~/hackyfeed $

MacAssistant is a native macOS application designed for system maintenance and Apple binary handling, replacing scattered scripts and terminal commands with intuitive workflows. It features comprehensive system health monitoring, safe cleanup options, app repair capabilities, and a developer toolkit for managing DEB packages, DYLIBs, and Mach-O files. The tool emphasizes user confidence with preview-first actions, no telemetry, and support for macOS 13 and later.

delink is a versatile tool designed for splitting binaries in decompilation projects, supporting multiple formats such as shared objects, Mach-O, and Windows PE with associated PDBs. It features an IDA import mechanism that allows users to leverage IDA's analysis for splitting binaries without needing direct debug information, thereby enabling detailed function and relocation management. The output is customizable, accommodating usage across various architectures with a focus on both ELF and PE outputs.

CLI-Anything-Web is a tool that transforms any website into a production-ready command-line interface (CLI) by capturing its live HTTP traffic. It is primarily used for generating Python CLIs for web applications that lack public APIs, featuring capabilities such as authentication handling, a REPL mode, JSON output, and built-in tests. Designed for prototyping and automation, this tool eliminates the need for manual reverse-engineering by automatically generating CLI interactions based on live traffic data.

BitMono is a versatile open-source obfuscator designed for .NET and Mono applications, offering robust protections against reverse engineering. Key features include advanced string encryption, various anti-debugging techniques, and the ability to create custom obfuscators using its dependency injection framework. Notably, it provides a web-based interface for easy obfuscation, ensuring that user uploads are securely wiped after processing.

Benthic is a comprehensive Windows kernel rootkit designed for educational exploration and practical insights into rootkit development. It features advanced capabilities including process and network stealth, keylogging, and file hiding, all integrated into a modular framework for demonstrating real-world stealth and persistence from kernel mode. While leveraging techniques such as DKOM for process hiding and using the Windows Filtering Platform for network obfuscation, Benthic serves as a foundational resource for those venturing into the complexities of rootkit creation.

AobscanFast is a high-performance, cross-platform memory pattern scanner designed for locating Array-of-Bytes (AOB) signatures in live process memory, primarily used in game modding and reverse engineering. It features SIMD acceleration for efficient scanning, parallel processing capabilities, and zero-allocation paths to optimize performance, making it suitable for both Windows and Linux environments. Additionally, it offers configurable options for chunk size and parallelism, along with a dependency injection-ready architecture for flexible integration.

The Altium Designer MCP is a server tool that enables AI assistants to efficiently create and manage Altium Designer component libraries, specifically `.PcbLib` and `.SchLib` files, by handling file input/output and primitive placement. This tool addresses the challenges of manually building libraries by allowing AIs to perform engineering tasks while it manages the complexities of the undocumented binary formats, supporting the creation of any component rather than just predefined packages. Notable features include compatibility with multiple AI assistants and the ability to automate footprint generation based on datasheet interpretation and design specifications.

The vuln-report-skill tool automates the generation of submission-ready DOCX vulnerability reports for security response centers, focusing on verified vulnerabilities with clear proof of concept (PoC). It employs a structured workflow that includes layered verification gates to ensure report quality, enforces strict screenshot requirements, and maintains a consistent document layout. Designed for technical accuracy and dual readability, the tool facilitates a rigorous review process to enhance report acceptance on various platforms.

The World Intelligence MCP Server provides real-time global intelligence across over 30 domains by integrating 120 tools compatible with the Model Context Protocol. It features a live ops-center dashboard and a Qdrant vector store for efficient semantic search, allowing users to query historical data on various subjects such as military activity, cyber threats, and economic indicators using natural language. This tool is particularly beneficial for AI agents requiring comprehensive world awareness without reliance on paid data subscriptions.

WHATS LOOKUP is an OSINT tool designed for gathering various types of user information from WhatsApp accounts, including profile pictures, business account verification, user status, linked device analysis, and privacy settings. It supports six API endpoints and features an interactive terminal interface, automated image saving, and international number format validation. This tool is intended for legitimate cybersecurity investigations and requires integration with the WhatsApp OSINT API on RapidAPI.

OSINT-Nexus is an open-source intelligence platform designed for security researchers, penetration testers, and intelligence analysts, integrating passive reconnaissance tools with AI-driven analysis. Notable features include advanced graph analytics, interactive visualizations, and AI-powered insights using Google Gemini, along with robust reporting capabilities in multiple formats. This cross-platform tool supports Windows and Linux, making it a versatile resource for gathering actionable intelligence from publicly available data.

insta-dl is an asynchronous command-line tool designed for downloading Instagram content, such as profiles, posts, reels, stories, and comments, while preserving the original timestamps. It features two backend options, HikerAPI for safe use without a login and an optional private API, along with capabilities for incremental updates, JSON metadata storage, and versatile input formats. This tool is optimal for users seeking to archive Instagram content without the risk of account bans associated with traditional scraping methods.

Exunys ESP is a visual enhancement tool designed for gaming, offering features such as tracers, ESP, boxes, and head dots to provide players with an advantage in gameplay. Utilizing Synapse X's Drawing Library, it ensures undetectability while allowing modular support for NPCs and customizable user configurations via a GUI. The tool is optimized for performance and stability, making it a reliable choice for users seeking advanced visibility options in their gaming experience.

Aimbot V3 is a universal aim-locking module designed for games using the default character model, offering enhanced optimization and efficiency over its predecessor, Aimbot V2. It features a simplified and organized code structure, allowing for easy integration and customization via a Lua scripting interface. This tool is primarily intended for use with exploit environments like Synapse X and Electron and includes customizable settings for enhanced gameplay precision.

The CVE-2026-9830 tool is a Python-based proof of concept designed for assessing the unauthenticated exposure of the BookingPress Pro REST API in WordPress installations. It enables authorized users to validate potential vulnerabilities by normalizing target URLs, checking API endpoints for sensitive data exposure, and providing configurable options such as timeouts and filtering. Notable features include the ability to save API responses to JSON files while emphasizing the responsible handling of personal data in compliance with authorized assessment protocols.

HEAVEN is an autonomous penetration-testing framework designed to streamline and automate various stages of the penetration testing process, including reconnaissance, vulnerability detection, exploitation, risk scoring via machine learning, and reporting. It features a robust interface with 55 CLI commands, 77 API routes, and multiple scan modes, facilitating comprehensive assessments while allowing users to focus on critical decision-making tasks. Notably, it incorporates a CVSS machine learning predictor with a high correlation score, ensuring accurate risk evaluation.

Win10 LockPicker is a P4wnP1 A.L.O.A. payload designed to unlock a Windows 10 session without requiring prior knowledge of the user's password. It captures NTLMv2 hashes over poisoned LLMNR/NBT-NS traffic via a spoofed USB network adapter, cracks the hash using John the Ripper, and automatically inputs the recovered password using an HID keyboard. Additionally, it offers an SMB brute force alternative for credential recovery through Metasploit, enhancing its versatility for authorized penetration testing.

P4wnP1 Infinition Payloads is a collection of JavaScript and Bash scripts designed for the P4wnP1 A.L.O.A. platform, facilitating credential harvesting, file exfiltration, and remote access primarily on Windows 10 systems. Notable features include the ability to stealthily operate through minimized PowerShell sessions, support for French and US keyboard layouts, as well as methods for disabling Windows Defender and retrieving sensitive information directly to a Samba share. This tool is intended for authorized penetration testing and security research.

ExploiterX 3.0 is an enterprise-grade web vulnerability scanner designed for security professionals and developers, capable of detecting a wide range of vulnerabilities including XSS, SQL Injection, and CSRF. Its notable features include advanced scanning capabilities with over 20 XSS payload variants, concurrency support for parallel scanning, intelligent HTML form parsing, and comprehensive reporting in multiple formats. Additionally, the tool emphasizes resilience with built-in retry mechanisms, robust error handling, and secure reporting to prevent common security vulnerabilities in output.

OpenAleph is an open-source platform designed for investigative journalists and researchers to efficiently explore and analyze large volumes of documents and datasets. Notable features include intuitive data indexing for both unstructured and structured formats, powerful cross-referencing capabilities to track entities across data sources, and community-driven development, leveraging the FollowTheMoney data schema widely used in similar projects.

TrustSight is a security auditing tool designed for Arch Linux that inspects AUR PKGBUILD updates prior to installation. It identifies structural changes, malicious commands, and typosquatting while generating a deterministic evidence report that traces findings to specific diffs, URLs, or novelty records. Notable features include local analysis without executing commands, a reputation-based novelty detection model, and a structured output to enhance transparency in the auditing process.

Rawsec's Cybersecurity Inventory is a comprehensive resource designed to catalog various cybersecurity tools and their functionalities. It serves as a centralized platform for researchers and professionals to discover, contribute to, and engage with open-source cybersecurity solutions. Notable features include an extensive documentation hub, contribution guidelines, and active community engagement through Discord channels.

MAPG is an automated reconnaissance tool designed for penetration testing, CTFs, and security assessments, facilitating organized and efficient service enumeration. It features a modular framework that executes service detection and enumeration tools in parallel, generating structured reports while minimizing manual effort. Notable capabilities include support for various scanning modes, extensive service checks, and automatic report generation, all aimed at streamlining the initial phases of security assessments.

ERC.Net is a robust library designed for debugging Windows applications, specifically focused on analyzing application crashes and memory vulnerabilities. It supports both 32-bit and 64-bit applications, provides functionality for parsing executable headers, identifying process information, and generating specific testing patterns. Notable features include the ability to read thread Environment Block (TEB) information, detect memory vulnerabilities, and a comprehensive testing framework that verifies memory searching and parsing capabilities.

Aivist Verify is an access-control confirmation engine designed to eliminate false positives in testing for Broken Object Level Access (BOLA) and Insecure Direct Object Reference (IDOR) vulnerabilities. It utilizes a dual approach where an AI model proposes potential vulnerabilities based on traffic analysis, while deterministic code gates decisively validate these findings, ensuring that only fully verified threats are reported. Notably, Aivist Verify guarantees zero false positives, supported by a reproducible evidence chain that enhances the reliability of its outcomes.