~/hackyfeed $

maltego-mcp is a Model Context Protocol (MCP) server designed for integrating Large Language Models (LLMs) with Maltego, facilitating automated creation of `.mtgx` graph files and enabling primitive OSINT lookups such as whois, DNS, and ASN queries. Its notable features include the ability for LLMs to construct graphs directly instead of relying on manual interactions, with optional enhancements for right-click transforms within Maltego Desktop. The tool operates in two distinct phases, offering a flexible architecture that can function independently for users at various subscription levels.

Claude OSINT Deploy is a versatile tool designed to streamline the installation and verification of open-source intelligence (OSINT) tools from GitHub across various operating systems. Its primary use case is to automate the process of deploying these tools, ensuring they are correctly set up and functional by executing their test suites and handling installation intricacies based on the specific requirements of each tool. Notable features include an adaptable installation method that considers the environment and dependencies, comprehensive error reporting for troubleshooting, and the creation of usage recipes for future installations.

OSINT UI is a web-based open-source intelligence platform that integrates 20 research tools within a desktop-like interface, facilitating analysis of emails, phone numbers, domains, and more without installation. Its notable features include an Investigation Graph that correlates findings from multiple tools, allowing users to visualize relationships and sources, and the ability to save results as cases or reports. The platform is bilingual and offers three tools for free, enabling users to perform various OSINT tasks efficiently.

The OSINT Platform serves as an open-source alternative to Palantir Gotham, aiming to provide comprehensive intelligence aggregation and real-time threat analysis by leveraging over 50 public data sources. Notable features include a robust ontology model for structuring intelligence data, an AI-powered analysis engine, and a frontend that integrates visualization tools such as maps and timelines. This platform is designed for users seeking extensive intelligence capabilities without the prohibitive costs associated with traditional offerings.

Insto is an interactive command-line interface (CLI) tool designed for Open Source Intelligence (OSINT) gathering specifically from Instagram, utilizing the HikerAPI and an optional logged-in backend via aiograpi for deeper data access. Key features include a dual operational mode (REPL and one-shot), real-time notifications, persistent data storage, and the ability to export results in formats like CSV, including support for Maltego. The tool is built with asynchronous programming in Python, ensuring efficiency and responsiveness during data queries.

Instagram Private Graph is a local OSINT research tool designed to analyze relationships on Instagram by collecting data from an authenticated session. It generates a ranked candidate list, radial network visualizations, and detailed reports to aid in legitimate OSINT investigations, focusing on case triage and hypothesis generation without bypassing privacy controls. Notable features include a comprehensive evidence storage mechanism and robust data visualization capabilities, while emphasizing the necessity of careful use to avoid account restrictions or bans.

`offensive-ai` is a Python-based toolkit designed for authorized red-team engagements, integrating classic network reconnaissance with AI/LLM vulnerability testing. It specializes in probing AI/LLM endpoints for OWASP LLM vulnerabilities, scanning Model Context Protocol servers for known CVEs, and conducting comprehensive security assessments across various infrastructures. Notable features include a configurable CLI, Docker support, and capabilities for specific attack vectors such as blockchain, Kubernetes, and model context attacks, all requiring explicit authorization for usage.

The 22nd Survey Division is an Australian offensive security training platform that offers a comprehensive curriculum featuring 22 core and 3 bonus modules, centered on topics like Windows internals, malware development, and social engineering. It emphasizes hands-on experience through practical labs and live research, enabling learners to apply real-world techniques against live antivirus engines. The course also provides structured learning paths and extensive resources, including command cheat sheets and troubleshooting guidance, catering to both novices and those with programming experience.

The Red Team Toolkit is designed for penetration testing, providing a compilation of tools and techniques sourced from cybersecurity training resources. Its primary use case is to assist security professionals in simulating cyber attacks to identify vulnerabilities, and it features content that is regularly updated with insights from various platforms, including TryHackMe and ChatGPT.

The Prompt Injection Scanner is a security tool designed to identify and mitigate various forms of prompt injection attacks in AI systems, particularly in documents, skills, and system prompts. It utilizes structural, semantic, and systemic analysis layers to detect over 28 categories of threats, including direct instruction overrides, social engineering tactics, and encoding manipulations. Notable features include a zero false positive rate, extensive testing coverage, and support for multiple analysis techniques, ensuring comprehensive protection against potential AI exploitation.

Exploit Arsenal is a comprehensive toolkit that includes 384 validated standalone exploits for various CVEs, specifically tailored for web applications, AI/ML platforms, and the Linux kernel. Each exploit is implemented as a single self-contained Python 3 script, requires no external dependencies, and comes with thorough documentation, including clear write-ups, screenshots of successful runs, and optional setup scripts for testing against real vulnerable targets. This tool is intended for authorized security testing and educational purposes, ensuring that users can safely experiment with real vulnerabilities.

The Red-Book is an extensive collection of technical notes and cheat sheets tailored for red teamers, penetration testers, and security researchers, synthesizing insights from research papers, industry blogs, and practical experience. It encompasses a wide array of topics, including red teaming tactics aligned with the MITRE ATT&CK framework, Active Directory security, web and cloud pentesting, network vulnerabilities, and emerging AI techniques, all structured for educational use. Notably, techniques are cross-referenced with MITRE ATT&CK, OWASP WSTG, and SCWE identifiers, enhancing the tool's utility for professionals seeking to understand and mitigate adversarial tactics.

The ESP32 Bus Expander is a firmware that enhances the ESP32 Bit Pirate by adding wireless capabilities and acting as a radio coprocessor. It connects via UART and supports advanced features such as 5 GHz Wi-Fi and IEEE 802.15.4 protocols, including Zigbee, Thread, and Matter, allowing seamless interaction with a broader range of IoT networks. Notably, it can function as a standalone Zigbee device emulator with its own command-line interface, providing flexibility in wireless communication.

aiscan is an AI-driven penetration testing tool that integrates traditional security scanning engines with language model (LLM) capabilities. It offers three operational modes: a deterministic scanning pipeline, an autonomous assessment agent utilizing natural language, and a collaborative multi-agent assessment, enhancing efficiency and flexibility in pen-testing workflows. Notable features include a user-friendly Web console for monitoring and managing scans, as well as support for authorized scans on specified targets.

`sbommv` is a tool designed for the seamless transfer of Software Bill of Materials (SBOMs) between different systems. It features a modular architecture that supports various input and output adapters, including GitHub, local folders, and AWS S3, allowing for flexible integration and scalability. Notable capabilities include SBOM fetching, translation, metadata enrichment, and compliance checks against several standards, facilitating quick adoption and ongoing compliance management.

BBoink is a portable WiFi handshake capture tool designed for devices like LilyGo, Waveshare, or M5Stack, enabling channel hopping, deauthentication of eligible access points, and the acquisition of WPA 4-way handshakes and PMKIDs. Its notable features include a user-friendly interface through buttons or Bluetooth, and it offers both cloud-based and local password cracking options, providing real-time capture statistics and the ability to manage previously attacked networks. This tool is intended for authorized network testing only, as it employs deauthentication frames to obtain handshakes.

Trawl is a web-based tool designed for capture-the-flag (CTF) competitions that enables users to uncover hidden data within various file formats, including images and audio. With capabilities for steganography analysis and cryptographic decoding, Trawl automates the process of extracting obscured information, analyzing files for embedded text, metadata, and employing multiple decoding techniques. Notable features include a unified interface for running multiple checks simultaneously, support for deep file inspection, and customizable flag detection to streamline the CTF puzzle-solving experience.

ScanCore is a portable, cross-platform, command line virus scanner written in PHP, designed to detect and classify file infections based on various criteria, including file hashes and content signatures. Notably, it features automatic updates for both the application and virus definitions, supports scanning within compressed files, and maintains a small memory footprint while ensuring configurable scanning parameters for scripting and automation. Its open-source nature allows users to easily understand and modify virus definitions, catering to both Windows and Linux environments.

PyrsistenceSniper is a tool for offline detection of Windows persistence mechanisms, enabling rapid checks from evidence collections such as KAPE dumps or mounted disk images without requiring live system access or administrative privileges. It boasts extensive coverage of over 130 persistence checks across various MITRE ATT&CK techniques, supports signature-based filtering for accurate detection, and offers customizable detection profiles, multiple output formats, and an extensible plugin architecture. The tool performs native registry parsing for efficient scanning, completing assessments in approximately 10 to 30 seconds on heavily utilized systems.

Minexus is a Distributed Command & Control System designed for efficient remote administration, deployment, and monitoring, functioning as a faster alternative to Ansible. It features a central Nexus server with minion clients for executing commands, tag management, command status tracking, and a user-friendly web interface, all utilizing secure gRPC communication and TLS encryption. Notable capabilities include real-time command streaming, flexible tag-based targeting for minion selection, and auto-discovery for easy integration, aimed at providing a comprehensive solution for system monitoring and management.

ReverseBox is a Python package designed for software reverse engineering, providing functionalities for data compression, encryption, and management of various checksum and CRC algorithms. Its primary use case targets developers and reverse engineers, offering features that include the parsing of data structures, manipulation of file formats, and extensive support for image processing across multiple platforms. Notable capabilities include a wide range of checksum and hash functions, as well as wrappers for common compression and encryption algorithms, streamlining tedious reverse engineering tasks.

jadx-mcp is a plugin for jadx-gui that implements the Model Context Protocol (MCP) server, enabling AI clients to analyze applications loaded in jadx-gui. Key features include the ability to list and search for classes, fetch decompiled Java or smali code, access method-level source, and manage cross-references and renames for deobfuscation purposes—all processed through a native server implementation with configurable host and port settings. This tool is specifically designed for environments running Java 17 or higher, ensuring compatibility with the official MCP Java SDK.

Guia de Assembly is a comprehensive resource designed to enhance understanding of assembly language, focusing on x86, ARM, and RISC-V architectures. It provides essential documentation, tutorials, disassembly and debugging tools, and practical challenges, facilitating topics such as reverse engineering, embedded systems, and code optimization. Notable features include verified content, a structured learning path, and community engagement options for collaborative learning.

AlterEgo-CS2 is an advanced framework designed for high-velocity angle decoupling, multiplex hitscan targeting, and entity state synchronization specifically for Source 2 games. It features capabilities such as dynamic priority calculations for target selection, high-frequency rotation interpolation for view angles, and a sub-tick backtrack architecture for improved lag compensation. Additionally, the tool offers robust memory virtualization methods to ensure runtime isolation, making it a powerful resource for analyzing network replication in Source 2 environments.

The Xbox Dashboard Recompiled tool statically recompiles the original Xbox Dashboard's executable for native Windows execution, enabling a functional yet minimalist boot process that runs its initialization chain and prepares for rendering. Currently in development, it supports features such as parsing the dashboard's scene graph from `default.xip` and managing interactions with Xbox-specific graphics through a Direct3D layer. Notably, the tool adheres to strict rendering rules to ensure that only the dashboard's own graphics commands are executed, facilitating an authentic representation of the original interface without custom overlays.