~/hackyfeed $

RE-helper is a reverse engineering tool designed to assist with solving challenges during Capture the Flag (CTF) contests. It allows users to set up an environment for analyzing executables, offering features like dynamic tracing and syscalls logging, with capabilities for testing modifications and cleaning builds. The tool is currently in development and primarily targets amd64 architecture.

Rbuster is a directory brute-forcing tool designed for web application security testing, enabling users to discover hidden directories and files on a web server. Key features include customizable user agents, cookie handling for authentication simulation, support for various HTTP status codes to filter responses, and the ability to utilize wordlists for brute-forcing directory paths. The tool is implemented in Rust and can be easily installed via Cargo or on Kali Linux.

pwntools-r2 integrates the `radare2` reverse engineering framework with `pwntools`, allowing for streamlined debugging of exploits in a Python2 environment. Its primary use case is to facilitate the development of exploits by automating interactions with `radare2` commands, particularly within a `tmux` session. Notable features include support for executing `radare2` commands within Python scripts and handling process arguments via temporary payload files.

PwnSandboxForCTF is a ptrace-based sandbox designed specifically for Capture The Flag (CTF) challenges operating in an AWD mode. It restricts child processes from performing certain actions, particularly those involving files with 'flag' in their name, and illegal system calls, providing support for both ELF32 and ELF64 binaries including Position Independent Executables (PIE). Notable features include its simple installation via pip, the generation of a sandboxed binary, and built-in support for the pwntools library.

pwn-server is an automated deployment tool designed for pwn challenges, utilizing containerization to isolate each challenge environment. It features token-based connection management, supports multiple flags per challenge, and automatically logs traffic and flag access while preventing resource exhaustion through fork bomb protection. The tool also allows customization of Docker images per challenge, facilitating diverse runtime requirements.

The pwn-sandbox tool was designed for testing vulnerabilities in a controlled environment, primarily for pwnable challenges. However, the repository has been removed to prevent abuse and protect competition, suggesting that it may have had features for simulating attack scenarios within a sandboxed context.

PICT-CTF-WEBSITE-FRONTEND is a frontend template designed for organizing Capture the Flag (CTF) events. It features multiple static pages such as Home, Login, Register, Challenge/Quests, Leaderboard, and an About/Rules page, providing a structured layout for participants and organizers. This template serves as a foundational framework for anyone looking to host their own CTF events, though it currently lacks dynamic functionality.

PHPFun is a code obfuscation tool that allows developers to write and execute PHP code using only six specific characters, inspired by techniques in other programming languages. Its primary use case is to create compact and obfuscated PHP scripts that maintain functionality while obscuring their logic. Notable features include support for PHP 7 and higher, and the ability to transform conventional PHP code into a highly condensed format without losing execution capability.

The Pentest Tools Installation Automator streamlines the setup of essential penetration testing utilities on both Debian- and Arch-based systems. It not only installs critical tools such as `nmap`, `sqlmap`, and `gobuster`, but also provides commonly used wordlists directly in the installation process. The tool supports optional installations for additional resources, enhancing flexibility for users in security assessments.

`patsac` is a Python toolkit designed to assist users in solving cryptography challenges, particularly in Capture The Flag (CTF) competitions. The toolkit includes functionalities for various cryptographic attacks, such as RSA decryption using Fermat's method and Linear Congruential Generators (LCG) cracking, making it a practical resource for cryptographic analysis and experimentation. It relies on several external libraries for enhanced computational capabilities, although it is still under development and may lack comprehensive documentation.

Overflow Checker is a utility designed to assess the vulnerability of simple binaries to basic buffer overflow attacks. It allows users to specify the program for analysis and the maximum number of bytes to test, making it customizable for different scenarios. Notable features include an easy-to-use command-line interface and the ability to demonstrate functionality with provided demo binaries.

oscp-ctf is a collection of Bash scripts designed to streamline tasks for users engaged in OSCP labs, HackThebox, or Capture The Flag (CTF) competitions. Notable features include password cracking with John The Ripper, easy HTTP server setup, and customizable PHP reverse shell generation, among others, which enhance efficiency and convenience in penetration testing environments.

NullCTF is a Discord bot built with discord.py that facilitates collaboration for Capture The Flag (CTF) events within Discord servers by providing tools for team management and CTF participation. Notable features include commands for creating and archiving CTFs, managing challenges, and integrating with the CTFd platform for challenge data retrieval. The bot also supports commands for accessing CTFtime information, allowing users to track CTF countdowns and time left for ongoing competitions.

The Nosql-MongoDB-injection-username-password-enumeration tool is designed to enumerate usernames and passwords from NoSQL (MongoDB) injection vulnerable web applications. Its primary use case is to facilitate the exploitation of NoSQL injection vulnerabilities by allowing users to specify various parameters and methods for form submission and enumerating user credentials. Notable features include customizable parameters for targeting specific username and password fields, as well as flexibility in defining the HTTP method for the exploitation process.

The MT19937 Symbolic Execution and Solver tool provides a mechanism for symbolic execution of the MT19937 pseudorandom number generator, alongside a solver for GF(2) matrices, enabling cloning of the generator based on known outputs. Notable features include a Python-only solver for faster performance without dependencies and a wrapper for Cryptominisat, which enhances speed with proper compilation. The tool also facilitates state reversal of the MT19937 generator to predict prior outputs, despite some current limitations in functionality.

Magnetos is a tool designed to enhance problem-solving efficiency in Capture The Flag (CTF) competitions by automating various tasks related to digital forensics and steganography. It features several command-line utilities, including a steganography solver, file format identifier, encoding detector, and automated resource downloader, enabling users to quickly analyze files, detect flags, and handle common challenges encountered in CTF events. Notable integrations include dependencies on tools like zsteg and stegdetect for comprehensive analysis capabilities.

LinEnum is a bash script designed for enumerating information on Linux machines, particularly useful during initial access assessments in OSCP Labs and Capture the Flag (CTF) scenarios. It streamlines the process of gathering system and network data without focusing on kernel vulnerabilities, making it an efficient tool for reconnaissance tasks. Notable features include ease of use and targeted information retrieval to aid in privilege escalation efforts.

LCGHack is a command-line tool designed for generating pseudo-random numbers using the Linear Congruential Generator (LCG) algorithm. It allows users to input known values and customize parameters such as modulus, multiplier, and increment, facilitating easy calculations of the next values in the sequence. Notable features include customizable parameters and straightforward usage through a command-line interface.

KeyboardTraffic is a tool designed for analyzing keyboard traffic packets, primarily used in CTF (Capture The Flag) competitions. It allows users to process and interpret captured keyboard data through a straightforward command-line interface. Notable features include the capability to handle various packet formats, facilitating post-analysis of keystroke data for security assessments.

Karkinos is a comprehensive library database tool designed for binary exploitation on Linux, facilitating the identification of unknown libraries and their associated symbols. It provides capabilities to locate library packages, dump useful symbols and gadgets for return-oriented programming (ROP), and supports various architectures, including x86, ARM, and more, by indexing a wide range of libraries like glibc and libstdc++. Key features include commands to find libraries by offsets, dump detailed library information, and update the internal database autonomously.

jwtXploiter is a security testing tool designed to assess the vulnerabilities of JSON Web Tokens (JWTs). It enables penetration testers and developers to exploit known CVEs, manipulate token payloads, verify JWTs, and perform key confusion attacks by retrieving public keys from SSL connections. Notable features include support for all JWT algorithms, automated generation of JSON Web Keys (JWK), and the ability to tamper with vulnerable header claims like kid, jku, and x5u.

flarevm-up automates the provisioning of Windows 10 virtual machines with FLARE VM tools installed, specifically designed for digital forensics and malware analysis. This tool utilizes Vagrant and VirtualBox to quickly set up multiple environments for blue team operations, facilitating rapid deployment for analysis tasks. Notable features include seamless integration of necessary forensic tools and straightforward setup instructions.

Flagy is a comprehensive toolkit designed for Capture The Flag competitions, integrating a wide array of cybersecurity tools across multiple domains including cryptography, forensics, reversing, steganography, and web security. Notable features include automated cryptanalysis tools, credential dumping utilities, and advanced reversing frameworks like Ghidra and radare2, all aimed at facilitating the installation and use of essential tools for both beginners and advanced users in security challenges.

FlagWarehouse is a Flask-based flag submission system designed for Attack/Defense Capture The Flag (CTF) competitions, utilizing SQLite for data management. It allows teams to submit flags to a verification server while providing a user-friendly web interface to display statistics and manage flag submissions efficiently. Key features include customizable configurations for flag formats and submission intervals, automatic flag extraction from exploits, and real-time feedback on submissions.

FirstBlood is a Python 3 library designed to extend built-in objects and enhance utility functions, primarily for rapid development in Capture The Flag (CTF) scenarios. Notable features include method chaining for easier function calls, advanced manipulation of strings and bytes, and integrated cryptographic functions such as XOR and various hashing algorithms. However, users should exercise caution, as the library may alter standard Python behavior and is not intended for production environments.