~/hackyfeed $

Cyberpunx is a comprehensive hacking tool designed for use on Termux or Kali Linux, featuring a wide array of useful functionality for educational purposes. Users can easily install the tool with straightforward setup instructions and access various hacking features through a guided interface. Notably, it emphasizes user responsibility and ethical use.

Clarity CLI is a multifunctional tool library developed in Python, designed for various tasks related to Open Source Intelligence (OSINT) and cybersecurity. Its notable features include comprehensive OSINT search capabilities, password management tools, and SQL vulnerability detection and exploitation functionalities. The tool aims to assist users in gathering digital information while emphasizing responsible usage.

The Carding Tools Web Version is a web-based application designed for generating, checking, and validating credit card numbers and Bank Identification Numbers (BINs). Its notable features include a BIN Checker that retrieves detailed BIN information, a Card Generator for producing valid credit card numbers using the Luhn algorithm, a Card Checker that verifies card authenticity, and a BIN Generator for generating random BINs based on card types. It incorporates a responsive design for optimal usability across devices and facilitates data importing from text files.

Brutegram is a multi-bruteforce tool specifically designed for attacking Instagram accounts, though it is currently not operational. This tool facilitates brute force attacks on social media usernames and supports installation on various Linux distributions and Termux, but its intended use for account compromise is against terms of service and ethical guidelines.

awacs-scanner is an automated vulnerability scanning tool designed to gather extensive information about systems and identify potential exploits using multiple sources, including Vulners API and SearchSploit. Its primary use case involves scanning for vulnerabilities across multiple targets specified in files, streamlining the reconnaissance process without the need for manual searches. Notable features include various scan modes such as stealth_flight, vuln_scan, and battering_ram, as well as capabilities for S3 bucket discovery.

The Automated Bug Bounty Scanner is a comprehensive reconnaissance and vulnerability scanning tool designed specifically for bug bounty hunters and penetration testers. It automates web application security testing by efficiently crawling and analyzing websites for vulnerabilities such as hidden admin panels, CMS weaknesses, and sensitive file exposures, while offering features like intelligent recursive crawling, prioritized vulnerability results, and built-in brute force capabilities through an intuitive GUI.

AdminDirectoryFinder is a Python tool designed to scan for and identify sensitive directories, specifically under admin paths, within web applications. It is primarily used by penetration testers and developers to enhance security by detecting hidden admin panels and ensuring proper access controls. Notable features include its straightforward installation process and focus on security testing.

Yaralyzer is a tool designed for the visual inspection of regex and YARA matches within binary and text files, allowing users to view the actual bytes matched along with their surrounding context. It supports scanning with customizable regex patterns or YARA rules, detecting potential character encodings of matched bytes, and can display results in various formats such as SVG and HTML. Notable features include the ability to force different character encodings on matched regions and export findings in a visually appealing format, facilitating deeper analysis of patterns within data.

Xtreme Nmap Parser (XNP) is a Python utility that parses XML files generated by Nmap and converts them into various formats, including CSV, XLSX, and JSON. Its primary use case is to facilitate data analysis and reporting in network security assessments, with notable features such as file and directory handling, configurable output formats, and advanced filtering options for focusing on specific services or vulnerabilities. Additionally, XNP allows users to maintain pentesting records and provides easy documentation and data sharing capabilities.

Worm-AI CLI is a command-line interface that provides access to Grok models via an unofficial reverse-engineered API wrapper. It is designed for flexible interaction with large language models, featuring a built-in jailbreak system for unrestricted responses and a fully customizable terminal UI. Its modular architecture allows for easy modifications and enhancements, making it suitable for research and educational purposes.

Wildlogger is a keylogging tool designed for the Windows operating system that captures detailed system information, such as running processes, device data, and keyboard keystrokes, while also taking periodic screenshots and sending this data to a specified email address. It operates using two separate threads for logging records and capturing screenshots, and it includes a persistent mode feature to ensure continuous execution on the target system by integrating itself into the Windows startup process. The tool supports Gmail for reporting, requiring enabling of less secure app access for SMTP operations.

WIFIjam is a cross-platform WiFi deauthenticator and information tool that enables users to scan for nearby networks and perform a deauthentication attack on compatible Linux systems with the appropriate WiFi adapter. The tool boasts robust error handling, detailed WiFi information retrieval on macOS and Windows, and the ability to jam both 2.4GHz and 5GHz networks. It requires Python 3.x and various system-specific utilities to operate effectively.

WiFi Security & Router Diagnostics is a cross-platform Python script designed to extract and display details of saved WiFi profiles, including passwords, authentication types, and encryption methods across Windows, Linux, and macOS systems. Notable features include an interactive menu for filtering, searching, exporting results to various formats, and an auto-install mechanism for dependencies like `colorama`. The tool prioritizes user consent by implementing a Terms and Conditions agreement before data retrieval, ensuring compliance with ethical standards.

Wifi-Confusion is a cybersecurity tool designed to create multiple fake Wi-Fi access points to mislead potential victims, primarily for educational purposes. It features a simplified process for accessing monitor mode and allows for the bulk generation of deceptive networks using an external Wi-Fi card compatible with Kali Linux. Users must adhere to ethical guidelines, as the tool is intended solely for legal, educational use.

WhatsAppHacking is a tool designed to crash WhatsApp applications using a single text message and allows for the injection of a payload to extract all media files from the app. It serves primarily for educational purposes, demonstrating vulnerabilities in WhatsApp, but is explicitly noted for its illegal implications when misused. Notable features include payload injection capabilities and the ability to crash the app with minimal input.

Tele-Trace is a local web-based OSINT tool for Telegram, designed for profile analysis and research investigations utilizing Flask and Telethon. Its key features include detailed profile scanning by username or phone number, user account age estimation, a trust score calculation based on multiple factors, and advanced username intelligence capabilities with bio analysis. This solution operates entirely on your device, ensuring data privacy without reliance on cloud services.

Steal all files is a cybersecurity tool designed for data exfiltration via a USB device, enabling users to copy all files and information from a target computer by simply plugging in the device. Key features include a straightforward setup process for creating an executable payload on the USB, the ability to run the tool directly from the USB or through a Python interpreter, and customizable options for specifying the source path and output file name.

SourceLeakHacker is a multi-threaded web directory scanner designed to identify potential source file leaks on specified URLs. It supports scanning individual URLs or batches from a provided file, offering customizable options such as dictionary scale, threading, and output configurations. Notable features include logging capabilities, results saved in CSV format, and the ability to adjust parameters for timeout and verbosity levels.

RickPhis is a modular phishing simulation framework designed for ethical hackers and cybersecurity educators, enabling them to rapidly deploy convincing credential-harvesting pages and simulate real-world phishing attacks for awareness training and red team exercises. Built with Python, Flask, and Selenium, it features functionalities such as Ngrok tunneling for exposing local servers, live browser automation for interception of login processes, a web admin panel for monitoring captured credentials, and robust logging capabilities. This tool is intended for educational use and authorized security testing, ensuring that users operate within legal boundaries.

reveng_rtkit is a Linux Loadable Kernel Module (LKM) rootkit specifically designed for the 5.11.0-49-generic Linux kernel, primarily used for post-exploitation stealth techniques. Its key features include syscall table address retrieval, function hooking, and the capability to hide itself and other processes from system monitoring tools, making it difficult to detect. Additionally, it implements an IOCTL for interactive control and can bypass known rootkit detection tools like rkhunter.

RealTime-PhoneNumberLocation is a tool designed for locating mobile phone numbers in real-time. It primarily facilitates geolocation services based on phone numbers, enabling users to track device locations efficiently. Notable features may include a user-friendly interface and compatibility with various phone number formats.

R4ven is a security research tool designed to demonstrate the potential risks associated with modern web browser permissions, illustrating how granting access can expose sensitive data such as location, camera inputs, IP addresses, and device information. It enables users to collect metadata in a controlled environment for educational purposes, emphasizing the importance of privacy hygiene and the dangers of social engineering attacks. Notable features include IP and GPS tracking, camera access, user-driven permission interactions, and integration with platforms like Discord for data presentation.

Phishing AI Agent is an advanced tool designed to identify vulnerable employees within organizations, leveraging AI to automate the reconnaissance and campaign generation process for phishing simulations. Its notable features include dynamic knowledge fetching for real-time intelligence, multi-source profile enrichment, AI-powered vulnerability analysis, and SMTP integration for either simulation or real email delivery. This tool is intended for authorized security testing and employee awareness training only, providing security teams and red/blue teams with a robust method to enhance cybersecurity measures against phishing threats.

Password-Cracker is a harmless prank batch script designed for educational purposes, simulating a password cracking tool without any actual functionality. It provides a fake connection and generates random password attempts, ultimately displaying a simulated “cracked” password, all within a console environment that mimics hacker aesthetics. This tool is intended solely for entertainment and does not engage in any real password cracking.

PANDORA is a multifaceted cybersecurity tool designed primarily for offensive security tasks, including DDoS attacks, web scanning, and data extraction through various methods like SQL injection and doxing. Notable features encompass a range of hacking utilities such as a deface maker, database dump capabilities, network sniffing, and an auto exploitation tool, making it versatile for both penetration testing and malicious activities. The tool is presented with detailed installation instructions for multiple environments, including Linux and Termux.