engineering framework that aims to provide an AI-native binary analysis experience, effectively serving as a contemporary alternative to Ghidra. Utilizing Rust for performance and Python for accessibility, it integrates AI throughout the analysis pipeline, offering capabilities like automated format detection and decompilation for x86/x64 and ARM architectures. Notable features include a persistent knowledge base, a Python API for scripting, and built-in AI tools, making Glaurung suitable for both automated analysis and advanced reverse engineering workflows.

GhidrAssistMCP is a Ghidra extension that delivers an MCP (Model Context Protocol) server, facilitating seamless interaction between AI analysis tools and Ghidra's reverse engineering capabilities via a standardized API. Key features include support for various communication transports, built-in analysis tools, asynchronous task execution, and comprehensive logging to enhance usability and performance in multi-program environments. This extension empowers users to leverage AI-driven insights during the reverse engineering process through a dynamic and configurable interface.

Embedded Hacking is a comprehensive educational resource designed for individuals interested in embedded software development and reverse engineering. The course offers step-by-step tutorials, specifically focused on working with the Raspberry Pi Pico and includes practical skills such as live variable hijacking, command line operation, and breadboarding. Key features include a free downloadable course book, video tutorials, and links to necessary hardware and skills prerequisites.

Openstrap Edge is a mobile application designed to enable the use of the WHOOP 4.0 band without a subscription, processing health data locally on both iOS and Android devices. It utilizes its own algorithms based on public research rather than WHOOP's proprietary formulas, ensuring user privacy as data is not transmitted to external servers. The tool addresses the issue of subscription-locking by allowing users to maintain functionality of their hardware independently.

DIE-engine is a software tool that provides both GUI and console interfaces for Detect It Easy (DiE), which is designed for analyzing file formats and detecting packers and compilers used in executable files. Its primary use case is for cybersecurity professionals and reverse engineers who need to identify binary file characteristics quickly. Notable features include support for a wide range of file types and the ability to analyze executable files efficiently.

Detect It Easy (DiE) is a versatile file type identification tool designed for malware analysts and cybersecurity experts, employing both signature-based and heuristic analysis to deliver accurate file inspections across Windows, Linux, and MacOS platforms. Its key features include flexible signature management for customizable detection rules, a JavaScript-like scripting capability for tailored analysis, and a comprehensive support for various executable and archive formats. The tool aims to minimize false positives, making it an essential resource for digital forensics and malware detection.

Cutter is a free and open-source reverse engineering platform designed for reverse engineers, featuring advanced customization capabilities while prioritizing user experience. It supports various plugins, including Python and C++ integrations, and enables seamless use of tools like the Ghidra decompiler. Cutter is accessible on major platforms, including Linux, macOS, and Windows, with detailed documentation available for users and developers.