Links
AddOSINT recon through the Wayback Machine.
OSINT tool for researchers and professionals. Reveal what a domain has exposed over time (emails, subdomains, tech, leaks) from the Wayback Machine archive.
SELF — the Structured Executable & Linkable Format: a program that is a SQLite database instead of an ELF file, and the machinery to actually run it on Linux/NixOS.
Related contents:
rootless container sandbox that starts in 3.5 ms.
A fast, rootless sandbox and virtual resource runtime for any workload, including untrusted and AI-generated code. One 1.52 MB static binary, no daemon, 0 RAM at rest.
One binary that manages resources, of which isolation is the first. That is why there is no single row for kern in a comparison table: it is a container runtime, a sandbox, a resource slicer and a stack runner at once, in 1.52 MB with no daemon.
Durable streams on Amazon S3.
PicoMQ is durable, real-time streams over HTTP, built on S3-compatible object storage.
PicoMQ is a durable stream server. Clients create named streams, append records, and read them back over HTTP. Records are stored on S3-compatible object storage and cluster coordination goes through a SQL database. A node is a single binary with no local state worth backing up.
browser fingerprint bench.
Every measurement a website can take from your browser, run live and shown back to you. This is the same class of signals the tracking and anti-fraud scripts collect — surfaced instead of hidden.
Secure code execution for AI applications.
run executes untrusted JavaScript and type-stripped TypeScript in a hardened QuickJS sandbox. Guest code can access only the host functions you provide.
Related contents:
A project to rapidly extract all email addresses from any files in a given path.
Related contents:
An LLM tool-use loop (bash / read / write / edit / subagent), an interactive bubbletea session, and provider-routable models. One binary, no runtime, config you can read.
A fast coding-agent harness in Go. Tool-use loop, bubbletea TUI, provider-routable models with live catalog discovery, MCP support, background subagents. One binary, no runtime, built for open-source models.
Embedded property-graph database with native vector and full-text indexing. Think SQLite, but for connected data you want to query by relationship, semantics, and text. Embedded single-file knowledge graph database with vector search and full-text search for AI/RAG apps.
One file. Relationship traversal, vector similarity, BM25 full-text search, durable streams, and ACID transactions in one local engine and one query layer.
Gjallar is a modern monitoring and observability platform inspired by Gjallarhorn, the legendary horn of Heimdall in Norse mythology. Built for reliability and speed, Gjallar continuously watches your infrastructure, services, and applications, detecting anomalies and sounding the alarm before issues become incidents. Observe. Detect. Alert.
Local-First AI Agent Workspace.
A local-first Agent workspace built for real work. Maka inspects projects, runs tools under a sandbox boundary, and records model messages and tool calls as recoverable execution facts — on your machine, through one Runtime Host.
Run a team of coding agents.
The open-source AI IDE for Claude Code, Codex, OpenCode, and more. Run agents in parallel, locally or in the cloud, and build reusable workflows.
(Being a Short Treatise on the Nature of Failure; How Failure is Evaluated; How Failure is Attributed to Proximate Cause; and the Resulting New Understanding of Patient Safety)
a tiling window manager for macOS.
An i3-like tiling window manager for macOS. Windows are leaves of a layout tree, workspaces are emulated rather than mapped onto native Spaces, and nothing requires disabling System Integrity Protection.
Pipe your nix-build output through the nix-output-monitor a.k.a nom to get additional information while building.
Free and Open-Source Low-Code log processing solution. Low Code / Visual Scripting log processing software.
FlowG is a log management platform that lets you ingest, transform, and query logs using a visual pipeline builder. It handles structured logs without requiring predefined schemas and relies on BadgerDB as its storage backend.
A dead simple 2D game engine for Go.
Ebitengine (Eh-Bee-Ten-Gin) (formerly known as Ebiten) is an open source game engine for the Go programming language. Ebitengine's simple API allows you to quickly and easily develop 2D games that can be deployed across multiple platforms.
A Nix-based system for configuring consumer wifi routers or IoT device devices, of the kind that OpenWrt or DD-WRT or Gargoyle or Tomato run on. It's a reboot/restart/rewrite of NixWRT.
This is not NixOS-on-your-router: it's aimed at devices that are underpowered for the full NixOS experience. It uses busybox tools, musl instead of GNU libc, and s6-rc instead of systemd.
Declarative system management for any Linux machine using Nix.
System manager is a tool to configure Linux machines. Unlike Chef, Puppet and Ansible, it only controls a small subset, and most of its changes are done in an immutable layer, thanks to the power of Nix.
My useful files for penetration tests, security assessments, bug bounty and other security related stuff.
safe and useful user scripts.
User scripts put you in control of your browsing experience. Once installed, they automatically make the sites you visit better by adding features, making them easier to use, or taking out the annoying bits. The user scripts on Greasy Fork were written by other users and posted to share with the world. They're free to install and easy to use.
Related contents:
Free Open-Source Mac Cleaner & App Uninstaller (CleanMyMac Alternative).
Related contents:
Gadgetbridge is a free and open source Android application that allows you to pair and manage various gadgets such as smart watches, bands, headphones, and more without the need for the vendor application. So in short, you can use Gadgetbridge instead of relying on your gadget's own proprietary app.
Related contents:
When someone asks you something, they want your answer. Not a wall of ChatGPT text. A short answer from a human will always be worth more than one from a robot, even if the robot is right.
Related contents:
noRecognition AI Adversarial Clothing.
Clothing the cameras cannot see.
A year of research becomes something you can wear. Presented on stage at Black Hat and DEF CON, and dropping at the same moment.
Related contents:
SPL driver for UNIX.
SpliX is a set of CUPS printer drivers for SPL (Samsung Printer Language) printers. If you have such a printer, you need to use SpliX. Moreover you will find documentation about this proprietary language here.
Related contents:
Bobcat is a modern, feature-rich terminal emulator that works across all major operating systems. It's built using the U++ framework and TerminalCtrl widget to create a powerful yet user-friendly command-line experience.
A Neovim configuration system for nix.
Nixvim is a Neovim distribution built around Nix modules. It is distributed as a Nix flake, and configured through Nix, all while leaving room for your plugins and your vimrc.
A Self-Hosted & Modern Roleplaying Platform.
Foundry Virtual Tabletop is software that provides an innovative online role-playing experience. The software supports Windows, Mac, and Linux and allows you to self-host a game server that players connect to for free directly through a web browser.
A spreadsheet built like a code editor. A fast, keyboard-first, local-only spreadsheet for people who care about flow.
Command palette, vim mode, split panes, a built-in terminal, and a CLI. Native Rust. under 30 MB. Opens instantly. Works entirely offline.
Offline-first SQL sync with Typescript and Rust cores.
Syncular keeps an SQLite database on each client and synchronizes it through a server-owned commit log. Apps read from local SQLite and continue to work offline. A write updates local state immediately, enters an outbox, and is checked by the server when it syncs.
the context layer for large codebases.
Turbocharge Claude Code, Cursor, Codex, Gemini & every coding agent: faster, cheaper, with contextual understanding specific to your codebase.
Control your coding agents (Claude Code, Codex, Cursor, Grok, Hermes, Pi) locally by default, with optional multi-device sync.
Every device runs a small engine that stores sessions on that device. A new installation starts in local-only mode without an account or a network connection.
Self-hostable Calendly + Zoom alternative.
Replace Calendly and Zoom with one binary you own.
Calnode self-hosts the whole meeting — the booking, the video call, and the recording — on your own infrastructure. AI-native, ~30¢/month, and small enough to audit yourself.
Related contents:
Self-hosted all-in-one media tracker and Trakt alternative for movies, TV, anime, books, games, music, and podcasts.
Floppy is a self-hosted, all-in-one media tracker and personal media diary, a broader alternative to Trakt, Letterboxd, and TV Time for people who want one place for everything they watch, read, play, or listen to. It gives you a real progress view that tells you what to watch next, a unified history you can actually scan, recap-style statistics, shareable lists, owned-media collections, and integrations that sync instead of asking you to upload a file every few months.
Visual Homelab Mapper & Monitor.
Self-hosted visual canvas for your network. Drag, document and watch every device live — now native in Home Assistant.
A small self-hosted web UI to manage an HAProxy configuration, obtain Let's Encrypt certificates, and run an active-passive cluster with Keepalived on a shared virtual IP.
Open-source feedback & roadmap tool — feedback boards, public roadmap, AI-assisted changelog. Self-host on Cloudflare Workers, Vercel, or Docker.
the Lidarr companion for self-hosted music discovery.
Aurral is the Lidarr companion for self-hosted music discovery. Best-in-class recommendations, rotating flows, and playlist downloads, built on Lidarr instead of replacing it.
The ActivityPub protocol is a decentralized social networking protocol based upon the [[activitystreams-core]] 2.0 data format. It provides a client to server API for creating, updating and deleting content, as well as a federated server to server API for delivering notifications and content.
Related contents:
A.I.G (AI-Infra-Guard) is a comprehensive, intelligent, and user-friendly AI Red Teaming security testing platform developed by Tencent Zhuque Lab.
An experimental interface for building software by editing persistent pseudocode and synchronizing it with an AI-generated implementation.
Related contents:
A mise plugin providing a zero-dependency PHP toolchain built on FrankenPHP. No system PHP required. It's like npx, uvx, bunx but for modern PHP (8.3+) 😎.
Cut the noise. Keep the signal.
One install wires Claude Code, Codex, Cursor, and 11 more. ctx-wire runs their commands, compresses the noisy output, scrubs secrets fail-closed, and hands back a short result. The full log stays on disk for when something actually fails.
A multi-model AI agent desktop client — connect any AI provider, extend with MCP & skills, control from your phone. Built with Electron + Next.js.
One window — every project, every agent.
Silo — for developers juggling coding agents across many projects. Every workspace alive at once, switch instantly. 100% open source, free forever.
Learn to build AI agents locally without frameworks
Understand what happens under the hood before using production frameworks. Build real understanding of function calling, memory, and ReAct patterns.
Let your agents instantly understand the world's code. Let Your Agents Instantly Understand Any Git Repo.
Stop integrating code based on hallucinations or poor documentation. Give your agents direct understanding of any GitHub repo to get it right on the first try.
Sell digital products with just Stripe + GitHub.
The engine is free and MIT: a static storefront on GitHub Pages, checkout through your own Stripe account, and a GitHub Action that delivers every sale while you sleep. Pro is the $29 suite that checks it is all still working.
a coding agent you can leave running.
DeepSeek-native AI coding agent for your terminal. Engineered around prefix-cache stability — leave it running.
One local engine, four ways in — terminal, desktop app, browser, or your editor over ACP. Plan mode, permissions, a workspace sandbox and per-turn checkpoints keep a long autonomous run something you can still read and undo.
httpie-like HTTP client written in Go
httpie-go (ht) is a user-friendly HTTP client CLI. Requests can be issued with fewer types compared to curl. Responses are displayed with syntax highlighting.
Deputy enables dependency management at scale.
Deputy aims to provide core dependency management primitives along with a unified toolchain, so you can focus on what matters: your code and policies that protect it. The tool is designed for extensibility, performance, and usability at scale; whether you’re an individual developer, a security team, or an enterprise organization. The goal is to empower you to manage dependencies effectively, reduce risk, and maintain a secure software supply chain with minimal friction.
Related contents:
Detection Skills is an open standard for the Agentic SOC, that transforms static detections into agentic workflows. Designed and used by Cyber Defense Engineers, it brings the best your team can do - to every alert.
Agent harness to run an office of your clones. local multi-agent harness.
Free, open source and performant — a multi-agent harness that works with the subscriptions you already pay for, on their hourly limits. It turns the terminal coding CLI you already run into a clone of you, one that keeps working while you're away and coordinates a whole office of agents on your own machine.
Wraps Claude Code, Antigravity (Gemini), OpenAI Codex, xAI Grok, Kimi Code, Qwen, OpenCode, Crush, pi.dev, and GitHub Copilot CLI — with bring-your-own keys and local LLMs. Agents that message, route, and remember, coordinated by your clone (Michael) and visualized as avatars at work on a shared office floor.
🔮 Platform-neutral Browser Use for AI agents: real Chrome automation with a CLI + SDKs, no lock-in, dead simple.
open-browser-use is a browser automation layer that stays neutral across agent runtimes. It is also an open-source alternative to the Chrome Browser Use capability recently shipped in Codex.app. For the story behind it, see the Browser Use Deep Dive.
Related contents:
open-computer-use is an open-source Computer Use service wrapped as MCP. Any AI agent or MCP client can use it to run Computer Use on macOS, Linux, and Windows.
Related contents:
Token-Efficient Browser for AI Agents.
A persistent, policy-guarded Playwright browser for AI agents — network policy, encrypted credential vault, proof screenshots, and CAPTCHA solving.
Windows User Profile Migration Made Simple
Migrate local and domain user profiles without losing data, settings, or application configurations — in minutes, not hours.
A minimal CSS toolkit. The standards-first, full-featured CSS library for the modern web.
Utilities, elements, blocks, and templates. Highly configurable. Endlessly themeable. Zero JavaScript. Works with your favorite framework or straight-up HTML.
Related contents: