~/hackyfeed $

The Qualcomm GBL Exploit PoC tool facilitates the unlocking of bootloaders on Qualcomm devices through a specific exploit. Its primary use case is to enable users to install custom software, recover locked devices, or troubleshoot advanced issues, all without requiring programming knowledge. Notable features include a straightforward graphical interface for running the unlocking process and compatibility with various Qualcomm devices, operational on Windows systems.

Pwntools is a robust CTF framework and exploit development library written in Python, designed to facilitate rapid prototyping and ease of exploit creation. Notable features include support for various architectures, seamless interaction with remote services, and a set of built-in tools that streamline both exploitation and challenge solving. The library caters primarily to Capture The Flag (CTF) competitions, simplifying the process of developing and executing exploits.

pwninit.py is a specialized tool for configuring Capture The Flag (CTF) pwn challenges by automating the setup of binaries with their required runtime environments. It features downloading appropriate interpreters and glibc libraries, applying patches for compatibility, generating customizable solve scripts, and fetching glibc source code for enhanced debugging. The tool supports manual patching by default to avoid potential issues during exploitation, making it particularly useful for cybersecurity practitioners working on binary exploitation challenges.

pwn.hs is a Haskell library designed for exploitation development and reverse engineering tasks. Its primary use case is to facilitate the creation and manipulation of data structures commonly encountered in security research. Notable features include comprehensive examples demonstrating its functionality and customization for various exploit scenarios.

Puncia is a command-line interface (CLI) tool designed for comprehensive subdomain mapping and vulnerability monitoring through its integration with the Subdomain Center and Exploit Observer APIs. Its primary use case includes assessing external attack surfaces, enabling advanced vulnerability research, and facilitating automated intelligence gathering for CI/CD pipelines. Notable features include contextual enrichment of vulnerability data, bulk processing capabilities, and stealthy reconnaissance for red teams, making it an essential utility for cybersecurity professionals.

The "PoC in GitHub" repository offers proof-of-concept (PoC) exploits for multiple Common Vulnerabilities and Exposures (CVEs) identified in various software components, highlighting potential local and remote privilege escalation vulnerabilities. Each listed CVE includes a brief description of the vulnerability's nature, links to associated exploits, and demonstrates the ease of exploitation without requiring user interaction. This repository serves as a resource for security researchers and developers to understand vulnerabilities and test their systems against known exploits.

The poc-archive is a structured repository for security research proof-of-concepts (POCs), organized by categories such as web, network, binary, and more. It features detailed metadata, reproduction steps, and references for each POC, facilitating knowledge sharing and education within authorized security research contexts. Notable features include automated indexing, interactive POC scaffolding scripts, and a template system for contributing new entries.

PatrowlHearsData is an open-source data repository and scraping tool designed for the collection of vulnerability intelligence, including CVE, CPE, CWE, and exploit references. It facilitates security operations by providing real-time updates and orchestrating threat intelligence feeds, making it suitable for organizations looking to enhance their cybersecurity posture with comprehensive vulnerability insights. Notable features include scalability, a user-friendly installation process, and the option for professional support through a paid Pro Edition.

Osiris-Jailbreak is an experimental jailbreak tool for iOS devices running versions 11.2 to 11.3.1, intended solely for developers to explore the jailbreaking process. Key features include the execution of the multi_path exploit (CVE-2018-4241), granting kernel task permissions, enabling remote terminal access, and bypassing certain security measures like the Sandbox and AMFI. However, the tool is still in development, lacks essential features like Cydia support, and is not recommended for general users due to its potential instability and incomplete functionality.

MikrotikAPI-BF is a comprehensive RouterOS attack and exploitation framework designed for conducting automated security audits, brute-force credential attacks, and exploiting vulnerabilities in Mikrotik routers. Its notable features include a robust exploit engine with coverage for over 100 CVEs, multiple attack vectors such as REST API, SSH, and MAC-Telnet, as well as threading capabilities for multi-target scans. The tool also supports offline credential decoding and unique capabilities like MAC-Server Layer-2 discovery for devices without IP addresses.

The malleable-signatures repository provides a proof of concept (PoC) that demonstrates signature malleability attacks using compact signatures within the Ethereum ecosystem. It highlights vulnerabilities in OpenZeppelin’s ECDSA library version 4.6 that are exploitable through signature malleability, emphasizing the necessity to avoid using signatures as unique identifiers due to their inherent non-uniqueness. Key features include showcasing the vulnerability and its remediation in later library versions, along with a detailed explanation of the underlying cryptographic principles involved.

The Linux LPE Toolkit is a multi-architecture privilege escalation tool designed to identify and exploit vulnerabilities to gain root access on Linux systems. It includes 24 pre-built exploits for various architectures, automatically detects kernel versions, filters out patched exploits, and attempts each exploit until root access is achieved. Notable features include a dry-run mode for planning, command execution upon successful exploitation, and options for verbose or silent output during exploitation.

KittySploit is a modular offensive security framework and C2 platform designed for penetration testers, researchers, and red teams. It consolidates security workflows into a single console, featuring capabilities for target scanning, engagement organization, module execution, and AI-assisted testing plan generation, alongside built-in command and control functionalities. Notable features include an extensible architecture, automation readiness, and an array of integrated tools for reconnaissance, exploitation, and traffic analysis.

IrisC2 is a command and control (C2) framework designed for authorized security testing, red team exercises, and internal research. It features a modular architecture comprising a Client for user interaction, a Server for managing communication and tasks, Beacons for executing commands within target environments, and a Stager for handling staged payloads. Notable capabilities include multi-platform support, advanced task scheduling, plugin integration for extended actions, and comprehensive event synchronization.

Hell's Hollow is a rootkit technique specifically designed for Windows 11 that enables effective SSDT hooking by exploiting an undocumented Alternate Syscall handler mechanism. This tool allows users to manipulate system calls at the kernel level, enabling alteration of return values and system call arguments while bypassing existing defense mechanisms like HVCI. Notable features include its compatibility with Rust for driver development and the ability to hook and modify any specified system service number (SSN), making it a versatile tool for advanced kernel manipulation techniques.

The haval-app-tool-multimidia project is an unofficial educational tool designed for reverse engineering the Haval GWM multimedia system. Its primary use case is to facilitate learning and exploration of the system's architecture and functionality without any commercial intent. Notable features include detailed documentation for understanding the inner workings and guidance on extending the tool's capabilities.

HashDump-BypassEDR is a tool designed to circumvent Endpoint Detection and Response (EDR) solutions by utilizing the `reg.exe` command to export critical registry information, enabling the dumping of password hashes from Windows systems. Its notable features include the ability to operate with minimal permissions on certain Windows versions, alongside an effective method for retrieving the BootKey necessary for the process without detection by most antivirus software. The tool's practicality is underscored by its testing across various Windows environments, showcasing its robustness in real-world applications.

The h4cker repository is a meticulously curated collection of cybersecurity resources, tools, scripts, and training materials, aimed at supporting various aspects of cybersecurity, including offensive and defensive strategies, cloud security, and AI security. Notable features include a structured taxonomy for easy navigation across different cybersecurity domains, dedicated sections for certifications and lab-building, and organized training references and resources. This repository serves as a valuable supplemental resource for professionals seeking to enhance their knowledge and skills in cybersecurity.

GEF-Extras is an augmentation of the GDB Enhanced Features (GEF) framework, providing users with additional scripts and structures to enhance their debugging experience in GDB. It facilitates easy installation and integration with GEF, and is accompanied by comprehensive documentation to assist users in utilizing its capabilities effectively. Notable features include seamless installation via a simple command and ongoing community support through Discord.

The Fuzz Corpus repository provides a comprehensive collection of curated malicious-input samples for security testing, focusing on various injection types and CVE proof-of-concepts (PoCs). Notable features include support for ICC profiles, malformed graphics, and web injection signatures, which can be integrated into fuzzing workflows for validating security tools. The repository also categorizes inputs by purpose, facilitating targeted testing against specific vulnerabilities in different environments and platforms.

ExploitFlow (EF) is a modular library designed to create cybersecurity exploitation routes, known as exploit flows, by combining and composing exploits from various sources and frameworks. Its primary use case is to facilitate research in Game Theory and AI within the cybersecurity domain through a structured representation of actions and system states. Notable features include its extensibility with adapters for other exploitation frameworks and a design syntax inspired by TensorFlow, allowing for seamless integration and experimentation.

ExploitDB-Hunter is a command-line tool designed to streamline the process of searching for and downloading exploits from the Exploit-DB website. Its primary use case is to facilitate quicker access to relevant exploits by allowing users to search via CVE IDs or titles, adjust result parameters, and choose exploit types and platforms interactively, thus reducing the need for manual browsing. Notable features include customizable search options, downloading capabilities, and an intuitive terminal interface.

The Exim RCE (CVE-2018-6789) Learning Environment provides a structured setup for users to investigate and debug the Exim mail transfer agent, focusing on the Remote Code Execution vulnerability. Primarily intended for academic purposes, this tool includes a Vagrant configuration that enables users to deploy a Fedora VM pre-configured for testing, along with Docker integration to run Exim in a controlled environment. Notable features include the ability to customize the VM's resource allocation, disable ASLR for consistent debugging, and access to scripts that facilitate the setup of the environment and execution of exploits.

The EVM Hack Registry is a comprehensive archive of hundreds of DeFi/EVM exploit proof-of-concepts (PoCs) designed for offline execution across multiple blockchain networks from 2017 to 2026. Each exploit is encapsulated within a standalone Foundry project, complete with on-chain contract source code, a local block-state snapshot, and detailed AI-generated documentation, enabling reproducibility without reliance on external RPC nodes. This tool aims to simplify the study and analysis of blockchain vulnerabilities, addressing common accessibility issues found in existing DeFi hack resources.

EVM Hack Analyzer is a static, in-browser tool designed for debugging EVM exploits by replaying specific transactions and analyzing their behavior within a forked chain state. Users can visualize opcode execution, keep track of storage and memory changes, and annotate vulnerabilities step-by-step, providing a comprehensive mapping from bytecode to source lines. The tool also allows users to share findings through download options or decentralized IPFS links, facilitating collaboration and community contributions through organized proof-of-concept archives.