~/hackyfeed $

Orodruin is an open-source intelligence tool designed to visualize global data through an interactive 2D/3D map and actor graph, serving as a self-hostable alternative to Palantir Gotham. Its primary use case is to aggregate and analyze various live data sources related to geopolitical events, disasters, and cyber threats, allowing users to interact with an AI-driven interface that facilitates dynamic querying and data visualization. Notable features include multiple basemaps, extensive live data feeds (including public cameras and weather data), and an actor co-occurrence graph that helps identify relationships between entities in real time.

Huntkit is an investigative toolkit designed for use with Claude Code, offering a comprehensive workflow for various investigative processes such as OSINT, threat intelligence, incident response, and digital forensics. It features structured analytic techniques, case management, chain-of-custody evidence capture, and integration with bundled MCP servers for infrastructure reconnaissance. Notably, Huntkit emphasizes a systematic approach to evidence collection and analysis, ensuring reliability and thorough reporting throughout the investigation lifecycle.

CoolSites is a curated directory providing a comprehensive list of 586 free tools and open-source projects categorized into 30 domains, specifically designed for sysadmins, developers, and creators. Notable features include an intuitive search function, customizable bookmarks with group management, offline accessibility, and the ability to self-host, making it a versatile resource for both personal and professional use. The tool emphasizes user privacy and ease of use with no tracking or account requirements.

Aether is a desktop-based Open Source Intelligence (OSINT) tool designed for analysts to investigate targets through web data and metadata. It generates a dynamic knowledge graph that visually represents findings, manages case files with real-time logging, and incorporates built-in reconnaissance modules such as username searches and metadata extraction tools. Operating on macOS and Windows, Aether emphasizes authorized use, ensuring compliance with ethical guidelines while facilitating in-depth investigations.

OffSploit is an autonomous Red Team and penetration testing framework that dynamically discovers vulnerabilities and adapts exploits for targeted environments using advanced techniques like Retrieval-Augmented Generation (RAG) and Local LLMs. Key features include an automated refinement process for exploit adaptation, a Self-Healing Docker Sandbox for error management, and a robust OPSEC compliance mechanism to enhance security during operation. It is specifically designed to function securely in high-security, air-gapped settings, ensuring all processes remain offline.

The impacket-programming-manual is a comprehensive guide designed to facilitate the development of custom domain-penetration scripts utilizing the impacket library. It delves into the intricacies of protocol implementation, specifically focusing on LDAP, Kerberos, DCE/RPC, and various Microsoft protocols, offering a modular approach to understanding the source code. Noteworthy features include in-depth technical content across multiple chapters, clear guidance on script development, and translations available in both English and Chinese.

0xM0nCrush is a cross-version Windows process termination tool that utilizes a signed kernel driver to identify and terminate specified processes from kernel mode using a single IOCTL. Notable features include support for all Windows 10 and 11 builds without requiring kernel offsets, a self-contained executable that manages driver installation and cleanup without leaving artifacts, and configurable target processes through various means, enabling both automated and manual usage scenarios.

VulnForce is a self-hosted web application designed for managing penetration testing projects, findings, and professional reports. It features a block-based editor with live preview, customizable themes for report generation, and seamless export options to HTML, PDF, Markdown, and Word formats. Additional capabilities include an integrated MCP server for AI client connectivity, a library of reusable project and vulnerability templates, and real-time translation.

nextr4y is a reconnaissance tool developed in Golang that analyzes Next.js applications to extract critical information such as build IDs, version fingerprints, asset catalogs, and route mappings. Its primary use case includes security assessments, debugging, and reverse engineering of Next.js sites, and it features capabilities like an MCP server mode for remote scanning, customizable output formats, and anti-bot evasion techniques. The tool is designed for performance and reliability, catering to cybersecurity professionals and web application researchers.

ghunt-panel is a self-hosted web interface for the GHunt OSINT framework, enabling users to conduct investigations into Google accounts via a user-friendly browser interface. It integrates all the functionalities of the GHunt CLI, allowing easy access to various OSINT modules, such as retrieving data based on email addresses or geolocation, while providing multiple authentication methods and a session management feature. The tool emphasizes local operation for privacy, ensuring no data is transmitted externally, thus safeguarding users' credentials and session information.

PDF_Password_Remover is a Python-based tool designed to remove passwords from PDF files utilizing the pikepdf library. Its primary use case is to enable users to access secured PDF documents by stripping away passwords seamlessly. Notable features include simplicity of use and open-source availability, allowing for easy integration into various workflows.

The brute-force-instagram tool is designed for educational purposes, simulating a brute-force attack on Instagram accounts to demonstrate the vulnerabilities in password security mechanisms. It is primarily used for understanding password strength and the importance of account protection measures. Notable features include customizable attack parameters and an emphasis on ethical usage guidelines.

VoiceStudio is a versatile local application designed for voice cloning, video dubbing, dictation, and long-form audio production, supporting 16 TTS engines and 11 ASR engines across a comprehensive 646-language catalog. It operates on macOS, Windows, and Linux platforms, offering features such as customizable workflows, local data storage, and seamless switching between multiple engines without the need for an account or API key. Notable capabilities include a local REST API, support for diverse computing architectures, and the ability to generate audio content both interactively and in batch.

Awesome Agent Memory is a curated resource that catalogs systems, benchmarks, and research focused on enhancing long-term context, persistent recall, and experiential learning in AI agents. It emphasizes open-source materials, providing users with pathways to integrate memory mechanisms into their projects, evaluate memory systems, and stay informed about security against memory manipulation. Notable features include organized sections for tutorials, benchmarks, and security measures, along with a ranking system based on GitHub star counts for easy navigation of resources.

GrantDecay is a tool designed to identify unused permissions within an organization by analyzing entitlement and access log exports over a specified observation window. It provides four distinct findings related to unused permissions and roles, ensuring that findings depend on a meaningful time frame to mitigate the risk of prematurely removing critical permissions. The tool operates solely on local files, allowing for a safe and straightforward audit of privilege surfaces without connecting to external services.

ARFL is a decentralized VPN protocol designed as a privacy-respecting bandwidth marketplace, leveraging WireGuard, Nostr, and the Bitcoin Lightning Network for transactions. It enables users to pay for bandwidth without the necessity for accounts, subscriptions, or logging, and employs Cashu blind signatures to ensure that the hub cannot link buyers to their browsing activities. Notable features include the use of a two-hop WireGuard tunnel for enhanced traffic privacy and the implementation of NIP-44 encryption for secure token delivery.

The CIS Controls Audit Tool is a web-based platform designed to assist security professionals in implementing and auditing against the CIS Critical Security Controls v8.1. It features a comprehensive interactive audit checklist covering all 18 controls and 153 safeguards, along with progress tracking, export capabilities, and advanced filtering options to streamline the auditing process. The tool also includes implementation group guidance, framework mapping, and is responsive across devices, providing a robust solution for organizations aiming to enhance their cybersecurity posture.

Pithus is a free and open-source platform designed for comprehensive analysis of Android applications, targeting activists, journalists, NGOs, and researchers. It leverages various established analysis tools such as APKiD, MobSF, and AndroGuard, and stores the resultant reports in ElasticSearch for efficient access and review. Notable features include a modular architecture for integrating multiple analysis engines and a Docker-based development environment to facilitate contributions and deployment.

FateUnlimitedCodesRecomp is a hybrid native Windows tool that facilitates the conversion of the PSP game *Fate/unlimited codes* into a higher-quality version by integrating PS2 assets and controls. It is built on a static recompilation of the PSP version, requiring users to provide a legally obtained game copy and specific setup files. Key features include an automatic build process with validation checks, update capabilities, and plans for extended functionalities such as enhanced graphics and online gameplay support.

VansonLoader is a dynamic library that extends the VansonMod framework by integrating selected virtual machine workflows into an injected in-process floating panel for iOS applications. Its primary use case is to facilitate advanced memory manipulation and scripting within target processes, featuring capabilities such as memory browsing, value editing, and real-time overlays for efficient interaction. Notable features include a memory search panel, JavaScript execution support, and the ability to handle VM and RVA items, catering to security research and reverse engineering purposes.

Valeton GP-50 Editor is a browser-based application for managing and editing presets of the Valeton GP-50 and GP-5 guitar pedals through its MIDI SysEx protocol, leveraging WebMIDI for live interaction without needing any SDKs or drivers. Key features include a comprehensive preset explorer, real-time editing capabilities, model swapping with hardware names, and a preset conversion tool for format compatibility between the GP-5 and GP-50. The tool operates entirely client-side, providing a seamless user experience directly in supported web browsers.

cursor2api is a tool that enables users to utilize their paid Cursor subscription as an OpenAI-compatible API. It interfaces directly with Cursor's backend via Connect-RPC over HTTP/2, providing features like streaming responses, real tool calls with decoded arguments, and support for multiple accounts in a round-robin fashion. Notably, it allows user-controlled tool sets and includes automatic token refreshing, enhancing its usability for various application scenarios.

The Suzumiya Haruhi no Chokuretsu Translation Utility is designed for translating the visual novel game "Suzumiya Haruhi no Chokuretsu." It features a library for interacting with game files, along with a command-line interface and a Windows-only graphical editor. Built on .NET 6.0, the tool is cross-platform for the library and CLI, making it versatile for developers and translators.

Gauntlet Dark Legacy Decompilation is a work-in-progress project that reconstitutes the codebase of the Nintendo GameCube game "Gauntlet Dark Legacy" using the decomp-toolkit framework. It facilitates building a binary equivalent of the original `main.dol` file from the game disc, which is essential for verifying the decompilation against the retail version. The tool is designed for use on various operating systems, ensuring essential dependencies are easily managed, and it incorporates automatic object diffing for ongoing project revisions.

crt.sh is a high-performance subdomain enumeration tool that concurrently queries seven distinct Certificate Transparency log sources to uncover subdomains associated with specified domains. Its notable features include a single binary execution with no dependencies, the ability to handle multiple domains in a single run, and various output formats including JSON and Burp Suite compatibility, making it useful for security assessments and domain reconnaissance.