~/hackyfeed $

Telespot is a Python-based OSINT tool designed to discover information linked to phone numbers by searching across multiple search engines, including Google, Brave, and DuckDuckGo. It supports ten different phone number formats, offers pattern analysis with confidence scoring, and includes features for anti-detection and output customization. Notably, Telespot has a fast mode, TelespotX, which processes requests in parallel for improved performance in U.S. searches.

The "Cybersecurity Notes - Ethical Hacking Tutorial Guide" repository offers a comprehensive set of educational notebooks focused on ethical hacking, encompassing topics such as networking, DNS security, phishing, and OSINT methodologies. Designed for beginner to intermediate learners, it provides structured resources for understanding key cybersecurity concepts and practical techniques, making it an essential reference for those pursuing a career in cybersecurity. Notable features include an organized study map and practical insights into phishing analysis and defense strategies.

The Educational Cybersecurity Tools repository offers a comprehensive collection of over 150 tools categorized for ethical hacking, penetration testing, and cybersecurity education. Key features include tools for network scanning, vulnerability assessment, web application testing, and OSINT, designed primarily for educational use and to enhance security research. The repository emphasizes compliance with legal and ethical standards, making it a valuable resource for learning and practicing cybersecurity techniques.

Canva-C2 is a cybersecurity research tool that illustrates the potential exploitation of Canva's document embed feature for Command-and-Control (C2) communication, enabling covert information exchange between a client and a controller. It focuses on the challenges of detecting malicious traffic that masquerades as legitimate cloud service usage, and provides a proof-of-concept for researchers to explore configurations that utilize Telegram and Slack for data exfiltration. Notably, it addresses modern threats from trusted SaaS platforms and offers insights into defensive detection strategies.

Sift is a security tool designed for penetration testing that efficiently scans local filesystems, network shares, and various cloud services for secrets and sensitive information. It features reduced false positives through advanced validation techniques and local AI, modular connector support for a wide range of platforms, and the ability to resume scans from checkpoints. With cross-platform compatibility and self-contained execution, Sift focuses on performance and extensibility, making it an ideal solution for security teams.

PoC Index is a cybersecurity tool designed for aggregating and cataloging Proofs of Concept (PoCs) related to various Common Vulnerabilities and Exposures (CVEs). Its primary use case is to assist security professionals in quickly identifying and accessing PoCs for over 82,000 CVEs, facilitating vulnerability assessment and exploitation testing. Notable features include a user-friendly search interface, real-time synchronization of PoC data, and links to known exploited vulnerabilities.

PHANTOM is an AI-powered penetration testing command center designed for autonomous security research and general-purpose tasks. Its notable features include real-time tool execution, an unlimited operational capacity, and a self-improving AI framework, which enables multi-agent collaboration and persistent context across sessions. The tool simplifies the pentesting process with zero-configuration execution, allowing users to focus on strategic security efforts without the burden of manual setup.

MAC-Changer_Pro is a command-line utility designed for managing MAC addresses on Linux systems, enabling users to inspect, set, randomize, and restore MAC addresses while maintaining a secure backup of original values. It features strict validation, automated backups before changes, and supports both interactive and scripted usage with clear error reporting and exit codes, making it ideal for engineers, students, and security practitioners needing reliable networking configurations. Notable capabilities include dynamic interface discovery, standards-compliant random MAC generation, and compatibility with legacy systems.

go-sarif is a Go library designed to generate and manipulate reports in the Static Analysis Results Interchange Format (SARIF). It provides functionalities for parsing, validating, and creating SARIF reports, as well as merging multiple reports into one, which is beneficial for aggregating results from multiple static analysis tools. Notable features include support for different SARIF versions, a straightforward API for report creation and validation, and the capability to merge reports while preserving index references for runs.

The "awesome-projects" repository serves as a comprehensive curated list of resources and tools across various platforms, programming languages, and development domains, making it ideal for developers seeking to enhance their skillset and understanding of different technologies. Notable features include categorization of topics ranging from front-end and back-end development to big data and security, facilitating easy navigation and quick access to relevant resources. This repository acts as a one-stop-shop for developers looking to explore and utilize a diverse array of projects and tools.

Prompt Hardener is a tool designed to analyze and mitigate prompt-injection risks in LLM-based agents and applications. It enables users to define system specifications, perform security analyses across various layers, generate recommendations, and validate defenses through adversarial simulations. Notable features include a deterministic workflow that does not require LLM API keys for most operations, support for multiple agent types, and the ability to export results in various formats.

The Besder 6024PB-XMA501 IP Camera security assessment tool conducts comprehensive security evaluations of the camera, including device discovery, port scanning, and analysis of ONVIF capabilities to identify potential vulnerabilities. It features detailed examination methods for known CVEs, such as unauthorized access control and command execution, as well as reverse engineering techniques for associated protocols. The tool is designed for cybersecurity professionals aiming to enhance the security posture of low-cost IP cameras and mitigate risks associated with outdated hardware.

AIPermission is a local permission gateway designed for AI agents, enabling them to perform scoped actions on developer-owned systems while maintaining security by not exposing credentials. Its primary use case is to allow AI-assisted operations through an encrypted local database of credential profiles and customizable access controls, ensuring that developers retain oversight through approvable actions and detailed audit trails. Notable features include scoped access management, built-in connectors, local-only security, and a structured history and audit process for action results.

The niimbot-wiki is an educational resource focused on the design and operation of NIIMBOT label printers, providing insights for users and developers alike. Its primary use case is to serve as a comprehensive reference for understanding and utilizing NIIMBOT printers, complemented by a collaborative environment for contributions. Notable features include community-driven content enhancements and a connection to the related niimbluelib project for further development purposes.

DMG-CPU is a research project focused on generating a detailed netlist of the Nintendo Game Boy's CPU in Verilog format, aiming for high fidelity ("die-perfect") representation of the original chip. Utilized alongside the Deroute utility, the project offers extensive documentation on the chip's architecture, including various components such as memory, I/O, and clock generation, facilitating understanding and integration into other projects without requiring in-depth knowledge of the chip's inner workings. Notable features include a comprehensive breakdown of the chip's cells, signal naming conventions, and verification processes based on prior work.

Ghidra Firmware Utilities is a set of modules designed for enhancing the Ghidra software reverse engineering platform, specifically targeting PC firmware analysis. Key functionalities include the ability to load and analyze PCI option ROMs, firmware images from various formats (such as FMAP and CBFS), and perform parsing of UEFI firmware volumes, along with support for UEFI executable environments through a helper script. This tool is particularly beneficial for researchers and engineers involved in firmware reverse engineering projects.

The Writeups repository contains solutions and scripts for reversing challenges, primarily aimed at aiding users in understanding and solving various reverse engineering problems. Notable features include organized documentation of solving methods and links to external resources for further learning.

ipaverse is a macOS application that enables users to download, re-sign, and sideload iOS, iPadOS, macOS, tvOS, and visionOS applications without requiring Xcode or Terminal. It features comprehensive management of Apple IDs, storefronts, and version history while ensuring security by utilizing macOS Keychain for credentials and adopting a local authentication method through Apple's GrandSlam flow. Notable functionalities include support for DRM-free app installations, account switching, and storefront changes.

Fission is a Rust-native reverse engineering tool designed to reconstruct source code from compiled binaries by prioritizing correctness over readability. Its noteworthy features include a custom intermediate representation, strict correctness checks through execution comparison, and detailed metrics for assessing decompilation fidelity against benchmarks. The tool aims to improve the recovery of project structures and type information while addressing critical data handling errors found in previous versions.

The Cavium CN6640-SNIC10E is an out-of-tree Linux driver stack designed to enable operation of the Cavium CN6640 smart NIC as a dual 10 GbE host interface. This tool leverages a reverse-engineered shared-memory datapath over PCIe, allowing seamless bidirectional traffic handling with high throughput, while maintaining complete reversibility and no dependency on vendor firmware. Notable features include automated card initialization on boot and zero-copy data transfers for optimized performance.

The website-rebuild-skill tool allows AI agents to replicate an entire website line-by-line while providing proof of fidelity through various verification methods. Its primary use case is to create accurate reproductions of web pages by capturing read-only snapshots, performing detailed comparisons, and allowing for quantifiable acceptance criteria across multiple layers of validation. Notable features include zero dependency processing, support for server-side rendered components, and the ability to rescue archived websites from the Wayback Machine, making it a versatile solution for website reconstruction.

Triskel is a Control Flow Graph (CFG) layout engine designed for reverse-engineering tools, focusing on the generation of graphical representations of CFGs with a particular emphasis on Single Entry Single Exit (SESE) regions. It offers Python and C++ bindings, supports exporting to PNG and SVG formats, and includes integrations with libraries like DearImgui and LLVM. Notably, Triskel utilizes a divide-and-conquer approach for efficient layout generation based on its underlying algorithmic theory.

RE_PUBG_LITE is a reverse engineering project focused on the popular online game PUBG LITE, aimed at educational purposes and enhancing gameplay through community modifications. The tool primarily facilitates debugging the game's binary and aims to create a more stable and customizable experience by addressing various game mechanics and functionalities, such as vehicle handling, character animations, and world interactions. Notably, it includes a lobby code that works across all game versions, although many features remain partially or completely unimplemented.

FLOCK-CSV-EXAMINER is a specialized tool designed for processing wardriving CSV data to identify and locate Flock Safety cameras. Its notable features include drag-and-drop CSV functionality, real-time interactive mapping with customizable layers, and the ability to filter results using various parameters, all while leveraging parallel processing for efficiency. The tool also allows users to export results in multiple formats, enhancing usability for security and surveillance analysis.

ORTHRUS is an automated framework designed for the discovery and exploitation confirmation of vulnerabilities during authorized security testing. It performs comprehensive scans using 70 vulnerability scanners, followed by an exploitation phase to validate findings, producing detailed reports in various formats that include mappings to established frameworks such as OWASP and MITRE ATT&CK. Notable features include a built-in dashboard for visualizing scan results, an interactive attack-surface graph, and support for generating AI-written consultant reports based on the findings.