~/hackyfeed $

Riksdagsmonitor is a Swedish political intelligence platform that enhances democratic transparency through evidence-based analysis and AI-generated political news, utilizing official open data. It leverages structured intelligence techniques and monitors extensive data from the Swedish Parliament, Government, and public agencies, producing publication-ready intelligence articles autonomously in multiple languages. Notably, it operates a fully automated newsroom with 14 agentic workflows, generating daily content without human editors.

QueryTool is a lightweight, standalone HTML application designed for constructing OSINT queries and accessing a curated selection of 178 relevant sources. Its notable features include the ability to build complex Google-style queries, filter sources by various criteria, and simultaneously open selected links in new tabs, all without requiring any installation or configuration. The tool serves as an effective resource for users seeking to streamline their open-source intelligence tasks.

Provenance is a live mapping tool that visualizes a variety of open data feeds, including government road cameras, aircraft, satellites, and other dynamic datasets, on a single globe interface. It enables users to easily access and assess the source and reliability of each data layer, with no authentication or API keys required. Notable features include coverage of 41 data feeds, continuous updates from multiple public sources, and a robust architectural foundation built using Next.js and TypeScript.

Naminter is a Python-based tool designed for asynchronous OSINT username enumeration utilizing the extensive WhatsMyName dataset. Its primary use case is to efficiently enumerate usernames across a multitude of websites with features such as browser impersonation and customizable filtering options, functioning seamlessly as both a command-line interface and a library for integration in Python applications.

The CTFd Geo Challenges Plugin enhances Capture The Flag competitions by enabling the creation of location-based puzzles that require players to identify specific geographic coordinates. Notable features include two answer types (point with a tolerance radius and polygon zones), an interactive map interface powered by Leaflet and OpenStreetMap, geocoding support, and a multilingual interface, making it a versatile tool for challenge creators in the CTF community.

Cyber Intelligence GPT is a custom AI tool designed to enhance open-source intelligence (OSINT) and cyber investigations by supporting the analysis, correlation, and reporting of data related to threat intelligence, digital forensics, and compliance. It features a comprehensive investigation workflow that enables users to create collection plans, pivot on identifiers, correlate evidence, and identify intelligence gaps, while adhering to lawful sources and practices. Notably, it encompasses various aspects of cybersecurity, including threat hunting, security operations, and OPSEC, making it a multifaceted resource for security professionals.

Clipwire is a kernel exploit development harness specifically designed for the iPhone 11 series running iOS 26.1, aimed at demonstrating vulnerabilities discovered through patch diffing between versions 26.1 and 26.6 of Apple's XNU kernel. It exploits two identified bugs: one related to unlocked operations in the copy-on-write (COW) submap fault path, and the other concerning insufficient bounds checks in memory object management, allowing for potential privilege escalation and memory corruption. Notable features include a structured source code layout for various exploit stages, as well as tools for physical memory read/write operations and object discovery, catering to researchers in exploit development.

opencode-pentester is an AI-powered penetration testing and security audit framework designed to automate bug bounty hunting and vulnerability assessments. It orchestrates 12 specialized AI agents across 69 attack categories and 17 OWASP security audits, enabling comprehensive offensive and defensive testing. Notable features include the ability to run automated tests, generate professional reports, and integrate a wide array of security tools, making it suitable for security researchers, penetration testers, and DevSecOps engineers.

The A-Pythonic-Keylogger is a Python-based keylogger designed for educational purposes that captures keystrokes, logs them to a local file, and can send the logs via email. Notable features include robust email retry handling, automatic session restart after key capture, and platform compatibility with both Linux and Windows. The tool incorporates local log management by clearing logs after the session ends, ensuring data retention only during active capture.

Hacker Bob is a local MCP (Managed Control Panel) workflow tool designed for authorized offensive security testing within CI environments or staging areas. It facilitates surface mapping, authentication setup, parallel testing, and reporting, while integrating with various MCP-capable hosts like Claude Code and Codex. Notable features include real network request capabilities, local artifact imports, and the ability to manage sensitive run data securely, all ensuring users adhere to permissions and authorization guidelines.

PowerShell-for-Hackers is a repository that offers a collection of PowerShell functions specifically designed for the creation and execution of hacking payloads. Its primary use case is to facilitate the development of custom payloads by providing easily accessible functions, detailed descriptions, and practical examples. Notable features include a PowerShell to DuckyScript converter, comprehensive documentation, and video tutorials for each function, enhancing the learning experience for users looking to expand their cybersecurity toolkit.

REDCELL is an advanced penetration testing platform that utilizes AI agents to execute automated tests and generate comprehensive reports. It features a multi-agent orchestration system, real-time execution of offensive tools within a Dockerized Kali environment, and integrates pluggable language models for enhanced automation. Notable capabilities include live monitoring of agent activity, interactive terminal access to reverse shells, structured tool outputs, and seamless network pivoting for deeper exploitation.

EmberHeart-Kernels is a custom kernel for Android devices, specifically optimized for GKI compliance and rooted environments. Its primary use case centers around enhancing Android penetration testing capabilities through integration with the Nethunter framework, while also offering advanced features such as KernelSU for root access management and SUSFS for root hiding, thereby improving security and device control. Users can install the kernel and associated modules to make significant modifications to their device's performance and functionality, provided they acknowledge the potential risks involved.

The Flutter Reverse Engineering Labs repository offers a series of progressive challenges aimed at teaching the techniques involved in reverse engineering Flutter applications. It includes hands-on tasks that lead users from basic concepts to more advanced practices such as network traffic interception and integrity check bypassing, with each challenge accompanied by detailed, step-by-step solutions. Notable features include the provision of compiled APKs for challenges, practical source code examples, and integration with commonly used tools like Frida and APKTool for a comprehensive learning experience.

Assisted Log Enabler for AWS automates the activation of logging for various AWS services to aid customers in maintaining compliance and troubleshooting. It identifies resources without logging enabled and facilitates the setup of essential logs including Amazon VPC Flow Logs, AWS CloudTrail, and others, thus eliminating the need for users to have in-depth expertise in log management. Key features include support for both single and multi-account setups using AWS Organizations, the creation of necessary S3 buckets, and the capability to enable logging during security incidents.

PyPCAPKit is an open-source Python library designed for comprehensive network packet parsing and analysis, enabling users to extract, construct, and analyze PCAP files with detailed insights into packet structures. Its notable features include support for various extraction engines, a user-friendly interface, and a modular design that encompasses interface management, protocol handling, and utility functions, making it a robust tool for network analysis. While it operates with moderate extraction speed compared to some competitors, its comprehensiveness and extensibility position it as a powerful option for network specialists.

PW is a web-based tool designed for securely sharing confidential information, with all data encrypted in the browser. Its primary use case includes sharing secrets through supported media types such as text and files while maintaining low resource usage and offering dynamic configuration limits based on IP whitelisting. Notable features include a fast performance due to Svelte and Rust, multi-language localization support, and a user-friendly interface with dark theme options.

Bjorn Manager is a desktop application designed to facilitate the discovery and management of Bjorn devices across various network interfaces, including LAN, USB, and Bluetooth. It allows users to install, update, and control these devices from a single user interface, featuring multilingual support, smart device naming, and real-time terminal logs for installations. Key functionalities include auto-discovery, SSH installation capabilities, and configurable settings, making it a comprehensive tool for managing Bjorn devices efficiently.

Awesome AI for Security is a curated platform that aggregates tools, models, papers, and datasets focused on the integration of artificial intelligence in cybersecurity operations. This resource emphasizes contemporary AI advancements such as Large Language Models and autonomous agents applied to various security tasks, including vulnerability assessment and threat intelligence. Notable features include specialized models for vulnerability localization and enhanced reasoning capabilities, enabling efficient analysis and automation in security workflows.

Assemblyline 4 Documentation repository provides comprehensive documentation for the Assemblyline platform, facilitating user and developer understanding of its capabilities and functionalities. The primary use case is to assist in contributing to or utilizing the Assemblyline cybersecurity tool, with notable features including inline editing on GitHub and local setup instructions for developers.

Assemblyline Docker Compose is a tool that facilitates the deployment of the Assemblyline 4 framework using Docker Compose, allowing users to easily set up a scalable and customizable environment for malware analysis. Its primary use case includes providing varied deployment profiles such as minimal, full, and archive setups, enabling users to tailor the system's capabilities according to specific requirements, including metrics collection and logging. Notable features include flexibility in configuring profiles, self-signed certificate generation for secure communication, and comprehensive documentation for streamlined installation and setup.

Reverse Engineering Agent is an autonomous system designed to analyze and reverse engineer binary challenges using both static and dynamic analysis techniques. It features a multi-agent architecture for executing tasks and self-correcting mechanisms to refine the analysis process, along with support for various large language model providers for enhanced reasoning capabilities. The tool integrates GDB for dynamic program inspection and utilizes `pexpect` for interactive binary analysis, making it suitable for effectively tackling complex crackme challenges.

The TH105 project is a reverse engineering initiative aimed at reconstructing the source code of the Japanese game "東方緋想天 ～ Scarlet Weather Rhapsody" version 1.06a, with a focus on achieving reproducible binary comparisons. The tool utilizes Ghidra and IDA Pro for semantic analysis, and incorporates a structured workflow that emphasizes exact matching and function byte comparisons, ensuring the integrity of the reconstructed code. Notable features include the generation of a machine-readable function ledger and project-scoped tools for streamlined analysis and verification.

Pokémon Puzzle Challenge is a disassembly project for the Game Boy Color game, allowing users to modify and reassemble the original ROM using RGBDS. The primary use case is to facilitate the analysis and development of custom patches, while notable features include a straightforward build process and the integration of community support through Discord. The repository provides essential files for assembly, including the original ROM requirement and a specified patch for customization.

metaai-api is an unofficial Python SDK and API server designed to interact with Meta AI, enabling users to generate images from text prompts, engage in chat conversations using Llama, and manage their interactions. This tool leverages cookie-based authentication, eliminating the need for API keys, and incorporates browser automation for image generation and prompt submissions, while also providing REST API server capabilities for broader integration. Notable features include support for multiple chat modes, media fetching by card ID, and a straightforward setup process.