~/hackyfeed $

logitech-ipc-protocol is a tool that provides reverse-engineered documentation and programmatic control of Logitech multi-host devices through the Logi Options+ agent IPC protocol, addressing limitations in macOS regarding raw HID access. This tool enables seamless device switching and input monitoring on both macOS and Windows platforms, featuring scripts for automated switching, hotkey configurations, and enhanced integration for multi-device setups. Notably, it includes a monitor-follow daemon that automatically switches monitor inputs based on keyboard activity, thereby enhancing user experience in multi-host environments.

Ghidra Switch Loader is a Ghidra extension designed to support various Nintendo Switch file formats, enhancing reverse engineering capabilities for these files. Its primary use case involves facilitating the analysis and debugging of Nintendo Switch games and applications within the Ghidra development environment. Notable features include compatibility with multiple file formats and straightforward installation via Ghidra's extension management system.

ESP_RTK_ROVER is a DIY GNSS rover that repurposes a ComNav K803 Lite board with a Seeed Studio XIAO ESP32C6 to provide centimetre-accurate positioning via Bluetooth for mobile GIS applications. Noteworthy features include automatic configuration as a rover at boot, bi-directional data transmission, Bluetooth Low Energy communication compatibility, and a web-based dashboard for real-time diagnostics. It serves hobbyist applications such as autonomous robotics, DIY auto-steering, and educational purposes in GNSS and RTK technologies, although it is not designed for professional surveying or critical applications.

Android Reverse is a comprehensive reverse engineering toolkit designed to operate entirely on Android devices, eliminating the need for PC-based tools or ADB. Key features include multi-engine Java decompilation, native binary analysis facilitated by an embedded Radare2 engine, and advanced APK manipulation abilities such as resource editing, AXML editing, and APK rebuilding. The tool also supports a Model Context Protocol server for AI-assisted editing, making it suitable for both manual and automated reverse engineering tasks.

vo_patch is a tool designed to optimize and facilitate the installation of *Cyber Troopers Virtual-On* on modern systems, primarily by addressing compatibility issues such as crashes and frame rate problems. Notable features include XInput gamepad support for two players, internet play functionality without the need for port forwarding, and the ability to run the soundtrack from files instead of the disc, thereby enhancing the overall gaming experience.

Mafia Toolkit is a Windows modding toolkit designed for the Mafia series, featuring comprehensive file format parsers, editors, and a 3D map editor to facilitate game modification. It supports several games including Mafia II and Mafia III, providing tools for editing materials, managing SDS archives, and configuring AI integration via the Model Context Protocol server. Notable features include a robust map editor with DirectX 11 rendering capabilities, extensive data editing options for game files and tables, and support for FBX model import/export.

Flux is a compiled, statically typed systems programming language designed to optimize performance while providing an advanced type system that exceeds C's capabilities. Its primary use case is in systems programming where high efficiency and fine-grained control over data types and memory layout are essential, featuring notable attributes such as arbitrary-width integers, compile-time code generation, and a unique approach to zero-copy packet parsing. The language aims to empower developers with powerful tools and flexibility, expecting them to manage complexity effectively.

The "web3-bug-bounty-hunting-ai-skills" repository provides a structured knowledge base for enhancing smart contract security assessments using AI tools like Claude Code. It compiles extensive information from Immunefi reports and DeFiHack reproductions, offering detailed methodologies, bug classifications, grep patterns, and practical case studies to streamline the bug bounty hunting process. Notable features include targeted scoring systems, a comprehensive grep arsenal, and templates for proof of concept and reporting, which facilitate efficient and informed security auditing.

Public Skills Builder is a tool designed to generate Claude Code bug bounty skills from publicly available HackerOne reports and GitHub writeups, specifically without requiring access to private reports. It processes over 500 disclosed reports to create 18 structured skill files for various vulnerability classes, each containing real-world techniques, payloads, and bypass patterns, thereby providing users with resourceful training data for vulnerability hunting. Notable features include support for multiple sources, including public feeds, and the ability to customize output based on specified vulnerability types.

Bex Security is an open-source tool designed to facilitate security workflows for coding agents and models, maintaining compatibility with OpenAI's Codex Security. This tool enables users to run consistent, evidence-driven security scans while supporting multiple coding agents through the Agent Client Protocol (ACP). Notable features include a CLI that integrates with various inference providers, a repeatable upstream merge workflow, and an emphasis on security outcomes from discovery to remediation.

CyberLeaks is an OSINT tool designed to assess email compromise through data breaches by utilizing dual API engines from Apify and RapidAPI. It features an interactive command-line interface for user-friendly operations, integrates risk scoring and detailed breach reporting, and supports batch processing of multiple emails. Additional capabilities include secure API key management, password leak lookups, and report generation in various formats.

Awesome OSINT Repositories is a comprehensive catalogue of open-source tools for Open Source Intelligence (OSINT) investigations, organized into 12 distinct categories based on concrete input types such as usernames, domains, and IP addresses. The repository features a total of 447 projects, including views for emerging tools and AI-based integrations, and excludes closed-source or incomplete resources. It provides easy navigation and documentation to facilitate the discovery and utilization of investigative software in various OSINT applications.

Web Security Analyzer Pro is an advanced web security analysis tool designed for system administrators, developers, and security professionals to audit their websites efficiently. It conducts comprehensive assessments of HTTP headers, cookies, and SSL/TLS configurations, as well as identifying common vulnerabilities and generating a security score with remediation recommendations. Notable features include offline CVE searches using the FKIE-CAD database, interactive visual reporting, and detailed cookie analysis for security flags.

The CVE-2026-18963-Exploit tool allows users to test for a critical security vulnerability in Keycloak versions 26.0.0 to 26.7.1, which enables unauthenticated attackers to reset passwords without victim interaction. It features a safe detection mode that requires only the base URL and realm settings, avoiding any impact on the target system. Additionally, it includes a lab environment for practical demonstration of the exploit and its remediation.

The Phishlet Generator is an automated tool designed to streamline the creation of `.yaml` phishlet files for Evilginx3 by leveraging real browser automation with Playwright. Its primary use case is to eliminate the manual reverse-engineering of website login flows by capturing live network traffic during a simulated login process, which includes handling complex scenarios like CAPTCHA and 2FA challenges. Notable features include smart classification of fields and tokens, integration of anti-detection scripts, and the capability to generate production-ready configurations compatible with Evilginx3.

Ruoyi-Scan is a specialized vulnerability scanning tool designed for RuoYi applications, featuring a plugin-based architecture and three-state assessment (CONFIRMED / SAFE / UNKNOWN) for vulnerability status. It supports bulk scanning, multiple report formats, WAF bypass techniques, and offers enterprise-level functionalities such as API integration and a robust plugin ecosystem for various common vulnerabilities. Noteworthy capabilities include automated AI-based POC generation, extensive reporting options, and compatibility with various operating environments.

Claude-AD is a plugin for Claude Code that streamlines the methodology for conducting Active Directory (AD) penetration tests. It organizes engagement phases such as setup, data collection, exploitation, and post-exploitation, while addressing environment-specific constraints and providing telemetry insights to enhance operational security. The tool integrates standard AD assessment techniques, orchestrating third-party tools like BloodHound CE and Impacket, ensuring effective execution of assessments aligned with compliance controls.

Blitzping is a high-speed, configurable packet-crafting utility designed for embedded devices, enabling the rapid generation of minimal TCP packets with optimized performance compared to existing tools like hping3 and nping. Its notable features include support for CIDR notations for source IPs, asynchronous raw socket configuration, multithreading, and efficient queuing to minimize system calls, making it particularly suitable for scenarios requiring high packet generation rates. Users can easily specify the number of threads and target IP/port combinations for efficient network testing and analysis.

CrystalPotato is a privilege escalation tool designed for Windows, enabling users with `SeImpersonatePrivilege` to elevate their permissions to SYSTEM level. It leverages DCOM OXID Resolver and named pipe impersonation techniques, dynamically resolving Windows APIs and allowing for the execution of commands, reverse shells, or local admin user creation. Notable features include XOR-obfuscated strings, command output by default, and a compiled single-file executable with no dependencies.

The VanMoof BMS Toolkit is a diagnostic and control utility designed for managing VanMoof DynaPack BMS batteries across various bike models. It enables users to interact with the battery management system via Modbus/UART or CAN interfaces, offering functionalities such as real-time data display, calibration, and log management. Notable features include support for multiple hardware configurations, a range of commands for battery operations, and the ability to export logs for analysis.

libd2 is a clean-room reimplementation of the Diablo II 1.14d engine core, written in Zig, designed primarily for game development and reverse engineering. It features a seed-driven map generator that replicates the game's world, along with comprehensive systems for item generation, network protocols, and world routing, all accessible across multiple programming languages and platforms, including WASM support. The library allows for on-the-fly act generation and provides rich functionalities through various APIs, ensuring seamless integration for developers.

BTG Packer is a Rust-based research framework for the analysis, transformation, and virtualization of Windows x86-64 PE32+ executables. It features comprehensive functionality including PE reconstruction, control-flow transformation, RISC lifting, and runtime protection, making it suitable for security research and code modification tasks. Notable capabilities include its ability to generate polymorphic virtual machines, conduct advanced code analysis, and ensure build determinism and structural validation.

rilua is a Rust-based implementation of Lua 5.1.1 designed primarily for the World of Warcraft emulation ecosystem, enabling addon development, server-side scripting, and client Lua environment emulation without external dependencies. Notable features include a safe memory model with no unsafe blocks, structured error handling that preserves the call stack, and native WASM support, making it suitable for embedding in Rust applications while facilitating accurate behavioral equivalence with the reference Lua interpreter.

Ghidrust is a Rust-based reverse-engineering toolkit designed for analyzing PE and ELF binaries, offering multi-architecture support through Capstone-class listings and pseudo-C decompilation. Its key features include a headless CLI, a GUI interface, an experimental GPU decompilation capability for enhanced performance, and integrated network analysis via Ghidnet for process attribution and IDS records. Ghidrust aims to improve upon Ghidra's analysis speed and output quality while maintaining a small, auditable core.

CTFBridge is a unified Python interface designed for seamless interaction with multiple Capture The Flag (CTF) platforms. Its notable features include auto-detection of platform types from URLs, a clean authentication flow, challenge enrichment capabilities, persistent session management, and an async-first architecture for efficient scripting and automation. The tool simplifies accessing and managing CTF challenges, submissions, and leaderboards across various platforms.