~/hackyfeed $

Mastyf.ai is a perimeter security tool designed to enforce security policies for AI agents by intercepting and analyzing tool calls in real-time to prevent unauthorized actions. Its primary use case is to mitigate threats such as prompt injection, data exfiltration, and shell injection while providing a full audit trail of all AI activities. Notable features include multi-agent swarm analysis for policy evaluation, a comprehensive dashboard for activity visibility, and the ability to block malicious actions before execution.

`omp-re` is a reverse-engineering plugin for the Oh My Pi framework that utilizes Radare2 and offers a suite of 22 tools for in-depth binary analysis. Its primary use case is to facilitate the examination of binary files, featuring an interactive function navigator, decompilation capabilities, and a robust evidence storage system that ensures claims in reports are substantiated by gathered facts. Notable features include an HMAC-signable audit log and an evidence citation system, enhancing the reliability and traceability of the analysis process.

XRefer is a Python plugin for the IDA Pro disassembler that enhances binary analysis through a custom navigation interface. It clusters related functions, highlights execution paths, and integrates external data sources to provide context-rich path graphs, significantly speeding up manual static analysis. Notable features include LLM integration for generating natural language descriptions of code relationships and the ability to incorporate API traces and custom xrefs for improved insights.

memory-forensic is a cross-platform memory forensics toolkit designed for analyzing Windows kernel memory through an independent implementation that matches the output of Volatility 3. It reads various memory dump formats and allows users to retrieve detailed process and network connection information without needing Python or pre-staged symbol catalogs. Notably, it offers a self-profiling capability to locate kernel symbols and validate its results through rigorous comparison with reference implementations, ensuring high correctness in process recovery.

Awesome Memory Forensics is a curated repository focused on digital forensic tools and resources specifically for memory forensics, a critical approach for investigating sophisticated cyber attacks that evade traditional detection methods. The repository includes a variety of software tools for memory acquisition, analysis, as well as educational resources such as books, courses, and articles, facilitating a comprehensive exploration of volatile memory analysis in digital forensics. Notable features include a selection of both commercial and open-source tools that allow investigators to capture and analyze critical data in memory, ensuring enhanced effectiveness in digital investigations.

Robinhood CLI (MCP + API) is an unofficial command-line interface and server designed for managing Robinhood accounts directly from the terminal. It offers comprehensive access to brokerage features, including options trading, recurring investments, dividends, and more, allowing users to execute trades while ensuring control over their investment strategies with real-time updates and dry-run capabilities. Notably, it leverages Robinhood's private web API for account interactions, providing a streamlined management experience not dependent on the official platform.

DarkDex is a powerful tool designed to extract and reconstruct the real dex file from packed Android applications, including those protected by advanced packers like ijiami 4th generation. It operates in two modes: a host script that leverages memory reading from outside the Android sandbox, and an APK that runs directly on the device, facilitating full memory dumps in root mode or disk dex pulls without root. Notable features include an event-driven capture system that captures decrypted dex in real-time, as well as utilities for validating, deduplicating, and testing the output disassemblies.

rr-decomp is a decompilation tool for the PlayStation 1 game Ridge Racer, enabling users to reconstruct the game's source code from their legally-owned copy of the original disc. This tool generates assembly listings and a native runtime, facilitating a static recompilation approach that allows for incremental function replacement without breaking the gameplay experience. Notable features include the ability to verify progress in decompilation, ensuring no copyrighted assets are included, and the provision to create a playable version of the game using user-supplied data.

ida-headless-mcp is a Rust-native server designed for headless interactions with IDA Pro, allowing for multi-session handling of databases through a supervisor-worker model. It provides public tools for database management and analysis, supports both stdio and Streamable HTTP modes, and is optimized for a headless environment with no GUI components involved. Notable features include individual worker processes for each database session and a limit on the number of simultaneous worker processes for efficient resource management.

The HP Laser 1008a on macOS project provides a solution for printing with specific HP Laser printers that lack native macOS support by utilizing a Linux container to run HP's rastertospl driver. This tool enables users to print directly from any application via the standard Cmd-P method without reliance on terminal commands or external scripts, making it user-friendly for Apple Silicon macOS environments. Key features include automatic installation via a single command and seamless integration with the CUPS printing system, circumventing multiple compatibility limitations.

The Discord Badge Spoofer is a tool designed to artificially inflate the "hours played" and "games played" badges on Discord profiles by sending spoofed game events to Discord's analytics endpoint. This experimental Python application requires user authentication, including an account token and a cookie, to simulate playtime through commands for claiming hours and marking games as played. Notably, while the tool can track playtime without additional setup, the games-played count necessitates a legitimate executable fingerprint obtained from the user's own client, emphasizing its experimental nature and potential violation of Discord's terms of service.

newserv is a comprehensive game server and proxy tool specifically designed for the Phantasy Star Online (PSO) community, facilitating reverse-engineering and custom gameplay experiences. It supports features such as user accounts, server-side saves, cross-version play, and a REST API, while also allowing users to connect through a proxy to mitigate command vulnerabilities that could disrupt gameplay. Additionally, newserv incorporates community-driven reverse-engineering efforts, making it a stable and dynamic platform for both players and developers.

The lm-decomp repository provides a work-in-progress decompilation of the game Luigi's Mansion, enabling users to analyze and understand the game's code without including any proprietary assets. It supports multiple versions of the game across various regions, including USA, Japan, and multiple PAL revisions, allowing for robust examination and potential modification of the code. Notably, the project strictly prohibits AI contributions to maintain code integrity and legal compliance.

KeyDot is a high-performance command-line tool that extracts encryption keys and detects engine versions from compiled Godot Engine games, specifically targeting Windows x64 executables and WebAssembly (`.wasm`) files. Its primary use case is static analysis of game files without requiring runtime execution, which enhances safety and efficiency. Notable features include optimized C++ code for rapid extraction, memory-mapped file usage for low memory consumption, and unique support for WASM files, making it an essential tool for developers working with Godot Engine games.

BeoSound 5c is a software tool that modernizes the Bang & Olufsen BeoSound 5 experience by utilizing web technologies on a Raspberry Pi 5. It features a circular arc-based touch UI and integrates with various music services and devices, offering seamless remote control, configuration options, and support for legacy hardware like the original BS5 rotary encoder and display. Additionally, it incorporates a security model that ensures a trusted home network environment and protects sensitive configuration data.

TikTok-SSL-Pinning-Bypass is a tool designed to intercept network traffic from the TikTok application on Android devices without the need for rooting. It supports Android versions 6.0 and above, and has been successfully tested using Mitmproxy in a non-root environment, specifically for the arm64-v8a architecture. Notable features include the ability to bypass SSL pinning, compatibility with real Android devices and AVD emulators, and the provision of a free patched APK that resolves specific login errors.

IG-Detective is a Python-based Open Source Intelligence (OSINT) tool designed for in-depth analysis of Instagram accounts, enabling users to extract location history, map social interactions, and generate automated reports. Notable features include advanced evasion techniques for stealthy data collection, interactive geospatial mapping, and various forensic modules such as account recovery enumeration and engagement audits. The tool optimizes performance with asynchronous data export and intelligent caching for efficient query handling.

The Counter-OSINT & Privacy Guide is a comprehensive resource designed to help individuals safeguard their personal data against online threats. It covers essential topics such as digital hygiene, data breaches, and privacy measures across various platforms, providing users with actionable strategies to enhance their online security and maintain privacy. Notable features include a detailed section on software development privacy and region-specific considerations, making it a versatile tool for a diverse audience.

BlastDNS is an ultra-fast DNS resolver implemented in Rust, optimized for mass DNS lookups with superior performance when multiple resolvers are provided. Its notable features include built-in caching, support for various record types, and configurable parameters for fine-tuning performance, such as timeout settings and error handling. The tool can be utilized through a command-line interface, Rust library, or Python library, making it versatile for integration into broader applications or for use as a standalone resolver.

MetaView is a web-based interface for the Metasploit Framework that provides multi-user support and an intuitive user interface built on Vue3. Its primary use case is to facilitate project management and data visualization within penetration testing, enabling users to manage workspaces, visualize database entries such as hosts and vulnerabilities, and generate live dashboards. Notable features include integration with external tools (like MaxPatrol and Nmap), role-based access control, and task management functionalities.

TCPK (Thick Client Pentest Kit) is a Windows-based security audit tool designed for comprehensive testing of thick-client applications, including MSIX, .NET, and Electron binaries. Noteworthy features include a PowerShell engine, live auditing with real-time findings, CVSS scoring, AI triage capabilities, and automated report generation in multiple formats, providing an exhaustive analysis for authorized testing environments. This tool emphasizes evidence-based findings and offers extensive checks, making it suitable for security professionals conducting in-depth application audits.

nmap-vulners is a set of Nmap scripts designed to enhance network vulnerability assessments by converting service scan results into a detailed list of known Common Vulnerabilities and Exposures (CVEs) along with their respective CVSS scores and exploits. Notable features include three independent scripts that can perform various vulnerability lookups—one leveraging the public Vulners database, another utilizing the Vulners API for advanced scoring, and a regex-based script that identifies web software through HTTP headers. This tool aims to streamline the process of gathering security-related information during Nmap scans, improving the effectiveness of vulnerability management.

Getsploit is a tool designed for searching and downloading public exploits from the Vulners database, facilitating both online searches and fully offline operations via a local SQLite index. Its notable features include a comprehensive query capability across multiple exploit collections, local query support without internet connectivity, and robust JSON and tab-separated output formats, all while maintaining data privacy and integrity. The tool is compatible with Python 3.11 and above, ensuring reliable performance across various platforms.

ExecEndpoints is a dual-component toolkit designed for authorized web security testing and bug bounty efforts, featuring a Chrome extension for real-time API request monitoring and a Python server for extracting hidden endpoints from JavaScript. The tool captures detailed HTTP requests, including methods, parameters, and per-host authentication details, while enabling deep static analysis to uncover dynamic API endpoints missed by traditional scanning methods. Notable features include a rich dashboard for endpoint management, a typed secret scanner, and a safe design that operates locally without external dependencies.

The MIDI MCP Server is a Model Context Protocol (MCP) server designed for AI-driven MIDI composition, enabling the generation of MIDI files from structured JSON data including sophisticated chord name support. Its notable features include an interactive piano-roll preview UI, a comprehensive chord library with over 25 chord types, and multiple deployment options such as local stdio, HTTP, or Cloudflare Workers. The tool also incorporates music theory resources and supports various pitch input formats, making it a versatile choice for music composition and analysis.