~/hackyfeed $

MCP Connect is an HTTP gateway that allows users to interact with local MCP servers via both a Streamable HTTP interface and a classic request/response bridge. This tool features session management for maintaining conversational continuity, provides security through bearer token authentication with a CORS allowlist, and includes a built-in Ngrok tunnel for public endpoint exposure. It is designed for cloud deployment with quick-launch scripts that facilitate integration in an E2B sandbox environment.

OWASP Maryam is a modular open-source framework designed for open-source intelligence (OSINT) and data gathering, enabling users to efficiently harvest data from various online sources and search engines. Key features include support for multi-threading, a wide array of search modules (like DNS search, YouTube, and Google), and customizable options for timeout and proxy settings. This framework allows for extensibility, facilitating the addition of new search engines and modules by developers.

LiteLLM is an open-source AI Gateway designed to provide a unified interface for interacting with over 100 LLM providers, including OpenAI and Anthropic, using the OpenAI format. It can be utilized as a Python SDK for direct integration or deployed as a centralized proxy server for organizational use, streamlining the management of LLM calls by standardizing API interactions across diverse service providers. Notable features include a simplified API, support for multiple deployment options, and enterprise readiness.

KENZER is an automated tool for web assets enumeration and scanning, designed to enhance bug bounty activities through a comprehensive suite of features. Its primary use case includes subdomain enumeration, port scanning, web vulnerability assessments, and repository enumeration, while allowing task distribution across multiple machines and execution through a single HTTP/SOCKS proxy. Key features consist of integration with various enumeration and scanning utilities, such as Subfinder, Amass, and Nuclei, as well as customizable task management via a chatbot interface on the Zulip platform.

The Industrial Security Exploitation Framework (ISF) is an exploitation toolkit written in Python, derived from the NSA Equation Group's Fuzzbunch framework. It primarily facilitates research into industrial control systems by providing modules for controlling various PLCs, performing Modbus injections, and scanning for vulnerabilities. Notable features include support for multiple PLC brands, recovery of Telnet passwords, and a variety of loaded plugins to enhance its functionality.

IoT-SecurityChecker is a cybersecurity tool designed to automate the detection and exploitation of vulnerabilities in IoT devices within a network. Its primary use case involves service discovery, brute-force attacks across various protocols, and the execution of known exploits targeting IoT vulnerabilities. Notable features include the use of masscan for rapid port scanning, a modular framework for adding new exploits, and the ability to conduct dictionary attacks on multiple services such as SSH, FTP, and HTTP.

HTTP Prompt is an interactive command-line HTTP client that enhances user experience with features such as autocomplete and syntax highlighting, built on top of HTTPie and prompt_toolkit. Its primary use case is to facilitate HTTP communication through a user-friendly interface, making it easier for developers to construct and test HTTP requests efficiently. Notable features include real-time feedback and an intuitive command-line environment that improves productivity in API interactions.

HelloGitHub is a platform that curates and shares interesting, beginner-friendly open-source projects from GitHub, updated monthly. Its primary use case is to help users discover and engage with open-source software through highlights of projects, open-source books, and practical applications. Notable features include a diverse collection of project recommendations and a community-driven approach for project contributions.

HawkScan is a Python-based security tool designed for reconnaissance and information gathering on websites. Its primary use case includes gathering header information, DNS data, CMS detection, and identifying potential vulnerabilities during both pre-scan and scan phases. Notable features include capabilities for multi-site scanning, WAF detection, S3 bucket identification, and various output formats, along with support for proxies and automatic resuming of interrupted scans.

FwHunt Scan is a tool designed for analyzing UEFI firmware and checking UEFI modules against predefined FwHunt rules. It supports functionalities for analyzing specific modules or scanning entire firmware images, either through a Python interface or via Docker for dependency management. Notable features include the ability to customize scanning with user-defined rules, automated workflows for module analysis, and support for multiple output formats, enhancing its versatility in firmware security assessments.

Fridump is an open-source memory dumping tool designed for penetration testers and developers, leveraging the Frida framework to extract accessible memory from various applications across multiple platforms, including iOS, Android, and Windows. Key features include support for memory dumping via USB and network connections, customizable output directories, and options for running string analysis on dump files. The tool facilitates memory analysis with robust support for different connection methods and process injection.

The "free-programming-books" repository provides a curated list of free programming learning resources across various languages, enabling users to easily access a wide range of educational materials. Its primary use case is to serve as a comprehensive guide for learners seeking programming books and tutorials, enhancing community collaboration through contributions. Notable features include dynamic and static search capabilities via a dedicated website, as well as ongoing updates and maintenance facilitated by community involvement.

FestIn is a comprehensive tool designed for discovering open S3 buckets associated with specified domains by utilizing multiple techniques, including DNS analysis, web crawling, and S3 response evaluation. Its notable features include proxy support, compatibility with any S3-compatible provider, the ability to save discovered domains for further analysis, and an integrated HTTP crawler that recursively searches based on results from previous queries. Additionally, FestIn operates without requiring AWS credentials and supports real-time monitoring for new domains.

DeepSeek-V3 is a Mixture-of-Experts (MoE) language model boasting 671 billion parameters, designed for efficient inference and cost-effective training through advanced architectures like Multi-head Latent Attention (MLA). Its unique features include an auxiliary-loss-free load balancing strategy and a multi-token prediction training objective, enabling superior performance compared to both open-source and leading closed-source models, while maintaining stability and requiring minimal GPU hours for training.

CloudFrunt is a security tool designed to identify misconfigured Amazon CloudFront domains that may be susceptible to domain hijacking. Its primary use case involves scanning specified domains to detect whether they are properly listed in the "Alternate Domain Names (CNAMEs)" field of their associated CloudFront distributions. Notable features include DNS enumeration capabilities, results saving functionality, and the ability to add vulnerable domains to new distributions, providing an automated approach to mitigate potential security risks.

certmitm is a tool designed for testing TLS connection certificate validation vulnerabilities by intercepting and analyzing the traffic of client devices and applications. It facilitates the automatic exploitation of these vulnerabilities, allowing security professionals to assess the robustness of certificate validation in real-world scenarios. Key features include the ability to run as a network router for traffic interception, detailed logging of connection attempts, and compatibility with Linux systems via Python 3.10 and above.

CentralizedFirewall is an API-based firewall management tool designed for efficient control and monitoring of network security across multiple nodes. It facilitates the installation of a firewall agent on client servers, offers configuration options through environment variables, and supports integration with Security Information and Event Management (SIEM) systems for real-time log processing. Notable features include Docker Compose setup for easy deployment, API key authentication, and a user-friendly Swagger documentation for API interaction.

BurpSuite-Asset_Discover is a Burp Suite extension designed for passive HTTP response scanning to identify various types of assets, such as domains, subdomains, IPs, and S3 buckets. Notable features include the ability to automatically parse responses from URLs in scope and report assets as informational issues, facilitating comprehensive attack surface management. The extension can be easily installed from the BApp store, requiring Jython setup for optimal functionality.

Bucket Stream is a tool designed to discover exposed Amazon S3 buckets by monitoring certificate transparency logs for corresponding domain name permutations. Its primary use case is to highlight the security risks associated with public S3 buckets, employing a unique approach that diverges from traditional dictionary-based attacks. Notable features include support for authenticated access to identify bucket owners, configurable threading for enhanced performance, and logging capabilities for tracking discovered buckets.

Binary Ninja MCP is a plugin that facilitates the integration of Binary Ninja with various MCP clients, enhancing reverse engineering workflows through AI assistance. Its notable features include real-time interoperability between Binary Ninja and MCP clients, automatic target switching for multiple binaries, and broad client compatibility. This tool is ideal for users seeking to streamline their reverse engineering tasks while leveraging the capabilities of large language models.

The BeeAI Framework is designed for developing production-ready multi-agent systems using either Python or TypeScript. It offers features such as the integration of various protocols, a backend module for streamlined AI service interactions, and experimental agents to enhance system capabilities. This framework facilitates the creation of sophisticated workflows and promotes collaboration within the AI development community.

awspx is a graph-based tool designed for visualizing effective access and resource relationships within AWS environments by analyzing policy information to reveal possible attack paths. Its notable features include an ingestor that collects AWS account data and a web interface for interactive exploration of this data, enabling security analysts to better understand access controls and potential vulnerabilities within their cloud infrastructure. Unlike similar tools, awspx operates with the necessary permissions, making it essential for environments where such access is available.

awsEnum is a Python script designed to enumerate AWS services using specified credentials, focusing on minimizing "noise" during the enumeration process. It supports AWS services such as EC2, IAM, and S3, allowing users to configure request limits and output results in JSON format. The tool emphasizes streamlined operation by leveraging AWS CLI profiles for credential management, making it suitable for penetration testing, bug hunting, and security auditing in cloud environments.

AWSBucketDump is a Python-based tool designed for the enumeration of Amazon S3 buckets, aimed at discovering and downloading potentially valuable files. It features options for multithreading, specifying maximum file sizes for downloads, and using custom wordlists to filter interesting file types. This tool is particularly useful in security assessments and penetration testing related to cloud storage vulnerabilities.

The `awesome-game-security` repository serves as a comprehensive resource for game security research, offering tools and skills for AI agents focused on various aspects of game protection, such as anti-cheat measures and threat modeling. Notable features include the integration of the NeverC compiler and NeverD decompilation engine for AI-friendly code analysis, and a myriad of specialized skills related to game hacking, mobile security, and reverse engineering. Users can install these skills to enhance their capabilities in game security and obtain structured knowledge on contemporary threats.