~/hackyfeed $

Editor for Suzumiya Haruhi no Heiretsu for the Wii.

Fire Emblem: Seima no Kouseki (聖魔の光石) is a project for the decompilation and disassembly of the Japanese version of the game, enabling the reproduction of the original ROM byte-for-byte from committed source code and asset files without reliance on a base ROM. The tool supports robust community contributions and is utilized by various related projects such as fe-maps and FE_GBA_Function_Library, providing extensive documentation, mappings, and debugging resources. Notably, it emphasizes build self-containment and aims for a complete and accurate reproduction of the original game's functionality and assets.

CVE-2026-65343 is a proof-of-concept exploit for an out-of-bounds read vulnerability in the AppleKeyStore kernel extension, specifically in the `_LibSer_SEPControl_Deserialize` function, which allows a sandboxed process to leak kernel pointers and compute the Kernel Address Space Layout Randomization (KASLR) slide. The tool exploits improper validation of length during message deserialization to capture and manipulate a real ACM session handle to reveal sensitive kernel information. Notable features include the in-process capture of authentication handles and the use of dyld interpose for circumventing standard sandbox protections.

CTF Training is an 8-part curriculum designed to teach participants the fundamentals of Capture the Flag (CTF) competitions, progressing from basic concepts to hands-on team exercises under timed conditions. Each module provides a lesson paired with practical challenges covering key areas such as digital forensics, web exploitation, and reverse engineering, utilizing tools like Kali Linux and industry-standard applications. The course emphasizes skill-building through increasing difficulty and encourages collaboration among team members for real-world preparedness.

Parser2GIS is a web scraping tool designed for extracting business addresses and contact information from the 2GIS website using Google Chrome. This tool is particularly useful for automating the gathering of data across multiple countries, including Russia, Kazakhstan, and several others. Notable features include its open-source nature, compliance with LGPLv3 licensing, and the ability to operate seamlessly with Python versions 3.8 to 3.13.

DarkNyx is an open-source dark-web search engine and threat intelligence platform designed for crawling and indexing .onion sites using Tor, providing full-text and semantic search capabilities across multiple content categories. Key features include entity search by various identifiers, automatic safety ratings for domains, ransomware activity tracking, and customizable watchlist alerts. The tool is self-hosted, supports a comprehensive set of OSINT safety tools, and includes a local AI page summarizer for efficient data retrieval and analysis.

The "Advanced Web Application Security Testing" course provides a comprehensive, lab-driven approach to understanding and exploiting vulnerabilities in web applications, covering topics from HTTP fundamentals to advanced attack vectors like request smuggling and deserialization. It features 16 teaching modules alongside hands-on labs, detailed notes, and application of techniques for both offensive testing and defensive strategies, ensuring users can effectively identify, exploit, and remediate vulnerabilities. This resource is designed for educational purposes, emphasizing authorized testing only, and can be utilized in formats such as GitHub or Obsidian for optimal reference and engagement.

N8NKALI is an automated penetration testing and Capture The Flag (CTF) platform that integrates Kali Linux with the n8n automation platform, enabling users to execute authorized security testing workflows in a root-enabled, isolated Docker environment. Notable features include a secure assessment endpoint with API key authentication, a command execution policy that restricts shell access, and extensive runtime protections to prevent accidental misuse. This tool is designed specifically for authorized security assessments, CTF challenges, and educational purposes.

`lazynmap` is a terminal user interface designed to simplify the creation of nmap commands by providing an interactive and intuitive visual platform. It features comprehensive options for various nmap scan parameters, live command previews, direct execution capabilities, and input validation to prevent errors. This tool enhances the user experience by allowing keyboard navigation throughout its functionalities, making it particularly suitable for users who prefer a more streamlined approach to network scanning.

The RPI4-Covenant-C2-Installer is a tool designed for deploying the Covenant command and control (C2) framework on a Raspberry Pi 4 platform. Its primary use case is to facilitate the setup of a lightweight C2 environment for offensive security testing. Notable features include an easy installation script that automates the deployment process, making it accessible for users looking to quickly establish a C2 server.

Siemserva is a cybersecurity tool designed for continuous risk detection and remediation in Microsoft 365, Intune, and Entra ID environments. It features a unique Security Context Graph and utilizes Trustworthy AI to automate findings and generate remediation steps, ensuring users maintain control over their assets while receiving comprehensive compliance checks. Additionally, its advanced simulation capability allows for realistic testing and training without impacting live tenants.

The Open Security Reference Architecture is a collaborative resource designed to assist security architects and engineers in creating effective and reusable security solutions. It promotes the inclusion of security principles, models, and threat assessments while remaining vendor-neutral and freely accessible. Notable features include an emphasis on community contributions, guidance for leveraging open-source tools, and a commitment to enhancing the overall quality of cybersecurity frameworks.

sandbox-run is a utility designed to execute commands in a secure operating system sandbox, leveraging Linux namespaces via the `unshare` command to create isolated environments for running untrusted applications safely. Its primary use case is protecting users from the risks associated with executing third-party software by providing a lightweight alternative to established sandboxing tools like Bubblewrap and Firejail, all implemented in around 400 lines of POSIX shell code. Notable features include minimal dependencies, simple installation, and support for separate network namespaces, enhancing security during execution.

The Universal Tool Updater is a utility designed to automate the process of keeping various daily-use tools updated, streamlining maintenance for users. It allows for customizable tool configurations via an editable `tools.ini` file, where users can specify sources for version checks, download links, and installation parameters. Notable features include regex support for version extraction and download links, architecture-specific overrides, and various strategies for sourcing updates from web or GitHub.

Orbiter is an immersive NES emulator and debugger designed for Windows, offering a novel debugging experience with integrated introspection. Its primary use case is for debugging and analyzing NES games, featuring functionalities such as live disassembly, CPU and PPU inspection, execution-flow visualization, and video capture. Notable features include a persistent game library, advanced debugging tools such as profiling and rewind capabilities, as well as various display and audio options.

community_base is a Python script designed to facilitate the development of plugins and scripts for Hex-Rays IDA Pro by providing a user-friendly, DWIM-style interface that abstracts complexities of the IDA Python API. Key features include strong typing with Pydantic for better code clarity, extensive documentation, built-in debugging options, and convenient functionalities like easy script reloading and integrated support for shellcode loading. This tool aims to reduce cognitive load for developers, allowing for easier script maintenance and enhanced usability in the IDA environment.

The cloudflare-turnstile-reversed tool provides an in-depth analysis of how Cloudflare Turnstile fingerprints and scores browsers, complemented by a live capture utility for extracting challenge parameters. Its primary use case is for research and automation on web data, offering detailed documentation on fingerprinting techniques and behavioral analysis without engaging in token forgery. The tool features a capture script that can return valid tokens when used with the Peak API, emphasizing legitimate automation practices within site guidelines.

Reverify is an AI-assisted reverse engineering toolkit designed to provide reliable analysis by validating hypotheses against binary data. Its notable features include a deterministic core for binary parsing and disassembly, grounded verification of claims through tools, and compatibility with AI agents via a Model Context Protocol (MCP) server. The tool is intended for authorized use cases such as malware analysis, CTF, and interoperability research.

OpenKakao is an unofficial command-line interface (CLI) for the KakaoTalk desktop application on macOS, designed for ease of use in terminal environments. It supports direct message sending and conversation reading through macOS Accessibility API without requiring server login, making it suitable for automation and integration with AI agents. Key features include JSON output, support for hooks and webhooks, as well as functionalities like `local-send` and `ax-read` for efficient interaction with KakaoTalk.

CovertActionTools is a .NET-based utility designed for inspecting and modifying game files of the classic 1990 video game Sid Meier's Covert Action. It allows users to modify various aspects of the game, including images, animations, text, crime data, and world data, facilitating the creation of custom modifications. The tool features a user-friendly interface for loading and saving modified game packages, although it requires a valid game installation to function and does not include any game assets.

BudsCtl is a macOS application that enables noise-cancellation control for SoundPEATS earbuds, offering an AirPods-like menu bar experience. It features a segmented picker for toggling between Off, Noise Cancellation, and Transparency modes, along with a global hotkey for seamless mode cycling and per-bud battery monitoring. The tool enhances usability by integrating with macOS Control Center and Shortcuts for automated and instant access to audio mode controls without requiring continuous app operation.

Bug Hunting is a structured skill package designed for AI-driven bug bounty hunting and penetration testing that enhances general-purpose coding agents by providing focused training on vulnerability identification across various domains such as web, API, mobile, cloud, and AI-LLM services. It utilizes a signal-driven system that minimizes unnecessary information load, allowing agents to dynamically access relevant methodologies and techniques based on the target's characteristics, promoting effective hypothesis-driven investigation and streamlined reporting. Notable features include a concise organizational structure with domain-specific routers, compact technique references, and the establishment of a real working folder for structured reconnaissance and findings documentation.

Ravage is a command-line interface (CLI) tool designed for evidence-based security assessments of web applications, allowing users to conduct deterministic reconnaissance and validation within defined boundaries. It features a model-driven attack loop, facilitates scope management, traffic accounting, and documentation of findings, but does not perform remediation of vulnerabilities. The tool is intended for authorized testing only and can integrate with Docker for more complex attack scenarios while emphasizing the importance of using disposable environments.

Myrqen is a security testing tool that integrates static analysis with dynamic verification directly within the user's coding environment to evaluate the security posture of locally running applications. It detects potential vulnerabilities using its own static engine while allowing the user's coding agent to confirm or refute these findings in real-time, ensuring evidence-backed results, such as determining whether a candidate is vulnerable or requires further review. Notable features include a non-intrusive setup without repository uploads, support for various report formats, and the ability to maintain scans entirely locally if desired.

TeleSpotter is a high-performance OSINT tool designed for gathering intelligence on US phone numbers by conducting searches across various engines and lookup sites. Its key features include support for multiple phone number formats, integration with Google API for accurate results, anti-detection mechanisms such as rotating user agents, and comprehensive data extraction capabilities including names, locations, emails, and social media profiles. The tool enhances its functionality through integrations with other OSINT tools, allowing for username and email account discovery.