~/hackyfeed $

Python-Pentest-Tools is a collection of open-source Python scripts designed for penetration testing and cybersecurity research. The toolset emphasizes ethical usage for learning and understanding security practices, embodying core development principles for real hacking scenarios. Notable features include a variety of testing utilities suitable for educational purposes, though the author stresses responsible and ethical application.

pSlip is a comprehensive security scanning tool for Android applications, designed to detect cryptographic vulnerabilities, OAuth implementations, and manifest issues using a streamlined HTML reporting engine. Its notable features include a powerful searchable HTML report leveraging a field-scoped query language, structured extraction and export of recovered key material and secrets, and a user-friendly interface that supports rapid identification of findings without requiring Java dependencies. The tool optimizes scanning performance and minimizes false positives, enhancing the efficiency of mobile application security assessments.

PRISM is a self-hosted Open Source Intelligence (OSINT) platform that provides comprehensive scanning of domains, IPs, emails, phone numbers, and usernames across over 22 modules, delivering insights such as WHOIS data, threat intelligence, and OPSEC scoring. Notable features include real-time web dashboards, AI-driven summary analyses, and detailed report generation in HTML/PDF formats, making it an effective tool for risk assessment and threat investigation.

`phantom-frida` is a tool that facilitates the building of customized Android Frida Server and Gadget from source while obfuscating specific runtime identifiers to enhance stealth capabilities against detection mechanisms. Its primary use case is for authorized application testing on Android devices, providing robust verification processes through unit and fixture tests, strict input validation during builds, and smoke tests on rooted devices. Notable features include support for custom builds, detailed artifact verification, and a comprehensive configuration for various architectures and specific runtime flags to reinforce security.

PHANTOM is an AI-powered penetration testing command center designed to autonomously execute a range of security tasks without requiring constant human input. It features real-time tool execution, a multi-agent architecture for parallel processing, and self-improvement capabilities to enhance its toolset over time, all while providing a user-friendly dark UI and persistent context retention across sessions.

Pentest Copilot is an AI-driven penetration testing agent that autonomously connects to a Kali attack box to execute various security tools, analyze results, and iterate based on user-defined targets. It features a curated registry of over 100 capabilities, integration with Burp Suite for enhanced testing, real browser automation, VPN management, and the ability to utilize custom AI models. This comprehensive tool is designed for practical engagement scenarios, including CTFs and boot2root challenges.

OSCP+ Complete Exam Checklist & Attack Chains (2025-26) is a comprehensive resource designed to aid candidates in navigating the OSCP exam format, emphasizing techniques for enumeration, exploitation, and lateral movement within a simulated environment. It offers structured methodologies for tackling Active Directory and standalone systems, alongside practical strategies for efficient time management during the exam. Notable features include a universal enumeration framework, a detailed breakdown of point allocation, and specific attack chains related to various scenarios, ensuring candidates are well-prepared for the challenges they will face.

B1ackOS is a Debian-based international operating system designed to simplify software installation while emphasizing user privacy and security. It features a lightweight setup, live usage capability, a rolling release model for up-to-date software, and extensive repositories catering to a wide range of applications from mundane tasks to advanced programming and penetration testing. The system prioritizes stability and compatibility, making it a robust choice for users seeking a secure computing environment.

OpenDoor is an open-source CLI platform designed for authorized web reconnaissance, focusing on directory discovery and subdomain enumeration. It includes features such as WAF detection, bypass probing, and detailed reporting tools, making it ideal for security researchers and penetration testers to identify exposed resources and vulnerabilities on web servers. The tool emphasizes ethical usage, requiring explicit permission for testing.

NyxStrike is an AI-powered offensive security orchestration engine that streamlines the execution of full attack chains, encompassing reconnaissance, exploitation, and reporting phases in a matter of minutes. Notable features include the ability to control over 185 offensive security tools through AI agents, a modular tool registry for easy customization, and compatibility with various AI clients via the MCP framework, all while providing a real-time session dashboard for monitoring and management.

Nerva is a high-performance command-line interface (CLI) tool for fast service fingerprinting, capable of identifying over 170 network protocols across various transport layers including TCP, UDP, and SCTP. It is designed for use in network reconnaissance, providing features such as rich metadata extraction, security misconfiguration detection, and support for various output formats. Notably, Nerva integrates seamlessly with other security tools like Naabu, enabling automated workflows and robust scanning capabilities.

MovementHound is a PowerShell tool designed for active enumeration of lateral movement capabilities in Windows environments, focusing on the effective rights a principal possesses rather than simple group memberships. This approach allows users to identify potential access paths that may be overlooked by traditional enumeration methods, making it particularly effective in environments with modified DACLs and security descriptors. Notable features include integration with BloodHound Legacy for detailed access mapping and a comprehensive output that aids in identifying persistent footholds during security assessments.

The "missing-cve-nuclei-templates" tool automates the identification and cataloging of missing CVEs in the official Nuclei templates repository, analyzing over 164,000 CVEs to produce a comprehensive list of 65,840 missing entries. It categorizes vulnerabilities by type and year, offering detailed data files for specific threats such as XSS, RCE, SQL Injection, and more, enhancing vulnerability management and template development for cybersecurity professionals. This tool facilitates better detection capabilities by flagging gaps in existing Nuclei templates.

The OWASP Mobile Application Security Testing Guide (MASTG) serves as a comprehensive resource for mobile app security testing and reverse engineering, aligning with the OWASP Mobile Security Weakness Enumeration (MASWE) and the Mobile Application Verification Standard (MASVS). It features detailed methodologies for validating security weaknesses and offers tools like mobile app security checklists and interactive exercises, enhancing both understanding and practical application of mobile security principles.

mac-cyber-bootstrap is a robust setup script designed to transform a fresh macOS environment into a fully functional security workstation specifically for cybersecurity professionals, CTF participants, and bug bounty hunters. It automates the installation of essential tools, libraries, and configurations under a structured directory, ensuring an organized workspace for various tasks such as OSINT, penetration testing, and malware analysis. Notable features include comprehensive toolchain installations across multiple domains, such as reconnaissance, red teaming, and reverse engineering, all managed through a single command.

LinEnum-ng is a targeted, stable enumeration script designed for Linux privilege escalation, particularly suited for OSCP examinations. Its notable features include kernel CVE detection for various exploits, comprehensive checks for SUID and sudo vulnerabilities with GTFOBins integration, as well as support for container escape assessments in Docker and Kubernetes environments. The output is structured and color-coded for efficient triaging, minimizing information overload.

KeyHunter is a specialized tool for detecting API key leaks from various sources, including subdomains, archived URLs, and APK files. It automates subdomain enumeration, URL collection, and APK scanning while employing advanced techniques like asynchronous processing for efficient scanning and customizable detection patterns. Notable features include validation of live endpoints, automatic dependency installation, and the ability to generate structured reports focused on identified API key leaks.

Information Security Tasks is a collaborative repository that serves as a comprehensive resource for cybersecurity professionals, offering real-world infosec notes and methodologies. It features extensive directories covering offensive and defensive security topics such as penetration testing, incident response, and vulnerability analysis, alongside daily auto-updates of news and tools. Notable elements include an organized structure for various cybersecurity domains, community submission options for resources, and insights into emerging threats like AI and cloud security.

HackAgent is a Python-based SDK and CLI tool designed to automate the security testing of AI agents, specifically targeting vulnerabilities such as prompt injection, jailbreaking, goal hijacking, and tool misuse. It employs a modular architecture featuring an attack engine, generator, and judge to evaluate the robustness of AI agents against research-backed attack techniques, enabling security researchers and developers to proactively identify and mitigate potential exploits. Additionally, HackAgent offers a standalone binary for varied platforms, eliminating the need for a Python environment, which enhances accessibility for users.

The h4cker_b00k repository is a comprehensive guide aimed at providing detailed Capture The Flag (CTF) write-ups and insights into ethical hacking practices. It serves as a valuable resource for both beginners and experienced cybersecurity professionals, featuring practical knowledge, techniques, and solutions to enhance skills within the field. Notable features include categorized content for generic tools, initiation into hacking, and advanced hacking topics, facilitating structured learning and community contribution.

GCPwn is a framework for conducting offensive security assessments on Google Cloud environments, facilitating credential handling, service enumeration, and attack-path analysis through graph-based outputs. It supports workflows for reconnaissance, exploitation, and data collection, allowing users to execute predefined exploitation modules and export findings in various formats. Notable features include extensive API behavior tracking, IAM analysis, and the ability to generate OpenGraph outputs for privilege escalation reviews.

The "Awesome Web Security" repository offers a comprehensive and curated collection of resources and materials focused on web security topics. Its primary use case is to educate users on various vulnerabilities such as XSS, SQL Injection, and CSRF, along with techniques for penetration testing and security research. Notable features include an AI integration for real-time queries, extensive categorization of topics, and a strong emphasis on community contributions.

The "Awesome Penetration Testing" repository serves as a comprehensive collection of resources for penetration testing and offensive cybersecurity activities. It categorizes tools and materials spanning various aspects of security testing, including network reconnaissance, exploit development, and OSINT, providing a valuable reference for security professionals and enthusiasts. Notably, it encourages community contributions and offers structured categories for easy navigation of resources.

Awesome Hacking is a comprehensive aggregation of curated lists designed for hackers, pentesters, and security researchers, emphasizing various domains within cybersecurity. Its primary use case is to provide users with easy access to a diverse range of resources—including security tools, educational materials, and research documentation—facilitating knowledge sharing and skills development in the security community. Notable features include contributions from the community, a wide variety of categories such as Bug Bounty and CI/CD Attacks, and extensive resources for practical learning in cybersecurity.

The Exegol-resources repository provides essential resources for users of the Exegol penetration testing framework, aiding in activities such as pentesting, bug bounties, and CTFs. This repository contains files that are automatically integrated and updated by the Exegol wrapper, ensuring seamless access to tools and information within Exegol containers. Notable features include automatic downloads and shared usage capabilities for enhanced efficiency during security assessments.