~/hackyfeed $

The Obsidian Sample Plugin is a demonstrative plugin designed for the Obsidian note-taking app, utilizing TypeScript for type safety and enhanced documentation. Its primary use case is to showcase essential functionalities of the Obsidian plugin API, including the addition of a ribbon icon, a modal command, and a settings tab, as well as features like global click event registration and periodic logging. Notable features include TSDoc comments for clear API descriptions and a preconfigured ESLint setup for code quality improvement.

NightWriter is a secure document creation tool that employs end-to-end encryption and real-time collaborative editing, making it ideal for users who prioritize document security and collaboration. It utilizes Markdown for exportability, allowing easy conversion to multiple file formats, while its backend is developed using Go, enhancing its performance and scalability. Notable features include a robust encryption scheme based on RSA and AES 256, ensuring that sensitive content and user credentials remain inaccessible to the server or unauthorized users.

Models.dev is an open-source database designed to consolidate AI model specifications, pricing, and capabilities into a single repository accessible via an API. Its primary use case is to facilitate the discovery and comparison of various AI models, independent of their providers, while allowing for community contributions to maintain updated metadata. Notable features include provider-agnostic model data, support for detailed model metadata specifications, and easy integration through an API, enabling seamless access to model-related information.

Continue is an open-source tool designed as an autopilot for coding within Visual Studio Code and JetBrains IDEs, leveraging large language models (LLMs) to enhance developer productivity. Its primary use cases include generating code, answering coding questions, and refactoring existing code based on natural language instructions, all while supporting customizable context providers and slash commands for a personalized experience. Notable features include task and tab autocomplete, the ability to generate files from scratch, and experimental support for local context interactions.

Security Skills for AI Coding Agents provides structured security expertise for AI coding agents by incorporating security skills rooted in established frameworks such as OWASP, NIST, and MITRE ATT&CK. The tool enables agents to perform reliable security reviews, threat modeling, and vulnerability assessments, thus improving their output consistency and accuracy. Notable features include skill auto-discovery for Claude Code, compatibility with multiple CLI interfaces, and a structured directory format for managing skills, all designed to produce auditable security guidance.

pwntools-ruby is a Ruby library designed to facilitate exploit development, inspired by the well-known pwntools library in Python. It provides functionalities for interacting with binary processes, assembling and disassembling code, and constructing payloads in various architectures, focusing primarily on ease of use and consistency with the original pwntools. Notable features include support for i386 and amd64 architectures, various modules for context handling, assembly, logging, and utility functions such as cyclic and memory packing.

Librarian-puppet is a dependency management tool for Puppet infrastructure that enables users to effectively manage Puppet modules from various sources, including Puppet Forge, Git repositories, and local paths. Its primary use case is to streamline the installation and resolution of module dependencies defined in a `Puppetfile`, ensuring that users can maintain a clean `modules/` directory without manual intervention. Notable features include support for transitive dependency resolution, installation from multiple sources (including Git and file paths), and integration with the Puppet Forge API.

ChaordicLedger is a platform that combines Distributed Ledger Technology (DLT) with a Distributed File System (DFS) to securely store interlinked project artifacts, facilitating Systems Engineering and Configuration Management. It integrates the decentralized nature of InterPlanetary File System (IPFS) with the controlled environment of Hyperledger Fabric, employing smart contracts for enhanced project management capabilities. Notable features include a RESTful API, automation of certificate generation, and support for simulations to gather key performance indicators (KPIs).

ASLRay is a Linux-based tool designed for bypassing Address Space Layout Randomization (ASLR) and Data Execution Prevention (DEP/NX) in 32-bit and 64-bit ELF binaries through stack-spraying techniques. It leverages shell variables to efficiently exploit buffer overflow vulnerabilities, allowing successful execution of shellcode by circumventing ASLR randomness and exploiting predictable memory addresses. Notable features include cross-platform compatibility, a minimalistic design, and the ability to use return-to-libc techniques for DEP/NX mitigation on x32.

WriteHat is a reporting tool designed for penetration testers to streamline the creation of professional reports by converting Markdown to HTML and then to PDF. It features a drag-and-drop report builder, supports various markdown elements, a findings database, and customizable reporting options, making it suitable for generating detailed security assessments and tracking report statuses. Its extensible design and LDAP integration allow for enhanced customization and user management.

Vuldash is a comprehensive vulnerability management dashboard designed for ethical hacking projects, enabling collaboration between pentesters and clients. It supports custom plugins, facilitates incident tracking and reporting in both business and technical formats, and allows for online access to reported issues. The platform also features user management capabilities and the ability to import reports from various security tools such as Nmap and Zap Proxy.

Skill Scanner is a security detection tool designed to identify threats in AI Agent Skills, focusing on prompt injection, data exfiltration, and malicious code patterns through a combination of static and behavioral analysis, as well as LLM-based semantic evaluation. Key features include multi-engine detection for enhanced coverage, a meta-analyzer to filter false positives, CI/CD readiness with SARIF output and pre-commit hook support, and an extensible architecture for custom analysis plugins. It is particularly targeted at OpenAI Codex and Cursor Agent Skills, ensuring compatibility with defined specifications while enabling scanning of non-standard formats.

Ray is a unified framework designed for scaling AI and Python applications across distributed environments, facilitating the deployment of workloads from individual machines to clusters. It features a core distributed runtime along with AI libraries for scalable tasks, including data management, model training, hyperparameter tuning, reinforcement learning, and serving. Key components of Ray include stateless tasks, stateful actors, and immutable objects, enabling developers to build high-performance applications with ease.

PyFlyt is a library designed for testing reinforcement learning algorithms in Unmanned Aerial Vehicles (UAVs), providing integrated environments compatible with Gymnasium and PettingZoo frameworks. It facilitates simulation of various UAV scenarios, aiding researchers in developing and evaluating their algorithms. Notable features include easy installation, rendering capabilities, and support for multi-agent environments, enhancing usability for reinforcement learning applications.

PyFlyt is a library designed for simulating Unmanned Aerial Vehicles (UAVs) in reinforcement learning environments, and it integrates seamlessly with Gymnasium and PettingZoo frameworks. Key features include various pre-built UAV environments for training and testing algorithms, as well as interactive rendering capabilities to visualize agent performance during simulations. The library is under active development and encourages collaboration from users and developers.

PurpleOps is an open-source, self-hosted web application designed for purple team management, facilitating collaboration between offensive and defensive security operations. Key features include template engagements and test cases, role-based access control, multifactor authentication, and built-in DOCX reporting capabilities, allowing users to customize and streamline their security testing processes without the complications of traditional setups. The application emphasizes user control and adaptability, with no attribution required and a straightforward installation process via Docker.

Pollenisator is a Python-based tool designed to automate the management of penetration testing activities, facilitating efficient tracking and organization of pentest objects such as scopes, hosts, and tools. It features a NoSQL database for object storage, customizable tool integration, collaborative capabilities for team efforts, and supports various reporting formats including Word and PowerPoint. Notable features include dynamic tool execution controls, a user-friendly GUI, and predefined procedures for reconnaissance and fingerprinting with integrated security tools.

parseLab is a protocol parser generation tool developed by Lockheed Martin ATL, which facilitates the creation of parsers, valid and invalid protocol messages, and offers a framework for building custom protocol generator modules. It supports native parser generation with the Hammer C-library and provides an interface for developing custom generators through the ParselabGenerator class. Key features include message generation tailored to specific protocols and the capability to expand its functionality through user-defined generator modules.

libformatstr is a Python library designed to facilitate format string exploitation by generating payloads for various scenarios in binary exploitation. It allows users to easily manipulate memory addresses, write ROP chains, and guess argument numbers and padding. Notable features include support for both 32-bit and 64-bit architectures, customized order of writes, and the ability to handle string inputs when constructing payloads.

Laika BOSS is a scalable object scanning and intrusion detection system designed to analyze objects across multiple systems with high configurability. It features a modular architecture that allows for dynamic code insertion and extensive metadata generation, facilitating comprehensive object analysis through child object extraction, flagging for dispositioning, and detailed metadata addition. This capability makes it valuable for advanced threat detection and forensic analysis in various environments.

Kvasir is a web2py application designed for efficient data management during penetration testing engagements, streamlining the organization and sharing of extensive test data. It supports integration with various vulnerability scanners and PostgreSQL databases while ensuring data separation for different customers through individual application directories. Noteworthy features include a built-in scheduled task system for managing long-running processes and a user-friendly setup for maintaining data integrity across client projects.

Hoppr-Cop is a CLI and Python library designed for generating comprehensive vulnerability reports from a CycloneDX Software Bill of Materials (SBOM) by aggregating data from multiple open-source vulnerability databases. It effectively combines information from various scanners to reduce duplicates and enhance accuracy, offering output in multiple formats such as CycloneDX VEX and HTML reports suitable for offline use. This tool provides a streamlined method for managing and communicating vulnerability information without the need to regenerate the SBOM frequently.

HexStrike AI is an advanced, AI-powered penetration testing framework designed for cybersecurity automation, featuring over 150 integrated security tools and more than 12 autonomous AI agents. Its primary use case is to enhance vulnerability assessment and exploitation processes through intelligent decision-making and real-time dashboards, optimizing testing strategies based on target analysis. Notable features include support for multi-agent architecture, a modern visual engine, and capabilities such as attack chain discovery and parameter optimization.

HeapHopper is a bounded model checking framework designed for analyzing heap memory management implementations. Its primary use case is to generate test cases and proof-of-concept (PoC) exploits for vulnerabilities related to heap manipulations, leveraging functionality to generate analysis configurations, trace instances, and create PoCs from binary exploits. Notable features include its integration with the angr framework, a client command-line interface, and support for extensive testing through examples provided in its repository.

hackOx is an emerging cybersecurity tool currently under development, aimed at providing solutions for various security challenges. Its primary use case focuses on enhancing the online security landscape, with additional details available on its website. Notable features and functionalities are yet to be fully documented as the project progresses.