~/hackyfeed $

Capture The Flag (CTF) is a comprehensive resource repository aimed at facilitating the learning of cybersecurity techniques through hands-on challenges and tools. It includes curated educational links for fundamental Linux skills, web exploitation techniques, and cryptography, while also providing access to various cryptographic tools for encoding and decoding. Notable features include links to prominent learning platforms, video channels for continued education, and tools for steganography and hash cracking, essential for engaging with CTF competitions.

brutalkeepass is a Python tool designed to brute force passwords of KeePass database files, particularly useful when other conversion methods to supported formats fail. It utilizes the pykeepass library, supports command-line argument input for specifying the database and wordlist, and can produce verbose output and entry dumps upon successful password retrieval.

BerylEnigma is a comprehensive CTF and penetration testing toolkit designed to perform a variety of encryption, coding, and text manipulation functions. It features modern and classical cryptographic methods, encoding formats, and practical utilities including image processing and Red Team capabilities such as reverse shell generation and payload conversion. Built with JDK17 and the JAVAFX framework, it aims to assist security professionals and researchers with a wide range of functionalities in a user-friendly interface.

AYO is an efficient Capture The Flag (CTF) environment manager designed to simplify the setup and management of critical variables such as remote hosts, domains, and URLs. Its notable features include the ability to create and manage multiple "boxes," easily configure essential data, and retrieve specific information through simple command-line operations. AYO streamlines the CTF process, making it accessible for users to handle environment variables and configurations quickly.

Avala is a tool designed for the rapid development, execution, and monitoring of exploits in attack-defense capture the flag (CTF) competitions. It simplifies the process for teams by allowing them to focus on exploiting vulnerabilities and implementing patches without being bogged down by technical complexities. Notably, Avala is informed by the practical experiences of the Serbian National ECSC Team and provides functionality for integrating with various services to facilitate quick exploit deployment.

zio is a versatile I/O library designed for exploitation development, offering a unified interface for interacting with local processes and remote TCP sockets. Its notable features include support for both Python 2 and 3, a self-contained single-file installation without external dependencies, and simplified interaction with processes and networks, making it easy to switch between local and remote exploitation workflows.

WShell transforms web-based command injection vulnerabilities into interactive shells with features such as persistent command history, directory navigation, and file transfers, all while avoiding any file uploads. It automatically detects the target's operating system and adjusts its operations accordingly, providing flexibility in command execution. Notable features include built-in support for HTTP control, extensibility via custom scripts, and efficient handling of input/output for bypassing filters.

Winpwn is a Windows-centric debugging and exploitation toolset designed for both user and kernel modes, built upon Python's capabilities. It supports various debugging environments, including Windbg and GDB, and offers features like process memory manipulation, remote connections, and assembly/disassembly functionalities, making it ideal for security researchers and developers focused on Windows exploitation. The tool is compatible with both Python 2 and 3 and facilitates an extensive configuration for customized debugging sessions.

Typhon is an open-source tool designed for automating the solution of Python jail (pyjail) challenges, eliminating the need for extensive manual analysis. Key features include a collection of hundreds of gadgets and common bypass methods, as well as functions for various tasks such as remote code execution and file reading, all implemented without third-party dependencies. The tool can be utilized via a command-line interface or a web UI, making it accessible for interactive use in a range of scenarios.

StegOnline is a web-based tool for analyzing and manipulating image files using LSB (Least Significant Bit) steganography techniques. It allows users to browse image bit planes, extract and embed data, and view PNG chunk information, all while being an open-source application built as a single-page Angular 7 application. Notable features include the ability to hide images within other images, access color palettes, and a commitment to data privacy as no image data is stored or transferred.

StegoForge is an advanced steganography toolkit designed for embedding and extracting hidden data within images, audio, and video files, while also providing a comprehensive suite for digital forensics analysis. Its features include AES-256-GCM encryption, a local web UI for interactions, support for batch processing, and the ability to simulate network behavior on payloads, making it suitable for security researchers and CTF (Capture The Flag) participants. The framework offers zero-dependency binaries for easy deployment across multiple operating systems.

sshchecker is a dedicated SSH brute-forcing tool designed to test SSH login credentials against a list of IP addresses. Its primary use case is for security assessments to identify vulnerable systems by attempting logins using specified usernames and passwords from file inputs. Notable features include the ability to process multiple IP addresses in one go and a straightforward command-line interface for ease of use.

sigBits is a Python-based steganography significant bits image decoder designed to extract hidden data from images, making it particularly useful for CTF challenges and steganalysis. It features versatile extraction capabilities from LSB, MSB, or custom bit positions, supports RGB channel permutation reading, and offers a bruteforce mode to test all RGB permutations. The tool is equipped with a simple command-line interface for easy usage and custom output naming.

sentinel-reverse is an AI-powered autonomous binary reverse engineering tool designed to enhance the efficiency of analyzing complex binaries by automating traditional manual processes. It features capabilities such as AI-driven function decompilation, LLM-based semantic inference for variable naming, and context-aware vulnerability detection, enabling analysis of 50-200 functions per hour with complete data privacy and zero API costs. This tool leverages GPU acceleration and incorporates a multi-round confidence-driven analysis to optimize the reverse engineering workflow.

`seg` is a command-line utility designed for analyzing and exploiting ELF binaries, offering comprehensive binary intelligence with a single command. Its primary use case targets CTF players and penetration testers, providing features such as dangerous function detection, libc resolution, and automatic exploit strategy suggestions. Notably, `seg` supports dual output formats for both human readability and automation pipelines, streamlining the reconnaissance process by integrating multiple tool functionalities into a cohesive reporting system.

Scallop Shell is a specialized debugger and decompiler designed to analyze polymorphic code in binary executables across Linux and macOS. It differentiates itself from traditional reverse engineering tools by dynamically disassembling memory, providing real-time views of executing instructions, and facilitating live patching of byte displays. Notable features include architecture specification for QEMU binaries, a streamlined command-line interface, and capabilities for direct memory editing, making it particularly suited for handling complex binary obfuscation.

RsaCracker is a robust tool designed for breaking RSA encryption, particularly beneficial in Capture The Flag (CTF) competitions. It supports a variety of formats including RSA, X509, and OPENSSH, enabling users to recover private keys and decipher messages through a comprehensive suite of targeted attacks and heuristics. Notable features include support for both PEM and DER formats, a flexible command-line interface, and advanced functionalities for multi-key attacks and various cryptographic operations.

Roppy is a pwn toolkit designed to facilitate interactions with local processes and networks during exploitation tasks, simplifying the process of pwn challenges. It features a ROP module in active development that leverages symbolic execution for generating ROP chains, aiming to automate and accelerate the exploitation of simpler challenges. The toolkit incorporates various third-party libraries, including pyelftools for ELF file analysis, Keystone for shellcode assembly, and Capstone for disassembly.

ronin-support is a Ruby library that enhances core Ruby functionality with various extensions tailored for security research and development, integrating features akin to pwntools and ActiveSupport. It provides user-friendly APIs for handling binary data manipulation, encoding, cryptography, and networking protocols, along with utilities for text processing and archive management. Notably, it has a small memory footprint, high documentation coverage, and extensive test coverage, making it a robust tool for developing security-related applications.

ronin-payloads is a Ruby micro-framework designed for constructing and executing exploit payloads as plain Ruby classes, providing a modular and user-friendly alternative to tools like msfvenom. It supports a variety of languages and payload types, facilitates cross-compilation, and includes built-in common payloads for reverse and bind shells across multiple operating systems. Noteworthy features include a simple command-line interface, extensive documentation and test coverage, and the flexibility to host additional payloads in separate repositories, promoting decentralized usage.

rCTF is a versatile platform designed for hosting cybersecurity capture-the-flag (CTF) competitions, facilitating straightforward deployment without vendor lock-in. It operates as a unified bundle with customizable integrations, allowing event organizers to select and modify service providers based on specific needs. Key features include a common configuration format, easy setup through Docker, and a supportive user community for assistance and discussions.

TinyScript is a Python library designed for rapidly developing command-line interface (CLI) tools with minimal code. It simplifies the process by providing a proxy parser for argument handling, a preconfigured logger, and enhancements to common libraries, all while adhering to the DRY and KISS principles, allowing users to focus on the core functionality of their scripts. This development kit serves as an alternative to heavier frameworks by streamlining CLI tool creation without imposing rigid paradigms.

CodExt is a Python library that enhances the native codecs library by incorporating over 120 additional encodings and custom character mappings, supporting both Python 2 and 3. It features a unique guess mode for multilayer encoding decoding and offers CLI tools for ease of use, facilitating seamless encoding and decoding of various formats including Morse and Braille. Its extensibility allows users to contribute new codecs and macros, making it a versatile tool for developers dealing with diverse encoding requirements.

pypentesting is a collection of Python scripts designed to assist with penetration testing, Capture The Flag (CTF) challenges, and various information security tasks. Its notable features include a reverse shell generator, shellcode extraction tool, and utilities for processing directory search results, QR code handling, DNS zone transfers, and more. The repository serves as a useful resource for security professionals seeking to streamline their testing processes and automate common tasks.

PWNYBOT is a Discord bot designed for managing channels and roles within a server, tailored for Capture The Flag (CTF) events and community engagement. It enables automated channel organization, role assignment, and thread management, enhancing server functionality for security enthusiasts. Notable features include permissions management, support for multiple guilds, and the ability to configure CTF-related channels and roles via a simple `.env` file setup.