~/hackyfeed $

kipi is an open-source OSINT investigation platform that converts various document types into interactive entity graphs for real-time analysis. It allows analysts to ingest reports like PDFs and screenshots, automatically extracting and correlating data to produce a visually structured investigation, while human oversight ensures accuracy through a grading system for findings. Unique features include extensive graph analytics capabilities, document-driven entity extraction, and the ability to pivot on live web findings without needing complex queries.

Awesome OSINT is a curated repository that compiles high-quality open-source intelligence tools, resources, and techniques designed for investigations across various fields including journalism, cybersecurity, and research. The repository offers a comprehensive index of resources categorized by specific functions such as social media investigation, geolocation, and IP intelligence, facilitating enhanced data collection and analysis for users engaged in intelligence gathering and threat assessment. Notable features include extensive links to specialized tools for deep web searches, image and video analysis, and automated OSINT solutions.

The CVE-2026-54806 PoC is a security tool designed to demonstrate the unauthenticated PHP Object Injection vulnerability in the WP Activity Log WordPress plugin, allowing attackers to inject serialized PHP objects through the User-Agent header. Key features include vulnerability checking, command execution, reverse shell initiation, and file writing capabilities, all without the need for authentication. This tool allows researchers to simulate attacks and explore the implications of the vulnerability in a controlled environment.

The OSINT Username Generation Guide is a comprehensive toolkit designed for generating usernames for purposes such as OSINT, SOCMINT, and pentesting. It offers strategies for combining personal information to derive potential usernames, employs techniques for username transformations, and integrates various tools and scripts to automate the generation process. Notable features include guidance on mining primary information, extensive username permutation options, and links to external tools tailored for effective username generation.

VERNAM is a browser-based file encryption tool that enables users to encrypt and decrypt files without any data leaving their device. It employs modern cryptographic techniques, specifically XChaCha20-Poly1305 and Argon2id, ensuring strong security without the need for cloud services or user accounts. Key features include support for any file size, tamper-evidence, and complete open-source availability, allowing users to host their own copies and contribute to the project.

The Thycotic.SecretServer PowerShell module provides a secure interface for managing and automating access to privileged accounts within the Secret Server environment. Designed for both administrators and users, it allows for secure storage and retrieval of credentials for use in scripts, thereby avoiding plaintext storage vulnerabilities. Notable features include the use of C# classes for unique endpoint instantiation and automated processing shortcuts, enhancing the efficiency and security of account management tasks.

WasmQuay is a static analysis tool for WebAssembly components that decodes `.wasm` binaries to inspect and classify their capabilities, ensuring compliance with defined security policies. It operates completely offline and without dependencies, providing typed JSON manifests for ease of integration with TypeScript environments while facilitating continuous integration (CI) by failing builds when components violate policy constraints. Key features include capability classification, policy evaluation, and component comparison, all designed to enhance the security of WebAssembly usage.

Sekret.link is a secure service designed for sharing notes and passwords. Its primary use case revolves around the secure transmission of sensitive data, featuring customizable expiration times for secrets, configurable maximum data size, and integration with PostgreSQL for data storage. Notable features include support for external web URLs via reverse proxies, and easy deployment in a Docker environment.

IDOR Detector is an automated security tool designed to identify Insecure Direct Object Reference (IDOR) vulnerabilities in web applications and APIs, enabling security researchers, penetration testers, and developers to detect unauthorized access risks and prevent data leaks. It features customizable payload support for various identifier types, authenticated testing capabilities, smart fuzzing for dynamic object ID variation testing, and detailed logging and reporting for audit purposes.

DefenderControl is a tool designed for Windows administrators to manage and control the protection state of Microsoft Defender during maintenance windows. It enables users to inspect the current settings, perform dry runs of changes without affecting the system, and ensures a straightforward recovery process through restore points and transaction logs. Notable features include real-time monitoring of Defender's status, comprehensive reporting, and built-in safety measures to prevent unintended consequences during the operational changes.

The Xbox One Research Wiki is a comprehensive documentation platform for the Xbox One console's hardware and software details, built using the Python framework `mkdocs`. It serves as a collaborative repository for users to contribute and correct technical information, encompassing features such as a structured navigation system and local deployment methods via native or Docker containers for easy editing and review.

Skylander IDs is a comprehensive catalog of Character and Variant IDs for Skylanders figures, including unreleased characters. It utilizes a 16-bit unsigned short format for Variant IDs, detailing a bitfield of six flags that identify figures in-game, and encourages community contribution for accuracy. The repository is a valuable resource for gaming enthusiasts looking to identify and organize Skylanders collectibles.

The rewerse-engineering tool is an unofficial client for the REWE API, developed in Go and Python, which allows users to query current discounts, products, markets, and recalls from the REWE app through its publicly accessible endpoints. Notable features include the ability to extract and use API certificates, command-line interface support for fetching discounts with specific market parameters, and the implementation of key API endpoints for educational and research purposes. The project is primarily aimed at developers looking to interact with REWE's API, especially in light of recent security changes.

Ghidra.js is a JavaScript integration tool for the Ghidra reverse-engineering framework, enabling users to write and execute Ghidra scripts using JavaScript. Its primary use case is to facilitate automated binary analysis by utilizing AI coding agents that can interactively perform tasks within Ghidra, leveraging features such as direct command-line interface access for importing binaries and executing scripts without GUI dependence. Notable features include the ability to run scripts against already-analyzed binaries, project configuration support, and the usage of Ghidra’s built-in global variables within scripts.

The "bn" tool is an agent-friendly command-line interface (CLI) designed for interaction with the Binary Ninja database, allowing users to read and manipulate decompiled code, assembly, and other binary data in real-time. Notable features include unrestricted in-process Python execution, mutation applications with live verification, and a variety of command options for function searching, disassembly, and cross-reference analysis, all providing detailed insights into binary structures for reverse engineering and analysis tasks.

`auto-re-agent` is an AI-driven reverse-engineering tool that leverages Ghidra and various large language models (LLMs) to reconstruct and validate C/C++ functions from compiled binaries. It features an autonomous workflow that includes independent reverser and checker models, candidate validation through build and test gates, and conservative structural verification, facilitating the generation of candidate implementations without altering the original source code. The latest version introduces enhanced session management, diagnostics, and differential validation capabilities to improve the robustness of the reverse-engineering process.

Arkose-solver is a versatile tool for bypassing Arkose Labs' FunCaptcha using Go, Python, and Node. It generates a browser-like fingerprint, encrypts it, and requests a suppressed token in a single HTTP round-trip without the need for a headless browser. Notable features include the ability to customize options such as HTTP proxy, user agent, and data exchange, facilitating seamless integration and enhanced performance in automated environments.

AirPlay 2 Sender (C++) is a C++ library designed to facilitate real-time audio streaming to Apple devices such as Apple TV 4K and HomePod using the AirPlay 2 protocol. The tool features lossless ALAC audio encoding, bidirectional volume control, and seamless track transitions, enabling a robust audio-casting experience. It distinguishes itself by implementing the necessary protocol functions and security features for modern devices that are typically undocumented, thereby filling a gap in the available AirPlay sender solutions.

Wine-Assembly is a browser-based Windows 98 emulator that allows users to run original unmodified `.exe` files without the need for a full operating system image. Utilizing WebAssembly, it reimplements the Win32 API along with an x86 interpreter, enabling the execution of various Windows 98 applications and games directly in a web tab. Notable features include support for classic games and applications, virtual LAN networking, and compatibility with the DirectX environment, ensuring a comprehensive retro computing experience.

Ungrabber is a Python module that specializes in decompiling and extracting command and control (C2) information, particularly webhooks, from info stealers. Its primary use case is for cybersecurity researchers and analysts looking to assess the behaviors of malware and mitigate associated threats. Notable features include ease of installation and a dedicated documentation resource for comprehensive usage guidance.

A tool to inject strings into a game using low level code

🍹 (de)compiler for some retro PC-98 "Adv" games

IDA Spotlight is a plugin for IDA Pro designed to enhance the efficiency of malware analysis by automatically scoring and prioritizing functions within large binaries, allowing analysts to triage thousands of functions rapidly. It features advanced scoring based on multiple signal categories such as API calls and string references, as well as historical sample correlation, enabling quick identification of the most critical functions for in-depth review. Notably, it incorporates a dual-view workflow and maintains a SQLite knowledge base for correlating new samples with previously analyzed data, streamlining the analysis process.

3ds_ida is a set of resources for reverse engineering Nintendo 3DS binaries, compatible with IDA Pro 7.6 and later. It primarily facilitates the analysis of various binary formats such as Raw, ExeFS, and CXI, and includes plugins for syscall tracking, decompilation fixes, and IPS patch generation. Notable features include a custom loader, the ability to parse C header files, and the integration of the Capstone disassembly framework.

Vulnometry is a tool designed to assess and prioritize the impact of vulnerabilities based on their specific context within an organization, rather than solely on their severity ratings. It generates a Business Exposure Index (BEI) for each asset affected by a CVE, allowing for tailored risk management decisions by highlighting differences in reachability and consequence across various environments. Notable features include bulk analysis capabilities, outputting reports in annotated workbooks and HTML dashboards, and integration options with existing vulnerability scanner outputs.