Links
AddAn agent skill and command-line tool for controlling Chrome directly through the Chrome DevTools Protocol (CDP).
Works with Claude Code, OpenCode, Codex, Pi, or any coding agent that supports the Agent Skills protocol.
Pwsh tool for AD Group Enumeration Auditing.
Detect Active Directory reconnaissance before it becomes a breach.
QuietPhase is a PowerShell tool that checks whether your domain is configured to detect group enumeration, the quiet reconnaissance phase where an attacker maps out who holds privileged access. It verifies domain controller audit policy, reports which privileged and custom groups are audited for membership reads, and proposes (or, if you choose, applies) the fixes.
Related contents:
Hashcat rule analyzer and interpreter - A Rosetta Stone for decoding hashcat rule syntax.
A Python project designed to analyze hashcat debug mode 4 and mode 5 output files to identify the most efficient rules and track baseword frequency patterns used during password cracking attacks.
Related contents:
Attackers have AI agents now. So do you. Free, Open-Source AI Security Operations Platform.
Argus is a free, open-source security operations platform that watches your cloud, logins, code and devices around the clock, catches machine-speed attacks the moment they start, and shuts them down in seconds. AI does the legwork. Guardrails you control decide what it's allowed to touch.
AI Reverse Engineering Plugin.
A reverse-engineering agent for IDA Pro and Binary Ninja that integrates a multi-provider LLM directly into your analysis UI. This project was vibecoded together with my friend, Claude Code.
Static analysis of Android applications, built for stalkerware and mobile malware research.
Drakkar reads an APK, or a raw DEX, and answers one question per mode: which MITRE ATT&CK for Mobile behaviours it implements, whether they are reachable, who signed it, when it was built, what its native code does at the JNI boundary, how close it is to another sample. Every mode prints its own legend: drakkar --<mode> --legend defines each label and each field it emits, and states the limits of each metric.
Have all your reading in one place.
Read later and RSS client for iPhone, iPad and Mac.
Related contents:
A smallish Android RSS reader for Feedbin, FreshRSS, Miniflux, and local feeds.
Related contents:
A web application for managing Kiwix library ZIM file downloads.
Related contents:
Vane is an AI-powered answering engine.
Vane is a privacy-focused AI answering engine that runs entirely on your own hardware. It combines knowledge from the vast internet with support for local LLMs (Ollama) and cloud providers (OpenAI, Claude, Groq), delivering accurate answers with cited sources while keeping your searches completely private.
Related contents:
Free AI with your ChatGPT account.
Turn your ChatGPT account into an OpenAI-Compatible API.
Related contents:
extract archives without double the disk space.
HatchZip is a free, open-source archive extractor for Windows, macOS and Linux that extracts ZIP, 7z, RAR and tar archives in place. It removes each part of the archive once the files in it are safely on disk, so it needs free space for the extracted files only, not for the files and the archive together. It comes as a desktop app and a command line tool.
Related contents:
AI-first 3D & spatial computing runtime and native JIT compiler for WebGL2/WebXR, Android (Filament & Jetpack XR), and iOS/visionOS (RealityKit)
djs is a small JavaScript and TypeScript engine written in Rust. It exists for one job: running the scripts that a language model writes in pi’s codemode, inside a WebAssembly sandbox, in place of QuickJS. This guide explains how it works and, above all, why it is built the way it is. Almost every unusual decision in djs follows from that one job, so this page starts there.
View + edit DOCX / XLSX / PPTX directly in the browser. Loads progressively like Google Docs, handles heavy files, one-line React embed, saves back to the original format.
Desktop Automation for AI.
agent-desktop reads the accessibility tree of a desktop app and returns it as JSON. Every element an agent can act on gets a ref. The agent acts on a ref, reads the UI again to check the result, and repeats. It ships as a CLI and as a C library for macOS, Windows, and Linux.
Check a 3D scan against what it should have been, entirely in your browser: fit spheres, cylinders and planes to the scan and measure between them, paint its deviation from the CAD part, map its wall thickness, or measure a flatbed scan the way a measuring microscope would. You can also model the scan into a solid STEP body and clean up or reduce the mesh.
Open-source AI Security Operations Center: alert fusion, LLM-agent triage, MITRE ATT&CK investigation, and a replayable decision ledger for every agent step. Self-hostable, runs with no API keys, MIT licensed. Ships an MCP server for Claude, Cursor and Continue.
The open-source alternative to Paper.design. A multiplayer design canvas where humans and AI agents design together, live. MCP built in.
Doop is the open-source alternative to Paper.design — a multiplayer design canvas for humans and AI agents. Every design lives on a shareable Canvas (/c/<id>) holding Frames — artboards that render real HTML in sandboxed iframes. People edit in the browser; AI agents edit through the built-in MCP server, streaming their designs in live. Everyone sees everything as it happens: cursors, presence, frame edits, agent status, and an activity feed.
An all-in-one tool for generating and burning visible images onto optical discs
The Windows desktop app designs and burns disc images. The experimental Linux and macOS CLI generates CD, DVD and Blu-ray images offline.
Real Java in the browser.
CheerpJ is a full OpenJDK distribution for the browser, compatible with Java 8, 11, 17, 21 and 25. Build with Java, or run the applications you already have.
Related contents:
Your TV should do what you paid for.
dumbtv takes the ads, tracking and clutter out of your Fire TV. Your apps stay.
the network REPL Clojure's tooling is built on.
A Clojure network REPL that provides a server and client, along with some common APIs of use to IDEs and other tools that may need to evaluate Clojure code in remote environments.
Related contents:
Run your agents on a canvas.
nodeterm turns terminals and coding agents into live nodes on an infinite canvas. Watch Claude, Codex & Gemini work in parallel, wire them together, and never lose a session to a reboot.
Open Source Grok Bot — MausBot, your team of AI bots.
Open-source Grok Bot alternative with a virtual machine that bots can use. OpenMausBot is an open-source Grok Bot alternative: an independent project inspired by Grok Bot, and the open-source alternative to Meta Muse, OpenAI dots and Cue by Manus — bring-your-own-agent, local-first, on the models you already have. Also known as MausBot; formerly OpenGrokBot. Not affiliated with xAI, Meta, OpenAI or Manus.
Open Multi-Agent Interactive Classroom — Get an immersive, multi-agent learning experience in just one click
The modular Swiss Army knife for macOS.
Free and open-source macOS menu bar toolkit. One menu bar icon doing the job of a dozen paid Mac apps. Install only what you use.
Traçage et Recensement des Actes de Cyberviolence d'Extrême droite. L'outil d'OSINT pour documenter l'ultra droite en ligne, preuves à l'appui.
TRACE documente et archive publiquement des comptes liés à la cyberviolence et à l'extrême droite : profils, activité et historique des changements, à disposition de celles et ceux qui agissent déjà — journalistes, associations, citoyens engagés.
Offline Knowledge & AI Server. Offline knowledge, maps, and education, installed on a computer you already own.
Project NOMAD fills your machine with Wikipedia, textbooks, and offline maps, plus an optional AI assistant that runs entirely on your own hardware. Once it's set up, it keeps working without the internet.
Notifications for Wayland that look like they belong on a computer from this decade. Drawn with Rune.
Speak. It appears.
Hex is local voice dictation for Mac, Windows and Linux. Hold a key, speak, and it pastes.
A DevOps engineer's workspace in one window
A terminal with local AI and an AI agent, Kubernetes, SSH and host monitoring, files between hosts, Yandex Cloud, databases, an IDE with git, alerts, notes with tasks, KeePass, Passbolt and MikroTik — together, and aware of each other. Turn on only the sections you need.
Agents can edit logs. They can't hide the edit.
Tamper-evident tracing, policy gates and cross-checks for AI agents: see what the agent did, and why.
Tracekit checks every tool call your agent makes before it runs, signs each call and decision into a hash chain, and gives you one .tkb file per run that anyone can verify offline.
Autonomous OODA-loop pentesting agent. Hermes brain, Kali + Playwright tools over MCP, ATT&CK as the Orient language.
vulnerator-ai runs an OODA (Observe-Orient-Decide-Act) pentest loop where the driving brain is Hermes and the tools run on a Kali governed by an MCP server. Hermes decides what to run and launches it directly against the target through the Kali MCP.
A Postgres-compatible database for heavy, multi-tenant workloads.
One binary that speaks the PostgreSQL protocol, on an entirely new storage engine running on local disk or S3. Thousands of tenants per process, each one metered and capped. Raft-replicated, with read-your-writes from any replica. Instant database branching. Open source under Apache 2.0.
Deploy and run services on your own Kubernetes
Zeabur shows your cluster as projects and services and tells you in plain words what's wrong. Before a change goes in, you see the exact fields it writes, then you apply it. It all runs on your own servers.
Zeabur is an open-source platform you host yourself. It runs in your cluster (or on your machine), shows the cluster as projects and services, explains what is wrong in plain words, and lets you change things safely. It works with the objects you already have, never acts with more rights than you have, and keeps no state of its own: no database, no custom resources.
Experience-Driven Black-Box Cost Control for Coding Agents.
TokenEconomizer makes coding agents cheaper to run in the repositories you work in often, without changing the agent itself. It learns from the sessions an agent has already run in a repository, and uses that experience to cut waste in the sessions that follow.
Reducing BigQuery Costs Through Its Biggest Problem: The Users.
Related contents:
FOSS and Free Speech done right.
Connect with your community on a platform that respects your privacy and freedom. No tracking, no ads, just pure communication.
Speak it messy. Send it clean. local dictation for macOS.
Hold ⌥ Space in any app and just talk. BetterWispr drops the ums and false starts, spells names your way and writes in the style you set for each app. Speech stays on your Mac.
Free, open-source, local-first dictation app for macOS. Hold a shortcut, speak, and text is typed into any app. On-device speech-to-text with Whisper, Parakeet and Apple speech. Private, offline, open-source Wispr Flow alternative.
Learn to sing the songs you love. A free, open-source singing trainer for Mac that listens to the music you play.
OnKey listens to the music playing on your Mac and learns the singer's melody. Then it shows you a pitch guide as you sing, so you can see where you're sharp or flat.
Hyper-V/Cluster and Azure Local overview - Easy Overview.
A comprehensive overview tool for Hyper-V environments - like RVTools for VMware. Monitor standalone hosts, remote servers, Hyper-V clusters, and Azure Local with complete visibility into your virtual infrastructure.
HVTools is a comprehensive GUI application designed to simplify and enhance Hyper-V virtual machine management. Built with .Net, this tool provides an intuitive interface for virtual machines across both local and remote Hyper-V hosts, Clusters and Azure Local. This tool is my contribution to the community ❤️
Related contents:
A Claude Code mod that holds subagent fan-out, heavy-context prompts and retry loops before they spend your usage window. It reads your plan's usage, counts agents across every session, and asks in Claude Code's own dialog.
agent-usage-guard is a Claude Code mod: it runs inside Claude Code and holds runaway spend before it happens. It reads your plan's live usage, and it holds subagent fan-out, heavy-context churn and retry loops.
filesystem for AI coding agents. Ephemeral Workspaces, durable shared history.
LayerFS is the substrate under your agents. Each one mounts a complete, writable Workspace over shared committed history, does its work, commits what it changed, and goes away.
LayerFS gives every agent a complete, writable filesystem Workspace over shared committed history, without copying the base. Agents work in parallel, commit what changed as deduplicated checkpoints, then branch, rewind or merge. Try it with LayerFS × DSH.
Dark-web threat intel in your browser.
Ask one question. VoidAccess searches 12+ Tor search engines, GitHub and security feeds in parallel, then gives you back actors, wallets, leaked credentials and IOCs, ready to export as STIX, MISP or Sigma. No Tor to run. Nothing to install.
Local Wikipedia is Wikipedia, but only for things a half hour walk from you.
An advanced WebGPU 3D Gaussian Splatting renderer for THREE.js
3D Gaussian splats in typed-array tables on the CPU and GPU, drawn by three.js's WebGPURenderer on WebGPU or its WebGL2 backend. This site has the example pages, the documentation and the sources.
Swift, in the browser.
Run declarative Swift applications natively in the browser with WebAssembly.
Personal tutoring, reimagined.
Agent-native Learning Companion that grows with you. Fully Open-Sourced.
open-source canvas with live task cards from your tracker.
Tiko put tasks on an infinite canvas as cards. Arrange them the way you think. Their statuses update on their own.
Turn incoming email into webhooks. A small, self-hosted SMTP server that checks each email against your rules and sends the matches to your webhooks, with a web UI to see what arrived and how each webhook responded.
Your team's whiteboard, on your server.
Excaliself is self-hosted Excalidraw: the full canvas, plus a shared Team space, live collaboration, folders, and search. Every drawing lives in your own Postgres.
Docker backups you can restore.
DockNest backs up your Docker sites, verifies every recovery point, and restores to a separate copy. Self-hosted, open source, and in beta.
Workspaces, Boards & Wiki.
Open-source project workspace: Kanban & Scrum boards, docs & wiki, Excalidraw whiteboards and Gantt plans in one app. MCP server for Claude/ChatGPT. Self-host with Docker (AGPL-3.0).
A community-driven Matrix homeserver. Fast, lightweight and open.
Related contents:
Self-hosted SSH & SFTP browser workspace.
Security-focused, self-hosted SSH and SFTP workspace for homelabs and teams - multi-user, passkeys, OIDC, encrypted keys, backups, and offline-ready. WebSSH is a free, open-source SSH and SFTP client you host yourself. Open terminals, move files and manage remote servers from your browser.
Manage your video games.
Gameyfin will turn your disorganized collection of video games into a beautiful, easy-to-navigate library that you can access from any device with a web browser. It will automatically scan your game folders, download metadata and cover images, and present everything in a user-friendly interface. Download your game files directly from the web UI, share your library with friends, and enjoy your games like never before.
Git web server and discussions board for single-maintainers
Your workspace. Anywhere you build. Devcontainer Workspaces, Any Backend, No Lock-In. Deploy secure local and cloud environments for developers and agents.
Desktop app or CLI. Build from devcontainer.json, run on your infrastructure, and connect with your editor. Devsy enables teams and their AI coding agents to scale development using standardized, isolated workspaces. It cuts hardware cost, shortens onboarding, contains agent risk, and improves developer productivity. Workspaces deploy across Docker, Kubernetes, cloud providers, and SSH remote hosts.