~/hackyfeed $

Pie-my-vulns is a command-line tool designed to visualize JavaScript and Node.js project security vulnerabilities using pie charts directly in the terminal. It leverages the Snyk vulnerability database for analysis and offers functionalities for scanning project directories or piping in existing Snyk test outputs. Notable features include the ability to run scans via npx, Docker support, and a straightforward installation process through npm.

Nixis is an AI agent firewall designed to enforce real-time governance for AI coding agents like Claude Code, by intercepting and evaluating tool calls against security policies before execution. Its notable features include blocking unauthorized actions such as sensitive file access and destructive commands, along with a user-friendly installation process and an embedded real-time governance dashboard for monitoring and policy testing. This ensures external enforcement of security policies without relying on the AI model's inherent trustworthiness.

HackMeGPT is a CTF-style laboratory designed for practicing LLM prompt injection, where users must extract a secret "favorite item" through a series of increasingly difficult levels and unlock subsequent stages using a command-based interface. This tool features a unique level board with various defenses and secrets, an independent browser session for tracking player progress, and customizable settings for different LLM providers. Notable functionalities include environmental configuration, flag injection for each level, and restrictions on client access to settings APIs, enhancing the challenge and security aspects of the training tool.

OpenFire AdminFinder is a legacy Perl utility for discovering common administrative login paths on web applications developed in ASP, CFM, PHP, or Java. It analyzes responses for login-form indicators but does not bypass authentication or confirm vulnerabilities, necessitating manual verification of results. Designed for ethical penetration testing, it requires explicit permissions to run and should be used with caution due to potential false positives.

RAMBreaker is a modular memory-forensics framework that simplifies the analysis of RAM images using Volatility 2 and 3. It automatically detects the operating system and the appropriate Volatility engine to generate a self-contained, interactive HTML report, supporting Windows, Linux, and macOS environments. Notable features include the ability to extract Linux kernel symbols from the RAM image itself, minimizing reliance on external resources, and clear communication of limitations when analysis cannot be completed.

SAMP Mobile provides source code for an Android client that enables users to interact with SA-MP (San Andreas Multiplayer) tailored for Grand Theft Auto: San Andreas. The tool features support for both ARM32 and ARM64 architectures, with notable integrations like Gloss for version 2.11 and ShadowHook for version 2.10, catering to different user needs and ensuring optimized performance on mobile devices. This repository serves primarily for educational and research purposes, allowing developers to explore and modify multi-platform client functionalities.

The Ubisoft Game Service (GS) is a software development kit that facilitated online features such as user authentication, matchmaking, in-game chat, and CD key validation for Ubisoft games released between 2000 and 2005. It integrates with a dedicated network protocol for game server communication and includes components for both web service operations and specific game server implementations, exemplified by its integration with 'Heroes of Might and Magic V'. Notably, the project comes with a structured directory for common services, game-specific implementations, and testing scripts, requiring Python 3.11 or higher for execution.

inform-inspect is a tool designed for inspecting and debugging Ubiquiti Unifi Inform packets, which is essential for analyzing communication with Unifi SDN Controllers. Its notable features include support for both AES-128-CBC and AES-128-GCM encryption methods, a two-step decoding process for raw byte streams, and the ability to output decoded data in JSON format or as a hexdump. The tool requires access to incoming inform packets and the respective encryption keys stored in the controller’s MongoDB for effective analysis.

Hexerator is a versatile GUI hex editor for Linux designed for binary file exploration and pattern recognition. It leverages the latest nightly Rust features for enhanced functionality while encouraging contributions that optimize code without compromising performance or maintainability. The tool is particularly suited for developers and researchers who require advanced capabilities in analyzing binary data.

Crimson Desert Mod Workbench (CDMW) is a comprehensive Windows desktop application designed for modding the game **Crimson Desert**. It allows users to browse and extract game archives, preview and edit meshes using a native D3D11 renderer, author DDS textures, and create material and mesh replacement packages, all while providing extensive controls and tools for texture editing and model manipulation. Notable features include an Archive Browser with filtering and preview options, a Mesh Editor with advanced selection and editing tools, and various workflows for texture manipulation.

SiriRemoteForge is a macOS application that transforms the Apple TV remote into a highly customizable input device, allowing users to remap all buttons, swipes, and the trackpad to perform any desired action. Its notable features include per-app profiles, the ability to assign multiple actions to single key presses, and a hot-reloading configuration file for instant updates without a restart. This tool leverages private frameworks for advanced input options and supports extensive customization tailored to the currently active application.

Revkit is a comprehensive reverse-engineering toolkit designed for analyzing and modifying iOS and Android applications. It facilitates iOS tweak development through Theos/Orion, enables dynamic instrumentation with Frida, and incorporates HTTP traffic interception using mitmproxy, alongside binary analysis tools like Ghidra and radare2. Its modular structure supports a variety of scripting and disassembly functionalities, making it suitable for both dynamic and static analysis of mobile apps.

The repository provides comprehensive guidance on setting up environments for security researchers across multiple operating systems, including macOS, Windows, Ubuntu, and Fedora. It also offers detailed analyses of Lua program reverse engineering, covering topics such as Luac file format, bytecode disassembly, and developing IDA Pro loaders and processors for Luac. Notably, it serves as a practical resource for those looking to enhance their skills in reverse engineering Lua applications.

RB3Enhanced is a mod for Rock Band 3 designed to enhance the user experience by adding features, fixing bugs, and increasing song storage capacity to 8000 songs, specifically for modified Xbox 360 and Wii consoles. Notable features include support for custom songs, multiplayer functionality without Xbox Live, additional game modifiers, and integration with other platforms like Rock Band 3 Deluxe and GoCentral. This tool aims to provide a more customizable and expansive gameplay environment for Rock Band 3 enthusiasts.

MK7-Memory is a collection of data structures specifically designed for reverse engineering Mario Kart 7. It streamlines the process of generating these data structures from template files using a specialized syntax, facilitating easier modifications and enhancements by developers. Key features include automated header file generation and compatibility with C++23 for project integration.

MegaDownloader is a download manager for MEGA cloud storage, designed to function seamlessly with the newer MEGA link formats. Its notable features include multi-threaded downloading, path security mechanisms to prevent directory traversal attacks, and comprehensive download integrity checks. Updated versions enhance usability with theme switching and various security improvements, ensuring both performance and safety during file retrieval.

Let's Hack It is a web-based tool designed for penetration testing and ethical hacking. Its primary use case is to facilitate security assessments of web applications by identifying vulnerabilities. Notable features include a user-friendly interface and integration with various penetration testing methodologies.

Knife is a comprehensive binary analysis tool designed for reverse engineers, enabling static examination of PE, ELF, and Mach-O file formats without execution. It consolidates multiple analysis functions—such as header parsing, IOCs extraction, and disassembly—into a single command, while providing detailed triage reports on exploit mitigations and dangerous API calls. Key features include a variety of commands for deep analysis, an interactive TUI mode, and extensive output options tailored for vulnerability research and malware analysis.

DexFile is a library designed for the manipulation of DEX files, enabling users to read, generate, modify, and write these files, which are crucial for Android applications. Key features include support for multiple DEX versions up to 041, the ability to handle ODEX files, and the implementation of advanced instruction sets like expanded jumbo opcodes. This library aims to provide comprehensive functionality for developers working with DEX files in Java applications.

AgileDevirtualizer is a specialized tool designed to reverse the method virtualization applied by Agile.NET, converting virtualized bytecode back into standard CIL format without relying on hardcoded opcode tables. Its primary use case is for security research, allowing analysts to recover the original method bodies from protected assemblies by interpreting the unique opcode mappings generated per build. Notable features include runtime analysis of the method's virtualized logic, structural identification of handler types, and a comprehensive process of control-flow graph generation and dead-code elimination, making it robust against variations in Agile.NET's protection mechanisms.

Codex-Prompt is a comprehensive system prompt designed to enhance the accuracy, rationality, and technical precision of AI responses, particularly for applications in engineering, technical analysis, AI usage, and cybersecurity research. Notable features include a focus on factual correctness over user expectation, detailed breakdowns of technical issues from multiple perspectives, and structured responses that emphasize clarity and actionable insights while minimizing emotional language and superficial expressions. The prompt is particularly well-suited for tasks involving programming analysis, system design discussions, vulnerability assessments, and binary security issues.

The OSINT Roadmap is a structured educational resource designed to guide users through the principles and practices of Open Source Intelligence (OSINT) in an ethical and professional manner. It provides a comprehensive learning path that covers core skills such as source verification, documentation, and reporting, while also offering practical case studies for learners ranging from beginners to advanced practitioners. Notable features include detailed workflows, an emphasis on legal boundaries, and a focus on real-world application in fields like cybersecurity and digital forensics.

Overcast is a Video OSINT agent designed to enhance investigative capabilities by organizing data from video sources into a case-specific directory, allowing users to analyze footage for citing evidence. It features modular CLI commands that facilitate various types of analysis, including audio transcription, video content understanding, object recognition, and person identification, while ensuring that results persist across sessions for cumulative intelligence. The tool is notable for its flexibility, allowing integration with different backend services and customizable workflows, while emphasizing responsible use in compliance with legal constraints.

x-tweet-fetcher is a tool designed for retrieving tweets, replies, timelines, and articles from X/Twitter without requiring login or API keys. Its primary use case involves fetching data efficiently through three backend options—FxTwitter for single tweets, Nitter for timelines, and a browser driver for comprehensive user interaction—automatically switching between them as needed. Notable features include monitoring for mentions, archiving query results in a SQLite database, and flexible output formats, allowing users to adapt data retrieval for various AI applications.

DEEP STATE is an open-source submarine intelligence map that leverages public OSINT data to visually represent the positions and statuses of 292 submarines from over 30 navies. Key features include an interactive flat map and a 3D globe showing real-time positions, automated OSINT feeds for updates, and detailed submarine specifications sortable by type and nation. The tool is bilingual (French/English) and enables users to track nuclear deployment levels while providing a comprehensive comparison of global submarine fleets.