Links
AddScan websites for exposed Supabase JWTs, enumerate accessible tables, and detect sensitive data exposure automatically.
A Python script that scans websites for exposed Supabase JWT tokens, enumerates accessible database tables, and analyzes them for sensitive data exposure. The script automatically detects sensitive information (emails, passwords, API keys, PII, financial data, etc.) and classifies vulnerability levels to identify which tables pose security risks.
your community gem host.
RubyGems.org is the Ruby community’s gem hosting service. Instantly publish your gems and then install them. Use the API to find out more about available gems. Become a contributor and improve the site yourself.
Related contents:
Quickly sandbox your AI agent.
Launch, control, and snapshot QEMU virtual machines through an async Python API. No root, no Docker, no cloud.
Quicksand is an async Python API to launch, control, and snapshot QEMU virtual machines with a particular focus on sandboxing AI agents. Quicksand provides pre-built Linux VMs for Ubuntu and Alpine distros and supports x86_64 and ARM64 across macOS, Linux, and Windows. Running sandboxes needs no root privileges or Docker; install the QEMU and image extras for a bundled runtime on supported platforms.
A better alternative for securing our sensitive information online.
The Web Authentication API (also known as WebAuthn) is a specification written by the W3C and FIDO, with the participation of Google, Mozilla, Microsoft, Yubico, and others. The API allows servers to register and authenticate users using public key cryptography instead of a password.
Traçage et Recensement des Actes de Cyberviolence d'Extrême droite. L'outil d'OSINT pour documenter l'ultra droite en ligne, preuves à l'appui.
TRACE documente et archive publiquement des comptes liés à la cyberviolence et à l'extrême droite : profils, activité et historique des changements, à disposition de celles et ceux qui agissent déjà — journalistes, associations, citoyens engagés.
Vue & Node admin panel framework.
Create Admin Panels faster on Node.js and Vue.js with AdminForth Framework. Setup main CRUD pages within minutes, extend as you need with Vue3.
The Apache Thrift software framework, for scalable cross-language services development, combines a software stack with a code generation engine to build services that work efficiently and seamlessly between C++, Java, Python, PHP, Ruby, Erlang, Perl, Haskell, C#, Cocoa, JavaScript, Node.js, Smalltalk, OCaml and Delphi and other languages.
Enjoy your music in a beautiful and modern UI. Beautiful and fast music streaming server.
Swing Music is a beautiful, self-hosted music player for your local audio files. Like a cooler Spotify ... but bring your own music.
A lightweight yet powerful plugin manager for Zsh.
It is a superset of the brilliant zgen. Providing more features and bugfixes while being fully backwards compatible. Have a look at the migration guide if you're currently using zgen. Also have a look at new features of zgenom.
Veilid is an open-source, peer-to-peer, mobile-first, networked application framework.
Veilid allows anyone to build a distributed, private app. Veilid gives users the privacy to opt out of data collection and online tracking. Veilid is being built with user experience, privacy, and safety as our top priorities. It is open source and available to everyone to use and build upon.
Veilid goes above and beyond existing privacy technologies and has the potential to completely change the way people use the Internet. Veilid has no profit motive, which puts us in a unique position to promote ideals without the compromise of capitalism.
Your workplace. Better Let's think outside the box and imagine a place where you can gather with your teammates wherever you are! Welcome to WorkAdventure: your virtual office, your digital event and your virtual campus!
Next Generation Frontend Tooling
Get ready for a development environment that can finally catch up with you.
A simple, elegant desktop BSD Operating System.
GhostBSD provides a simple desktop-oriented operating system based on FreeBSD with MATE and OS packages for simplicity. In addition, GhostBSD has a selection of commonly used software preinstalled to make it easy on your computing journey.
Related contents:
This is a list of different open-source video games and commercial video games open-source remakes.
Awesome cloud enumerator
A tool to find a company (target) infrastructure, files, and apps on the top cloud providers (Amazon, Google, Microsoft, DigitalOcean, Alibaba, Vultr, Linode). The outcome is useful for bug bounty hunters, red teamers, and penetration testers alike.
A free and open source map of the world. An interactive, customizable and open source map of the world, delivered as a single file hosted on cloud storage.
Protomaps is an open source map of the world, deployable as a single static file on cloud storage.
ExternalDNS synchronizes exposed Kubernetes Services and Ingresses with DNS providers.
Configure external DNS servers (AWS Route53, Google CloudDNS and others) for Kubernetes Ingresses and Services.
Related contents:
Liquid prompt is a smart prompt for the "Bourne-Again" Unix shell (bash) and for Zsh.
Dockerfile formatter, and a modern version of dockfmt. Built on top of the internal buildkit parser.
coreboot is an extended firmware platform that delivers a lightning fast and secure boot experience on modern computers and embedded systems. As an Open Source project it provides auditability and maximum control over technology.
Design Terminal UIs. Visually.
A Figma-like visual editor for TUI applications. Drag-and-drop components, edit properties in real-time, and export to 6 frameworks with one click.
aPapi is a PHP class that simplifies getting your account balance and recent transactions from PayPal. It merely logs you in as your user and then scrapes the screen to get the data you want and need.
Track AI Code all the way to production
An open-source Git extension for tracking AI code through the entire SDLC. Once installed, it automatically links every AI-written line to the agent, model, and transcripts that generated it — so you never lose the intent, requirements, and architecture decisions behind your code.
The AI-First Operations Platform. Transform Your Operations.
Reduce business risk and build operational resilience on the AI Operations Platform.
Related contents:
Galleria is a JavaScript image gallery framework that simplifies the process of creating beautiful image galleries for the web and mobile devices.
The Functional Source License (FSL) is a mostly permissive non-compete license that converts to Apache 2.0 or MIT after two years. It is designed for SaaS companies that value both user freedom and developer sustainability. FSL provides everything a developer needs to use and learn from your software without harmful free-riding.
PHP Static Analysis Tool - discover bugs in your code without running it!
Yoga is a cross-platform layout engine enabling maximum collaboration within your team by implementing an API familiar to many designers and opening it up to developers across different platforms.
ScummVM is a program which allows you to run certain classic graphical adventure and role-playing games, provided you already have their data files. The clever part about this: ScummVM just replaces the executables shipped with the games, allowing you to play them on systems for which they were never designed! ScummVM is a complete rewrite of these games' executables and is not an emulator.
Related contents:
TUI for MongoDB.
MongoDB TUI manager designed to simplify data visualization and quick manipulation.
A fast and efficient CLI tool for MongoDB database management, designed for developers who love to work in the terminal.
KamiYomu is a powerful, extensible manga crawler built for manga enthusiasts who want full control over their collection. It scans and downloads manga from supported websites, stores them locally, and lets you host your own private manga reader—no ads, no subscriptions, no limits.
A Manga Downloader - KamiYomu is a powerful, extensible manga downloader built for manga enthusiasts who want full control over their collection. It scans and downloads manga from supported websites, stores them locally, and lets you host your own private manga reader
Universal Web App Server.
NGINX Unit is a lightweight and versatile application runtime that provides the essential components for your web application as a single open-source server: running application code (including WebAssembly), serving static assets, handling TLS and request routing.
Self-Hosted Cloud in One Command. Nextcloud with NixOS in the backend and P2P connectivity enabled.
Nixtcloud turns a Raspberry Pi or NanoPi NEO3 into a privacy-first, zero-config personal cloud — powered by NixOS, Nextcloud, and peer-to-peer remote access via Holesail. Built for the self-hosting crowd who want full control without constant babysitting.
Related contents:
Simple yet powerful Traefik manager, enhanced with advanced features.
Mantræ is a user-friendly web interface designed to simplify the management of Traefik's dynamic configurations. Similar to Nginx Proxy Manager (NPM), this application allows you to manage your dynamic Traefik configuration from the comfort of a simple web ui.
Mantrae provides an intuitive UI for managing Traefik routers, middlewares, and DNS entries, making setup and configuration straightforward.
Test accessibility yourself: Radar and free scan. two free tools to test your website against WCAG.
WCAG Toolkit is free tooling from accessibility audit agency Proper Access. Every audit report has findings that sit in the content: an alt text that doesn't describe the image, headings that skip a level, a link called “read more”. These two tools point them out while you are working on the page.
Jyraphe is a web application of file repository, easy to install and easy to use. Jyraphe is an entirely free application, it is distributed under the terms of the GNU Affero General Public License, version 3 or later.
AI for Large Codebases
The first AI-native code platform that gives large projects compiler-grade context, so LLMs stay useful even when your repo spans millions of lines.
Brokk (the Norse god of the forge) is the first code assistant that understands code semantically, not just as chunks of text. Brokk is designed to allow LLMs to work effectively on large codebases that cannot be jammed entirely into working context.
pgFouine is a PostgreSQL log analyzer used to generate detailed reports from a PostgreSQL log file. pgFouine can help you to determine which queries you should optimize to speed up your PostgreSQL based application.
Our easy-to-use SEO tools will help you optimize your online presence, grow your business and generate more leads.
Quickly locate nix packages with specific files.
nix-index is a tool to quickly locate the package providing a certain file in nixpkgs. It indexes built derivations found in binary caches.
A compilation of challenges that aims to provide practice in simple to advanced concepts in the following topics: Digital Forensics, Incident Response, Malware Analysis and Threat Hunting.
This is aimed at Professionals, Security Researchers, Students, CTF Players as well as DFIR & Malware Analysis Enthusiasts in the field of Cyber Security who want to practice or have an interest in the aforementioned topics.
The secure CMS.
Geeklog is an open source application for managing dynamic web content. It is written in PHP and supports MySQL or PostgreSQL as the database backend.
"Out of the box", it is a blog engine, or a CMS with support for comments, trackbacks, multiple syndication formats, spam protection, and all the other vital features of such a system.
Curated list of resources on HashiCorp's Terraform and OpenTofu.
A local-first desktop IDE for Amazon ECS.
Mercek is a desktop app for Amazon ECS. It uses the AWS credentials already on your machine and shows your services across every account and region. It's read-only until you approve a change, and it talks to AWS directly, with no server in between and no telemetry.
salvador is a bash script that will help you maintain your AUR packages.
Related contents:
See exactly what an HTTP request returns to your browser
You can use this tool to generate a valid Permissions Policy HTTP Header, which can be provided by your web server / web application in order to improve the security of your visitors and the data they may be accessing on your site.
Visualize your data, optimize your performance.
Easily collect, correlate, and visualize data with beautiful dashboards using Grafana — the open source data visualization and monitoring solution that drives informed decisions, enhances system performance, and streamlines troubleshooting.
Related contents:
Apache Traffic Server™ software is a fast, scalable and extensible HTTP/1.1 and HTTP/2 compliant caching proxy server. Formerly a commercial product, Yahoo! donated it to the Apache Foundation, and currently used by several major CDNs and content owners.
Babylon.js: a complete JavaScript framework for building 3D games with HTML 5 and WebGL
Aggregate, save and share news links from all over the Web.
flusio brings together news feed aggregation and social bookmarking in a modern way. It is designed as a simple, yet complete tool for organising the links you gather around the Web. It comes with four main features:
Static analysis of Android applications, built for stalkerware and mobile malware research.
Drakkar reads an APK, or a raw DEX, and answers one question per mode: which MITRE ATT&CK for Mobile behaviours it implements, whether they are reachable, who signed it, when it was built, what its native code does at the JNI boundary, how close it is to another sample. Every mode prints its own legend: drakkar --<mode> --legend defines each label and each field it emits, and states the limits of each metric.
Server-side email notification manager using several push providers for real-time alerts. Conserve mobile battery without compromising on immediacy.
Stay connected without the constant drain on your battery. Introducing NotiMail - the future of server-side email notifications supporting multiple push providers and multiple email accounts!
Mobile devices often use IMAP IDLE, maintaining a persistent connection to ensure real-time email notifications. Such continuous connections rapidly consume battery power. The modern era demanded a smarter, more energy-efficient solution. Meet NotiMail.
Boot any package nixpkgs ever shipped, in this tab. Pick a package and a version from 13 years of nixpkgs history; its closure is fetched from cache.nixos.org into an x86_64 Linux virtual machine (QEMU compiled to WebAssembly) and you get a shell with the package on PATH.
Related contents:
Rust implementation of the H3 geospatial indexing system.
Related contents:
Hide .env secrets from prAIng eyes.
secrets live in local encrypted stores (per project) and are injected directly into apps at runtime, never touching disk as plaintext.
Related contents:
Docker Proxy Filter (DPF) is a smol, forward proxy for filtering the content and responses of Docker API responses to only those you want to expose.
Unlike the OG docker-socket-proxy and its variants, DPF provides filtering of the response content from the Docker API, rather than disabling/enabling of API endpoints. It does not connect directly to the Docker socket: it designed to be used with another Docker "Socket Proxy" container. Combined with a socket-proxy container that provides granular endpoint access it's possible to expose only information about specific containers in a read-only context.
Related contents:
It's CSS, with just a little more. The dynamic stylesheet language.
Less (which stands for Leaner Style Sheets) is a backwards-compatible language extension for CSS. This is the official documentation for Less, the language and Less.js, the JavaScript tool that converts your Less styles to CSS styles.