~/hackyfeed $

ExtAnalysis is a comprehensive tool for downloading, analyzing, and scanning browser extensions from sources like the Chrome Web Store and Firefox Addons. Notable features include a manifest viewer, in-depth permission analysis, integration with VirusTotal for malware scanning, and various reconnaissance tools for extracted URLs. Additionally, it supports the editing of common web file types and enhances user experience with a dark mode and a chiptune player.

`enumerate-iam.py` is a tool designed for automating the enumeration of AWS IAM permissions associated with a given set of AWS credentials. It performs non-destructive API calls to identify permissions by leveraging a brute-force approach on all API actions defined in IAM policies, offering output in a programmatically accessible format. Notable features include improved speed compared to existing tools, detailed logging, and the ability to be easily integrated into other applications.

email2phonenumber is an OSINT tool designed to extract a target's phone number using just their email address, leveraging weaknesses in password reset functionalities across various websites. It offers three key capabilities: scraping for phone number digits, generating valid phone numbers based on known formats, and brute-forcing password resets to associate phone numbers with an email. This tool serves as a proof-of-concept for new OSINT methodologies but requires caution due to ethical considerations and evolving website protections.

dtrx is a versatile archive extraction tool that supports a wide range of formats, including tar, zip, rar, and more. Its primary use case is to provide a unified interface for extracting multiple archive types while ensuring that files are organized into dedicated directories named after the original archives. Notable features include support for recursive extraction, non-interactive mode, and customizable options for handling single-file archives or existing directories.

drozer is an open-source security testing framework designed for Android applications, facilitating the identification of security vulnerabilities by acting as an app that interacts with the Android Runtime and other apps' IPC endpoints. It supports the use and dissemination of public Android exploits and provides a Docker container for seamless deployment across various systems. Key features include its compatibility with Python 3 and the ability to install an agent on Android devices for streamlined testing sessions.

DroidBot is a lightweight input generation tool for Android applications that enables automated testing by sending random or scripted input events, thus enhancing test coverage. It uniquely supports UI-driven event modeling without the need for system modifications or app instrumentation, producing a UI transition graph for detailed analysis. Notable features include programmability for custom inputs, compatibility with multiple devices, and support for generating human-like interactions through integration with Humanoid.

Dooit is a customizable todo manager designed for terminal usage, offering an interactive user interface and extensive personalization options through a Python configuration file. It supports topic-wise separation of todo lists, Vim-like keybindings, and a variety of themes for enhanced user experience. The tool's extensibility and visual appeal make it a compelling option for users seeking a visually organized task management solution within a terminal environment.

Django REST Hooks is a library that enhances the functionality of webhooks by providing a framework for managing RESTful subscriptions in Django applications. Its primary use case is to enable real-time notifications for various events, such as model creations, updates, and deletions, through an easily extensible system that leverages Django's signals framework. Notable features include support for custom actions and payloads, built-in zero-config handling for basic CRUD operations, and the ability to define an arbitrary number of hooks tied to different events.

Deepminer is a deep web datamining and search tool designed for continuous crawling of Onion sites to identify key terms and domain names. It features automated operations that store results—such as site names, directories, and HTML—in a SQLite database, allowing users to perform meaningful searches through its built-in support for full text and regex queries via SQLite FTS5 Extension. The tool is implemented in Python 3 and offers compatibility with external graphical interfaces like SQLite DB Browser for result analysis.

The Data Donation Module (DDM) is a Django application designed to facilitate researchers in establishing data donation projects and collecting data contributions for academic research purposes. It is part of an initiative from the University of Zurich, emphasizing the promotion and exchange of data donation practices. Notably, DDM offers comprehensive documentation and integration capabilities within the Django framework, making it a valuable tool for researchers in the digital society domain.

Datasploit is an open-source OSINT (Open Source Intelligence) tool designed to gather and consolidate information on targets such as domains, emails, usernames, and phone numbers from various sources. It features automated enumeration of credentials, API keys, subdomains, and more, while providing options to generate structured reports in HTML, JSON, and text formats, making it a valuable resource for security professionals and researchers.

Dataplicity Lomond is a Python WebSocket client that transforms a WebSocket connection into a structured stream of events without requiring threads or callbacks. Its primary use case is to simplify WebSocket communication while providing features such as TLS certificate verification, detailed tracing for connection diagnostics, and resilience with retry mechanisms for failed connections. Notable features include support for both binary and text message handling, compatibility with multiple Python versions, and the capability to run comprehensive tests using local socket fixtures.

DALL-E 2 - Pytorch is an implementation of OpenAI's advanced text-to-image synthesis model, DALL-E 2, built using the PyTorch framework. Its primary use case is generating images from natural language descriptions using a diffusion prior network, enhancing the variety and quality of generated images by adding an autoregressive component. Notable features include support for unconditional image generation, verified decoder functionality, and collaborative community contributions to enable scaling and optimization.

The Dahua-Firmware-Mod-Kit is a toolset designed to extract and repackage firmware upgrade images for Dahua IP cameras, allowing users to modify firmware prior to installation. Key features include scripts for extracting firmware files into a modifiable directory structure and rebuilding the firmware while ensuring compliance with the camera's partition size to prevent bricking. Additionally, the toolkit offers a language file comparison utility to facilitate the creation of custom language translations within the firmware.

csvkit is a command-line suite designed for converting and manipulating CSV files, catering to users needing effective tools for working with tabular data. It enables users to perform functions such as cutting, filtering, and analyzing CSV data efficiently. The tool draws inspiration from established utilities like pdftk and GDAL, enhancing its capabilities for data handling.

Cookiegrabber is a Python3 command-line tool designed to extract and dump cookies from all installed web browsers, focusing on legal and ethical penetration testing and security auditing. It features capabilities to present the cookies in a structured JSON format and leverages libraries like BeautifulSoup and Rich for enhanced output readability and user experience. Future enhancements aim to expand functionalities, including browser and domain specification, screenshot capturing, and modular usage.

ClusterFuzz is a scalable fuzzing infrastructure designed to identify security and stability vulnerabilities in software, utilized extensively by Google and integrated with OSS-Fuzz. Notable features include high scalability across clusters, automated bug reporting and triage, support for multiple fuzzing engines, and advanced capabilities like test case minimization and regression finding. Its user-friendly web interface facilitates management and analysis of crashes, making it a comprehensive tool for continuous software testing and improvement.

The Cloud Forensics Utils repository provides tools for forensic teams to collect evidence from cloud platforms, specifically supporting Google Cloud Platform, Microsoft Azure, and Amazon Web Services. It features the `libcloudforensics` module, which includes functions essential for incident response in cloud environments, along with a command-line interface (CLI) for enhanced usability.

HTTPie is a command-line HTTP client designed to facilitate human-friendly interaction with web services and APIs. Its primary use case is testing and debugging HTTP requests, featuring an intuitive syntax that allows users to craft complex requests easily, while providing formatted and colorized output for better readability. Notable features include built-in JSON support, persistent sessions, and capabilities for handling various authentication methods and file uploads.

`clean-text` is a Python package designed to preprocess and normalize user-generated content from web and social media sources, transforming corrupted input into clean text representations. It incorporates libraries like `ftfy` and `unidecode`, along with custom RegEx rules, allowing for extensive options such as fixing Unicode errors, transliterating to ASCII, and filtering out various elements like URLs and emails. The tool offers customizable parameters, making it adaptable for diverse textual cleaning tasks.

The OWASP Cheat Sheet Series is a comprehensive collection of security best practices aimed at developers and organizations to enhance application security. Primary use cases include providing guidelines for secure coding practices and mitigating common security vulnerabilities. Notable features include a user-friendly website for accessing cheat sheets, community collaboration for content improvement, and support for local builds using various development tools and containers.

cheat.sh is a versatile tool that provides unified access to community-driven cheat sheets across programming languages and UNIX/Linux commands. Its primary use case is to facilitate quick, easy, and stealthy retrieval of concise and comprehensive information without disrupting the user's workflow, featuring a fast response time and support for direct integration with various code editors. Notable features include a command line client (`cht.sh`), offline capabilities, and a stealth mode that allows usage without keypresses or audible feedback.

The ChatGPT Retrieval Plugin enables semantic search and retrieval of personal or organizational documents via natural language queries, designed to enhance the functionality of ChatGPT custom GPTs. Notable features include a standalone backend that supports various vector database providers, granular control over document chunking and embedding models, and an array of utilities for document processing and metadata extraction. This plugin is particularly suited for developers seeking to integrate personalized document retrieval capabilities into AI-driven applications.

Callisto is an intelligent automated binary vulnerability analysis tool that leverages Ghidra's headless decompiler to extract and analyze pseudo code from binaries for potential security vulnerabilities. It utilizes Semgrep for initial analysis and validates findings with GPT-3.5-Turbo, enhancing accuracy and depth in vulnerability detection. The tool facilitates binary analysis and zero-day vulnerability discovery while providing a straightforward decompilation output for further manual review or integration with existing SAST tools.

Calcure is a modern terminal-based user interface (TUI) calendar and task manager that allows users to manage events, tasks, and birthdays with a customizable interface. Notable features include support for cloud calendar syncing, task lists with subtasks and deadlines, a plain text database for easy cloud synchronization, and extensive customization options with user-defined key bindings and settings. The tool is designed for efficiency, utilizing Vim keybindings to minimize key presses while providing features like current weather updates and Persian calendar support.