~/hackyfeed $

Awesome Hacking & Cybersecurity Learning Path is a comprehensive resource designed to guide individuals from beginner to advanced levels in ethical hacking, penetration testing, and cybersecurity. It features curated materials on bug bounty hunting, OSINT tools, CTF challenges, and practical exercises for real-world scenarios, alongside essential concepts in networking and web application security. Notable features include detailed roadmaps for penetration testing, hands-on labs from platforms like TryHackMe and HackTheBox, and extensive coverage of privilege escalation techniques across multiple operating systems.

The AI Agents Repository is a curated collection of AI agent frameworks, security tools, and autonomous workflows, emphasizing areas such as offensive security, OSINT, and coding assistance. It features a comprehensive index categorized by engine classification and deployment modes, enabling users to discover and implement various AI-driven solutions effectively. Notable functionalities include practical assessments and the ability for community contributions through pull requests or issue reports.

OWASP Amass is a comprehensive tool for network mapping and external asset discovery aimed at enhancing cybersecurity through the use of open source information gathering and active reconnaissance techniques. Its primary use case is to identify and map attack surfaces, enabling security professionals to assess the security posture of the networks they oversee. Notable features include its ability to aggregate data from various sources and integrate with existing tools, providing a robust framework for comprehensive threat assessment.

Aliens Eye is an advanced AI-driven OSINT tool designed for scanning usernames across over 840 social media platforms, utilizing machine learning and heuristic detection to yield comprehensive results. Key features include asynchronous scanning, profile extraction, cross-site correlation, recursive username expansion, and customizable reporting formats, along with support for proxies and Tor. The tool also offers a modern terminal UI and a server option for integration with LLM agents, making it a versatile solution for username discovery and analysis.

Abster Intelligence is a privacy-centric open-source investigation workspace designed for OSINT, GEOINT, and cyber research. Its primary use case is to facilitate data analysis and evidence gathering without the risk of data leakage, employing a local-first architecture where all investigation data is stored in the user's browser, ensuring strict data sovereignty. Notable features include a dynamic relational graph engine for visualizing connections, support for querying various OSINT tools directly from the interface, and the ability to share investigations securely via encoded URLs without compromising data privacy.

X-Posed is a browser extension for Chrome and Firefox that displays relevant account information from X's "About this account" panel next to usernames while browsing. Its primary use case includes inline account details like country flags, source icons, and location warnings, along with features such as timeline filters, evidence sharing, and user control over displayed indicators. Notable features include full account cards and customizable data management, enhancing users' ability to analyze account context without identifying physical locations.

DIVER OSINT CTF is an online competition focused on Open Source Intelligence (OSINT) that emphasizes the research and analysis of publicly available information across diverse domains, including military and public datasets. Notable features include a realistic approach to problem-solving, a wide range of difficulty levels for participants, and a commitment to ensuring that challenges reflect real-world scenarios without encouraging illegal activities. The competition aims to equip players with practical skills applicable to both OSINT CTF events and real-life situations.

Worldview is a full-stack situational-awareness dashboard that visualizes multiple live public data streams on an interactive 3D globe, including flights, satellites, earthquakes, traffic, and CCTV feeds. Notable features include customizable rendering modes (CRT, night-vision, thermal), real-time data aggregation, and a tactical interface with operational overlays. Built with modern technologies such as React, TypeScript, and CesiumJS, it provides a comprehensive tool for monitoring global dynamics in real-time.

Webamon CLI is a command-line interface designed for utilizing the Webamon Search API, enabling users to perform extensive threat intelligence searches and threat hunting across the web. Key features include the ability to search a vast corpus by domain, IP, URL, or hash, on-demand website scanning, compromised credentials hunting, and tracking of phishing and malware campaigns. The tool also supports exporting results in various formats, making it a versatile solution for cybersecurity professionals.

WayTrace is a domain reconnaissance tool that leverages the Wayback Machine to reconstruct the public history of a specified domain, extracting 43 categories of intelligence such as emails, subdomains, and exposed secrets. It operates entirely outside the target environment, ensuring that no direct interaction occurs, and it provides a detailed timeline of findings based on archive data, along with self-hosting capabilities and a user-friendly interface in both English and French. Notably, it features a guided scanning process and comprehensive configuration options for customized usage.

The VAPT Toolkit provides a comprehensive environment for vulnerability assessment and penetration testing, integrating over 50 third-party security tools and custom automation frameworks on an Ubuntu 22 platform. Notable features include a deterministic network exploitation orchestrator that automates host discovery and vulnerability verification using nmap and Metasploit, as well as a MITM browser autopwn orchestrator combining tools like bettercap and Responder for streamlined exploitation. The toolkit supports extensive automation in reporting, deliverable generation, and a wireless attack framework for versatile testing capabilities.

Urx is a command-line tool that efficiently extracts URLs from OSINT archives like the Wayback Machine and Common Crawl, utilizing asynchronous processing for rapid data collection. Key features include keyless access to multiple sources, result filtering by various criteria, URL normalization, and support for multiple output formats, making it ideal for security testing and analysis applications. Additionally, it supports caching and incremental scanning to enhance performance and efficiency in URL collection tasks.

SubreconGemini is a high-performance subdomain discovery tool that leverages Google Gemini AI, certificate transparency logs, and customizable wordlist brute-forcing to identify and validate live subdomains. Key features include hybrid discovery methods, smart validation techniques to minimize false positives, maximum concurrency through asynchronous operations, and the ability to generate structured output reports in various formats. The tool is designed for flexibility, allowing users to scan single or multiple domains while enabling optional AI-enhanced discovery capabilities.

Subfinder is a fast passive subdomain enumeration tool designed to discover valid subdomains for websites by leveraging curated online sources. Its primary use case is for penetration testers and bug bounty hunters who require stealthy and efficient subdomain discovery, featuring modules for resolution and wildcard elimination, multiple output formats, and resource optimization. Subfinder supports STDIN/OUT integration and offers customizable source selection, filtering options, and rate-limiting to enhance its performance and adaptability in various workflows.

Steam Monitor is a powerful tool designed for real-time tracking of Steam players' activities, including monitoring their online status and gameplay. Notable features include detailed user information insights, automated email and webhook notifications, session continuity handling, and flexible configuration options, all of which allow users to gain comprehensive insights into a player's gaming behavior and interact with changes effectively.

Spotify Profile Monitor is a powerful tool designed for real-time tracking of changes within Spotify profiles, including playlist updates, follower growth, and profile alterations. Its notable features include notifications via various channels, a detailed history log, and tools for exporting playlist data and searching for users, making it a comprehensive solution for Spotify users who want to stay informed about their accounts and those of their friends.

Spotify Monitor is a real-time tracking tool designed to monitor friends' music activity on Spotify, allowing users to track listening habits, sync playback, and receive notifications for skipped tracks. It offers two primary functionalities: monitoring Spotify friends' activity and checking the health of Last.fm scrobbles, alerting users if their plays do not appear on their Last.fm profile. Notable features include presence detection, session statistics, and a versatile setup process via Python or Docker.

The Social Media Checker API is a multi-platform tool designed to verify the existence of social media accounts using usernames, emails, or phone numbers across major networks such as Facebook, Instagram, and Twitter. It offers features such as single and bulk account checking, customizable platform selection, and provides detailed JSON responses indicating the account status on each platform. Notable for its enterprise-grade reliability, the API can handle up to 10 accounts in a single request, making it suitable for both individual and organizational use cases.

SingleFile version compatible with Manifest V3

Web Extension for saving a faithful copy of a complete web page in a single HTML file

Recons101x is a portable passive reconnaissance tool designed to enumerate hostnames from the Shodan service without requiring an API key or third-party libraries. It supports batch scanning, various output formats (including JSON), and optional DNS resolution, making it suitable for authorized testing on hosts. The tool operates across multiple platforms using Python 3 and includes configurable options like timeout settings and concurrent workers for enhanced usability.

The phone-number-location-tracking-tool enables users to accurately track the real-time location of a phone simply by entering its number, utilizing GPS data extraction methods. It features an easy-to-use interface and a quick installation process, making it accessible for a wide range of users. The tool is designed for desktop use and provides high accuracy in location tracking.

OSIRIS is a real-time global intelligence dashboard designed for situational awareness, integrating over 40 open data sources including flight tracking, surveillance feeds, and natural disaster monitoring into a comprehensive interface. Its notable features include a multi-domain fusion of data, keyless-first architecture, extensibility for new data sources, and an AI analyst for generating insights and briefings, along with a built-in OSINT toolkit for reconnaissance activities. Built with advanced web technologies, OSIRIS provides smooth navigation and real-time updates across a variety of intelligence domains.

OsintgramCXX is an advanced OSINT tool designed for collecting and analyzing publicly available information from Instagram with a focus on ethical use. Notable features include modding support for custom hooks and commands, device spoofing capabilities for network calls, manual interaction for user control, support for multiple proxies, and the ability to engage with multiple Instagram profiles simultaneously. Currently in active development, it aims to enhance user experience while adhering to legal and ethical standards.

OSINT-IA is an AI-powered tool designed to enhance OSINT analysis by streamlining data collection and reporting processes. Its primary use case revolves around leveraging AI capabilities for activities such as audio transcription, video analysis, and report generation. Notable features include a comprehensive list of AI chatbots integrated with WhatsApp and a variety of AI tools for programming support and research assistance.