~/hackyfeed $

Secret-scan is a high-performance secret detection tool designed for scanning codebases to identify and remediate exposed credentials, API keys, and sensitive information, thereby helping to prevent security vulnerabilities. Key features include parallel scanning for enhanced speed, support for over 30 secret types through advanced entropy analysis and regex pattern matching, customization options for detection rules, and multiple output formats. The tool operates with zero configuration by default, respects `.gitignore` files, and ensures production readiness with 100% test coverage.

Osv-detector is an open-source auditing tool designed to identify vulnerabilities in software dependencies by leveraging advisory databases that comply with the OSV specification. Its primary use case is to analyze various package lockfiles across multiple ecosystems, including npm, Python, Ruby, and more, enabling developers to efficiently pinpoint security risks in their projects. Notable features include support for a wide range of lockfile formats and the ability to automatically determine the appropriate parser based on the filename.

Awesome-LLM4Security is a curated repository that aggregates key resources related to the application of natural language processing and generative pre-trained transformers in cybersecurity research, aimed at researchers and security practitioners. It includes models, projects, academic papers, datasets, and relevant products to assist users in understanding and leveraging advancements in the field. Notable features include a comprehensive resource list categorizing various tools and methodologies for enhancing cybersecurity measures.

Agent Beacon is an open-source telemetry layer designed to capture and normalize runtime events from AI agents across various environments, such as local, CI, and cloud. Its primary use case is to provide unified visibility into the behavior of AI agents by extending the OpenTelemetry GenAI standard, making it easier for Security and IT teams to deploy and manage agent telemetry. Notable features include support for multiple enterprise-grade SIEM integrations and a local dashboard for event inspection, ensuring that data processing remains under customer control.

VICE is a security auditing CLI tool designed for assessing vulnerabilities in web applications through both black-box and white-box testing modes. It offers a remote scanning feature that crawls and inspects a given URL, as well as a local audit mode that analyzes source code and configurations for security flaws, including SQL injections and XSS vulnerabilities. Notably, VICE integrates seamlessly with GitHub Actions to automate security checks on pull requests, provide real-time updates on security scores, and maintain a security badge within the repository.

The sbt-sbom plugin enables Scala Build Tool (sbt) projects to generate valid CycloneDX Bill of Materials (BOM) files, facilitating better compliance and integration with Software Composition Analysis tools. Its primary use case is for managing and exporting the dependencies of sbt projects in a structured format, with support for different dependency scopes and customizable output formats. Notable features include the ability to create BOMs for specific scopes, list BOM contents without file generation, and various configuration options for output filename and format.

`safedeps` is a command-line tool that enhances security for AI coding agents by pre-approving dependencies against vulnerabilities from multiple advisory sources before installation and ensuring no unapproved packages are introduced. It enforces compliance through re-verification of the dependency tree post-installation and can automatically roll back any that are found to be insecure. Designed for local use with no runtime dependencies, it also provides features for auditing and managing secrets within the repository.

jddlab is a comprehensive tool designed for decompiling and deobfuscating Java and Android APKs through a Docker image, providing a robust command-line interface for users. Its primary use case is to simplify the process of accessing various decompilation tools while ensuring system safety via Docker's isolation. Notable features include easy installation with a single Docker pull command, quick updates through container versions, and accessibility of all files within the current working directory during operation.

The Malware-Sample repository provides a collection of malware samples, each identified by their SHA256 hashes and detailed with links to related posts that describe their functionalities and impacts. The primary use case is to analyze and understand various malware strains, including backdoors, ransomware, and phishing tools, facilitating cybersecurity research and threat detection. Notable features include categorized malware samples, accompanying documentation, and links to external analyses for deeper insights into specific threats.

IOCX is a deterministic static IOC extraction engine designed for modern security pipelines, specifically focusing on malware analysis and incident response. It ensures zero execution risk by performing pure static analysis on Portable Executable (PE) files, delivering stable and reproducible outputs while effectively handling adversarial input. Key features include a binary-aware parser, high-performance extraction, and compatibility with CI/CD environments, positioning IOCX as a reliable tool for automated threat detection and defense.

DracoLure is a dragon vector honeypot designed to deceive and analyze attackers by serving realistic fake web assets, thereby enticing them to interact. It features real-time detection and classification of probing attacks, assigns threat scores from 0–100, and automatically quarantines malicious sources when they exceed predefined threat thresholds. With its comprehensive signature library for various attack vectors and real-time response mechanisms, it provides a robust defense mechanism for cybersecurity environments.

Elementor Extractor is a Chrome extension that facilitates the extraction and reconstruction of Elementor page structures from live WordPress sites by analyzing the DOM. It generates two types of JSON outputs: one suitable for direct import as an Elementor template and another providing a detailed technical report of all extracted elements, assets, and configurations. Notable features include comprehensive asset detection, extraction of over 30 widget types, and the ability to map Elementor-specific settings and structures for developers and content migrators.

ps5rs is a Rust-based framework designed for analyzing PS5 binaries, facilitating virtual loading and host-side emulation. Its primary use case involves parsing various binary formats, resolving imports, and extracting clean ELFs, while notable features include an interactive dashboard for analysis reports and a host-side emulator that executes guest binaries using pure Rust high-level emulation (HLE) modules. The framework leverages Rust's memory safety benefits to manage untrusted binary data securely.

KittyMemoryEx is an advanced memory manipulation toolkit designed for remote memory patching, scanning, and ELF introspection on Android and Linux platforms. Its notable features include dual remote memory backends, comprehensive pattern scanning, various ptrace utilities for process control, and the ability to perform remote function and syscall calls, making it an essential tool for security researchers and developers focused on reverse engineering and debugging applications in remote environments.

KittyMemory is a C++ library designed for runtime memory manipulation and analysis on Android and iOS platforms, featuring capabilities such as memory patching, dumping, scanning, and module introspection for ELF and Mach-O formats. Notable features include comprehensive pattern scanning methods, detailed ELF and Mach-O introspection tools, memory mapping and region enumeration, alongside support for instruction decoding and memory dump utilities. This tool is particularly valuable for developers and researchers involved in reverse engineering and low-level binary analysis on mobile platforms.

IDA-minsc is a plugin for IDA Pro designed to streamline the scripting of the IDAPython plugin, allowing reverse engineers to execute scripts with minimal effort. It introduces a simplified structure for the IDAPython API, featuring a tagging system, support for multicased functions, and filtering capabilities, enabling users to perform search and annotation tasks efficiently with concise code. The installation process is straightforward, requiring the user to clone the repository and install necessary Python dependencies before utilizing its enhanced functionality directly within IDA Pro.

A decompilation of Pikmin brought to you by fans of the series.

SigMaker is a cross-platform plugin for IDA Pro 9.0+ that enables the creation of binary signatures with zero dependencies, supporting x86, x64, ARM, and MIPS architectures. It offers optional SIMD optimizations for improved performance and aims to remain compatible with future IDA versions without requiring SDK recompilation, facilitating community contributions. Noteworthy features include processor-aware operand wildcarding, a straightforward installation process, and batch search capabilities for efficient signature management.

Class Informer is a Hex-Rays IDA Pro plug-in that scans Microsoft Visual C++ binaries for virtual function tables (vftables) utilizing Run-Time Type Identification (RTTI) data. It enhances reverse engineering capabilities by labeling and commenting on vftables, defining associated data structures, and providing a browsable list of class objects. Noteworthy features include the identification of class hierarchies and the processing of static initializers, aimed at streamlining analyses of MSVC-compiled binaries.

AndUEDumper is a tool designed to extract SDK and function scripts from Unreal Engine games on Android. It supports multiple architectures (ARM64, ARM, x86, x86_64) and automates the discovery of critical game components such as GUObjectArray and GNames, while generating usable JSON scripts for reverse engineering tools like IDA and Ghidra. Noteworthy features include memory dumping capabilities, extensive logging options, and compatibility with a variety of popular Unreal Engine titles.

AndKittyInjector is a ptrace-based library injector designed for Android that facilitates the injection of shared libraries into running processes or newly launched applications across multiple Android versions and CPU architectures. Notable features include support for injecting multiple libraries simultaneously, bypassing Android linker namespace restrictions, and advanced injection triggers such as breakpoints on library loading or specific symbols. This tool is especially useful for debugging and modifying the behavior of Android applications in a stealthy manner.

ThemidaUnpacker is a Python 3 tool designed for dynamically unpacking executables protected by Themida and WinLicense versions 2.x and 3.x. It supports unpacking both 32-bit and 64-bit portable executables (PEs) and .NET assemblies, automatically recovering the original entry point and import table. Notable features include a user-friendly drag-and-drop interface, command-line options for advanced control, and specific handling for executables requiring license files.

Sigmatcher is an automation tool tailored for matching Java classes and methods across various application versions, utilizing signatures from smali code for accurate correlation. It serves as a vital asset in long-term reverse engineering projects by enabling users to create customizable signature files in YAML format and analyze multiple types of Android package inputs efficiently. Notable features include the ability to decode APK files, apply specified signatures, and produce detailed analysis results that highlight matched classes, methods, and fields.

SetWindowDisplayAffinity-Bypass is a tool designed to bypass Windows' screen capture protections that utilize the `SetWindowDisplayAffinity` API. It employs a non-invasive technique to capture screenshots of applications protected by flags like `WDA_MONITOR` or `WDA_EXCLUDEFROMCAPTURE`, without resorting to DLL injection or API hooking, thus avoiding modification of the target process. This method aims to provide a stealthier approach for researching screen capture limitations, though it may not be universally effective across all Windows versions or GPU drivers.

Rusty Box is a Rust-based emulator for 32/64-bit x86 architecture that supports full system virtualization and various advanced features such as integration with the x87 FPU and AVX extensions. It is capable of booting multiple Linux distributions, including DLX and Alpine, both in headless and GUI modes, and can be executed in web browsers using WASM. The tool also supports UEFI applications and provides multiple build configurations, including no_std environments for embedded targets, making it versatile for a range of use cases in emulation and testing.