~/hackyfeed $

Spectre is an Android application designed for monitoring and interacting with various wireless signals, including Bluetooth, Wi-Fi, cellular, and GNSS. Its primary use case revolves around RF exposure measurement and pen-testing, featuring tools for detailed analysis of signal strength, local network discovery, and BLE device interaction. Notable features include comprehensive support for multiple network technologies, advanced filtering capabilities, and a GATT inspector for Bluetooth devices, all while adhering to Android's security restrictions.

Skewrun is an Active Directory time discovery toolkit designed for red team operations, facilitating the resolution of time discrepancies when executing commands on target systems from a Linux environment. It utilizes various network protocols (CLDAP, SMB, NTP, Kerberos, NTLM) to dynamically fetch the Domain Controller's time, allowing users to circumvent the Kerberos `KRB_AP_ERR_SKEW` error without needing elevated privileges to adjust the system clock. The tool features a library-first architecture for seamless integration into other Rust applications and minimizes forensic traces during operation.

sif is a comprehensive recon and exploitation scanner that integrates various scanning capabilities—including subdomain enumeration, port scanning, crawling, vulnerability detection, and more—into a single binary. It leverages a shared connection-pool architecture for efficiency, allowing seamless execution of over 25 scan types from one command, while eliminating the need for external dependencies. Notable features include support for continuous monitoring with change detection, scanning configuration through command-line flags, and integration with notification services like Slack and Discord.

secator is a comprehensive task and workflow runner tailored for security assessments, enhancing the efficiency of penetration testers and security researchers. It features a curated list of commands with unified input and output options, CLI and library support, and the ability to run distributed tasks via Celery, making it suitable for both simple and complex security workflows. Notably, secator integrates numerous well-established security tools to streamline the assessment process.

ScanT3r is a fast command-line interface (CLI) tool for dynamic application security testing (DAST), developed in Rust, designed to identify vulnerabilities such as Cross-Site Scripting (XSS) and Server-Side Template Injection (SSTI) through various testing modules. It supports concurrent scanning with customizable options, including target lists, module selection, and output formats like JSON reports. Notable features include context-aware payload delivery, the ability to integrate with Burp Suite, and an extensible module framework for developing additional testing capabilities.

RustPacker is a tool designed for authorized penetration testers and red team operators that transforms raw shellcode into secure and evasive Windows binaries. It encapsulates shellcode within a Rust-based executable or DLL, incorporating features such as encryption, multiple injection techniques, and evasion strategies to minimize detection by endpoint protection systems. Notably, it supports cross-platform builds and offers a variety of injection templates and encryption methods to enhance the stealth of the generated payloads.

Roothound is a tool designed for local Linux privilege escalation, providing users with a clear graphical representation of pathways from a low-privilege shell to root access. It features an attack-path graph that illustrates each potential route, confidence coloring to indicate the reliability of paths, and copy-ready abuse commands for user convenience. The tool operates offline, requires no dependencies, and can generate self-contained HTML reports from LinPEAS output, making it suitable for authorized security testing and educational purposes.

Rekono automates the penetration testing process by integrating multiple hacking tools to streamline tasks such as OSINT, host discovery, and vulnerability scanning. Its notable features include email and Telegram notifications for findings, integration with Defect-Dojo for advanced vulnerability management, and a dedicated Telegram bot to execute tests from any device. This tool aims to enhance a pentester's efficiency by allowing them to focus on analysis rather than repetitive testing tasks.

ReconNess is a web application designed to streamline the reconnaissance process for cybersecurity professionals, enabling them to efficiently organize and manage their recon data without requiring extensive scripting skills. Its primary use case is providing continuous recon capabilities through a customizable pipeline of reconnaissance tools that can be triggered based on schedules or events. Notable features include a user-friendly interface, the ability to aggregate data from various agents, and a focus on helping users concentrate on identifying potentially vulnerable targets.

PPMAP is a comprehensive JavaScript prototype pollution and XSS vulnerability scanner designed for web application security assessments. It features a modular architecture, advanced detection methods for various frameworks, and capabilities for browser automation, WAF resilience, and in-depth logging, making it suitable for enterprise-level penetration testing and vulnerability management. Notable components include its intelligent detection tiers, support for modern frameworks, and integration of extensive exploitation guides for discovered vulnerabilities.

The Physical Penetration Testing Tools repository provides a comprehensive set of methods and tools for conducting physical security assessments by simulating real-world attacks. Notable techniques include badge cloning using devices like Proxmark and Flipper Zero, tailgating with various access tools, and social engineering tactics aimed at exploiting human factors. This collection aids security professionals in identifying vulnerabilities in physical security controls through practical tools and methodologies.

Phatcrack is a distributed hash cracking tool built on Hashcat, aimed at information security professionals. It facilitates efficient management of cracking projects through a modern web interface, supports various hash types and attack methods, and allows for the synchronization of wordlists and rule files across multiple worker agents. Notable features include multi-user support, project-based access control, and automated distribution of cracking tasks.

PenText is an XML-based documentation generation tool designed for creating IT security documents such as penetration test reports, quotes, and invoices. Its notable features include the ability to transform structured XML documents into various formats like PDF, CSV, and JSON using XSLT and Apache FOP, as well as modular structure for easy content management. This toolstreamines reporting processes in cybersecurity engagements, facilitating efficient documentation and export of findings.

PentestingEverything is an open-source, comprehensive knowledge base for penetration testing, encompassing methodologies and resources across 23 security domains including web, API, mobile, and cloud. The tool offers a fully searchable interface with over 108 documentation pages, a filterable PDF library, and structured learning paths, enhancing the efficiency and effectiveness of security assessments. Its integration with an Agent Skill allows practitioners to apply this knowledge interactively during engagements, ensuring safe and authorized testing practices.

PentestingChecklist is an interactive security assessment tool designed for penetration testers, security researchers, and bug bounty hunters, featuring a comprehensive checklist that spans 23 platforms and includes over 1,000 checks. Its notable features include client-side operation with no telemetry, allowing users to store their progress and notes locally without any login requirements. The checklist covers diverse areas, including web applications, APIs, mobile security, cloud configurations, and DevSecOps practices, making it a versatile resource for thorough security assessments.

The Pentesting-and-Hacking-Scripts repository is a comprehensive collection of scripts designed to facilitate learning and practical application in penetration testing and exploitation of system vulnerabilities. It caters to both beginner "script kiddies" and advanced pentesters by offering organized scripts in various programming languages, including Python and Bash, while emphasizing responsible usage for educational purposes. Notable features include categorized scripts targeting different vulnerabilities and thorough documentation to guide users in their cybersecurity education.

Pentest Reports is a web application that provides a curated list of public penetration test reports, along with a database of popular Common Vulnerabilities and Exposures (CVE), Common Weakness Enumeration (CWE), and security commands and tools. It includes ready-to-use pentest report templates, making it a valuable resource for security professionals conducting vulnerability assessments. The tool is built with Node.js and MongoDB, ensuring efficient data management and retrieval.

Daethyra's Pentest-References is a comprehensive cybersecurity toolkit that organizes various guides and resources specifically aimed at enhancing penetration testing practices. It features playbooks for internal pentesting, is tailored for both beginners and advanced users, and encompasses tools and strategies for evading detection, exploiting web application vulnerabilities, and understanding Active Directory fundamentals. Notably, it includes extensive documentation on topics like data exfiltration, network enumeration, and persistence techniques on Windows systems, making it a valuable resource for security professionals.

PassLLM is an advanced framework for targeted password guessing that leverages Personally Identifiable Information (PII) to predict likely passwords, achieving 15% to 45% higher accuracy than existing models. Its notable features include the use of a fine-tuning technique called LoRA for efficient resource management, advanced inference algorithms for optimized guessing, and the capability to harness millions of leaked PII records for training. Designed for high accuracy on consumer hardware, it is straightforward to deploy using Google Colab.

Packémon is a terminal user interface (TUI) tool designed for packet generation and monitoring across any network interface, with compatibility for Windows, macOS, and Linux. It enables users to create arbitrary packets, including DNS queries, and observe real-time responses, whilst offering features like detailed packet inspection and filtering options. The tool is developed from scratch utilizing raw sockets, providing flexibility but also carries a warning for potential bugs.

OpenGhost is an authorized web application penetration testing tool designed to facilitate security assessments by AI coding agents. It provides essential features such as a Docker sandbox, detailed engagement scope files, reusable checks, and report templates to streamline the assessment process while ensuring local operation without external dependencies. Users must explicitly define authorization and testing parameters in the generated scope file before proceeding with assessments.

The Syslifters OffSec Tools repository provides a curated collection of offensive security tools for penetration testers and red teamers, streamlining the assessment process within internal environments. It regularly compiles and updates tools, allowing users to easily download the latest versions in a single release archive, thereby eliminating the need for individual updates and compilations. Notable tools included range from Active Directory enumeration and privilege escalation tools to credential recovery solutions, catering to various aspects of security assessments.

Neonmarker is an addon for the ZAP (Zed Attack Proxy) framework that enhances the visualization of the History table by applying color coding to entries based on assigned tags or user-defined criteria. Its primary use case is to facilitate the organization and easy identification of different scan results within the ZAP interface. Notable features include customizable color mappings, support for tag-based coloring, and the potential for saving color configurations across sessions and projects.

MSSQLand is a C# post-exploitation tool designed for red team operations targeting Microsoft SQL Server (MSSQL) environments. It facilitates linked server traversal, cascading impersonation of logins, and various discovery actions to gather impactful information with minimal operational security footprint. Notable features include automatic execution of linked queries across deep server chains, support for multiple authentication methods, and customizable output formats, enhancing both usability and data presentation in penetration testing scenarios.

MasscanGUI provides a comprehensive graphical user interface for the Masscan port scanner, enabling users to easily configure and execute scans without requiring command line interaction. Notable features include support for all Masscan parameters, real-time output display, country-based scanning, multiple output formats, and advanced functionalities like intelligent rate adjustment and sharding for distributed scans. This tool is designed for ease of use on Windows with included executables, making it accessible for both novice and experienced users in network scanning tasks.