~/hackyfeed $

Holehe is an OSINT tool designed to identify registered accounts associated with a given email address across more than 120 online platforms, including major social media sites. Its notable features include utilizing password recovery mechanisms for information retrieval while ensuring that the target email remains unalerted, offering outputs in a standardized JSON format, and supporting CLI usage as well as integration into Python applications. The tool also provides a Maltego transform for enhanced data analysis and visualization.

Hobbits is an integrated data analysis tool designed for binary analysis, enabling users to analyze and process binary files efficiently. It supports plugin development, allowing for enhanced functionality, and features a user-friendly GUI. The tool also provides pre-built binaries for easy installation and detailed documentation for users and developers.

Helium is a Python library designed for web automation, simplifying browser interactions in Chrome and Firefox through a high-level API. It allows users to automate tasks with fewer lines of code compared to Selenium by using user-visible labels for elements, managing popups and iFrames more intuitively, and incorporating implicit and explicit waits seamlessly. Its design enables users to leverage both Helium and Selenium together, enhancing script readability and stability amidst web page changes.

GRR Rapid Response is an incident response framework designed for remote live forensics, enabling security professionals to gather and analyze forensic data from remote systems. It features a Python client-agent that operates on target machines and a server infrastructure for management and communication with these clients, facilitating efficient and comprehensive incident investigation workflows. Notable features include real-time communication, remote system control, and the ability to execute live forensic collections with ease.

GraphQLmap is a pentesting tool designed for interaction with GraphQL endpoints, enabling security professionals to assess and exploit vulnerabilities in GraphQL APIs. Key features include schema dumping, query execution with autocompletion, and capabilities for field fuzzing and both NoSQL and SQL injections. The tool provides extensive options for configuring HTTP requests, making it adaptable for various pentesting scenarios.

Graphinder is a specialized tool designed to extract GraphQL endpoints from specified domains, leveraging features like script searching, directory brute-forcing, and a precision mode for enhanced accuracy. It supports both Docker and Python-based installation, offering functionalities such as concurrent scanning of multiple domains and the ability to output results to a file or send notifications via a Discord webhook. Notable features include customizable worker limits, verbose output options, and the flexibility to enable or disable specific scanning methods based on user preferences.

GraphCrawler is an advanced automated testing toolkit designed for probing GraphQL endpoints. Its primary use case involves identifying and assessing various vulnerabilities, such as unsecured mutations and sensitive data exposure, through automated introspection and brute-force schema generation. Key features include integration with Graphinder for endpoint discovery, the ability to use external schema files, and scoring of findings on a severity scale from 1 to 10.

Grandmaster is a Python-based tool designed for automating the decryption of iOS firmware utilizing libraries such as img4lib and ipwndfu. Its primary use case is to streamline the process of generating configuration files and extracting keys for iOS devices, with notable features including batch processing via multi_grandmaster.py, USB device scanning, and integration with the Foreman keystore server for secure key management.

Gold Digger is a Python tool designed for the rapid discovery of sensitive information within files by performing recursive searches based on user-defined criteria. It allows users to specify files to search, exclude certain file types, and log results, thereby enhancing efficiency during penetration testing and file analysis. The utilization of regular expressions aids in identifying matches, although it may lead to false positives.

Gin Config is a lightweight configuration framework for Python that utilizes dependency injection to effortlessly manage function and class parameter configurations, particularly suited for machine learning tasks. Its primary use case involves simplifying configuration management through the `@gin.configurable` decorator, enabling default parameter values to be set via configuration files, thereby enhancing flexibility without requiring extensive boilerplate code. Notable features include support for nested parameters, integration with TensorFlow and PyTorch, and comprehensive handling of variable bindings through a clear syntax.

The Ghidra Headless Scripts repository provides Python 2 scripts designed to automate the analysis of binaries using Ghidra's Headless Analyzer, specifically focusing on decompilation and disassembly tasks. Notable features include the `decompile_simple.py` script for generating simplified pseudo C output, the full `decompiler.py` for detailed decompilation, and the `disassembler.py` for producing assembly code, all operable via command line with user-defined project parameters and output specifications.

Gel is a graph-relational database that integrates the strengths of relational and graph databases, allowing for a more intuitive schema defined by object types and properties. Its primary use case is to facilitate modern application development by providing a robust strict type system, advanced query capabilities through EdgeQL, and features such as computed properties and schema mixins. Notable features include deep object queries that eliminate the need for traditional JOINs, composable queries, and comprehensive JSON support, making it a versatile choice for developers.

GCP Scanner is a tool designed for assessing the access levels associated with various GCP resources, enabling security engineers to evaluate the implications of compromised credentials such as VM/container access or OAuth2 token leaks. It supports an extensive list of GCP resources and offers multiple credential extraction methods, including VM instance metadata and service account keys, without relying on third-party tools like the GCP SDK. Notably, it can run as a standalone application on Linux and includes advanced options for credential handling and project scanning.

Gazpacho is a modern web scraping library designed for simplicity and speed, requiring no external dependencies. Its primary use case lies in extracting and parsing HTML content through easy-to-use functions such as `get` for fetching HTML and `Soup` for parsing and navigating the document structure. Notable features include the ability to perform flexible attribute matching, customizable return modes, and an intuitive interface for extracting data from HTML elements.

Project planning from the terminal

Fridump is an open-source memory dumping tool designed for penetration testers and developers, leveraging the Frida framework to extract memory from applications across multiple platforms, including iOS, Android, and Windows. Notable features include support for USB-connected devices, options for verbose output, and the ability to perform string analysis on dumped data, making it versatile for in-depth memory inspection and analysis. The tool can be executed from Windows, Linux, or Mac OS X systems, facilitating cross-platform memory analysis tasks.

Frappe Framework is a low-code, full-stack web application framework built with Python and MariaDB, primarily designed for developing complex applications like ERPNext. It features an integrated client-side library, a customizable admin interface, role-based permissions, an automatically generated REST API, and a powerful report builder, making it suitable for developers looking to create robust applications efficiently.

The Flipper Zero gate brute force tool is designed to exploit vulnerabilities in remote gate systems using protocols like SMC5326, UNILARM, and PT2260. It generates .sub files containing all possible combinations of DIP switch settings to systematically attempt to unlock gates, allowing for efficient narrowing down of successful combinations. The tool also provides detailed examples and instructions for configuring and executing brute force attempts on compatible gate remotes.

Flipperzero-bruteforce is a Python tool designed for brute-forcing fixed code sub-GHz protocols using the Flipper Zero device. It generates structured `.sub` files for various protocols, allowing users to conduct systematic attacks by narrowing down key searches through organized file hierarchies. Notable features include the ability to specify custom protocols, a structured output for easy management, and support for multiple protocols and frequencies, enhancing the tool's versatility for hardware security testing.

Flipper-Zero-music-converter is a tool designed to convert MIDI files into FMF format for use with Flipper Zero devices. It primarily functions through a simple drag-and-drop interface or command line input, requiring Python 3.9 for execution. Notable features include support for multiple MIDI files and compatibility across Windows and Linux systems.

Flask-Shell2HTTP is a minimalist Flask extension that provides a RESTful API wrapper for executing shell commands asynchronously through HTTP endpoints. Its primary use case involves converting command-line tools into REST services, allowing for file uploads, dynamic arguments, and callback function integration. Notable features include support for executing long-running commands, processing multiple uploaded files, and utilizing view decorators for enhanced endpoint management, making it ideal for micro-container communications and remote command execution.

FireProx is a tool that creates pass-through proxies leveraging the AWS API Gateway, enabling users to mask or rotate their source IP address with each web request. Its primary use case is to facilitate web scraping and testing while avoiding detection, featuring capabilities such as configuration for separate regions, support for all HTTP methods, and the ability to spoof the X-Forwarded-For header. Notable features include dynamic proxy management (create, delete, list, or update) and seamless parameter forwarding, making it a robust solution for privacy-focused web interactions.

FastAPI is a high-performance web framework for building APIs with Python, utilizing standard type hints for enhanced developer efficiency. Its primary use case is rapid API development with features like automatic interactive documentation, robust editor support, and significant reductions in code complexity and errors. Notable features include compatibility with OpenAPI and JSON Schema standards, as well as performance comparable to NodeJS and Go.

Fabric is a high-level Python library designed for executing shell commands remotely over SSH, facilitating operations that yield useful Python objects. It extends the functionality of Invoke and Paramiko, offering a robust API for seamless command execution and SSH protocol handling. Notable features include its compatibility with Python versions 2.7 and 3.4+, and a clear integration for managing remote servers through simple command structures.

EyeWitness is a web screenshot tool that captures website screenshots, retrieves server header information, and detects default credentials using a Chromium-based engine for enhanced reliability. Its primary use case is for security assessments and reconnaissance, leveraging features such as cross-platform support, adaptive resource management, configuration file usage, and improved error handling through a Python virtual environment to prevent system conflicts.