~/hackyfeed $

SYSTEMatic is a proof-of-concept tool designed for Windows that enables privilege escalation from a local Administrator account to the NT AUTHORITY\SYSTEM account via token impersonation, without UAC prompts or external dependencies. It leverages the Win32 API to duplicate a SYSTEM process's token and spawn new processes, making it valuable for system administration, security research, and penetration testing tasks. Notably, it operates solely within the constraints of existing Administrator privileges and does not exploit vulnerabilities or function as a UAC bypass.

subdog is a comprehensive subdomain enumeration tool designed to aggregate subdomains from over 17 different data sources, providing cybersecurity professionals with extensive lists of root subdomains. Notable features include parallel processing for expedited results, output options for saving to files while displaying terminal output, and automatic duplicate removal along with normalization to filter unwanted entries. By supporting external tools and allowing flexible source selection, subdog enhances the efficiency and effectiveness of subdomain discovery tasks.

SSHBuster is a command-line utility designed for ethical hacking and penetration testing that facilitates SSH brute-force attacks through dictionary-based methods. It supports various combinations of username and password wordlists, operates in a multithreaded manner for enhanced speed, and displays real-time progress alongside immediate feedback for valid credentials found.

SquidNet is a Python-based botnet framework designed for educational and ethical testing, enabling users to establish communication with a remote victim, issue commands, and execute various modules. Notable features include multi-session handling, a reverse shell, modular design for extensibility, dynamic module loading, and encryption for evading detection. The tool supports Docker deployment and operates entirely in memory, minimizing the risk of detection on target systems.

SQLMC (SQL Injection Massive Checker) is a specialized tool designed to identify SQL injection vulnerabilities on a target domain by crawling provided URLs to a specified depth. It checks all GET parameters for potential vulnerabilities and offers detailed reports that include server information. Key features include customizable depth scanning, comprehensive vulnerability detection, and output file options for results storage, making it a robust solution for security assessments in web applications.

SocialFinder is an efficient username enumeration tool built in Go, designed to verify the availability of usernames across multiple social media platforms and websites. It offers real-time output, customizable URL lists, and smart matching for URL variations, allowing for rapid enumeration with clear, colored terminal results. The tool is optimized for performance using httpx, and it supports options like inclusion of NSFW sites and silent mode for discreet checks.

Sniff-NG is a Python-based tool designed for network security assessment, specifically offering capabilities for local network scanning, ARP spoofing, and man-in-the-middle (MITM) attacks through an interactive text user interface (TUI). Key features include automatic gateway detection, a user-friendly menu for executing attacks, and one-click dependency installation for Linux and macOS systems. Its design emphasizes ease of use for ethical hacking and penetration testing, while ensuring the restoration of ARP tables post-attack.

Slack-Slurp is a pentesting tool designed for post-exploitation in Slack environments, leveraging the Slack API to extract potentially sensitive information from messages by employing Trufflehog's secret detectors. Key features include robust secret detection across a wide range of commonly used services, support for authentication via user or bot tokens, and the ability to add custom detectors for tailored searches. This tool is particularly useful for security professionals looking to identify exposed credentials and sensitive data within Slack channels.

The Largo-m/security-tools-hacking is a modular Windows penetration testing framework designed for security professionals, facilitating various stages of red team operations such as reconnaissance, exploitation, and post-exploitation. Key features include system information collection, geolocation lookup, browser history extraction, and optional key logging, all presented in a user-friendly manner that allows for easy integration and extension of custom modules.

SecretScraper is a configurable web scraping tool designed to extract sensitive information from target websites using customizable regular expressions. Its primary use case is for security assessments and vulnerability testing, featuring a robust web crawler that can handle multiple targets, support domain whitelisting and blacklisting, and enable seamless configurations through YAML files. Notable features include built-in rate limiting, an HTTP connection pool management, and flexibility in handling headers, proxies, and cookies.

scans2any is a tool designed to convert infrastructure scan outputs into various formats like Markdown, YAML, HTML, and CSV, while also facilitating the creation of launch scripts and configuration files for different scanners. Its primary use case focuses on merging and processing multiple scan results to enhance security assessments and reporting. Notable features include support for numerous input formats, conflict resolution options, and the ability to run in a Docker container for simplified deployment.

ScanPro is a menu-driven tool that enhances the functionality of Nmap for network scanning purposes. Its primary use case involves simplifying the scanning process by allowing users to select target IPs, ports, and scan types through an interactive menu, while also facilitating service detection and output formatting. Notable features include support for NSE scripting and HTTP information gathering, making it a versatile utility for penetration testing and network analysis.

`rusty_hack_browser_data` is a Rust-based tool designed for extracting and analyzing browser data, including passwords, cookies, bookmarks, and history from various web browsers on Windows. Its primary use case is for cybersecurity research, providing support for popular browsers like Firefox, Microsoft Edge, and Google Chrome, with functionality to assist in data recovery and forensic investigations. Notably, the tool emphasizes a legal disclaimer, placing responsibility for usage on the user.

ronin-vulns is a Ruby library designed for blind vulnerability testing, specifically targeting various web application vulnerabilities such as Local File Inclusion (LFI), Remote File Inclusion (RFI), SQL Injection (SQLi), reflective Cross Site Scripting (XSS), Server Side Template Injection (SSTI), and Open Redirects. Its notable features include support for testing multiple parameter types (query parameters, HTTP headers, cookies, and form parameters), along with high documentation and test coverage metrics, making it a robust tool for security researchers and developers within the ronin-rb project framework.

Ixve/Red-Team-Tools is a comprehensive collection of cracked red teaming tools designed for penetration testing and security assessments, including C2 frameworks, exploitation toolkits, and web application security tools. Users are strongly advised to run these tools in a virtual machine environment due to potential malware risks. Notable features include a wide variety of tools for both Windows and Linux platforms, along with recommended online sandboxing solutions for safe testing.

RedDDoS Tool is a Python-based utility designed for conducting DDoS attacks to test the resilience of networks and servers, provided that proper authorization is obtained for ethical use. It supports major operating systems including Linux, Windows, and macOS, and features straightforward installation and usage instructions, along with troubleshooting tips for potential library issues. Notably, the tool emphasizes responsible usage, clearly stating that it is intended for educational purposes only.

rawsec_cli is a command-line interface tool designed to facilitate the search and categorization of cybersecurity-related projects, tools, resources, and platforms. It allows users to filter searches by various criteria including language and availability, and provides features to list categories and open project sources in a browser when only a single result is found. Notable features include command-line search capabilities, project categorization, and installation through multiple methods including Docker.

pvreplace is a robust URL parameter and request fuzzing tool designed to enhance security assessments by processing URLs or Burp Suite raw requests, substituting values with custom payloads while preserving unique parameter combinations. Notable features include multiple fuzzing types (replace, prefix, postfix), various fuzzing modes (single, multiple), and the ability to target specific components such as parameter names, values, path segments, and headers. The tool facilitates a comprehensive fuzzing approach to identify vulnerabilities within web applications.

Preferred Network List Sniffer (PNLS) is a Red Team Wi-Fi auditing tool designed to capture SSIDs from a device's preferred network list by intercepting Probe Requests in the surrounding environment. The tool features a user-friendly web interface for visualizing the intercepted data and is focused on exploring the privacy implications associated with Wi-Fi communication. Noteworthy functionalities include compatibility with Raspberry Pi, the ability to filter SSIDs, and the provision for asynchronous server communication using WebSockets.

portmap is a high-speed port scanning tool that leverages Shodan's public data to identify open ports associated with specified IP addresses or CIDR ranges. Its primary use case is to quickly ascertain accessible services on remote hosts using Shodan's APIs, featuring commands for basic port scans and enhanced details retrieval, including ASNs and organization details. Notable functionalities include JSON output options, support for multiple IP inputs, and a user-friendly command-line interface.

Packet Batch is a high-performance toolset for generating network packets, designed primarily for penetration testing, benchmarking, and network monitoring. This Rust implementation offers enhanced safety and modern coding practices while maintaining fast performance through AF_XDP socket technology, highly configurable packet generation, real-time statistics display, and detailed logging capabilities. Users can execute multiple packet batches with various configurations via a command-line interface, although the project is still considered experimental and in early development stages.

Packet Batch is a high-performance tool designed for generating and sending network packets, primarily used for penetration testing and network monitoring. Its notable features include the ability to send multiple packets with random source IPs and payloads, support for UDP, TCP, and ICMP, and optional checksum calculations to offload processing to the NIC. The tool also offers a version utilizing AF_XDP sockets for improved performance on recent Linux kernels.

Phantom Whisper is a Python 3 framework designed for ethical penetration testing, specifically targeting WhatsApp by delivering a zero-click WebP payload to identified devices. Its key features include ASLR leak polling to confirm initial compromise, automated deployment of a full implant for either iOS or Android, and thorough logging of all actions in JSON format for audit purposes. The tool is currently structured for single-host execution but is intended to support multi-threaded operations in future developments.

The Pentesting-Mind-Map repository offers a structured mind map that consolidates tools and methodologies essential for bug bounty hunting and penetration testing. It covers key phases such as reconnaissance, exploitation, and red teaming tactics, including automation tools and API testing, making it a valuable resource for professionals seeking to enhance their offensive security skills. Notably, it emphasizes the inclusion of OWASP guidelines for web application testing and provides detailed steps for each phase of the penetration testing lifecycle.

The pentesting-dockerfiles repository provides a collection of Dockerized tools designed for conducting security assessments. Its primary use case is to facilitate penetration testing by leveraging various security tools, including vulnerability scanners and exploitation frameworks, all encapsulated in lightweight containers to optimize efficiency. Notable features include a curated list of links to popular security tools and payloads, promoting seamless integration within pentesting workflows.