~/hackyfeed $

RustSoliloquy is a Rust-based tool for capturing NetNTLM hashes by utilizing the SSPI without directly accessing LSASS, thus enhancing security during the process. Key features include the use of native APIs for indirect syscalls to manipulate registry settings and impersonate logged-on users, alongside streamlined NTLM negotiation to facilitate hash extraction. The tool is designed for educational purposes, showcasing a thorough understanding of NTLM authentication mechanisms.

RustPotato is a Rust-based privilege escalation tool that exploits DCOM and RPC to gain NT AUTHORITY\SYSTEM privileges on Windows systems. It features a TCP-based reverse shell utilizing Winsock APIs for remote command execution and employs indirect NTAPI calls to handle security tokens effectively. Its key capabilities include identifying and hijacking RPC communications, impersonating clients, and executing commands with elevated privileges.

RustiveDump is a Rust-based tool specifically developed to perform memory dumps of the lsass.exe process using only NT system calls, creating minimalistic minidump files that include crucial data such as SystemInfo and ModuleList. Notable features include Position Independent Code (PIC) support, XOR encryption for enhanced security, and remote transmission capabilities, along with efficient memory handling and a lean build size of 18KB due to its no_std and CRT-independent design.

`ropfilter` is an advanced tool designed for filtering, ranking, and chaining ROP gadgets derived from `rp++` dumps, specifically for 32-bit x86 architectures. Its notable features include smart gadget filtering based on register transfers and memory operations, automated multi-gadget chain synthesis, and a constraint solver that utilizes YAML/JSON specifications, enhancing the robustness and efficiency of ROP chain construction.

The Python Reverse Shell Generator is a GUI application designed for penetration testers and red teamers, enabling them to quickly generate reverse shell payloads for both Linux and Windows environments. It boasts features such as an extensive library of over 60 Linux payloads, real-time payload generation, multiple encoding options, and a user-friendly interface that supports easy OS switching. This tool also includes one-click copy functionality and a fullscreen mode for enhanced usability during security assessments.

Rebellion is a Linux kernel rootkit malware designed for x86 and x86_64 architectures, offering features such as self-hiding capabilities, folder and file concealment, TCP/UDP port hiding, privilege escalation from low-privilege users to root, and a backdoor mechanism accessed via ICMP packets. Currently in beta, it seeks collaboration for development to address existing bugs and architecture compatibility issues. Notable functionalities include the ability to manipulate visibility within the system using the `kill` command and the curation of specific configurations through a dedicated `config.h` file.

Reait is a toolkit designed for the analysis of compiled executable binaries utilizing the RevEng.AI API, primarily aimed at identifying similar components, vulnerabilities, and generating advanced YARA++ REAI signatures for binary files. Notable features include the ability to extract symbol embeddings, conduct similarity searches among executable programs, and support for stripped ELF and PE binaries in both GNU/Linux and Windows environments. The tool facilitates in-depth binary analysis through commands that submit executables, retrieve analysis results, and query a database for similar symbols.

RevEng.AI Radare2 Plugin enhances the Radare2 framework with AI-driven reverse engineering functionalities, including decompilation, function analysis, and binary similarity detection. It seamlessly integrates with existing Radare2 workflows, providing automated setup scripts across multiple platforms and the capability to utilize an external API for advanced analysis tasks. Noteworthy features include a straightforward installation process, automatic library path configuration, and the generation of necessary configuration files directly through Radare2 commands.

Ravage Framework is a Command & Control (C2) solution tailored for cybersecurity professionals, red teams, and penetration testers, enabling them to simulate realistic attack scenarios with a secure and modular architecture. Notable features include end-to-end AES-256 encryption, advanced PowerShell obfuscation techniques, an interactive web-based dashboard for real-time monitoring, and dynamic listener management for flexible C2 operations. Its design prioritizes stealth and evasion, making it suitable for conducting penetration tests while minimizing forensic traces.

The PWK-OSCP-Preparation-Roadmap is a comprehensive guide designed to assist individuals preparing for the OSCP certification by outlining essential topics, techniques, and tools for penetration testing and enumeration. It covers various enumeration strategies for services such as DNS, SMB, SMTP, SNMP, FTP, and SSH, highlighting possible misconfigurations and associated attack vectors. Notable features include extensive links to resources and tutorials on tools like Nmap, Wireshark, TCPDump, and Metasploit, making it a valuable resource for both beginners and experienced practitioners.

PurpleStorm TTPs is a comprehensive repository of commands, tools, techniques, and procedures utilized by the PurpleStorm CTF team, designed to assist in various cybersecurity tasks and challenges. Its primary use case includes facilitating tasks such as file transfers, port forwarding, establishing command and control (C2) channels, and executing penetration testing exploits. Notable features include detailed command examples for tools like Swaks, Ligolo-ng, and NetExec, which enhance users' capabilities in network exploitation and data exfiltration.

The PULSE C2 Framework is a command and control (C2) infrastructure designed for remote management of Windows agents through a secure HTTPS connection, featuring a web dashboard for real-time interaction. Key features include TLS encryption, a custom encrypted communication protocol, and capabilities for executing remote shell commands, file exfiltration, and agent control. This framework is intended for educational use, offering a simplified setup derived from a more complex rootkit project.

Proxy_Bypass is a post-exploitation tool designed to identify user agents capable of circumventing proxy restrictions. It offers batch processing, the ability to test various user agents against specific domains, and includes a predefined library of user agents for immediate use. Notable features include verbose output, support for custom user agents, and future enhancements such as multi-threading and additional language support.

PiSquirrel is a compact, versatile tool designed for red team and offensive security operations, functioning as an inline wiretap for monitoring servers, workstations, and network equipment. Notable features include its ability to mimic Brother printer responses to enhance stealth during network scans, a simplified setup script for quick configuration, and pre-installed tools for various network and penetration testing tasks. The device leverages inexpensive ARM architecture and open-source software, making it a cost-effective solution for cybersecurity professionals.

The PHP Reverse Shell is a versatile tool designed to create reverse shells using PHP scripts across different operating systems, including Linux, macOS, and Windows. It automatically detects the OS and works with both `ncat` and `multi/handler`, offering educational utilities for establishing reverse shells and executing file upload/download functionalities. Notably, it supports multiple PHP versions and includes specific scripts for different environments, enhancing its adaptability for penetration testing scenarios.

The Periodic Table of Offensive Security serves as a visual reference for 118 essential tools, frameworks, and standards utilized in offensive security and red teaming. Its primary use case includes aiding penetration testing, red team training, and providing a comprehensive overview of tools for OSINT, exploitation, and post-exploitation phases. Notable features include downloadable print-friendly PDFs and an interactive clickable version that links directly to resources for each tool represented.

Herramientas y utilidades de pentesting, ethical hacking y seguridad ofensiva.

Pentest Toolkit is an advanced penetration testing framework designed for rapid and efficient security assessments, integrating over 100 industry-standard tools into both a Python suite for automation and a Bash interface for hands-on operations. Its primary use case includes comprehensive testing phases, from reconnaissance and web security to SSL/TLS analysis and network assessment, all culminating in professional report generation. Notable features encompass automated reporting in multiple formats, robust web application vulnerability testing, and streamlined reconnaissance processes.

Pentest-Notes is a comprehensive repository of notes, cheatsheets, and resources designed for penetration testing practices. This tool primarily serves as a structured guide for professionals in the field, providing organized chapters on methodologies, security cheatsheets, and offensive security techniques. Notable features include its collaborative approach, inviting contributions from users to enhance the content continuously.

Pentest Everything is a comprehensive collection of notes and write-ups focused on offensive security topics and platforms, primarily intended for viewing through Gitbook. It is frequently updated to provide insights and methodologies for penetration testing, making it a valuable resource for security professionals. Notably, the repository encourages collaboration through GitHub for those interested in forking the material.

The OSWE/AWAE Pre-Preparation Plan and Notes repository serves as a comprehensive personal guide aimed at preparing for the Offensive Security Web Expert (OSWE) certification. It aggregates detailed notes on various web vulnerabilities and related tools, alongside recommendations for prerequisite skills such as coding, familiarity with Linux, and web application security concepts. Notably, it includes a table of contents covering specific vulnerabilities and associated exploit methodologies, providing a structured roadmap for effective study and practice.

OSINT360 is a GPT-5.2-powered assistant tailored for open-source intelligence (OSINT), digital forensics (DFIR), and cyber investigations, offering comprehensive support for intelligence operations including collection, analysis, and reporting. Its notable features include command-based interaction for expedited workflows, structured reporting formats, a tool-first approach favoring open-source tools, and adherence to compliance and ethical standards. The tool also facilitates adversary profiling, compliance with global cyber laws, and integrates real-time intelligence through live web lookups.

The OSCP Preparation Guide is a comprehensive repository designed to aid individuals preparing for the Offensive Security Certified Professional (OSCP) certification, catering to both beginners and experienced penetration testers. It provides structured resources including syllabi, practical labs, detailed tutorials on essential skills, and exam preparation strategies, along with community contributions to enhance the guide continuously. Notably, it covers various tools required for both the OSCP exam and associated proving grounds, making it a valuable resource for aspiring cybersecurity professionals.

OASIS is an open-source tool designed for benchmarking AI models in offensive security tasks such as vulnerability discovery, exploitation, and privilege escalation. Notable features include standardized Docker challenges, multi-provider benchmarking, automated analysis with MITRE ATT&CK mapping, and the Kryptsec Scoring Model (KSM) that evaluates methodology quality and success rates. The tool operates entirely locally, ensuring data privacy and no external account requirements.

The Nightmare Exploitation Roadmap is a structured educational resource designed to advance users' binary exploitation skills through a layered curriculum that emphasizes theoretical understanding and practical application. It focuses on building capabilities to analyze unknown binaries, identify exploit primitives, and develop automated exploitation techniques while navigating real-world security mitigations. Notable features include a non-linear approach to learning, preservation of module names for clarity, and a comprehensive progression from foundational knowledge to advanced exploitation strategies.