~/hackyfeed $

Bolt Unblocker is a Node.js-based proxy tool designed to bypass content restrictions, offering support for various popular platforms, including GeForce NOW and Discord. Its notable features include a user-friendly OS GUI, two high-speed proxy options, flexible cloaking capabilities, and robust site support, leveraging the latest Ultraviolet V3 proxy service for improved performance compared to outdated alternatives. Users can deploy Bolt on multiple platforms but must avoid certain static hosting services to ensure full functionality.

BlueToolkit is an extensible, black-box framework designed for testing Bluetooth vulnerabilities in both Bluetooth Classic (BR/EDR) and Bluetooth Low Energy (BLE) systems. Its primary use case includes semi-automated testing through its three main modules: Recon for capability gathering, Exploit for executing a range of 43 public exploits, and Report for generating comprehensive JSON reports. Additionally, the framework has been evaluated against multiple automotive brands, revealing significant security vulnerabilities in their Bluetooth implementations.

Bluebox is a collection of exploits tailored for various VoIP products, primarily designed for penetration testing and the exploitation phase of VoIP environments. It utilizes the Go Exploit Framework and features a Docker Compose file that includes an Asterisk server for testing purposes, facilitating a streamlined approach for security professionals to assess vulnerabilities in VoIP systems.

The "awesome-vm-escape" repository is a comprehensive collection of write-ups, exploits, and resources focused on virtual machine escape and container breakout vulnerabilities. It includes categorized information on various platforms such as VMware, VirtualBox, QEMU, and Docker, providing valuable insights for security researchers and practitioners looking to understand and exploit VM-related security flaws. Notable features of the repository include curated lists of exploits and case studies relevant to each virtualization technology, which facilitate knowledge sharing and advancement in the field of cybersecurity.

Awesome MCP Security is a comprehensive resource focusing on the security aspects of the Model Context Protocol (MCP), providing guidance on best practices, potential vulnerabilities, and mitigation strategies. It includes a variety of materials such as academic papers, articles, tools, and security considerations aimed at enhancing the security of applications utilizing MCP. Notable features include detailed security guidelines for both clients and servers, highlighting the importance of human oversight and proper input validation.

Autorun-ng is a versatile tool designed for launching applications with a streamlined user interface, supporting both Linux and Windows environments. Its notable features include a sandboxed filesystem leveraging cap-std for enhanced security, ergonomic Lua API bindings for seamless integration, and a zero-dependency library for accessing source engine interfaces. This tool eliminates the need for menu plugins or manual injections, making application execution efficient and user-friendly.

AttackMate is an automation tool designed to execute cyber attack scenarios across all phases of the Cyber Kill Chain, integrating seamlessly with penetration testing frameworks like Metasploit and Sliver Framework. It allows users to script commands, generate payloads, schedule and chain attack steps using configuration files, and perform background operations, including file transfers and HTTP interactions. Noteworthy features include automation of shell or SSH commands, comprehensive support for Metasploit and Sliver commands, and a user-friendly interface for managing complex attack scenarios.

Atomic-Mirai is an educational tool modeled after the Condi-Mirai botnet family, aimed at facilitating research on IoT security vulnerabilities and DDoS attack methodologies. It features a flexible compilation process for various architectures and includes a command and control (C&C) server setup, allowing users to simulate and analyze attack vectors in a controlled environment. Notably, this tool is strictly intended for educational and research purposes, with a clear disclaimer against illegal usage.

AntiDarkSword is an iOS jailbreak tweak and a TrollStore dylib designed to enhance the security of vulnerable iOS devices against WebKit RCE and iMessage zero-click exploits. Its notable features include the ability to selectively disable Just-In-Time (JIT) compilation, spoof user agents, block risky attachments, and isolate system daemons, effectively mitigating various types of attacks. Additionally, the tool can deploy a Corellium honeypot to disrupt advanced payloads.

AKILT is an open-source botnet framework designed for security enthusiasts and malware analysts to facilitate the study of botnet operations. Written in Go, it supports both client and server functionalities with advanced features such as screen capture, remote command execution, DDOS attacks, and a keylogger, while aiming to remain undetectable. The tool provides a valuable resource for understanding the implementation and behavior of botnets in a controlled environment.

AiGPT is an automated exploitation framework designed for rapidly discovering and compromising vulnerable WordPress sites, leveraging a multi-vector engine to exploit thirteen unauthenticated CVEs. Key features include intelligent plugin fingerprinting, the ability to create unauthorized WordPress admin accounts, direct access through SQL injection, and a multi-threaded scanning capability for efficiency across networks. This tool is intended for authorized penetration testing and security research purposes.

This repository provides a proof-of-concept for a Windows local privilege escalation exploit that combines a User Account Control (UAC) bypass with token duplication to elevate a process to SYSTEM-level privileges. It serves primarily for educational purposes, demonstrating key concepts of Windows security, such as token mechanics and process elevation, while employing techniques like registry manipulation and access token duplication to illustrate vulnerabilities in privilege management. Notably, the tool employs specific Windows APIs for process creation and token handling, highlighting potential attack vectors in a controlled environment.

WP-Scanner is an advanced vulnerability scanner and exploitation framework specifically designed for WordPress, capable of identifying 75 CVEs across core, plugins, and themes. Its notable features include comprehensive fingerprinting, active exploitation capabilities with 36 exploit handlers, and mass scanning with thread-safe execution. The tool supports HTML and Markdown report generation and includes automatic updates for both the tool and its vulnerability database.

ttyinject-rs is a tool that exploits the `TIOCSTI` ioctl in the Linux kernel to inject keystrokes into a terminal, allowing a non-privileged user to gain root privileges when the root user executes `su - user`. Notable features include its easy integration with a user's `~/.bashrc`, its self-deleting behavior post-execution, and compatibility with specific Linux kernel configurations. It serves primarily as a demonstration of an exploit for educational purposes.

tinf0il is a high-performance proxy portal that facilitates private browsing, streaming, and gaming through a combination of Scramjet proxy technology and libcurl transport. Its notable features include tab cloaking, stealth routing, a game and app catalog, and a comprehensive streaming interface for movies and TV shows with real-time sports event tracking. The platform also emphasizes privacy, with zero logs and customizable user preferences.

TGtoJSON-2026 is a tool designed for converting Telegram's native session tdata files to JSON format, enabling compatibility with Telegram Prime and similar clients. Its notable features include the ability to convert JSON back to tdata format, with support specifically for the Pyrogram library.

Termius Exporter is a tool designed to extract user data from the Termius SSH client, which has restricted export capabilities. Its primary use case is to liberate hosts, credentials, and keys, particularly for post-exploitation scenarios, by retrieving information such as saved SSH hosts, private keys, and command snippets. Notable features include its reliance on XSalsa20-Poly1305 encryption for data handling and the ability to output extracted data in structured CSV files.

SploitTest is a testing application designed to determine if iOS devices running versions 15.0 to 15.4 beta 3 are vulnerable to a specific kernel vulnerability exploited for local privilege escalation. By executing the proof of concept (PoC), users can identify if their device can be subjected to jailbreaking, with the indication of vulnerability shown by a device reboot after running the application. The tool is notable for its straightforward usage and direct applicability to iOS security assessments.

Spellbook is a micro-framework designed for the rapid development of reusable security tools using a flow-based programming (FBP) paradigm. It allows users to create and utilize various security modules, such as exploit testing and advisory lookups, through a command-line interface that supports operations like module searching and execution. Notable features include its ability to handle multiple exploit modules and a Docker integration for containerized deployment.

PySlowLoris is a Python-based tool designed for testing a web server's vulnerability to slow request attacks by maintaining numerous open connections and sending malformed headers. It utilizes asynchronous I/O for efficient connection handling, offers user-friendly command line and Python API interfaces, and is packaged for easy installation via PyPI or Docker. Notably, users can specify the number of connections and run the tool in a silent mode to focus on attack simulation without cluttering the output.

SlopBro is a proof-of-concept exploit designed to leverage the jsserver vulnerability in LG TVs running webOS versions 5 to 10. It operates by starting an HTTP server to deliver an exploit page and payloads, establishing an SSAP connection with the target TV, and executing a rogue package with root privileges, allowing for potential persistence and the installation of additional software like the Homebrew Channel. Notable features include compatibility across Python 2.7 and 3.x, minimal dependency requirements, and options for debugging and asset source specification.

SkillArch is a customizable installation tool designed for setting up an i3 window manager environment atop KDE Plasma, targeting both lightweight and full-feature installations. Its primary use case is to streamline the setup process for users by providing straightforward commands for installing various components, including CLI tools, security applications, and GUI utilities. Notable features include automatic updates, an interactive merging process for upstream changes, and extensive documentation with video tutorials.

SideInstaller is an open-source iOS application designed to facilitate the installation of SideStore and LiveContainer directly on iPhones without the need for a PC. It simplifies the sideloading process by handling pairing, provisioning, and installation on-device, allowing users to easily sideload applications while ensuring their Apple credentials remain private and secure. Notable features include a user-friendly interface, local data handling with no online transmission, and transparency through its open-source code, providing full auditability.

Awesome Security & Hacking is a comprehensive resource for ethical hacking, focusing on penetration testing, vulnerability scanning, and exploit development. The repository offers a collection of tools, scripts, and hands-on labs categorized across various domains such as network security, web application security, and cryptography, making it suitable for both beginners and advanced practitioners. Notable features include structured content on specialized areas like bug bounty and wargames, as well as community engagement through contributions and feedback channels.

Red Devils Rat Premium is an advanced remote administration tool (RAT) designed for comprehensive device management and surveillance. Its primary use case is to facilitate remote access and control over Android devices, offering features such as call and SMS monitoring, live screen streaming, location tracking, and remote control functionalities. Notable features include an admin panel for easy management, an APK crypter for secure app distribution, and the ability to execute commands remotely, providing a robust solution for unauthorized monitoring.