Try to guess what it does.

Here's what I carry most days, a flipper Zero running RogueMaster with a wifi board, Chameleon Ultra Pro, Cardputer running Launcher so i can swap firmware on the go, and on the left are 2 esp32's (one with a micro screen) running custom firmware turning it into a beacon spammer. What am I missing? What could I add? I'm eyeing up a meshtastic device, but I'm open to any and all suggestions.

Runs on an alpine emulator available in the app store called iSH Shell, reworked a few existing tools to be compatible and added s few of my own. It may not be the most practical thing but I’ve never seen anything like it before and i love how comical the idea is of “hacking from an iPhone” 🤣

Extra strength. Does it look cool at least? It’s my first one.

This was the real deal back then! Countless friends I scared opening and closing their cd tray ahahahaha!

GitHub: https://github.com/saatvik333/what-you-reveal

Website: https://what-you-reveal.vercel.app

I had a curiosity that when I click on a website; how much of my data can they get without me giving any permissions so I created this tool (initially it was just a test of what Jules [a tool by google] can do).

I tried to get things correct, but since I'm no expert in cyber security and hacking I can't fully verify the data being displayed on the website.

I'd be grateful if knowledgeable people can critique on the website and lmk what can be fixed and improved.

Thanks :)

Tools from left to right and up to down: WiFi Pineapple Pager, Rubber ducky plus different cases, power supply unit, power bank, flipper Zero, flipper zero module for WiFi, Proxmark, Pwnagotchi, power cables, hardware keylogger, Different RFID magic cards

I wanted a disassembler that's a single executable, loads instantly, runs everywhere. So I wrote one from scratch.

It's called Hyperion it's made in C++, No runtime dependencies. No installer.

What it actually does: It has a real decompiler, It produces readable pseudo-C for x86/x64 and ARM64.

Formats & architectures:

Scripting:

Embedded Lua 5.4. Drop .lua plugins in a folder. Full API, rename, comment, patch bytes, create functions, navigate, query xrefs. Register custom menu items and hotkeys from scripts.

The numbers:

Platforms: Windows, Linux, macOS (Intel + Apple Silicon).

This will stay open source and free. MIT licensed.

Repo: https://github.com/Sidenai/hyperion-disassembler

I'm frankly baffled that there are not publicly available tools to get around this. One would think given that it is both from Google and affects everyone it would be.

I mean I see a lot of tools that promise to do it, for a price. But I very much doubt that they are not either malware or just a scam.

PacketSnitch is a comprehensive network analysis platform that transforms packet captures into searchable, protocol-aware intelligence, helping security professionals, developers, and researchers rapidly uncover hosts, credentials, files, locations, protocols, anomalies, threat intel, and other actionable insights.

It's fully Open Source, and can be found on GitHub.

It supports many ways of visualizing and manipulating packet data, it can calculate subnets, carve files, cross reference found objects against it's threat intel databases (IPSum, VirusTotal, Tor, Shodan, etc), it has many full featured protocol decoders for everything from many application layer protocols in use today, to things like ARP, BGP, IGMP packets, and even some more obscure protocol suties such as SIGTRAN. It supports both user Themes and Plugins. There some more cool features, like the GeoLocation interface (it zooms in on a map!), and Large Language model summarization support that tracks user actions and builds a report based on what the researcher encounters. Also included is a powerful backend query syntax, and the right click Context Menu.

A full feature list can be found at https://packetsnitch.com/features/ !

This is a new open source OSINT tool with many advanced features! Best alternative of old holehe.

Useful for security reasearch and checking whether your email is being used somewhere.

Check out the GitHub for installation guide, How to use it powerfully https://github.com/kaifcodec/user-scanner.git

Any tools or techniques that you would recommend?

I’m the author of Super Trouper, a single-binary MCP server that exposes Frida to coding agents for authorized app reverse engineering. It lets an agent connect to a device, inspect apps and processes, manage sessions, and run instrumentation scripts without a Python-based Frida setup.

We released v0.4.0 a few days ago; it updates the bundled Frida Core DevKit to v17.19.0 and adds four MCP tools: memory_read and memory_write for working with memory in an attached process, plus module_list and thread_list for inspecting loaded modules and threads. app_list and others now have several query scopes, and we renamed the MCP tools into clearer namespaces. If you already have workflows built around the old tool names, check them when updating.

Quick catch-up on the two previous releases: v0.3.0 added npm installation, Frida CodeShare snippet search/use, and general cleanup. v0.2.0 moved the project to the MIT license, added first-party Frida language bridges for ObjC, Java, and Swift, and enabled TypeScript in scripts and evaluations.

I’d appreciate feedback from people using Frida in iOS research: are these tool boundaries and the new app-list scopes useful in practice? What’s missing or awkward in your workflow, and which features would you like to see next? Let me know what you think.