~/hackyfeed $

Mixeway Flow is a comprehensive DevSecOps tool that integrates security throughout the software development lifecycle (SDLC) by automating scans for security vulnerabilities across various aspects such as source code, dependencies, infrastructure as code (IaC), and potential secret leaks. Notable features include a unified dashboard for centralized threat management, seamless Git integration with automated scans triggered by webhooks, and an upcoming AI/LLM-powered verification engine to enhance vulnerability validation directly within the source code.

Envy is a local-first secret management tool that encrypts sensitive data using AES-256-GCM, ensuring that secrets are never stored in plaintext, whether on disk or in version control. Its key features include zero-trust storage with master key protection in the OS Keychain, memory-safe secret injection with automatic zeroing of sensitive data, and GitOps-native workflows that allow teams to manage secrets securely without reliance on external services. Additionally, Envy provides a pre-encrypt audit trail for visibility before sealing changes, facilitating multi-team access control with separate passphrases.

Wallarm Docker Aio is a comprehensive Docker image designed for API security, integrating Nginx with Wallarm's security modules to safeguard applications against a range of cyber threats. Its notable features include a minimal Alpine Linux base, support for multiple architectures, non-root user execution for enhanced security, and customizable configurations via environment variables. The tool facilitates seamless deployment and operation of a Wallarm Node for effective monitoring and protection in diverse environments.

The HCL AppScan SAST GitHub Action facilitates static analysis security testing (SAST) and software composition analysis (SCA) for code repositories, identifying vulnerabilities within both the source code and its dependencies. Notable features include customizable scan parameters, the ability to conduct incremental scans, and options to focus solely on specific types of analysis, along with integration with HCL AppScan on Cloud or AppScan 360 for result storage.

Ameen's Morphe Patches is a collection of bytecode-level modifications designed for enhancing the functionality of various Android applications using the Morphe framework. The tool primarily serves to unlock premium features in apps like Foodvisor and PhotoGrid, allowing users to bypass limitations and watermarks. Key features include ease of use through the Morphe Manager or CLI, as well as the ability to apply custom logic to APKs without requiring the original source code.

The web-global-metadata-parser is a tool that parses and extracts metadata from web files, facilitating enhanced data accessibility and management. Its primary use case is to enable seamless integration and retrieval of metadata across various web-based applications, while notable features include its capability to handle multiple file formats and its reliance on shared utility scripts for enhanced functionality.

Vandal Hearts — Native PC Port is a fan-driven preservation project that recreates the PlayStation 1 classic by decompiling and porting it to modern desktop environments using SDL2, OpenGL, and OpenAL. Key features include a byte-exact matching decompilation of the original game, an optional Tactical Mode for rebalanced gameplay, enhanced graphics with a PSX-accurate integer rasterizer, and an HD pack for improved assets. The project maintains compatibility on both Windows and Linux, ensuring a faithful yet enriched gaming experience.

Real-Time Corruptor Vanguard (RTCV) is a dynamic data corruption tool designed for video games, enabling users to intentionally corrupt game data in real-time to create glitches. It supports multiple emulators, including Bizhawk, Dolphin, and PCSX2, along with features like customizable corruption algorithms, a package manager for plugins, and tools for managing and generating corruption instructions. RTCV also includes functionalities for file corruption and a dedicated user interface for enhanced interaction.

Heretek is a GDB TUI dashboard that facilitates debugging by allowing seamless connections to remote targets without the need for a functioning `gdbserver`. It is designed to operate without Python dependencies, is architecture-agnostic, and can work with minimal requirements (just `gdb`, `nc`, `cat`, and `mkfifo`), making it an ideal tool for developers facing issues with standard `gdbserver` binaries. Notable features include static linking for ease of use and robust support for various GDB commands execution.

Fripack-inject is a payload injection tool designed to work with the Fripack framework, facilitating the manipulation of packaged applications. Its primary use case is to provide a seamless injection mechanism that enhances the functionality of the Fripack environment. Notable features include compatibility with the Fripack ecosystem and the ability to customize payload injections for various scenarios.

unixtract is a Rust-based extraction tool designed to unpack various firmware package formats primarily used in TVs and AV devices, ensuring compatibility across multiple platforms including Windows, Linux, MacOS, and Android. Its notable features include support for various file formats such as Amlogic burning images and Android OTA payloads, along with the ability to specify options for format-specific behaviors, while maintaining simplicity as it does not involve re-packing of the extracted files.

th07 is a reimplementation and decompilation of the game "Perfect Cherry Blossom" (version 1.00b) by Team Shanghai Alice, designed to be functionally identical to the original executable while achieving a high accuracy rate. It provides a fully playable main game executable (th07.exe) alongside a configuration tool (custom.exe), both of which currently require the original game files for certain features like icon extraction. Notable features include the handling of integrity checks and options for non-matching builds, with ongoing improvements aimed at enhancing accuracy and usability across platforms.

objdiff is a local diffing tool designed for analyzing changes between decompilation project object files, providing detailed comparisons of functions and data within these files. It features built-in C++ symbol demangling, automatic rebuild on source changes, project-specific configuration options, and support for multiple architectures including ARM, MIPS, and x86. Additionally, the tool integrates with a web interface and has a Visual Studio Code extension in development, enhancing user accessibility and functionality in object file analysis.

MachOKit is a library designed for parsing MachO files, facilitating the extraction of various components and data structures from both file and memory representations. It supports operations such as parsing load commands, symbol listing, and rebase and binding operations, along with advanced features like handling dyld shared caches. Notably, MachOKit enables developers to work with single MachO files, Fat files, and dyld caches seamlessly through structured interfaces.

The M2TW Engine Overhaul Project (M2TWEOP) enhances the gameplay capabilities of *Medieval 2: Total War* by modifying the game's in-memory code using C++ and Assembly, accessible through a comprehensive Lua scripting API. Key features include extensive customization options, removal of engine limitations, robust debugging tools, and support for custom sounds and mod integration. The tool also fixes several engine bugs and allows users to create unique gameplay experiences with capabilities such as online Hotseat battles and strategic map viewing.

JADX-MCP-SERVER is an automated server designed for analyzing Android APKs through the connection with the JADX-AI-MCP Plugin, utilizing large language models like Claude to facilitate reverse engineering. Its primary use case involves uncovering vulnerabilities and parsing APK manifests, streamlining the reverse engineering process for security professionals. Notable features include seamless integration with LLMs for advanced analysis and fully automated operations to enhance efficiency in vulnerability detection.

ILSpy MCP Server is a .NET 9-based Model Context Protocol (MCP) server that provides in-memory decompilation and structural analysis of .NET assemblies, enabling AI assistants to interact with compiled .NET binaries such as `.dll` and `.exe` files using natural language. Notable features include JSON-RPC 2.0 communication for seamless integration, validation of tool requests, and robust handling of inputs to facilitate various analysis tasks through an organized processing pipeline. This tool serves as a bridge between AI clients and the ILSpy decompiler, enhancing the capabilities of language models in inspecting and manipulating .NET code.

gemini-web2api-go is a tool that acts as a reverse proxy, converting the Google Gemini web interface into an OpenAI-compatible API, enabling users to access its functionalities without requiring an official Google API key or payment quotas. Key features include OpenAI-like endpoints for model interactions, anonymous usage with advanced session management including a proxy and cookie pooling mechanism, and a built-in Chinese management panel for monitoring and configuring usage. The tool supports various models and offers enhanced security and anonymity through real browser fingerprinting and independent rate limiting for each IP.

GameTracking is a modular toolset designed to automate the tracking and updating of game repositories through GitHub Actions. Its primary use case is to manage game updates by using a reusable workflow that integrates with individual game repositories, automating the download of necessary files and the execution of update scripts. Notable features include support for manual triggers, a lightweight file downloader for selective content retrieval, and cross-platform compatibility for both Linux and Windows systems.

The `game-and-watch-patch` repository provides custom firmware and a patching utility for newer Nintendo Game and Watch consoles, enabling the enhancement of stock firmware functionality. It seamlessly integrates with `retro-go`, allowing users to run retro games, store the entire firmware internally without external flash, customize graphics, and dump playable ROMs. Notable features include configuration options for easter eggs, graphical dynamics, and additional ROM hack capabilities, optimizing the gaming experience on supported devices.

fretwire is an independent Linux editor for the Line 6 HX Stomp and Helix Floor, developed in Rust. It interfaces with the pedal via the MI_00 USB control protocol, allowing users to import data from their own HX Edit installation to manage presets and settings. Notable features include a graphical user interface built with WebKitGTK and Svelte, a command-line interface for device operation, and the ability to run a mock device for UI demonstration without hardware.

DisplayDeck is a macOS utility designed to provide comprehensive control over displays and windows, featuring capabilities such as enabling/disabling screens, adjusting brightness, forcing HiDPI resolutions, and managing window tiling/snapping. It operates without telemetry or subscriptions, leveraging Apple's private frameworks and emphasizing a lightweight, user-friendly experience. Notable features include remote access, auto-night color warmth adjustments, and a robust failsafe for display management in various configurations.

damai is a community-driven tool designed for automated ticket purchasing across major Chinese platforms such as Damai, Maoyan, and PiaoXingQiu. It provides resources for ticket monitoring, reverse engineering on Android, and specialized tutorials for packet capturing and process isolation, facilitating advanced ticket procurement strategies for users ranging from beginners to tech-savvy developers. Notable features include user-driven tutorials, a dedicated community for technical discussions, and integration with various methodologies for effective circumvention of platform restrictions.

Codex 5.6 ColdBrew is a sophisticated tool designed for advanced task routing and processing across multiple domains, employing a dual-engine framework named MAX. Its notable features include Armor Break configurations for enhanced target prioritization and integrity checks, as well as Mature M5 for adult-oriented content generation, all supported by a comprehensive command set for session management and task execution. The tool is tailored for users seeking to leverage versatile interactions for technical and creative applications within a structured environment.

ONUS is a locally-hosted vulnerability assessment and penetration testing tool designed for conducting comprehensive scans on authorized target domains. It features eight parallel scanning modules that assess various security aspects, employs deterministic CVSS v3.1 scoring for findings, and optionally utilizes AI for generating user-friendly remediation instructions, delivering results in both a PDF report and an interactive web dashboard. This air-gapped solution prioritizes simplicity and security, requiring no external dependencies or user accounts for self-hosted deployments.