~/hackyfeed $

njsscan is a static application security testing (SAST) tool designed to detect insecure code patterns in Node.js applications utilizing both simple pattern matching from libsast and semantic analysis via semgrep. Its primary use case is to enhance the security posture of Node.js applications by identifying vulnerabilities, with notable features including multiple output formats (such as JSON, SARIF, and HTML) and customizable configurations.

loopback4-helmet is a LoopBack 4 extension that integrates Helmet.js, providing enhanced security for LoopBack applications through a series of middleware configurations. Its primary use case is to help developers implement best practices for HTTP headers, which can mitigate common web vulnerabilities. Notable features include customizable middleware settings via configuration bindings and the ability to easily incorporate the Helmet security action into the application’s request handling sequence.

AI Scraping Defense is a robust microservice-based system designed to protect web applications from advanced AI-driven scrapers and bot attacks. It features a layered defense approach utilizing Nginx, Lua, and Python microservices, along with tools for intelligent traffic analysis and machine learning integration, allowing for flexible defense mechanisms. Notable features include adaptive rate limiting, active countermeasures like a Tarpit API, optional CAPTCHA verification, and a community blocklist service, making it a versatile solution for modern web security challenges.

Skoolkit-game-revs is a repository focused on reverse engineering classic video games, primarily for platforms like the ZX Spectrum and TI-83 Plus, utilizing the SkoolKit framework. It features multiple projects for various games, providing insights, code instruction analysis, and ongoing development status with detailed resources for each game. Notable features include extensive documentation and linked follow-up projects for users interested in further exploration of game code.

myslt-alerts is a lightweight Node.js tool designed to monitor Sri Lanka Telecom broadband usage and send threshold-based notifications without relying on external dependencies. It automatically logs into the MySLT backend to track data consumption, alerting users via a designated channel when their remaining data reaches specified limits. Key features include configurable alert thresholds, execution via GitHub Actions for seamless setup without the need for a personal server, and the ability to receive immediate usage snapshots on demand.

MacRE is a suite of scripts and tools designed for reversing macOS applications, focusing on security analysis and malware investigation. Notable features include the App Security Passport for extracting and simplifying macOS app metadata, MachoEntropy for detecting packed or encrypted Mach-O sections, and various analysis scripts for malware datasets. This toolkit facilitates security assessments and research on macOS applications through effective data extraction and entropy analysis.

The Xbox One Controller Driver for macOS is a userspace driver that translates Xbox One controller inputs into keyboard and mouse events, functioning system-wide across applications. Notable features include customizable button mappings, a menu bar application for connection status, automatic reconnection capabilities, and a JSON configuration with hot-reloading support. The driver utilizes libusb for communication with the controller and injects events through the macOS Accessibility API, adhering to limitations that prevent it from simulating a virtual gamepad.

WillPlus-Jig is a tool designed for exploring and manipulating older WillPlus ADV games prior to the AdvHD version. It leverages Frida, a dynamic instrumentation toolkit, to provide various functions for flag manipulation, script execution, and game state modifications directly from a REPL or as an RPC agent. Notable features include the ability to peek and poke flag banks, register and manipulate in-memory scripts, and save/load game states, which facilitate extensive game modifications and debugging.

The Wii IPL repository is a work-in-progress project focused on the decompilation of the Wii Menu version 4.3 across multiple regions (USA, Europe, Japan, and Korea). It provides detailed progress tracking for each version, including metrics for decompiled code and functions, though it does not contain any executable assets. This tool is primarily aimed at developers interested in understanding the Wii Menu's implementation for educational or development purposes.

usbsnoop is a real-time USB traffic sniffer that provides a colorized, compact feed of USB transactions system-wide, utilizing fentry hooks for universal compatibility across various host-controller drivers. Its primary use cases include reverse-engineering USB peripherals, debugging drivers, inspecting mass-storage commands, and capturing errors, with features such as decoded SETUP packets, latency measurements, and JSON output for offline analysis. The tool operates without the need for hardware sniffers or traditional monitoring setups, allowing instantaneous observation and analysis of USB device communications.

Unlimited TickTick for Windows is a patching tool that modifies the original TickTick application to unlock pro features such as unlimited habits, calendar views, and customizable themes. Users can replace the original executable with a patched version to maintain premium capabilities after updates, ensuring continuous access to enhanced functionalities. The tool also supports cloud-based builds via GitHub Actions, allowing users to compile their version of the patched executable without a local development environment.

Free database schema discovery and comprehension tool

RatDecomp is a decompilation tool for the Ratatouille game, targeted primarily at developers and modders who require insight into the game's code structure. The tool allows users to compile and modify the game's source code without containing any game assets, requiring a legitimate copy of the game for usage. Notable features include support for various game versions, a build system via Python and Ninja, and an object diffing capability for tracking changes in the code during development.

OpenScope 2C53T is an open-source firmware developed as a replacement for the FNIRSI 2C53T handheld oscilloscope, multimeter, and signal generator, addressing limitations and bugs in the stock firmware through a clean-room rewrite. Its primary use case includes providing a customizable interface and various diagnostic tools for signal analysis, although it currently lacks live oscilloscope functionality due to unresolved FPGA configuration issues. Notable features include a four-mode UI, variable bitmap fonts, a robust battery management system, and various analysis algorithms, while emphasis is placed on ongoing development for reliable live data capture.

idaxex is a native loader plugin for IDA Pro 9.4 that facilitates the loading of Xbox 360 XEX and XBE executables, enhancing reverse engineering capabilities for these formats. It provides extensive support for various Xbox executable versions, handles both compressed and uncompressed images, and automatically names known imports, improving analysis efficiency. Notable features include AES-NI support for faster loading, integration of exception handling information, and the ability to apply patches directly back to input files.

GameTracking-SteamVR is a tool designed for tracking and monitoring games played in SteamVR. Its primary use case is to automate the tracking process, providing users with an organized overview of their gaming activities without manual input. Notable features include integration with the main GameTracking repository and a supportive community through Discord.

apk-info is a comprehensive tool for parsing Android APK files, designed primarily for analyzing and extracting information regarding APK contents and signatures. Its notable features include support for multiple APK signature schemes, excellent extraction capabilities for Android Binary XML and resources, and user-friendly command-line and Python bindings for easy integration into workflows. The tool also enhances malware analysis with its specialized extraction functionalities and provides accurate identification of the main activity in Android applications.

Attack Surface Toolkit is a passive reconnaissance tool designed for authorized web security assessments that maps external exposures of web targets through OSINT and non-destructive metadata collection. Its primary use case is to provide clear and actionable insights into an organization’s attack surface without engaging in invasive testing, presenting findings in a structured format suitable for both technical and non-technical stakeholders. Notable features include comprehensive subdomain enumeration, DNS analysis, SSL/TLS inspection, security header audits, technology detection, and a weighted scoring system, all culminating in professional-grade reports formatted for client deliverables.

Hellhound Spider is a fully autonomous web crawler designed for security testing that efficiently maps endpoints, parameters, and potential security issues in traditional and single-page applications (SPAs). It features concurrent crawl engines using async HTTP workers and headless Chromium for JavaScript interrogation, outputting a structured JSON report that categorizes endpoints by confidence level and is ready for integration with security assessment tools like Burp Suite. The tool also includes capabilities for automated CORS audits, sensitive file detection in Capture the Flag (CTF) environments, and dynamic parameter extraction, enhancing its utility in penetration testing and vulnerability assessments.

CVE-2023-51467 Scanner is a Python-based command-line tool designed to identify a specific vulnerability in the Apache OfBiz ERP system that allows unauthorized access due to an authentication bypass flaw. It enables users to scan individual URLs or lists of URLs for the vulnerability, supporting multiple concurrent threads for efficient scanning and providing output files for vulnerable targets. Notable features include customizable thread counts and flexible input options for URL scanning.

The Learning Grade AI Web Vulnerability Scanner is a non-destructive tool designed for identifying common web security issues such as unauthorized security headers, insecure cookie flags, and potential SQL injection vulnerabilities. It features a queue-based crawling mechanism for polite scanning, an AI-assisted report viewer for enhanced analysis, and requires explicit user confirmation for ethical scanning practices. This tool is particularly suited for educational purposes and authorized security assessments.

Threat-Patrol is a lightweight Python script designed for web application security testing, enabling users to scan websites for vulnerabilities such as SQL injection, XSS, CSRF, SSRF, LFI, and RCE. Its notable features include an easy-to-use command line interface, automatic scanning capabilities, and instant results, making it suitable for quick vulnerability detection.

SagarBiswas-MultiHAT is a GitHub repository showcasing a range of cybersecurity and web development projects by Sagar Biswas, a Computer Science and Engineering student. The repository includes open-source tools focused on web application security and ethical hacking, featuring a system called "PromptVault" that enables users to securely manage AI prompts with features like PIN protection, organizational categories, and optional cloud synchronization.

SimpleReconURL is an OSINT tool designed for the extraction and discovery of URLs from a given seed URL, enabling reconnaissance workflows. It fetches HTML content to identify all reachable URLs, with options for deeper crawling of the same origin and enrichment through various external sources like the Wayback Machine and VirusTotal. The tool is built in asynchronous Python, ensuring efficiency and ease of use without external shell dependencies.

Reconner is a self-hosted reconnaissance tool designed for bug bounty hunters and security researchers, facilitating comprehensive web and network scanning from a single dashboard. It offers a full pipeline of discovery, vulnerability assessment, and continuous monitoring without relying on third-party services, ensuring that all data remains on the user's system. Notable features include real-time logging, native context-aware DAST for multiple vulnerabilities, and seamless integration with Nuclei for enhanced scanning capabilities.