~/hackyfeed $

Smalisca is a static code analysis tool designed for Smali code, primarily used for analyzing Android applications without executing them. It allows users to parse directories of Smali files to extract class information and method interactions, provides an interactive prompt for detailed analysis and search functionalities, and includes a REST web API for seamless data interaction. Notably, it offers advanced graph visualization features that aid in understanding application structures and behaviors.

Sigma is an open-source project that provides a generic signature format for creating and sharing detection rules applicable to various Security Information and Event Management (SIEM) systems. It enables detection engineers and security analysts to describe log events in a structured manner, supporting multiple types of rules such as generic, threat hunting, emerging threats, and compliance. The flexibility of Sigma rules allows for easy integration and conversion to different SIEM query languages, enhancing collaboration and consistency in threat detection.

Sherlock.py is a transpiler that converts Python code into Bash shell scripts, facilitating execution in Unix-like operating systems. Its primary use case includes transforming scripts for portability and ease of maintenance, with notable features such as verbose execution mode, output file generation, and the ability to translate and execute commands directly. Additionally, the tool supports a command package for importing shell commands and offers a piping function to replicate shell command chaining in Python.

Shellingham is a Python tool designed to detect the shell environment in which the current Python executable is running. Its primary use case is for applications that need to identify the user's shell for executing commands or scripts, returning a tuple with the shell name and its command path. Notable features include its ability to handle detection failures gracefully and provide sensible defaults based on the operating system.

SharePy is a Python module designed for seamless authentication with SharePoint Online and Office 365, facilitating straightforward HTTP operations. It enhances the Request module's functionality by managing authentication tokens and providing familiar request handling for API interactions, file uploads, and downloads. Notable features include automatic token refresh, session persistence with save/load capabilities, and support for custom authentication, making it efficient for developers working with SharePoint APIs.

Splunk Security Content provides a comprehensive repository of analytic stories and security guides that detail tactics, techniques, and procedures (TTPs), while aligning with the MITRE ATT&CK Framework, the Lockheed Martin Cyber Kill Chain, and CIS Controls. The tool features Splunk searches, machine learning algorithms, and automation playbooks designed to enhance detection, investigation, and response capabilities against threats. Additional resources include the Splunk Attack Range for simulating attacks and contentctl-ng for managing content distribution.

SecretFinder is a Python tool designed to identify sensitive information, such as API keys and access tokens, within JavaScript files using customizable regular expressions. It supports multiple input formats including URLs and local files, and allows for options like cookie management and output formatting in both HTML and plaintext. Notable features include the ability to ignore or focus on specific JavaScript files, as well as the integration of proxies and headers for authenticated requests.

sdat2img is a tool designed to convert Android sparse data images (.dat) into ext4 filesystem images (.img), facilitating the manipulation of Android system files for developers and modders. It supports multiple platforms including Windows, Linux, and MacOS, and requires Python 2.7 or newer. Notably, it can handle decompressed Brotli format images and allows for optional output specification of the ext4 raw image file.

Averagesecurityguy/scripts is a comprehensive suite of penetration testing scripts designed to facilitate various security assessments. It includes modules for password brute forcing, cloud service interaction, database testing, OSINT gathering, and more, making it a versatile tool for security professionals. Notable features include the collection's organization by specific tasks such as enumeration, exploitation, and post-exploitation, streamlining the pentesting workflow.

The script-toolbox repository contains a collection of utility scripts designed to address various practical challenges, including tools for checking Reddit accounts for shadowbans and summarizing IP/ASN information for tech companies. Notable features include the inclusion of a fast-paced arcade-style game developed with Pygame, demonstrating versatility beyond conventional scripting tasks.

ScrapPY is a Python tool designed for extracting valuable keywords and phrases from PDFs, which are subsequently utilized in offensive security practices, such as brute force and directory enumeration attacks. It offers features like word frequency analysis, entropy assessment, and customizable wordlist output formats, enabling seamless integration with tools like Hydra and Dirb to enhance initial access and vulnerability discovery efforts.

Scraper Helper is a Python library designed to streamline the web scraping process by providing reusable classes for common tasks. Its primary use cases include downloading videos from platforms like Facebook and automating interactions with web pages using Selenium, all while simplifying the code structure for developers. Notable features include cookie management for session handling and a user-friendly API for downloading content and navigating through web elements.

SCodeScanner is a command-line Python tool designed to identify critical vulnerabilities in source code before deployment, specifically supporting PHP and YAML languages. Its notable features include the ability to eliminate false positives through custom rules, fast scanning capabilities, easy integration with JIRA and Slack for visibility, and outputting results in a user-friendly JSON format. Additionally, SCodeScanner tracks user input variables across files, enhancing its effectiveness in vulnerability detection.

SARENKA is an Open Source Intelligence (OSINT) tool designed for gathering and analyzing data related to the attack surface of Internet-connected devices. It aggregates information from various search engines like Censys, Shodan, and Criminal IP, providing insights on Common Vulnerabilities and Exposures (CVEs) and Common Weakness Enumeration (CWE). Notable features include local software inventory from Windows Registry, network information retrieval, a hash and Shannon entropy calculator, and a basic port scanner, with additional reconnaissance tools planned for future releases.

`sandman2` is a tool that automatically generates a fully RESTful API service from existing databases without requiring any code writing. It leverages SQLAlchemy's capabilities to introspect database schemas and create APIs for various database types, including MySQL, PostgreSQL, and SQLite. Notable features include a command-line interface, an enhanced Admin Interface for better usability, and hypermedia support to facilitate programmatic access to data across different programming languages.

Sandman is a tool designed to effortlessly convert existing databases into RESTful API services, minimizing boilerplate code requirements. It supports a variety of databases recognized by SQLAlchemy and automatically creates a user-friendly HTML admin interface alongside the API. Key features include intuitive database introspection, HTTP Basic Authentication support, and simple command-line usage for rapid deployment.

The RaspberryPi LCARS Interface is a customizable graphical interface designed for use with Raspberry Pi projects, particularly those involving touch screens, such as home automation control panels. Built using Pygame, it features flexible widget placement, development modes for easier interaction, and the ability to integrate sound effects, allowing for a highly adaptable user experience inspired by the Star Trek LCARS system. Users can define and manage multiple screen layouts, making it suitable for a variety of applications beyond its original design.

Rich is a Python library designed to enhance terminal output with rich text formatting and visual elements. It facilitates the creation of colorful and styled terminal interfaces by offering features like pretty printing of tables, progress bars, Markdown, syntax highlighting, and advanced traceback display. Compatible with various operating systems and Jupyter notebooks, Rich provides an accessible API for developers to easily enrich their command-line applications.

Reversing3utools facilitates reverse engineering of the proprietary 3utools software used for managing iOS devices, enhancing accessibility for developers and security researchers. The tool uncovers the software's API for functionality automation and provides insights into infrastructure, such as persistent file storage for iOS firmware and a REST JSON API for querying firmware details, thus aiding in vulnerability discovery and system interactions. Notably, it has led to the identification and reporting of a cross-site scripting vulnerability, showcasing its utility in enhancing software security.

The reverse_engineering_firmware repository offers scripts designed for the analysis and dissection of firmware, facilitating reverse engineering processes. Its primary use case is to aid researchers in understanding and manipulating embedded firmware systems. Notable features include a collection of automated tools and methodologies tailored for firmware examination.

requests-negotiate-sspi is a Python library that enables HTTP Negotiate authentication using Kerberos or NTLM through the Windows SSPI interface, primarily for applications requiring single sign-on capabilities. It supports Extended Protection for Authentication, making it suitable for services that utilize Active Directory Federation Services. Notable features include flexible credential handling, domain specification, and delegation options, facilitating secure interactions with domain-based resources.

ReconSpider is an advanced Open Source Intelligence (OSINT) framework designed for comprehensive scanning of IP addresses, emails, websites, and organizations to gather detailed information from diverse sources. Primarily utilized by infosec researchers, penetration testers, and cyber crime investigators, it consolidates and visualizes raw data on a dashboard while enabling automated OSINT operations through a command-line interface. Notably, ReconSpider integrates functionalities from popular tools like Wave, Photon, and Recon Dog to enhance its attack surface enumeration capabilities.

QARK is a powerful tool for identifying security vulnerabilities in Android applications, analyzing both source code and packaged APKs. It automates decompilation and can generate Proof-of-Concept exploit APKs or ADB commands for various vulnerabilities, including those related to improperly protected components and insecure Intent handling. QARK operates without requiring root access to the device, making it a valuable resource for secure testing and educational purposes in Android security assessment.

Pytype is a Python type-checking tool designed to provide compile-time type checking through type inference and annotations. Its primary use case is to improve code quality by detecting type errors before runtime, although the development has phased out support after Python 3.12 due to challenges with its bytecode-based design. Notable features include collaboration with the Python community to create typeshed, while the maintainers now recommend exploring alternative typing solutions as the ecosystem matures.

This repository provides a comprehensive educational collection of tools and templates for Python-based web scraping, utilizing Scrapy and Selenium. Its primary use case is to streamline the web scraping process by offering utilities, various techniques, and ready-to-use spider templates that require minimal customization. Notable features include a categorized selection of helper functions, detailed explanations of useful methods, and a variety of general examples tailored for different website types.