~/hackyfeed $

APTL (Advanced Purple Team Lab) is a cybersecurity tool that facilitates autonomous red and blue team training by simulating an enterprise target stack, utilizing AI agents to drive offensive and defensive operations. It allows users to create a customizable lab environment with various services, integrating penetration testing tools and intentionally vulnerable configurations while capturing telemetry data for analysis. Key features include a simple command-line interface for lab setup, various attack and defense scenarios, and real-time performance monitoring, making it ideal for cyber-operations research and purple team training.

The Agile V™ Agent Skills Library provides a framework for enhancing the reliability of AI agents by implementing formal traceability and independent verification to combat common pitfalls such as hallucinations and silent assumptions in code generation. It allows for typed lineage linking requirements to implementation artifacts, promoting compliance and ensuring that every piece of code can be traced back to its original requirements. Notable features include hardware awareness for optimized deployment and the separation of code generation from verification to ensure that all edge cases are adequately tested before production.

OPFOR is an open-source tool designed for adversary emulation targeting AI agents, LLM applications, and MCP servers, enabling users to test their defenses against a variety of attack vectors. It provides a CLI interface, a browser extension for non-developers, and supports configurable scans that address multiple OWASP security standards. Its comprehensive capabilities allow for testing of prompts, tools, and reasoning processes, making it a versatile solution for enhancing AI security.

365 is a comprehensive OSINT and threat hunting tool designed for network and web reconnaissance, discovery, enumeration, vulnerability mapping, exploitation, and reporting. Its notable features include a streamlined setup process for Kali Linux and a range of scripts for automating various security assessment tasks. This tool is primarily used for enhancing security assessments and facilitating vulnerability exploitation in targeted environments.

0day Rubbish is an automated vulnerability disclosure tool focused on the rapid identification and public release of high-severity 0-day vulnerabilities using AI-driven methods. It emphasizes efficiency by verifying exploits and providing thorough assessments while maintaining a non-profit approach to enhance timely vendor responses. Key features include direct disclosure of verified vulnerabilities with working proof-of-concept code, a commitment to real-world impact, and continuous monitoring through advanced AI models.

ZenBuster is a multi-threaded, multi-platform URL enumeration tool designed for use in Capture The Flag (CTF) challenges and by security professionals for target information gathering. It efficiently brute-forces subdomains and URI resources, offering features such as customizable wordlists, port specification, and logging capabilities, while supporting both IPv4 and IPv6 formats. Despite being user-friendly and slightly less speedy than more established tools like Gobuster, ZenBuster maintains satisfactory reliability for practical use.

XUPA RUSTAM is a Python-based penetration testing tool designed for brute-force attacks against website admin login panels. It utilizes the `requests` module for making requests and incorporates Tor proxies to maintain the attacker's anonymity. Key features include support for user-defined lists of admin usernames and passwords, printing responses from the target URL, and the option to operate without a proxy.

Wshlient is a versatile web shell client that allows users to execute commands by injecting them into a crafted HTTP request. Users create a text file containing the HTTP request and specify injection points, enabling command execution while providing options for customization, such as token replacements and debug output. This tool is primarily used for remote command execution in web environments, leveraging Python's requests library for simplicity and ease of installation.

WiFi-Creds-Grabber is a Python tool designed to extract Wi-Fi credentials from a local Windows machine. Its primary use case is to retrieve stored Wi-Fi passwords, which are then saved in a text file named "passwords.txt" for easy access. The program is straightforward to use, requiring only Python to be installed and executing simple command-line instructions.

Werkzeug Cracker is a tool designed to perform wordlist attacks on hashes generated by the `werkzeug.security` module, primarily to verify password hashes efficiently. It utilizes the `check_password_hash` function to determine password validity and supports multithreading to enhance cracking speed, allowing users to specify the number of threads for improved performance. The tool is compatible with both Linux and Windows platforms and requires Python 3.10 for operation.

weakpass_generator is a Python tool that generates weak passwords using the current date as a basis for randomness. It is primarily used for testing the robustness of password security by creating predictable and easily guessable passwords. Notable features include its simplicity and the ability to quickly generate multiple weak passwords for security assessments.

wcreddump is a lightweight Python script designed to automate the dumping of credentials from Windows systems, specifically targeting both SAM hashes and WINHELLO PINs. It requires specific libraries and a mounted Windows OS drive to function, and it outputs the dumped credentials to an 'outputs' folder, making it suitable for further cracking with tools like JTR or hashcat. Notable features include customizable parser options and automatic output handling, enhancing user convenience during the credential extraction process.

WConsole Extractor is a Python library designed to exploit Flask applications that are running in debug mode, allowing users to extract sensitive information and gain interactive access to the server. Users can implement a custom file leak function to retrieve files from the target application, and the tool provides attributes to access critical server details, including tokens and user information, as well as functions for spawning shells and debuggers. Notable features include an easy installation process and the capability to interact with the application environment through an integrated shell.

Vide.sh is a versatile tool designed for probing and crawling targets to enumerate their attack surface through various scanning engines, such as nmap, httpx, and whatweb. It can process input from various sources, including XML files, lists of targets, standard input, and direct strings, while offering a range of configurable scanning options to tailor the attack surface enumeration according to user needs. Notable features include the ability to skip probing and crawling, run multiple types of scans, and generate organized output, including screenshots and detailed logs of the scanning results.

This repository provides a portable executable version of Ncat, specifically Ncat-7.95, integrated with OpenSSL-3.3.1, offering enhanced features while excluding a native PCRE library. It serves as a versatile networking utility for data transfer and connection management, allowing users to execute standard Ncat commands effortlessly. Additionally, it includes a basic C# script for automating Ncat tasks, enhancing its usability in various scenarios.

UBERSCAN is a security tool designed for penetration testing of servers, routers, and IoT devices, aimed at showcasing vulnerabilities, including susceptibility to threats like the Mirai virus. It features various scanning modes (SSH, Telnet) and options for brute-forcing credentials using user and password files. Primarily intended for ethical hacking purposes, it encourages users to responsibly report any identified vulnerabilities.

Tomcter is a Python-based tool designed to perform brute-force attacks on Apache Tomcat manager logins using default credentials. It supports single and multiple target attacks, operates efficiently with low resource consumption, and can be integrated with ProxyChains for enhanced capabilities. Notable features include its open-source nature and Docker support for containerized deployment.

SYCP (Solyd Certified Pentester) is a resource repository designed to complement students pursuing the SYCP certification in penetration testing. It details the activities and topics covered in the course, providing a comprehensive study guide for users to enhance their cybersecurity skills. Notable features include thorough documentation of course modules and practical insights into penetration testing techniques.

Supernova_CN is an open-source shellcode encryption tool developed in Golang, designed to facilitate the encryption of raw shellcode using various algorithms such as XOR, RC4, AES, and CHACHA20. It allows users to convert the encrypted shellcode into compatible formats for multiple programming languages, and provides corresponding decryption code as guidance for implementation. Notably, the tool includes a comprehensive command-line interface and supports encryption in Base64 formats for added versatility.

suidPWN is a tool designed to streamline the identification of SUID binaries that may facilitate local privilege escalation (LPE) on a target system. By allowing users to input the output of the `find` command, it quickly checks against gtfobins for vulnerabilities, efficiently surfacing potential escalation techniques and storing them locally for subsequent use. Notable features include the ability to scrape data from gtfobins automatically and the option to regularly update the binary reference files.

sqlscan is a web scanning tool designed to detect SQL injection vulnerabilities in websites quickly. Its primary use case is for security testing and penetration testing, enabling users to scan individual URLs or lists of URLs for potential security flaws. Notable features include multi-platform support, speed, and the ability to utilize sitemaps for enhanced scanning results.

SprayCannon is a multithreaded password spraying tool that automates the process of password spraying across various applications while maintaining a record of previously attempted credentials. Notable features include a backend database for tracking sprayed combinations, built-in delays and jitter for requests, support for multi-factor authentication (MFA) and lockout detection, as well as integration with webhooks for alerts. It aims to streamline the password spraying process for users managing large credential lists across multiple protocols.

SpearCopy is an educational tool designed for local website cloning and credential capture within controlled environments. It allows users to download full webpage content, host it on a local HTTP server, and log credentials entered into forms in JSON format, with customizable payload options for simulating phishing behaviors. This tool is intended strictly for educational purposes and internal testing, emphasizing the importance of ethical use.

SmuggleFuzz is a configurable HTTP downgrade smuggling scanner designed to identify overlooked smuggling vulnerabilities in web applications. Its notable features include customizable gadget lists, multiple scanning options with support for various HTTP methods and headers, and the ability to filter responses by specific criteria. The tool enables deeper insights into failed attacks, making it a powerful resource for security professionals aiming to enhance their vulnerability assessments.

smtp-user-enum is a Python-based tool designed for SMTP user enumeration using commands like `VRFY`, `EXPN`, and `RCPT`. Its notable features include granular timeout management, automatic reconnection capabilities upon encountering errors, and flexible customization options for input formats, making it effective for identifying valid email addresses and their aliases. This tool is inspired by a Perl script and supports both Python 2 and Python 3.