~/hackyfeed $

Pentest Tool LITE is a command-line utility designed to assess websites for common vulnerabilities, enabling cybersecurity professionals to identify security flaws. Key features include the ability to filter tests by inclusion or exclusion, generate detailed reports in various formats, and perform targeted scans using sitemap integration. The tool supports detailed logging and offers flexibility in test execution through various command-line options.

ParamFinder is a tool designed for security assessment that crawls input and textarea tags on web pages to identify and manipulate parameters for testing vulnerabilities, particularly in the context of web applications. It allows the user to input single or multiple URLs, automatically generating modified URLs with specified parameters for ease of testing, while offering features such as concurrency options, output file configurations, and the ability to operate in silent or verbose modes. Notably, it facilitates the identification of potential security issues like XSS by transforming input parameters with preset values, ensuring a streamlined approach to parameter analysis.

OriginipHunter is a Go-based tool designed to identify the origin IP addresses of domains by leveraging multiple security APIs, including Shodan and SecurityTrails. Its notable features include support for concurrent validations, parallel execution for improved performance, and customizable settings through a configuration file. The tool outputs results in various formats and allows users to easily manage API keys for different services, enhancing its flexibility in domain reconnaissance.

OpenShiftGrapher is a tool designed to enumerate OpenShift clusters by creating relational databases in Neo4j from cluster data. Its primary use case is to extract and visualize objects and their relationships, such as projects, service accounts, and security configurations, facilitating the identification of inconsistencies that may indicate vulnerabilities. Key features include customizable data collection options and support for complex Neo4j queries to analyze the security posture of OpenShift environments.

OpenShell is an open-source reverse shell management server developed in Go, enabling users to establish and manage reverse shell connections through a web-based graphical user interface. Its primary use case is for educational and research purposes in cybersecurity, featuring a lightweight server architecture, WebSocket interaction, and support for multiple terminal tabs within the GUI. Notable features include easy command generation for reverse shells, session management, and an emphasis on security practices through the use of certificates.

One-Lin3r is a lightweight and modular framework designed for penetration testers, providing over 176 automated one-liners for tasks such as reverse shells, privilege escalation, and remote command execution across multiple operating systems. Notable features include advanced auto-completion for commands, typos correction, and the ability to execute multiple commands simultaneously, significantly enhancing efficiency during security assessments. The tool further simplifies command usage and management with clipboard integration and history tracking capabilities.

nucleihub-templates is a continuously updated repository of Nuclei templates designed for security testing, aggregating over 600 sources and refreshed every six hours via GitHub Actions. It provides security researchers and penetration testers with a comprehensive suite of templates for effective vulnerability scanning, leveraging an automated collection pipeline that removes duplicates and validates templates against the latest Nuclei version. Notable features include automatic updates, diverse template categorization, and seamless integration into existing security workflows.

Nucleihub is a tool designed for organizing and managing Nuclei templates from various community sources, enabling users to consolidate template files efficiently. It features auto-flattening of directory structures, duplicate handling, smart filtering, and validation of downloaded templates, with optimizations for low-resource environments. The tool supports URLs ending in `.git`, `.yaml`, or `.zip` formats, enhancing flexibility in template retrieval.

NoxDroid is a comprehensive Android pentesting toolkit designed for Windows, facilitating both static and dynamic analysis of APKs through an interactive terminal menu. It supports automation for environment setup, including tools like Magisk and Frida, and features extensive analytical capabilities such as APK scanning, vulnerability assessments, traffic interception, and real-time reporting. Notable functionalities include integration with various scanning tools, a built-in dynamic analysis suite, and support for both the Nox Player emulator and physical Android devices via ADB.

NetRaptor is a GUI-based ARP poisoning tool designed for educational use and authorized network security testing, allowing users to scan networks, select targets, and perform Man-in-the-Middle (MITM) attacks. Key features include easy network scanning, ARP poisoning capabilities, packet analysis integration with Wireshark, and a user-friendly interface built with Tkinter. The tool is compatible with various Linux distributions and emphasizes ethical usage in controlled environments.

Muxcard is an innovative computing device designed to be the size of a standard credit card, utilizing an ESP32-C3 chip, an e-paper display, and NFC technology. Its primary use cases include serving as a minimalist wallet for digital credentials, a pentesting tool for ethical hacking, a smart-home control interface, and an offline password manager. Notable features include its ultra-compact design, integrated display, and flexible functionality tailored to various everyday applications.

Maliketh is a multi-user, customizable command and control (C2) framework designed to be flexible for operators. It features cross-platform support through its initial C++ and Golang implants, allowing for behavior modification based on server configurations, file operations, command execution, and self-destruct capabilities, among others. Notable functionalities include basic anti-debugging measures and a range of file management operations, making it suitable for diverse operational scenarios.

LazarusWakeUp is a Python-based tool designed for reconnaissance and management of disabled Active Directory (AD) principals, enabling users to find, enable, disable, and analyze these accounts. Its notable features include the ability to operate over LDAPS for secure communications, verbosity options for output detail, and batch operation capabilities to streamline account management tasks. This tool is intended for educational purposes and emphasizes lawful usage.

LangFlow is an AI-powered cybersecurity workflow automation platform designed to streamline penetration testing and security operations by integrating traditional command-line tools with intelligent AI analysis and multi-channel reporting. Notable features include a visual workflow designer, real-time execution monitoring, cross-platform command execution, and automated report generation with metrics-driven insights. Its ability to utilize multiple AI models for contextual analysis enriches the security automation process, enhancing efficiency and collaboration across teams.

Kautolog is an automated terminal logging tool designed for Kali/Linux systems that captures comprehensive session details, including prompts, commands, and outputs across multiple terminal tabs. Notable features include integration with `tmux`, optional log syncing with rclone, customizable log directories, and a replay functionality that supports timing and instant dumping of logs. The tool provides extensive configuration options for log management, including log rotation and cleanup.

ipfinder is a command-line tool designed to efficiently extract IP addresses and other data from Shodan search queries, catering to both advanced users and beginners through its support of complex query syntax and simple domain-based filtering. Key features include flexible facet selection, options for filtering query types, handling of HTTP errors with retry logic, and the ability to control output verbosity, making it suitable for robust cybersecurity investigations and data extraction tasks.

The iOS Binary Security Analyzer is a script designed for performing static analysis on iOS application binaries to identify security weaknesses such as insecure functions, weak cryptographic implementations, and missing security features like code signatures and PIE. Notable features include checks for core binary security mitigations, dynamic library dependencies analysis, and detection of anti-analysis indicators, making it a valuable tool for assessing the security posture of iOS applications on jailbroken devices.

HunterA is an advanced mobile penetration testing framework designed for Android devices operating without root access, functioning within the Termux environment. It consolidates a diverse array of powerful tools for tasks such as port scanning, WHOIS/DNS reconnaissance, CVE vulnerability searches, and traffic sniffing, along with features like a fully asynchronous engine and integration with Termux:API for enhanced capabilities. Its modular design supports a range of functionalities, from OSINT to vulnerability exploitation, making it a comprehensive solution for mobile pentesting.

HTTPUploadExfil is a simple HTTP server designed in Go for exfiltrating files and information from a machine using HTTP, particularly suited for low-stakes offensive scenarios like Capture The Flag (CTF) competitions. It offers an interface that allows users to upload files, uses basic GET requests to log data, and supports multiple endpoints for file management and retrieval. Notable features include customizable bind addresses, support for SSL/TLS, and a straightforward build process.

hidden_fuzzer is a command-line tool designed for rapid web content discovery, specifically targeting hidden paths and directories in web applications. Leveraging Jaro and Jaro-Winkler similarity algorithms, it automatically filters out false positives without the need for complex configurations. Notable features include multi-threaded scanning, recursive directory fuzzing, and support for various customizations such as proxy routing and parameter fuzzing.

HashRipper is a multi-threaded ethical hacking tool designed for efficiently cracking a variety of hash algorithms, including popular types like NTLM, MD5, and SHA variants. Its notable features include support for over 17 hash algorithms, the ability to perform dictionary-based attacks using concurrent threading for increased speed, and a command-line interface that allows for cracking hashes directly or from files. The tool is compatible with Linux and Termux, making it versatile for use in different environments.

haktrailsfree is a command-line tool designed to extract up to 10,000 subdomains from SecurityTrails using user-provided cookies instead of an API key, effectively bypassing the limitations of the free API tier. Key features include the ability to handle both single and multiple domains, configurable cookie input, and options for silent or verbose output. This tool facilitates extensive subdomain enumeration, making it valuable for security assessments and research.

Habu is a versatile hacking toolkit aimed at educating users on Python and network hacking techniques. It features practical functionalities such as ARP poisoning, DHCP exploitation, subdomain identification, and certificate cloning, alongside various data extraction and analysis tools. This comprehensive suite serves as both an instructional resource and a powerful utility for network testing and research.

gpoParser is a tool that facilitates the extraction and analysis of Group Policy Object (GPO) configurations in Active Directory environments. It supports both local and remote parsing modes, allowing users to gather GPO information via LDAP connections or from offline SYSVOL data, and includes features for displaying parsed results and enriching BloodHound data. Noteworthy capabilities include various operational modes such as local parsing, remote LDAP access, querying results, and the ability to handle security-related analysis, making it valuable for identifying potentially risky configurations.

Gitxray is a security analysis tool designed to analyze GitHub repositories for OSINT and forensic purposes by utilizing the public GitHub REST APIs to extract valuable information efficiently. Its primary use case includes identifying sensitive data in contributor profiles, spotting threat actors or fake repositories, and conducting forensic investigations by filtering results by specific dates. Notable features include customizable text output, integration with VirusTotal for enhanced threat detection, and the ability to run comprehensive scans on repositories to gather extensive data.