~/hackyfeed $

The email-cracker tool is designed for the brute-force recovery of email account passwords, enabling security professionals to test password strength and enhance email account security. It automates the process of testing multiple password combinations against a specified email address and features an efficient user interface for managing target email inputs and password lists, making it suitable for penetration testing and security audits.

Echo433 is an Arduino-based tool designed for sniffing, logging, and replaying signals in the 433MHz frequency range, primarily used for auditing home automation systems and testing RF remotes. Notable features include automatic signal logging to an SD card, the ability to clone and retransmit captured signals, and a straightforward setup utilizing the RHSwitch library for ease of use.

Dynasty-C2 is an advanced Command and Control (C2) framework designed for digital operations, primarily on Linux systems, and inspired by anime aesthetics. Key features include a built-in web server for payload distribution, support for multiple agent interactions, and unique agent identification for effective session management. Future enhancements are planned for Windows compatibility and persistent payload capabilities, making it a versatile tool for cybersecurity professionals.

The Dreamcast Disassembly, Debugging, and Decompilation Diaries repository provides tools and resources for reverse-engineering Sega Dreamcast games. Primarily aimed at developers and hobbyists, it facilitates the extraction of data from GD-ROM images, disassembly and decompilation of Dreamcast binaries using Ghidra, and interactive debugging via Flycast as a GDB server. Notable features include recommended scripts and databases for Ghidra, along with general resources and tools to enhance the reverse-engineering experience.

DorkGen is a script designed to generate keyword combinations for web page URLs, serving primarily for web scraping, testing, and security-related applications. It enables rapid creation of dork lists based on user-defined variables and features persistent configurations through external config files for enhanced usability. Additionally, recent updates have expanded the range of available dorks, improving the tool's functionality.

Cyberonix is an open-source cybersecurity tool designed as a comprehensive resource hub for the cybersecurity community, aiming to serve as a one-stop solution for both seasoned professionals and learners in the field. Notable features include its regular updates with new resources, user-driven feature suggestions, and a collaborative approach, encouraging contributions from the community to enhance its functionality.

BrutalNET V2 is a network attack tool specifically designed for executing large-scale ARP spoofing attacks that result in a denial-of-service (DoS) condition across an entire network. Unlike traditional ARP spoofing methods that focus on single targets, BrutalNET inundates connected devices with forged ARP packets to poison their ARP caches, effectively redirecting all network traffic to the attacker's MAC address. Notable features include its ease of use through simple command-line instructions and its capability to disrupt entire networks by leveraging the ARP protocol vulnerabilities.

AndroidHack_BackDoor is a Python and shell script designed to facilitate the integration of a backdoor into Android APK files while leveraging the Android Debug Bridge (ADB) for remote device access. It is primarily intended for educational use and requires a solid understanding of various technical tools such as Metasploit, Apktool, and the Android SDK. Notable features include a simplified process for backdoor insertion and remote accessibility of Android devices.

The AI Cyber Range tool provides a fully automated lab environment designed for testing and securing Large Language Models (LLMs) against the OWASP Top 10 vulnerabilities. It allows users—including AI security researchers, red team professionals, and educators—to simulate real-world adversarial attacks and validate the security of LLM applications in a safe, Docker-isolated setup. Notable features include one-click installation, a progression of attack scenarios, and a local browser interface for interactive learning.

AArch64 Bytes is a collection of concise articles aimed at enhancing the reverse engineering skills for AArch64 ARM 64 Linux binaries. The tool provides practical insights through bite-sized lessons on critical concepts such as syscalls and register manipulation, making it a valuable resource for developers and security researchers interested in ARM architecture. Notable features include step-by-step tutorials and links to deeper articles on Medium for further exploration of specific topics.

ZX-DDoS is a Python-based Distributed Denial of Service (DDoS) tool designed for educational and testing purposes, allowing users to learn about network stress testing and security evaluation. It features a straightforward setup process and an interactive prompt for configuring target IP, number of worker threads, and requests, making it suitable for security researchers and network administrators. The tool is compatible with various operating systems, including Linux, Windows, and MacOS.

WiFi Passview is a Windows-based open-source batch script tool designed to recover stored WiFi passwords quickly and effortlessly. It features the ability to extract passwords from specific SSIDs, save the credentials, generate WLAN reports, and even upload them to the cloud, all without requiring administrative rights for basic operations. The program streamlines the password recovery process by automating the extraction and removing the need for manual key content reading.

sshprank is a versatile tool designed for SSH reconnaissance and exploitation, offering functionality for mass scanning, login cracking, banner grabbing, and assessing password authentication support. It leverages the python-masscan and Shodan modules to efficiently identify vulnerable SSH services, enabling users to experiment with various configurations and options for effective password cracking. Notable features include support for random IP address generation, multiple credential combinations, customizable thread management, and output logging for successful logins.

s1c0n is a reconnaissance tool designed to simplify the vulnerability assessment process for web servers. Its primary use case includes automated scanning for WAFs, ports, subdomains, web directories, and content management systems, with the capability to customize user-agent strings and scan through proxies. Notable features include comprehensive auto-detection of server technologies, WordPress plugin enumeration, and an easy installation process, catering to various Linux distributions.

Python Brute Force is a versatile tool designed for conducting brute force attacks on form-based and JSON API logins, featuring automatic detection of login types and CSRF bypass capabilities. Its primary use case is for penetration testing and security research, providing options such as multi-threading, customizable worker counts, and color-coded terminal outputs for enhanced usability. The tool efficiently manages various CSRF protection mechanisms, making it suitable for testing modern web applications built with popular frameworks.

PHP-Web-Security is a tool designed to enhance the security of PHP web applications by implementing best practices for preventing common vulnerabilities such as SQL injection, cross-site scripting (XSS), and cross-site request forgery (CSRF). It provides features for secure password hashing, session management, and includes a compilation of tools for web framework hardening, static code analysis, and security advisories. Notable components include security modules, static analysis tools, and resources aimed at both developers and educational content for improving overall web security.

NetRaze is an offensive network-execution toolkit developed in Rust, providing a memory-safe, single-binary alternative to traditional Python-based tools like NetExec and CrackMapExec. It maintains a similar workflow for network post-exploitation but enhances performance with async I/O and offers a desktop GUI for visual workflow composition. Currently in alpha, it focuses on core functionality with a goal of expanding its protocol coverage across various operating systems.

netpwn is a Python 2.7-based framework designed for automating various penetration testing tasks. It includes modules for creating reverse shells, sending files, and generating backdoors, along with tools for hash analysis, SSL certification retrieval, and various data encoding/decoding functionalities. Notable features include an auto-complete command interface, resource links for further learning, and an accessible command structure for executing modules effortlessly.

IP-Tracker is an advanced OSINT tool designed for tracking and geolocating IPv4 addresses while enriching data with associated phone information. Its primary use case is to assist security analysts and technical consultants during the footprinting phase of penetration testing, enabling mass resolution and agile queries of network addresses. Notable features include integration with detection flows, modular architecture adhering to DevSecOps standards, and robust testing capabilities with automated unit tests.

Host Scan is a professional network reconnaissance tool written in Python 3 that allows for high-speed scanning of open TCP/UDP ports on remote hosts, leveraging optimized concurrency for rapid results. It provides service identification for open ports, features a modular architecture for clean code separation, and incorporates CI/CD processes with automated testing and security analysis to ensure code quality. The tool is designed explicitly for ethical cybersecurity purposes and must be used only with explicit authorization.

HDN-Locator is a Python-based GPS tracking tool designed to capture the exact coordinates of any device through a convincing fake YouTube video page that requests location access. Its notable features include real-time map visualization, anti-spoofing capabilities to detect fake GPS apps, and cross-platform compatibility across Windows, Linux, and macOS. The tool autonomously saves location data in JSON format, enhancing its usability for tracking purposes.

Fingerprint is a forensic analysis tool designed to monitor and record changes to files and registry entries on Windows systems, allowing users to identify modifications potentially made by malware or unauthorized programs. It generates comparative fingerprints of system states in CSV format, facilitates use with external diff tools, and incorporates functionality to filter changes through Procmon logfiles, streamlining the detection of hidden data associated with software installations. Additionally, the tool is batch-friendly, enabling automation for targeted monitoring scenarios.

Diamorphine is a Linux kernel module rootkit designed for various Linux kernel versions from 2.6 to 6.x across x86/x86_64 and ARM64 architectures. Its notable features include the ability to conceal processes and directories, as well as granting root privileges to specified users through specific signal commands. This tool enables undetected manipulation of the system, making it particularly useful for advanced stealth operations in cybersecurity contexts.

Brutus is a Python-based tool designed for learning and experimentation in cybersecurity environments. It offers a sandbox feature for testing functionality in isolated, no-network containers, making it suitable for safe experimentation. Notable features include a development setup with linting and formatting tools, as well as a defined structure for module organization.

AirJack is a macOS tool designed for scanning Wi-Fi networks and capturing WPA/WPA2/WPA3 handshakes using CoreWLAN. It orchestrates the use of external tools such as AirSnare and hcxpcapngtool for data capture and facilitates the conversion of captures into hashcat format, providing users with options for dictionary or brute-force cracking workflows. Notable features include detailed logging, command line configurability, and a user-friendly launcher for streamlined operation.