~/hackyfeed $

Passive Security Scanner (被动式安全扫描器)

python3写的综合扫描工具，主要用来存活验证，敏感文件探测(目录扫描/js泄露接口/html注释泄露)，WAF/CDN识别，端口扫描，指纹/服务识别，操作系统识别，POC扫描，SQL注入，绕过CDN，查询旁站等功能，主要用来甲方自测或乙方授权测试，请勿用来搞破坏。

Advanced vulnerability scanning with Nmap NSE

vulnx 🕷️ an intelligent Bot, Shell can achieve automatic injection, and help researchers detect security vulnerabilities CMS system. It can perform a quick CMS security detection, information collection (including sub-domain name, ip address, country information, organizational information and time zone, etc.) and vulnerability scanning.

Vulmap 是一款 web 漏洞扫描和验证工具, 可对 webapps 进行漏洞扫描, 并且具备漏洞验证功能

lightweight, dependency-free bash script for security, performance auditing and infrastructure monitoring of Linux servers.

A tool to recover a fully analyzable .ELF from a raw kernel, through extracting the kernel symbol table (kallsyms)

A VBA parser and emulation engine to analyze malicious macros.

Adversary simulation and Red teaming platform with AI

Villain is a high level stage 0/1 C2 framework that can handle multiple reverse TCP & HoaxShell-based shells, enhance their functionality with additional features (commands, utilities) and share them among connected sibling servers (Villain instances running on different machines).

A virtual host scanner that performs reverse lookups, can be used with pivot tools, detect catch-all scenarios, work around wildcards, aliases and dynamic default pages.

Venom - A Multi-hop Proxy for Penetration Testers

venom - C2 shellcode generator/compiler/handler

Vulnerable REST API with OWASP top 10 vulnerabilities for security testing

Reverse engineering of Validity/Synaptics 138a:0090, 138a:0094, 138a:0097, 06cb:0081, 06cb:009a fingerprint readers protocol

Source code of Valve Anti-Cheat obtained from disassembly of compiled modules

Popular Pentesting scanner in Python3.6 for SQLi/XSS/LFI/RFI and other Vulns

🦄 🦄 🦄 Peripheral smart contracts for interacting with Uniswap v3

Username tools for penetration testing

OSINT tool for finding profiles by username

🕵️🫆 (2-in-1) Emaill and Username OSINT tool that analyzes username and email presence across multiple platforms, intended for security research, investigations, legitimate analysis

Uscrapper Vanta: Dive deeper into the web with this powerful open-source tool. Extract valuable insights with ease and efficiency, from both surface and deep web sources. Empower your data mining and analysis with Vanta's advanced capabilities. Fast, reliable, and user-friendly, Uscrapper Vanta is the ultimate choice for researchers and analysts.

a recon tool that allows searching on URLs that are exposed via shortener services

A high-speed tool for passively gathering URLs, optimized for efficient and comprehensive web asset discovery without active scanning.

Dynamic unpacker and import fixer for Themida/WinLicense 2.x and 3.x.