Links
AddMachinae is a tool for collecting intelligence from public sites/feeds about various security-related pieces of data: IP addresses, domain names, URLs, email addresses, file hashes and SSL fingerprints. It was inspired by Automater, another excellent tool for collecting information. The Machinae project was born from wishing to improve Automater in 4 areas:
APT-Hunter is Threat Hunting tool for windows event logs which made by purple team mindset to detect APT movements hidden in the sea of windows event logs to decrease the time to uncover suspicious activity . APT-Hunter use pre-defined detection rules and focus on statistics to uncover abnormalities which is very effective in compromise assessment . the output produced with timeline that can be analyzed directly from Excel , Timeline Explorer , Timesketch , etc...
Proton is an easily customizable html5 particle engine including five different types of renderers.
The Modern Php App Server, written in Go.FrankenPHP is a modern application server for PHP built on top of the Caddy web server.
FrankenPHP gives superpowers to your PHP apps thanks to its stunning features: Early Hints, worker mode, real-time capabilities, automatic HTTPS, HTTP/2, and HTTP/3 support...
FrankenPHP works with any PHP app and makes your Symfony projects faster than ever thanks to the provided integration with the worker mode (Laravel Octane support coming).
Related contents:
- Performance benchmark of PHP runtimes @ Dzmitry Kazbiarovich's dev.to.
- FrankenPHP – Le serveur PHP surpuissant écrit en Go @ Korben :fr:.
- FrankenPHP, un serveur web moderne (surcouche à Caddy), compilons-le avec une version de PHP différente de la dernière @ Ludovic Frank :fr:.
- FrankenPHP With Alexandre Daubois post auphonic @ PHP Architect's YouTube.
Simple file renamer for shows.
ReNamed is a simple, terminal-based C tool that helps you automatically rename and organize episodes of TV shows — including specials — with clean, consistent filenames.
💽 Build Bespoke OS Images
A fancy wrapper around dnf --installroot, apt, pacman and zypper that generates customized disk images with a number of bells and whistles.
Related contents:
Simple way to manage your todo list in AJAX style. Written in PHP and jQuery. Data stored in SQLite or MySQL database. Distributed under the GNU GPL License.
Production-ready fullstack but simple mail server (SMTP, IMAP, LDAP, Antispam, Antivirus, etc.) running inside a container. Only configuration files, no SQL database. Keep it simple and versioned. Easy to deploy and upgrade. Documentation via MkDocs.
Concerto is an open source digital signage system. Users submit graphic, textual, and other content, and moderators approve that content for use in a variety of content feeds which are displayed on screens connected to computers displaying the Concerto frontend.
Educational framework exploring ergonomic, lightweight multi-agent orchestration. Managed by OpenAI Solution team.
Related contents:
Standardized Serverless ML Inference Platform on Kubernetes. Highly scalable and standards based Model Inference Platform on Kubernetes for Trusted AI.
KServe provides a Kubernetes Custom Resource Definition for serving predictive and generative machine learning (ML) models. It aims to solve production model serving use cases by providing high abstraction interfaces for Tensorflow, XGBoost, ScikitLearn, PyTorch, Huggingface Transformer/LLM models using standardized data plane protocols.
Related contents:
Wapp is a new framework for writing web applications in TCL, with the following advantages:
Very small API → easy to learn and use
A complete application is contained in a single file
Resistant to attacks and exploits
Cross-platform → CGI, SCGI, or a built-in web server
The MVC design pattern is supported but not required
The Wapp framework itself is a single-file TCL script that is "source"-ed, "package require"-ed, or even copy/pasted into the application TCL script
2-clause BSD license
Free Open-Source Mac Cleaner & App Uninstaller (CleanMyMac Alternative).
Related contents:
The Monster Terminal UI Kernel for Rust.
Minimal, high-performance terminal UI kernel with diff-based rendering, inline mode, and RAII terminal cleanup.
Mobile Security Analysis. Uncover the threats targeting your smartphones.
Shindan is a SaaS, mobile and desktop application, that detects compromissions and vulnerabilities on smartphones and tablets, without access to personal data. Get a quick and accurate diagnosis to protect your VIPs and collaborators.
Related contents:
-#537: Espionnage et recherche de compromission dans les environnements mobiles @ NoLimitSecu :fr:.
Stop the tracking circus. Kill the cookie banner!
Tired of misleading cookie banners? The EU Commission has finally proposed a solution: set your privacy preferences in the browser once, and never see another banner. Unfortunately, the tracking industry is pushing back – and so far, they’ve been successful. We need YOUR help to #KillTheCookieBanner!
A visualization tool that replays coding-agent sessions on a 3D map of your codebase.
🦉 human-readable regular expressions. PHP port of regexpbuilderjs
RegExpBuilder integrates regular expressions into the programming language, thereby making them easy to read and maintain. Regular Expressions are created by using chained methods and variables such as arrays or strings.
Rapidly Search and Hunt through Windows Forensic Artefacts.
Chainsaw provides a powerful ‘first-response’ capability to quickly identify threats within Windows forensic artefacts such as Event Logs and MFTs. Chainsaw offers a generic and fast method of searching through event logs for keywords, and by identifying threats using built-in support for Sigma detection rules, and via custom Chainsaw detection rules.
⚡️ The open-source form framework for Vue.
FormKit is a form-authoring framework for Vue developers that makes building high quality production-ready forms 10x faster. It is easy-to-learn and ships with production-ready scaffolding like inputs, forms, submission and error handling, and validation rules. To learn more check out the documentation website at: formkit.com.
open platform for spotlight. Allow to add plugable features to spotlight.
Passive API Contract Monitoring for PHP 8.3+. Detects breaking changes, json schema drift, and unexpected structural modifications in third-party REST APIs via probabilistic inference.
Passive API Contract Monitoring for strictly typed PHP 8.3+.
Sentinel silently monitors the JSON payloads returning from the third-party APIs you consume, automatically infers their structural JSON Schema, and detects when they change unexpectedly (drift).
Open Source Collaboration for Developers. Team collaboration built for developers. Finally, an open source platform that’s secure, flexible, and integrated with the tools you love.
Sovereign Web Analytics.
Deploy on your servers, in your jurisdiction, under your security policy. HitKeep is a single auditable binary — no PostgreSQL, no Redis, no ClickHouse, no external service calls. Your traffic data never leaves your network.
Black Screen is an IDE in the world of terminals. Strictly speaking, it's both a terminal emulator and an interactive shell based on Electron. Also, unlike most of the emulators you can meet nowadays it uses HTML and CSS for its UI (exactly as Atom does), which means we can stop misusing unicode characters and make a better looking terminal with appropriate tools.
HopToDesk is an open-source remote desktop, and alternative to TeamViewer.
A purely functional expression language for No-Code tools. A simple, well-designed, portable, and safe data expression language.
Elo compiles to JavaScript, Ruby, and SQL. Built for No-Code tools where non-technical users need to manipulate data easily and safely.
Related contents:
Towards Natural‑Language Programming for GitHub Action.
Write agentic workflows in natural language markdown, and run them in GitHub Actions.
One terminal. The whole herd.
Herdr is an agent runtime that runs inside your terminal. Keep your shell, SSH setup, fonts, and keybinds; add tmux-style persistence, mouse-native panes, blocked, working, and done agent state, and an API agents can drive.
Related contents:
Preevy is a powerful CLI tool designed to simplify the process of creating ephemeral preview environments. Using Preevy, you can easily provision any Docker-Compose application on AWS using affordable Lightsail, Google Cloud, or Microsoft Azure VMs (support for more cloud providers is on the way).
Boring-registry is a simple open source module and provider registry compatible with Terraform and OpenTofu.
With boring-registry, you can upload and distribute your own modules and providers, as an alternative to publishing them on HashiCorp’s public Terraform Registry.
Support for the Module Registry Protocol, Provider Registry Protocol, and Provider Network Mirror Protocol allows it to work natively with Terraform and OpenTofu.
The future of customer support is here. The Business Messaging Platform For Every Company.
The all-in-one AI-powered business messaging platform that gathers teams, conversations, data and knowledge, around one place.
Simple & hassle-free image resize & crop based on a pseudo-viewport. Touch-friendly via touch-punch.
The Context Optimization Layer for LLM Applications
Compress everything your AI agent reads. Same answers, fraction of the tokens. Compress tool outputs, logs, files, and RAG chunks before they reach the LLM. 60-95% fewer tokens, same answers. Library, proxy, MCP server.
Related contents:
A collection of DESIGN.md files inspired by popular brand design systems. Drop one into your project and let coding agents generate a matching UI.
Copy a DESIGN.md into your project, tell your AI agent "build me a page that looks like this" and get pixel-perfect UI that actually matches.
Rust implementation of the Microsoft Remote Desktop Protocol (RDP).
A collection of Rust crates providing an implementation of the Microsoft Remote Desktop Protocol, with a focus on security.
The ultimate Object Relational Mapper for Node.js, Bun and Deno, offering seamless integration with a variety of popular databases. Orange ORM supports both TypeScript and JavaScript, including both CommonJS and ECMAScript.
A self-contained, lightweight and OOB research platform for modern ML.
Boson is a lightweight, fully containerized, and feature-rich machine learning research platform. It centralizes essential tools to help teams keep projects lean, organized, and reproducible—while reducing overhead and boosting productivity. Think Databricks/Sagemaker but local and free.
Boson enables engineers and researchers to iterate faster without getting bogged down by infrastructure or tooling complexity.
sqlcake is an automatic SQL injection exploitation kit written in Ruby. It's designed for system administration and penetration testing.
Instiki is a wiki clone so pretty and easy to set up, you'll wonder if it’s really a wiki. Runs on Rails and focuses on portability and stability. Supports file uploads, PDF export, RSS, multiple users and password protection. Some use Instiki as a CMS (Content Management System) because of its ability to export static pages.
Linux for ARM development boards. Perfect for server and IOT.
Ultralight Linux optimized for custom ARM / RISC-V or Intel / AMD hardware Comes with powerful ZSH or standard BASH shell.
Docs is a collaborative text editor designed to address common challenges in knowledge building and sharing.
A collaborative note taking, wiki and documentation platform that scales. Built with Django and React. Opensource alternative to Notion or Outline.
Docs is the result of a joint effort led by the French 🇫🇷🥖 (DINUM) and German 🇩🇪🥨 governments (ZenDiS).
Shape a delightful search experience in a snap.
An open-source, lightning-fast, and hyper-relevant search engine that fits effortlessly into your apps, websites, and workflow.
Play DOS games online in your browser.
Bring back some good memories by playing DOS games in a modern way! We currently feature 639 original DOS games to play online in your browser. Login to use our unique cloud save service and continue your game on any other computer!
openmediavault is the next generation network attached storage (NAS) solution based on Debian Linux. It contains services like SSH, (S)FTP, SMB/CIFS, DAAP media server, RSync, BitTorrent client and many more. Thanks to the modular design of the framework it can be enhanced via plugins.
Find and verify secrets. Find leaked credentials.
TruffleHog is the most powerful secrets Discovery, Classification, Validation, and Analysis tool. In this context secret refers to a credential a machine uses to authenticate itself to another machine. This includes API keys, database passwords, private encryption keys, and more...
Related contents:
Friendika is decentralised, open source, secure, private, modular, extensible, and federated.
OpenFace is a Python and Torch implementation of face recognition with deep neural networks and is based on the CVPR 2015 paper FaceNet: A Unified Embedding for Face Recognition and Clustering by Florian Schroff, Dmitry Kalenichenko, and James Philbin at Google. Torch allows the network to be executed on a CPU or with CUDA.
The Debug Bar integrates easily in any projects and can display profiling data from any part of your application. It comes built-in with data collectors for standard PHP features and popular projects.
Property-based testing for web UIs, autonomously exploring and validating correctness properties, finding harder bugs earlier.
Runs in your local developer environment, in CI, and inside Antithesis.
Create and manage micro VMs at scale for safe execution of untrusted code. Secure sandboxed compute for AI agents and workloads
K7 Demo
Katakate aims to make it easy to create, manage and orchestrate lightweight safe VM sandboxes for executing untrusted code, at scale. It is built on battle-tested VM isolation with Kata, Firecracker and Kubernetes. It is orignally motivated by AI agents that need to run arbitrary code at scale.
Next.js / Wordpress Starter. Our opinionated headless WordPress boilerplate - with GraphQL, RSC, PostCSS.
An opinionated boilerplate for decoupled (headless) websites that are both performant (Next.js) and easy to edit (WordPress with Gutenberg block editor) — focused on accelerating custom blocks development.
Create unique web design with Twitter Bootstrap. Kw: themes, templates, styles. generator. customize.
Dribbbox displays your work in a clean, easy-to-browse gallery, avoiding the noise of Dribbble's comments, rebounds, ads, … It’s your portfolio, not your social network profile.
An HTML pre-processor for web typography. Typeset provides typographic features used traditionally in fine printing which remain unavailable to browser layout engines.
QA via natural language AI tests. AI-powered natural language end-to-end testing framework.
Write tests in plain English and let AI handle the execution. Built on Playwright with seamless GitHub integration.
Web Skills is a visual overview of useful skills to learn as a web developer. It is useful for people who just started learning about web development and for people who have been in the field for years and want to learn new things. As a beginner, I would encourage you not to see this website as the definitive list of what you need to know but as an example of what you can learn and where you can start. The skills are arranged in chronological order based on what learning path I recommend you to take but feel free to jump around freely.
A Graphical IDE for Kubernetes.
Freelens is a Kubernetes IDE that provides a graphical interface for managing and monitoring Kubernetes clusters. Freelens is maintained by the community.
Freelens is a free and open-source user interface designed for managing Kubernetes clusters. It provides a standalone application compatible with macOS, Windows, and Linux operating systems, making it accessible to a wide range of users. The application aims to simplify the complexities of Kubernetes management by offering an intuitive and user-friendly interface.