~/hackyfeed $

KHVNC is a remote desktop tool that enables users to create and manage a hidden virtual desktop session on a remote machine, thus allowing the execution of applications and scripts without disrupting the physical user's activities. Notable features include browser automation in stealth mode and support for multiple web browsers, making it suitable for educational and research applications. The tool consists of a server component for hosting hidden sessions and a client for controlling those sessions remotely.

The cranksters/playdate-reverse-engineering repository provides a collection of unofficial documentation and tools for reverse-engineering the Playdate handheld console's game files and file formats. Key features include a range of conversion tools for proprietary file types, an API for server interaction, and utilities for evaluating Lua scripts over USB, enabling in-depth analysis and manipulation of Playdate games and applications.

LibreShockwave is a C++20 library designed for parsing Macromedia/Adobe Director and Shockwave files, aiming to create a comprehensive software suite that includes a Director player and a replacement for Director MX. The tool features a Lingo bytecode virtual machine and player for executing Director movies, along with a Qt-based editor for inspecting projects. It supports various file formats and incorporates options for native C++ use as well as browser/WASM deployment, although the development is ongoing and not yet production-ready.

JD.Efcpt.Build is an MSBuild integration tool for automating the generation of Entity Framework Core models using a database-first approach during the `dotnet build` process. Its notable features include automatic DbContext and entity generation based on schema changes, support for both live database connections and SQL Projects, smart configuration discovery, and compatibility with CI/CD environments, making it suitable for seamless integration in database-driven application development.

Hook-Chrome-Chromium-SSL is a C++ tool designed to intercept and manipulate the SSL_read and SSL_write functions utilized by Google Chrome and Chromium, enhancing capabilities for monitoring encrypted data transmission. By manually locating and hooking internal SSL routines, the tool allows practitioners to capture and analyze secure network communications, which is particularly challenging due to the non-exported nature of these functions within the chrome.dll binary. Notable features include the ability to leverage Chrome's source code and BoringSSL library for function discovery and analysis.

GTA2 RE is an open-source tool designed for reverse engineering and building modifications for the classic game Grand Theft Auto 2. It allows users to set up and run patched versions of the game through a straightforward build process using Python, with notable features including automatic setup of the game's executable and the option to run standalone or patched versions directly after building. The project encourages community contributions and provides a dedicated hub for collaboration and additional resources.

Ghidra SVD is a Ghidra plugin designed to import CMSIS SVD (System View Description) files into the Ghidra memory map, facilitating the reverse engineering of firmware for devices that provide SVD files. Its primary use case is enhancing the analysis of hardware-specific memory layouts, which is crucial for embedded systems development and security assessments. Notable features include ease of installation via Ghidra's Extension Manager, automatic memory map updates upon SVD file import, and support for numerous SVD file sources.

Ghidra Device Tree Blob is an extension designed to import Device Tree information into the Ghidra memory map, facilitating the reverse engineering of firmware from proprietary devices that lack published SVD files. Notable features include a straightforward import process through the Ghidra interface and compatibility with Ghidra's extension manager for easy installation. This tool is particularly useful for developers and security researchers working with embedded systems.

Copilot Proxy is a local single-user adapter that facilitates access to GitHub Copilot's capabilities through APIs compatible with OpenAI and Anthropic tools, like Claude Code and Codex. It specifically targets individual users wishing to expose their Copilot identity for personal projects while providing a setup that integrates with various client configurations and offers diagnostics capabilities. Notable features include its ability to run as a reverse-engineered proxy, diagnostic dashboards for monitoring, and support for multiple AI models through a streamlined setup process.

CollapseScanner is a static security analysis tool specializing in the inspection of Java JARs, class files, and nested archives without executing them. It detects high-risk elements such as hardcoded secrets, suspicious APIs, and obfuscation techniques, allowing for customizable scans through various detection modes and options for detailed reporting. Notable features include support for configuration via TOML files, multi-threading for enhanced performance, and output in machine-readable JSON format for easier integration into automated workflows.

Claude Code CLI is a reverse engineering tool designed to create implementation-ready specifications for Anthropic's Claude Code CLI, utilizing source map analysis of the npm package. It features approximately 1,900 files and over 512,000 lines of TypeScript code, offering a terminal UI, a core engine with 45+ tools, and an extension layer for plugins and skills. The tool emphasizes security with multiple permission modes and includes a tracking system for cost management and query execution.

Cinnamon is an open-source re-implementation of the GameMaker: Studio runner specifically designed for the Nintendo 3DS and Wii U platforms. Its primary use case is to enable the execution of GameMaker Language (GML) games compiled as bytecode, thus allowing titles such as Undertale and Deltarune to be ported to these consoles. Notable features include support for bytecode versions 16 and 17, optimization for older hardware, and ongoing development aimed at increasing game compatibility across various GML titles.

Bypass-SetWindowDisplayAffinity is a kernel-level tool designed to bypass Windows' screen capture protections enforced by the SetWindowDisplayAffinity API. Its primary use case is for educational and research purposes, demonstrating how display affinity can be neutralized at the kernel level without relying on user-mode APIs or DLL injection techniques. Noteworthy features include its functionality in a virtualized environment and the emphasis on thorough documentation for kernel modifications and driver installation considerations.

Brochacha20 is a discontinued static client decryptor for Roblox, designed to extract and decrypt game files from the Roblox client directory. Users can specify a directory path and optional output file via command-line arguments, with features including silent mode and manual issue reporting through GitHub. Despite its current inoperability, the tool provides insights into the decryption process of Roblox's runtime page data.

BinData is a Ruby library designed for declaratively reading and writing structured binary data, offering a more elegant and readable alternative to the traditional `#pack` and `#unpack` methods. It simplifies the process of defining data formats, supporting common primitive types and built-in handling for dependent and variable length fields. This tool is particularly useful for developers working with intricate binary data structures who seek to improve code clarity and maintainability.

Awesome Reverse Engineering & Malware Analysis is a comprehensive resource that serves as a curated guide for reverse engineering and malware analysis tools, methodologies, and educational content. It categorizes entries across various disciplines such as static and dynamic analysis, exploit development, and digital forensics while providing quality assurance by checking all links and content for relevance. Notable features include structured learning tracks for different areas of focus, detailed tagging for easy navigation, and inclusion of community resources to enhance collaboration and knowledge sharing.

Anything Analyzer is a comprehensive traffic capturing and analysis tool designed for various sources, including web applications, desktop apps, and command-line interfaces. Its primary use case revolves around automatic protocol reverse engineering and security auditing, leveraging AI to streamline the analysis process. Notable features include support for multiple capture environments, unified session management, two-phase intelligent analysis, and the ability to generate detailed reports on encryption and API interactions.

AlwaysOnTop is a Windows utility designed to elevate a program's window to a higher Z-order position by obtaining UIAccess permissions, allowing it to remain on top of other windows, including system-level tools like the Task Manager. Its primary use case is to prevent interruptions during screen recording or marking sessions by ensuring that the program window is not obscured. Notably, it optimizes the UIAccess acquisition process, minimizing the number of required process startups and simplifying the privilege elevation methodology.

`pymodhook` is a Python library designed for recording function calls within Python modules, facilitating reverse engineering and analysis tasks. It operates across major platforms and allows users to hook into arbitrary method calls of module classes alongside tracking invocation arguments and return values, providing features akin to the Xposed framework for Android. Notable functionalities include customizable hooking parameters, support for specific module imports, and detailed logging of the raw and optimized code paths of executed functions.

Awesome Crypto Tools Directory is a comprehensive, curated resource designed for traders, DeFi users, and compliance professionals to efficiently compare and utilize various cryptocurrency and blockchain tools. It categorizes tools across multiple domains such as exchanges, wallets, DeFi protocols, and compliance solutions, allowing users to make informed decisions with detailed feature scores and rankings. Notable features include a broad index for trading, investing, security, research, and building resources, tailored to enhance user accessibility and decision-making in the crypto space.

xbox_monitor is a real-time monitoring tool for Xbox Live player activities, enabling users to track online status, game play history, and comprehensive player statistics. Key features include detection of gaming activity even for users with an "Appear Offline" status, email notifications for status changes, and the ability to log user activity into CSV files. The tool offers extensive user information displays and supports various configuration methods, allowing for customizable monitoring experiences.

lol_monitor is a sophisticated tool designed for real-time tracking of League of Legends (LoL) players' activities, offering detailed statistics such as match outcomes, champion performance, and team dynamics. Key features include customizable HTML-formatted email notifications for various gaming events, CSV export of gaming activities, and extensive configuration options supporting multiple methods for customization. This tool is particularly suited for users seeking to analyze and monitor gaming performance actively while maintaining flexibility through various integration options.

git2mail is an OSINT tool designed to efficiently find developers' email addresses from GitHub repositories and profiles by scraping commit metadata via the GitHub API. It supports both single and multi-token authentication for rapid bulk reconnaissance, allowing for the analysis of large repositories in under a minute. Notable features include support for a variety of repository and profile URL formats, high-performance data retrieval, and customizable token management for extensive scraping capabilities.

Android Security is a comprehensive resource aimed at enhancing secure app development for Android through various methodologies such as reverse engineering, vulnerability testing, and data protection best practices. Notable features include a catalog of online analyzers and static analysis tools that facilitate multi-faceted security assessments, providing developers the means to identify and mitigate vulnerabilities within their applications effectively.

urlX is a high-performance reconnaissance tool designed for bug bounty hunters, penetration testers, and security researchers. It facilitates passive URL discovery from over 11 intelligence sources, live host probing, and active web crawling, while utilizing Go routines for fast and concurrent processing. Notable features include smart file and extension filtering, minimal setup requirements, and support for enhancing results with optional API keys from various providers.