~/hackyfeed $

1337kit is a 64-bit Loadable Kernel Module (LKM) rootkit builder designed for educational use, allowing users to create custom rootkits based on YAML configurations. Its notable features include remote shell connectivity, the ability to hide files, process IDs, and network connections, as well as obfuscation and encryption options for enhanced stealth. This tool is tailored for malware analysts and cybersecurity practitioners involved in creating Capture The Flag (CTF) exercises.

Zero-Setup is a Bash script designed to automate the installation of essential tools and software for cybersecurity professionals, facilitating the rapid configuration of a hacking environment with a single command. It categorizes various utilities, including cryptography, OSINT, steganography, and digital forensics tools, streamlining the setup process while ensuring comprehensive coverage of necessary resources for penetration testing and security analysis. Notable features include easy installation steps and a structured approach to organizing tools based on their respective domains.

xorhunx is a cryptography tool that implements the XOR cipher, featuring capabilities for encoding, decoding, and brute-forcing encrypted data. It is designed for multi-platform use, with installation instructions available for Linux, Windows, and Termux. Notable features include a straightforward command-line interface to manage the ciphering processes efficiently.

The Windows-Hardening-CTF is a PowerShell script designed to enhance the security posture of Windows devices by implementing a series of hardening measures. Its primary use case is to mitigate various attack vectors by disabling unnecessary features, enforcing security logging, and applying best practices recommended by the NSA. Notable features include enabling Windows Defender protections, configuring AppLocker, and disabling legacy protocols such as SMB v1 and PowerShell v2.

WebGrep is a versatile command-line tool designed to search web pages and their associated resources for specified patterns, enhancing traditional grep functionality by incorporating advanced features such as JavaScript deobfuscation, CSS unminifying, and image OCR. It allows users to grep through HTML, scripts, and stylesheets, offering various regex options and resource download capabilities, while also emphasizing efficiency with support for temporary file management. This tool is particularly useful for cybersecurity professionals and developers conducting web security assessments or searching for specific content across multiple web resources.

The TryHackMe - Hackers Learning Path repository provides a structured framework for beginners in cybersecurity to learn and practice through a series of rooms and hands-on exercises. Key features include an automated environment setup script, instructional content covering foundational topics like Linux, networking, and various security tools (e.g., Nmap, Burp Suite, Metasploit), and practical penetration testing exercises to simulate real-world attacks. This resource is designed to guide users incrementally from introductory levels to more advanced cybersecurity skills.

The TryHackMe_Writeups repository contains comprehensive writeups for various PwnBoxes and Rooms hosted on TryHackMe, aimed at assisting users in understanding the solutions to the challenges. Its primary use case is to provide guidance for users who may be struggling with specific tasks, while encouraging independent problem-solving. Notable features include a collection of detailed solutions that include flags and answers, structured to facilitate learning in cybersecurity challenges.

TMP Leak is a tool designed for Capture The Flag (CTF) competitions and wargames that automates the process of discovering temporary directories associated with users and teams. It systematically crawls team data from CTFTime and generates a wordlist to search for potential vulnerabilities. Notable features include support for both Python 2 and Python 3, and a straightforward command-line interface for ease of use.

Stegano-tools is a collection of steganography utilities designed to manipulate images and text via various encoding techniques, specifically focusing on Least Significant Bit (LSB), Pixel Indicator Technique (PIT), and Pixel Value Differentiator (PVD) methods. This toolkit enables users to encode and decode hidden messages within images, facilitating applications in data concealment and digital forensics. Noteworthy features include support for Base32/64 encoding and a CLI for easy access to functionalities.

Sobbu is a versatile cryptography tool that provides various encoding and encryption algorithms, along with a hash cracking utility designed to enhance cybersecurity tasks. Notable features include a user-friendly GUI, support for multiple platforms (Windows and Linux), and a wide range of algorithms, including classic ciphers and modern encryption methods. It also includes functionalities for hash decryption and a RainbowTable bot for efficient hash cracking.

ShellValley is a user-friendly reverse shell generator tool designed for Capture The Flag (CTF) enthusiasts who require quick shell generation directly from the terminal. It supports multiple reverse shell types, including bash, php, python, and many others, allowing users to specify the shell type, IP address, and port easily through a command-line interface. The tool emphasizes educational use, warning against illegal activities and ensuring adherence to regulations.

The RTB-CTF Framework is a lightweight, efficient Capture The Flag (CTF) management tool built with Flask, designed to facilitate the organization and execution of CTF events. It offers notable features including real-time scoreboard tracking, configurable settings for customization, user account management, and robust administrative controls, making it suitable for scalable CTF deployment in various environments like Heroku and Railway. The framework is user-friendly, providing a simple user registration process and extensive logging capabilities, ensuring a comprehensive management experience for CTF organizers.

Reverge is a Python-based tool designed for extracting and converting hexadecimal data from files, primarily utilized in Capture The Flag (CTF) competitions within the forensic category. Key features include support for file extraction and conversion between hexadecimal and binary formats, making it a valuable asset for digital forensics practitioners and enthusiasts.

The recursive-compression tool facilitates the recursive compression and decompression of nested archive files utilizing multiple algorithms supported by the Patool library. It offers customizable options for character sets, rounds of compression, and progress tracking, while notably lacking support for password-protected archives. This tool can be particularly useful in scenarios requiring the management of complex archive structures in batch processing or automation tasks.

The `python4pentesters` repository provides a toolkit designed for automating various tasks related to penetration testing, inspired by TryHackMe's "Python for Pentesters" room. Key features include tools for subdomain discovery, directory enumeration, network scanning, port scanning, file downloading, and password cracking, all of which can be modified for specific security engagement needs. The package serves as a foundational codebase for developing hacking scripts with improved console output and usability.

Pwndra is a collection of utilities designed to enhance the Ghidra reverse engineering environment, specifically for pwn and Capture the Flag (CTF) challenges. Key features include the ability to replace constants with human-readable counterparts, annotate system calls and their arguments, conveniently convert character representations, and quickly navigate to the main function of binaries. This toolset streamlines the analysis workflow, improving usability for cybersecurity practitioners working with various CPU architectures.

png-parser is a Python tool designed for analyzing PNG files by displaying their various chunks, such as header, palette, and textual content. Its primary use case includes inspecting the integrity and structure of PNG images through features like chunk data retrieval, CRC validation, and hex output. The tool offers command-line options for printing specific chunk information, displaying images, and saving corrected versions of PNG files, making it valuable for developers and analysts dealing with image processing.

The `padding_oracle.py` tool automates padding oracle attacks in Python, enabling efficient decryption and encryption of vulnerable tokens. It features multi-threaded execution for improved performance, customizable logging options, and includes additional functionalities for URL and base64 encoding/decoding. This tool is particularly useful in penetration testing scenarios where padding oracle vulnerabilities are present.

NoSQL-Attack-Suite provides automated scripts designed to exploit vulnerabilities in NoSQL databases, specifically targeting authentication bypass and credential enumeration. The tool features two primary scripts: one for identifying NoSQL authentication bypass vulnerabilities in login forms, and another for character-by-character credential dumping from the database when such vulnerabilities are present. Both scripts are tailored for testing against specific configurations, such as those found in HackTheBox challenges.

The Non-Alphanumeric WebShell in PHP is a tool designed to execute code on a server by exploiting certain user input vulnerabilities, particularly targeting web application firewalls (WAFs) that filter common characters. Its notable feature is the ability to construct a functioning shell without relying on blocked alphanumeric characters, using techniques such as XOR operations and leveraging PHP's handling of arrays and string conversions. This tool serves as a proof of concept for code execution bypass methods in security testing scenarios.

LSP Reverse Shell is a Lua Server Pages-based webshell designed for Windows, facilitating remote shell access via SMB shares instead of traditional Lua sockets. Its primary use case is for penetration testing and exploit development, circumventing common restrictions by executing reverse connections through port 135. Notable features include in-memory execution, compatibility with impacket's smbserver, and the flexibility to easily configure IP addresses for deployment.

THM-Koth is a cheat-sheet repository designed to assist users in the Koth (King of the Hill) section of Try Hack Me (THM). Its primary use case is to reduce the effort required to compete in challenges by providing strategic insights rather than complete step-by-step solutions. Notable features include a focus on fair play, advising against the use of automated processes, and promoting skill development over simply winning.

Hydrogen is a versatile tool designed for Capture The Flag (CTF) competitions, offering functionalities like encoding conversions, file transformations (to hexadecimal/Base64), and classical cipher decoding. Notable features include an HTTP proxy for traffic analysis and request replay capabilities, as well as built-in decryption tools for AES and RSA, all integrated within a user-friendly web interface utilizing Vue and Tornado in a Python environment.

The length-extension-tool is a Python library that implements hash length extension attacks and supports multiple hashing algorithms, including MD5, SHA1, and SHA256. Its primary use case is to exploit vulnerabilities in hashing algorithms that utilize the Merkle-Damgård construction, allowing an attacker to append data to a hashed message without knowing the original input. Notable features include a straightforward API for computing hashes and performing extension attacks, as well as built-in tests to validate the implementation against standard Python hashing libraries.

Haipy is a command-line interface (CLI) tool designed for identifying over 500 types of hash algorithms. This Python port of the original "haiti" tool includes support for modern hashing algorithms such as SHA3 and Keccak, can be utilized as a Python library, and provides references to Hashcat and John the Ripper, making it a flexible option for cybersecurity professionals. Notably, Haipy aims to be hackable, allowing users to extend its functionality as needed.