~/hackyfeed $

mitmproxy is an interactive intercepting proxy that supports SSL/TLS encryption and enables users to inspect and modify HTTP/1, HTTP/2, and WebSocket traffic through its console interface. Notable features include the command-line tool `mitmdump`, which functions similarly to tcpdump for HTTP traffic, and `mitmweb`, a web-based interface that enhances usability. This tool is particularly useful for developers and security analysts who need to debug and test API calls or web applications.

MISPego is a Maltego transform designed to facilitate the integration of entities into MISP events, allowing users to create and manage threat intelligence data efficiently. Notable features include the ability to create, select, and add various entities such as domains, IP addresses, email addresses, and hashes to MISP events, all configurable via a simple Python script. The tool supports customization of event parameters and integration with the PyMISP library for enhanced functionality.

**minet** is a web mining command line tool and Python library designed for data collection and extraction from various web sources, including social media platforms and websites. Key features include fault tolerance for handling poor network conditions, minimal resource requirements for operation, and easy integration with Unix command-line utilities. Its functionality allows users to perform tasks such as URL extraction, HTML content downloading, and data scraping through an intuitive command-line interface or a high-level Python API.

Malty is a utility designed to merge multiple Maltego configuration files, specifically MTZ format, enabling users to combine new entities into existing configurations without the need for tedious manual re-exporting. Its primary use case is for users managing extensive transforms, entities, or machines in Maltego, streamlining their workflow by allowing quick updates to configurations. Notable features include the ability to easily integrate additional configuration items into pre-existing setups efficiently.

Malicious Macro MSBuild Generator v2.1 is a tool designed for adversary simulation and red teaming that generates malicious macros capable of executing PowerShell scripts or shellcode through MSBuild application whitelisting bypass techniques. Notable features include AMSI bypass capabilities, sandbox evasion through environmental keying, and customizable output options such as setting a kill date. The tool supports various payload types including shellcode and PowerShell, allowing users to simulate advanced attack scenarios.

Malduck is a robust malware analysis library designed to enhance script efficiency and functionality for security professionals. It supports a wide range of cryptographic and compression algorithms, memory model objects for handling various data types, and an extraction engine for modular data retrieval from files and dumps. Notable features include support for fixed integer types, string operations, and a streamlined interface for advanced analysis tasks.

MalConfScan is a Volatility plugin designed for extracting and analyzing configuration data from known malware within memory images. It supports various malware families such as Ursnif, Emotet, and CobaltStrike, enabling users to retrieve decoded configuration data and referenced strings. Notable features include functionality for both Windows and Linux memory images, as well as integration capabilities with Cuckoo Sandbox for automated malware analysis.

mac_apt is a comprehensive digital forensics tool designed for macOS and iOS that facilitates the extraction and analysis of artifacts from full disk images or live systems. It supports a wide array of data formats and artifacts—including Safari history, system logs, Bluetooth data, and much more—while allowing for cross-platform operation and output in various formats like XLSX and JSONL. Notable features include support for encrypted APFS images, a FAST mode for expedited processing, and the ability to analyze iOS filesystem images through the ios_apt integration.

Lux is a Python API designed for intelligent visual data discovery, enabling users to explore and analyze datasets through automated visualization generation. Its primary use case is to streamline the data analysis process, providing users with interactive visual outputs that facilitate insights without requiring extensive coding knowledge. Notable features include automated visualization suggestions, intuitive integration with Pandas dataframes, and support for exploratory data analysis workflows.

LocalGPT is a private, on-premise Document Intelligence platform designed for data confidentiality, allowing users to query, summarize, and extract insights from documents without leaving their local environment. Notable features include a hybrid search engine for enhanced accuracy, a modular architecture for customizable deployment, and extensive support for various open-source models and document formats. The system guarantees data security by keeping all processing local, while offering capabilities like chat history retention and API access for building retrieval-augmented generation applications.

latex2sympy is a Python tool that parses LaTeX mathematical expressions and converts them into equivalent SymPy representations for symbolic mathematics. Its primary use case lies in simplifying the integration of LaTeX-formatted equations into Python's computational algebra systems, allowing for operations like differentiation, integration, and summation. Notable features include support for various mathematical constructs such as derivatives, integrals, and sums, along with clear conversion benchmarks provided in the documentation.

Karton is a distributed malware processing framework that facilitates the creation of flexible and lightweight backend systems for malware analysis using Python, Redis, and S3 storage. Its primary use case is to streamline malware analysis workflows by integrating various analysis scripts into a cohesive pipeline, enhancing task management and logging capabilities. Notable features include the ability to process tasks through customizable classes, a command-line interface for management, and the option to monitor execution and manage logs, making it suitable for both malware analysis and broader microservice-oriented projects.

JAX is a high-performance numerical computing library for Python that enables automatic differentiation and program transformation, specifically optimized for large-scale machine learning tasks. Its notable features include reverse and forward-mode differentiation, the ability to compile functions for execution on various hardware accelerators via XLA, and extensible function transformations like `jax.grad` and `jax.jit`. This tool is particularly useful for researchers and developers looking to efficiently perform complex computations with streamlined gradient calculations and enhanced scalability.

The Google IT Automation with Python Professional Certificate repository provides a collection of practice files designed for enhancing automation skills through Python programming. Its primary use case is to support learners in gaining hands-on experience with IT automation concepts across various courses. Notable features include organized folders for each course, facilitating structured learning and practice.

ipwndfu is an open-source jailbreaking tool designed for various iOS devices, leveraging the permanent unpatchable bootrom exploit known as checkm8. Primarily aimed at researchers, it allows for operations such as dumping SecureROM, decrypting keybags, and enabling JTAG on affected devices. Notable features include support for multiple SoC architectures, the ability to jailbreak and downgrade the iPhone 3GS without SHSH blobs, and an underlying capability to manage hex data during pwned DFU Mode.

ipwn is a curated collection of tools aimed at enhancing the efficiency of penetration testing and general command-line interface (CLI) tasks. Its primary use case lies in providing a resource for security professionals to streamline their workflows during engagements. Notable features include a diverse range of utilities that cater to various aspects of cybersecurity assessments.

ipwhois is a Python package designed for retrieving and parsing whois data for both IPv4 and IPv6 addresses. Its primary use case is to facilitate whois lookups through RDAP and legacy protocols, featuring support for a wide array of whois fields, recursive network parsing, and bulk queries. Notable features include proxy support, human-readable field translations, and a full command-line interface for enhanced usability.

iphone_backup_decrypt is a Python tool designed to decrypt local iPhone backups created from iOS 13 or newer, utilizing a strong key derivation process involving PBKDF2 with SHA256 and SHA-1. Its primary use case is to extract specific files from encrypted backups, such as call history or WhatsApp messages, through a straightforward API which includes predefined relative paths and domain matching capabilities. Notable features include support for both a fast PBKDF2 implementation for improved performance and flexible extraction methods that allow users to navigate and manage backup contents easily.

IoT Inspector is a client tool designed for monitoring and analyzing Internet of Things (IoT) traffic across various operating systems. It features an internal SQLite database to collect network statistics and provides scripts for data anonymization. Key functionalities include real-time packet analysis, device inspection, and user-friendly installation scripts for different platforms.

ioc2splunk.py is a Python tool designed to process CSV results from ioc-parser and convert them into a Splunk-compatible lookup table by appending de-duplicated entries. Its primary use case is to facilitate the integration of Indicator of Compromise (IOC) data into Splunk for enhanced threat intelligence management. Notable features include automatic backup management, data enrichment with additional columns, and routine clean-up of outdated entries in both backup and current Splunk tables.

Instagram Location Search is a Python tool designed to facilitate the retrieval of Instagram location data based on geographic coordinates. By utilizing user authentication via session cookies, the tool allows users to output searched location information in multiple formats including CSV, JSON, and GeoJSON, as well as visualize results on a Leaflet map. This capability makes it particularly useful for geospatial analysis and integration with other tools such as instagram-scraper for further data extraction.

Injectus is a Python tool designed for testing web applications by injecting CRLF and open redirect payloads into specified URLs. Its primary use case is to assist security testers in identifying vulnerabilities related to HTTP response splitting and open redirection, with features including customizable request parameters, multiple worker support for asynchronous operation, and options to run either CRLF or open redirect attacks selectively.

img2sdat is a command-line tool that converts ext4 filesystem image files (.img) into Android sparse data images (.dat). Its primary use case is for developers and modders working with Android system files, allowing for efficient handling of data and storage. Notable features include support for various output configurations, compatibility across multiple operating systems (Windows, Linux), and the ability to specify version numbers for different Android transfer list formats.

HostResolver is a Python-based tool designed to efficiently resolve hostnames to IP addresses while scanning for SPF records and enumerating Autonomous System Numbers (ASNs). Notable features include support for various DNS record types, asynchronous processing for speed enhancements, and multiple output formats such as JSON, SQLite, and CSV. The tool is highly configurable, allowing users to toggle the retrieval of specific record types and perform advanced lookups from lists.

`hookee` is a command line utility that facilitates on-demand webhooks by tunneling requests, capturing request and response data, and allowing for customizable scripted responses. It can be easily configured with plugins and supports both Internet-connected and local testing environments, making it ideal for rapid development and integration testing. Notable features include the ability to use ngrok for tunneling, customize response data with command-line arguments, and mock services locally without an Internet connection.