Links
AddAttack path mapping for Active Directory, ADCS, SCCM, and MSSQL using BloodHound CE + OpenGraph data.
ADPathFinder is an attack mapping tool for pentesters and red teamers. It analyses SharpHound data and unifies it with OpenGraph plugins to surface attack paths to high-value targets such as Domain Admins and Domain Controllers, starting from low-privileged users and computers. MSSQLHound and ConfigManBearPig are supported natively, extending coverage across AD, ADCS, SCCM, and MSSQL.
Related contents:
The lazygit for PostgreSQL. A vim-style terminal UI for browsing, querying, and editing your database without leaving the keyboard.
A vim-style TUI PostgreSQL client built like lazygit — fast keyboard navigation, modal panes, and a focused workflow for browsing and querying your database from the terminal.
Your agents already solved this. deja finds it.
Memory tools start empty and record forward. deja starts full: it indexes the sessions your agents already wrote to disk — months of history from before you installed it — hands it back over MCP so any agent recalls what any other solved, and follows you between machines over SSH.
🎨 Create beautiful code screenshots with customizable styles .
Goshot is a Go library and CLI for creating beautiful screenshots of code and terminal output, with syntax highlighting, window chrome, and rich backgrounds. Similar to Carbon and Silicon.
An open source Snowflake cost optimization and observability dashboard.
See and Manage Open Ports on Mac.
When you're working on multiple projects at the same time, it's easy to lose track of what's running. A database here, a dev server there, an API you forgot was still open... before long, your ports become a mess.
Portero gives you a clear view of everything running on your machine, so you always know what's using each port, can stop what you don't need, and get back to building instead of debugging port conflicts.
Point it at any web page and it finds the video, extracts the stream, transcodes it and casts in real time to your TV. It even burns subtitles….
Related contents:
cost control for AI agent loops. Your AI agent loops don't know when to stop. LoopGain does.
When an agent keeps checking and revising its own work, it often spins on a problem it can't solve — or talks itself into an answer worse than one it already had. LoopGain watches the loop as it runs, stops it at the right iteration, and keeps the best version, not the last.
ReactBench is an evaluation for coding agents on realistic React work. Models can pass every test in today’s benchmarks and still write React that fails in production. Tests verify behavior, but they miss React performance, accessibility, and quality issues.
Topcoat is a modular, batteries-included Rust framework for building fullstack apps. It prioritizes simplicity and productivity.
Self-hostable instant messaging server compatible with classic AIM and ICQ clients written in golang. (Independently developed, not affiliated with or endorsed by AOL)
A Kubernetes controller that generates CycloneDX 1.6 ML-BOM documents for AI workloads at runtime — inference services, agent stacks, RAG pipelines, training jobs, evaluation harnesses — with auditor-traceable evidence for every attribute.
Related contents:
The web, wired into your local agent.
wigolo is a local-first server that hands any AI agent the whole web — search, fetch, crawl, extract, cache, and research. In your editor over MCP, in your framework through an SDK, or in your self-hosted stack over REST. No API keys. No cloud. No metered bill.
An agent skill — for Claude Code, Codex, and any SKILL.md-compatible agent — that builds an immersive, scroll-scrubbed "fly through the world" landing page for any industry or brand — the kind where, as you scroll, a camera flies from outside each scene into its interior, then flows on to the next scene with no cuts. One continuous connected flight through a little generated world (think the Emons logistics site, applied to whatever you want).
See every VM in your Proxmox environment. VM Inventory & Capacity Planning for Proxmox VE.
PVEViewer connects to your Proxmox VE clusters over the REST API and turns them into a rich, multi-tab Excel workbook and live, filterable grids for inventory, health, and capacity planning in one click. No agents to deploy. No history database. Just answers.
Related contents:
A personal internet radio station. One Icecast stream, one broadcast. Every listener hears the same thing at the same time. An AI DJ picks the tracks and talks between them: station idents, time checks, the weather, a quick intro for whatever's going out next. You can ask for music in plain language; the DJ works out what you meant and slots it in.
A Mastodon instance for info/cyber security-minded people.
CLI to control iOS and Android devices for AI agents . The mobile verification for AI Agents.
Device automation CLI for AI agents. Real apps on iOS, Android, TV, and desktop. Token-efficient snapshots, semantic refs, evidence captured only when needed.
Self-Hosted AI Chat Dashboard.
Web dashboard for Hermes Agent — multi-platform AI chat, session management, scheduled jobs, usage analytics.
Fleet visibility dashboard and ingest server for Bumblebee scans.
Run the Hive server, point developer endpoints at it with --output http, and browse fleet inventory, exposure findings, and per-endpoint scan history in a React dashboard — no log shipper or custom receiver required.
Read-only developer endpoint scanner for on-disk package, extension, and developer-tool metadata, built to check exposure to known software supply-chain compromises.
Security scanner for VS Code extensions.
Security scanner for VS Code extensions. Detects malicious extensions before installation by analyzing code patterns, indicators of compromise, and known malware signatures.
push frontier AI to it limits. A fork of the Codex CLI with validation, automation, browser integration, multi-agents, theming, and much more. Orchestrate agents from OpenAI, Claude, Gemini or any provider.
Every Code (Code for short) is a fast, local coding agent for your terminal. It's a community-driven fork of openai/codex focused on real developer ergonomics: Browser integration, multi-agents, theming, and reasoning control — all while staying compatible with upstream.
Knex.js is a batteries-included SQL query builder for JavaScript.
Knex.js (pronounced /kəˈnɛks/) is a "batteries included" SQL query builder for PostgreSQL, CockroachDB, MSSQL, MySQL, MariaDB, SQLite3, Better-SQLite3, Oracle, and Amazon Redshift designed to be flexible, portable, and fun to use.
An iMessage-based personal agent you can run with either your Claude Code subscription or your Codex / ChatGPT subscription.
iMessage personal agent: choose Claude Agent SDK (Claude Code) or Codex app-server runtime (Codex/ChatGPT), with memory, sub-agents, automations, integrations.
Dynamic memory for coding agents: chart discoveries as you explore, cache-bust when files change.
Don't grep the same mystery twice.
Persistent memory for coding agents. When your agent spends ten minutes figuring out where something lives in your codebase, capn saves the files that answer the question. The next session gets them back in one command instead of re-exploring — and the moment the underlying files change, the saved answer deletes itself.
An open-source router that you can manage from a browser, a terminal CLI, or directly from your AI agents (Claude Desktop, OpenCode, Cline, GitHub Copilot). Born as a router-on-a-stick for the Le Potato (or any ARM SBC running Armbian/Ubuntu), it also installs and runs on x86 — mini-PCs, thin clients, and VMs — where it adapts the network topology to however many NICs the box actually has. Manages 802.1Q VLANs, DHCP, DNS, firewall rules, static routes, and VPN (Tailscale, WireGuard, Nebula) — all from a browser, over SSH, or through a standard MCP server. Still a potato at heart either way.
Related contents:
Because your AI shouldn't hallucinate package names.
Real, up-to-the-second information about NixOS packages, options, Home Manager, nix-darwin, flakes, and friends — served over the Model Context Protocol.
Related contents:
The best and easiest way to storyboard.
Storyboarder makes it easy to visualize a story as fast you can draw stick figures. Quickly draw to test if a story idea works. Create and show animatics to others. Express your story idea without making a movie.
Related contents:
An OS 9 browser that loads the modern web. the modern web, on a 25-year-old Mac.
MacSurf is a native web browser for Classic Mac OS 9 — real CSS3, modern JavaScript (ES2023 via macQJS), and native TLS 1.3, running on a 25-year-old Mac.
Related contents:
A pattern for building personal knowledge bases using LLMs.
This is an idea file, it is designed to be copy pasted to your own LLM Agent (e.g. OpenAI Codex, Claude Code, OpenCode / Pi, or etc.). Its goal is to communicate the high level idea, but your agent will build out the specifics in collaboration with you.
Related contents:
camply, the campsite finder ⛺️, is a tool to help you book a campsite online. Finding reservations at sold out campgrounds can be tough. That's where camply comes in. It searches thousands of campgrounds across the USA world via the APIs of booking services like recreation.gov. It continuously checks for cancellations and availabilities to pop up - once a campsite becomes available, camply sends you a notification to book your spot!
Related contents:
Enjoy Together - Watch videos together online with your friends.
Real-time synchronized playback. Optional voting system. Dark theme. No sign up required. All Open Source. It's never been easier to watch videos together.
Related contents:
Self-hosted video without the feed sludge.
YouTube, NicoNico and BiliBili in one web app. History, playlists, favorites, subscriptions, progress and settings stay on your instance.
Related contents:
YISP is a Lisp-inspired evaluation engine for YAML – useful for generating Kubernetes manifests, configuration files, and more.
YISP (suggested pronunciation: /ˈjɪsp/) is a lightweight evaluation engine for YAML, inspired by Lisp. It allows you to embed logic, expressions, and includes within YAML files. This is useful for generating structured configuration such as Kubernetes manifests, Ansible playbooks, and more.
Related contents:
The Application Development Engine for Kubernetes Tame your developer workflow to go from Code to URL in one push.
Epinio installs into any Kubernetes cluster to bring your application from source code to deployment and allow for Developers and Operators to work better together!
Related contents:
the code knowledge graph for AI coding assistants.
Open-source and on-device. One command maps your repo into a graph your AI assistant traverses instead of grepping. Every answer traces to a path you can audit.
AI coding assistant skill (Claude Code, Codex, OpenCode, Cursor, Gemini CLI, and more). Turn any folder of code, SQL schemas, R scripts, shell scripts, docs, papers, images, or videos into a queryable knowledge graph. App code + database schema + infrastructure in one graph.
YouTrackDB is a general-use object-oriented graph database with storage format native to handle graph relations. YouTrackDB supports Gremlin queries and ACID transactions. YTDB supports both embedded and client-server deployment models.
Grow Wealth. Keep Control.
A beautiful, private and open-source investment tracker that runs locally on all your devices.
Related contents:
Read, understand and silence the Windows GDID device identifier (the ID that tracked a hacker through a VPN). Verified on a real Win11 VM. Honest: it silences reporting, it does not make you anonymous.
Related contents:
Run the Moebius inpainting model in the browser.
Paint over a region of an image to replace it; the denoising loop runs locally on your GPU. The first run downloads ~1.27 GB of weights from Hugging Face (then browser-cached). A WebGPU-capable browser (recent Chrome or Safari) is required.
Related contents:
Engineer loops to improve project quality, aligning your team and agents on what quality means for what matters most.
The last torrent client you'll ever need.
A sleek, zero-setup torrent finder and downloader that lives right in your terminal. One search hits every source, and the one you want is a keystroke away.
databow is a command-line tool for querying databases.
A command-line tool for querying databases via ADBC.
Model router for agentic systems. Routes every prompt to the right model in <50ms. Cut costs 40-70% with just an endpoint change.
A drop-in proxy for Anthropic, OpenAI, and Gemini that picks the best model for every request: using a tiny on-box embedder, not a vibes-based prompt.
Give your AI agent eyes to see the entire internet. Read & search Twitter, Reddit, YouTube, GitHub, Bilibili, XiaoHongShu — one CLI, zero API fees.
lanshu-animated-architecture-diagram is a Codex skill and local renderer for creating premium black-canvas technical diagrams with hand-drawn typography, editable Excalidraw output, static PNG previews, and genuinely animated GIFs.
It is designed for article explanations, system architecture diagrams, process diagrams, and DailyDoseOfDS-style black-background technical sketches.
Private, unlimited file transfer. Peer-to-peer, encrypted, no accounts.
AlterSend sends files straight between devices, end-to-end encrypted — never through cloud storage. No accounts, no size limits, no codes to scan once you've paired.
The RSS feed for websites missing it.
RSS-Bridge is a PHP web application.
It generates web feeds for websites that don't have one.
🧡 Everything is RSSible.
RSSHub is the world's largest RSS network, consisting of over 5,000 global instances.
RSSHub delivers millions of contents aggregated from all kinds of sources, our vibrant open source community is ensuring the deliver of RSSHub's new routes, new features and bug fixes.
Hand the agent the keys. Without actually handing it the keys. HASP is a local-first broker for managed secrets in agent workflows.
A local broker that holds your secrets in one encrypted vault and hands them to apps and coding agents when needed, only inside the project boundary, only for the window you allow, and never as a value the agent can see.
Agents need credentials to run tests, call APIs, and deploy code. Copying those credentials into prompts, shell history, .env files, or repo-local notes makes the agent faster today and harder to trust tomorrow. HASP keeps secrets in a local encrypted vault and gives commands only the values they are allowed to use at runtime.
This project runs ephemeral, single-use GitHub Actions self-hosted runners on AWS Lambda MicroVMs, provisioned on demand by a GitHub webhook.
Related contents:
Agent Substrate is a system built on top of Kubernetes which manages agent-like workloads to achieve higher scale and efficiency than Kubernetes alone can offer, with lower latency. It builds on top of Kubernetes features like Pods and Pod autoscaling, but takes the Kubernetes control-plane out of the critical path to achieve lower latency.
Related contents:
A coding-agent skill for multi-phase security audits with independently verified, machine-readable findings.
A coding-agent skill that turns your agent into a security auditor. It orchestrates multiple parallel agents through a six-phase pipeline -- recon, hunting, validation, reporting, structured output, and independent verification -- to find exploitable vulnerabilities with real impact.
Related contents:
Continuous Terraform drift detection, reporting, and auto-remediation CLI. The open-source driftctl replacement.
tfdrift is a Python CLI tool that monitors your Terraform-managed infrastructure for drift — changes made outside of Terraform workflows (console clicks, scripts, other tools). It scans your Terraform workspaces, detects discrepancies between state and reality, generates structured reports, and optionally auto-remediates or notifies your team.
Related contents:
Modular Go framework for attack surface management, reconnaissance, and vulnerability scanning.
NOX is a modular, Go based attack surface management and vulnerability scanning framework. It ships with 300 built in modules covering OSINT, subdomain enumeration, DNS, port scanning, web fingerprinting, and deep active vulnerability testing across injection, authentication, authorization, client side, cloud, API, and business logic vulnerability classes.
Turn Claude/Codex into geospatial analytics agent.
Claude, Codex, and GitHub Copilot skill for data scientists and analysts working with geospatial data on PostGIS, BigQuery, Snowflake, and Wherobots.
Universal SEO skill for Claude Code. 25 sub-skills + 18 sub-agents covering technical SEO, E-E-A-T, schema, GEO/AEO, backlinks, local SEO, maps intelligence, semantic clustering, e-commerce SEO, international SEO, Google APIs, and PDF/Excel reporting. Optional DataForSEO, Firecrawl, and Banana extensions.
Related contents: