~/hackyfeed $

Metawarc is an indexing tool that catalogs WARC collections into a versioned DuckDB database equipped with Parquet sidecars, enabling structured querying, metadata extraction, and payload export. Notable features include support for immutable source archives, atomic publication processes, typed queries accessible via CLI and REST API, and local replay capabilities similar to the Wayback Machine. The tool is designed for efficient analysis and manipulation of web archive datasets, facilitating incremental updates and recovery operations.

Cyberleek is a research tool focused on analyzing and verifying the authenticity of leaks related to the anticipated GTA VI gameplay. It consolidates evidence and critical research findings, emphasizing the distinction between genuine community research and false claims propagated by unverified sources. Notable features include detailed analysis of gameplay videos and an official Discord community for collaboration and discussion on leak verification.

Cybermes is an advanced autonomous security research framework designed for offensive security tasks, including bug bounty hunting and red teaming. It features over 50 specialized modules for in-depth reconnaissance, attack surface analysis, and vulnerability validation, leveraging a unique integration of modern LLM reasoning and automated workflows. Notable capabilities include dynamic attack planning, multi-source knowledge retrieval, and programmatic validation of findings to ensure zero false positives.

Consortium is a modern, extensible command and control (C2) framework that supports both asynchronous multi-client interactions and language-agnostic listener-agent designs, enabling users to develop custom agents and listeners efficiently. Key features include a robust REST API for automation, role-based access control for user management, and modular architecture that allows for extensive customization and collaboration among users. Currently in the alpha phase, the framework emphasizes a high degree of flexibility while still under rapid development.

The Roblox Robux Hack Script 2026 is a tool designed to exploit the developer exchange API of Roblox, enabling users to transfer Robux from compromised developer accounts. Its primary use case is the automated scanning for vulnerable accounts and facilitating stealthy transfers of Robux in small increments to avoid detection. Notable features include the ability to export scanned account lists to CSV, support for accounts with at least 10,000 Robux, and an operational stealth mode to minimize the risk of detection by Roblox.

The Roblox Robux Generator 2026 is a tool designed to add Robux to any Roblox account through the exploitation of a group payout vulnerability, claiming to facilitate the addition of 400–10,000 Robux per day without requiring user passwords. It supports both Roblox Premium and free accounts, necessitating only the account username and a verification step to mitigate abuse. Notable features include compatibility with Windows 10/11, and the ability to function without needing root or jailbreak access.

darksword-kexploit is an Objective-C tool designed to facilitate the execution of the DarkSword kernel exploit on iOS devices running up to version 26.0.1 via a straightforward Windows setup process. Notable features include a clear, step-by-step interface suitable for non-technical users, easy integration of local release files, and basic logging to monitor progress. The tool simplifies the requirements for successfully running the exploit by guiding users through connection and configuration steps.

WireTapper is a tool designed for detecting and mapping nearby wireless signals, including Wi-Fi networks, Bluetooth devices, IoT devices, and CCTV cameras. Its notable features include Wi-Fi detection with detailed information, Bluetooth scanning, and signal visualization on a user-friendly map interface, enabling users to gather intelligence from their environment effectively. The tool is intended for responsible use in compliance with local privacy laws and regulations.

h3-cli is a command-line interface designed for seamless interaction with the Horizon3 API, enabling users to schedule and execute autonomous penetration tests via NodeZero, as well as monitor their status and access detailed reports. Notable features include comprehensive documentation for installation and usage, alongside capabilities to run and manage a locally hosted MCP Server that integrates NodeZero’s functionalities into development and security workflows.

The Flipper Zero Evil Portal tool transforms a Wi-Fi development board into a phishing access point, serving a fake login screen to connected users. It captures user credentials and logs them onto the SD card, functioning as an educational demonstration for learning about Wi-Fi exploits and programming. Notable features include compatibility with both official and unleashed firmware, easy installation via pre-built app files, and customizable HTML login screens.

Safer Dependencies is a security tool designed to enhance the integrity of package installations in AI-assisted coding environments like Claude. It automatically intercepts package addition requests to perform checks for known vulnerabilities, maintainability, and risks such as typosquats, while ensuring that only safe versions are installed across multiple ecosystems including npm, PyPI, and Maven. Notable features include its proactive blocking of vulnerable installations, automatic correction of risky dependencies, and a streamlined integration that operates in the background without user intervention.

password manager for Windows — LastPass with install and config notes. Store credentials securely with autofill across browsers and desktop apps. Whole application surface is usable — integrations and exports included.

Hide.me · VPN client. Encrypt traffic, switch regions and protect sessions on public Wi-Fi. Total feature availability — professional edition behavior on desktop.

Wazuh-MCP-Server is a defensive blue team framework designed to integrate with Claude Desktop or any MCP client, serving as a complement to offensive security tools. It provides access to over 100 SOC tools, including multi-provider threat intelligence, alert enrichment, and advanced threat correlation capabilities using the MITRE framework. Notable features include a modular architecture, a variety of transport options for communication, and extensive configuration options for integrating with Wazuh SIEM and various threat intelligence sources.

Token Universe is a sophisticated tool designed for experimentation with Windows security mechanisms, allowing users to create, view, and modify access tokens, manage Local Security Authority, and spawn processes under varying privilege levels. Its notable features include comprehensive token functionality such as user logon attempts, token editing capabilities, and access checks, making it suitable for security researchers and developers focused on Windows environment security analysis. The tool supports functionality across a broad spectrum of Windows versions, from Windows 7 onwards.

The `@sourceloop/vault` is a LoopBack 4 extension that integrates with HashiCorp's Vault, providing a simplified interface for secret management in Node.js applications. It enables developers to easily connect to Vault by configuring endpoint and authentication credentials, and allows access to various Vault operations through the injected `vaultConnector`. Notable features include seamless configuration updates with a reconnect method and comprehensive support for the capabilities of the underlying `node-vault` client.

loopback4-ratelimiter is a LoopBack 4 extension that enables rate limiting functionality for LoopBack applications by leveraging the express-rate-limit package. It supports various storage backends, including Redis, Memcache, and MongoDB, for managing rate limiting data, and allows for customizable configurations such as key generation and default options for enabling or disabling rate limits across APIs. Notable features include its easy integration into LoopBack applications and flexibility in configuring storage options based on application needs.

Yaramail is a Python tool designed for scanning emails using YARA rules, primarily aimed at automating the triage process of phishing reports. It offers comprehensive functionality that allows users to analyze all components of an email, including headers, body content in various formats (Markdown conversion), and various attachment types, while also providing customizable password options for encrypted ZIP files. Notably, Yaramail categorizes emails systematically and parses authentication results for enhanced analysis.

Prompt Fuzzer is an interactive security assessment tool designed for GenAI applications, evaluating the robustness of system prompts against a variety of dynamic attacks, including jailbreak and prompt injection. It adapts its testing methodology to the specific characteristics of the application, allowing for iterative improvement through a Playground chat interface. Notable features include support for multiple LLM providers, a command-line interface, and multi-threaded testing capabilities.

Agentmetry is an open-source endpoint flight recorder specifically designed for AI coding agents, capturing detailed logs of tool calls, approvals, and denials to provide visibility into agent actions. Its primary use case is enhancing incident response by generating a comprehensive JSONL trail and correlating events with MITRE ATT&CK tactics, issuing critical alerts when a series of actions could signify an attack. The tool can function locally on Windows and Linux machines, with optional forwarding to SIEM solutions like Loki, Elastic, Splunk, or Google SecOps for centralized monitoring.

The Assemblyline Overpower service is designed to de-obfuscate and profile PowerShell files for analytical purposes. It utilizes modified open-source tools like PSDecode and PowerShellProfiler to statically analyze scripts and extract behavioral indicators. Key features include configurable submission parameters and integration within the Assemblyline framework for streamlined deployment and operation.

helmd is a comprehensive security analysis plugin designed for the DeepSeek Harness, integrating capabilities across six domains: Android, Web, Native, Protocol, Malware, and AI-Security. This tool facilitates a streamlined installation with ten independently released bundles, enabling users to access all essential functionalities with minimal configuration while maintaining a modular architecture for on-demand knowledge and tool utilization. Notable features include first-round tool anchoring for user queries, specialized routing for domain-related tasks, and a focused referencing system that supports autonomous model decision-making.

Open Web Bridge is a tool designed to facilitate the interaction of AI agents with a user's personal web browser, leveraging authenticated sessions and user-specific data. The tool features a command-line interface that integrates seamlessly with AI agents, offering capabilities such as semantic snapshots for web elements, waiting primitives for improved asynchronous interactions, and options for both local and remote operation modes. Notably, it allows AI agents to perform tasks in real-time using the currently active browser session, enhancing their ability to access and manipulate content beyond publicly available information.

ReHitman is a reverse engineering project aimed at modifying the game "Hitman: Blood Money" to create a multiplayer experience similar to Mafia 2's multiplayer. The tool focuses on developing an open-source SDK for the Glacier 1 Engine, reversing its rendering and input APIs, and building an associated toolset for game enhancements. Notable features include the integration of an ImGUI backend and current work on the game's scene format and GUI API.

Grok-Api is a deprecated Python API wrapper for Grok AI that enables users to interact with the conversational AI without needing official API credentials or accounts. This tool features a FastAPI server for RESTful access, supports HTTP proxies, and allows for high-performance, concurrent requests with streaming response capabilities. Notably, it provides both automatic and expert processing modes, though it is rendered obsolete due to changes in Grok's access policy.