Quickly discover the attack surface, and identify vulnerabilities using highly customizable and powerful scan engines. Enjoy peace of mind with reNgine's continuous monitoring, deeper reconnaissance, and open-source powered Vulnerability Scanner.

reNgine is an automated reconnaissance framework for web applications with a focus on highly configurable streamlined recon process via Engines, recon data correlation and organization, continuous monitoring, backed by a database, and simple yet intuitive User Interface. reNgine makes it easy for penetration testers to gather reconnaissance with minimal configuration and with the help of reNgine's correlation, it just makes recon effortless.

• reNgine @ GitHub

Pick the right UI Library for your Vue 3 or Nuxt 3 Project.

A playground for comparing AI image models.

• Zoo @ GitHub.
• Zoo – Pour jouer avec différents modèles de génération d’images @ Korben (fr).

Room EQ Wizard Room Acoustics Software.

REW is free software for room acoustic measurement, loudspeaker measurement and audio device measurement. The audio measurement and analysis features of REW help you optimise the acoustics of your listening room, studio or home theater and find the best locations for your speakers, subwoofers and listening position. It includes tools for generating audio test signals; measuring SPL and impedance; measuring frequency and impulse responses; measuring distortion; generating phase, group delay and spectral decay plots, waterfalls, spectrograms and energy-time curves; generating real time analyser (RTA) plots; calculating reverberation times; calculating Thiele-Small parameters; determining the frequencies and decay times of modal resonances; displaying equaliser responses and automatically adjusting the settings of parametric equalisers to counter the effects of room modes and adjust responses to match a target curve.

An extensible multilanguage static code analyzer.

PMD is a source code analyzer. It finds common programming flaws like unused variables, empty catch blocks, unnecessary object creation, and so forth. It supports many languages. It can be extended with custom rules. It uses JavaCC and Antlr to parse source files into abstract syntax trees (AST) and runs rules against them to find violations. Rules can be written in Java or using a XPath query.

• PMD @ GitHub.

jSQL Injection is a Java application for automatic SQL database injection.

Voice Meeting Notes & Real-time Transcription

Total visibility of your software engineering lifecycle.

Chalk™ captures metadata at build time, and can add a small 'chalk mark' (metadata) to any artifacts, so they can be identified in production. Chalk can also extract chalk marks and collect additional metadata about the operating environment when it does this.

Using Chalk, you can build a graph connecting development and production, so that devops engineers understand what is happening in the development process, and so that developers can understand what is happening in the infrastructure. With this information they can work better together.

• Chalk: Open-source software security and infrastructure visibility tool @ Help Net Security.

A simple, web based IT Service Management tool.

iTop stands for IT Operations Portal. It is a complete open source and web-based IT service management platform, including a fully customizable CMDB, a helpdesk system, and a document management tool. It is ITIL compliant and easily customizable and extensible thanks to a high number of add-ons and web services to integrate with your IT.

• iTop @ GitHub.
• Ce qui change avec iTop 3.1, l’ITMS open source @ Goodtech.info (fr).

Imagine the internet like a huge neighborhood. There's a lot of folks around, but we rarely bump into each other, right? Kagi's all about humanizing the web and we want to help surface the people behind the posts and stories that zip by. This less known corner of the web is also known as the "small web".

The Green Standard Editing Protocol for Internet Publishing.

a set of rules and guidelines that can be used by humans and machines to determine whether a story is worth publishing, how to specifically improve the story’s content, and how to distribute the story with more reach and relevance.

• HackerNoon Releases “The Editing Protocol” - Technical Documentation for Digital Publishing at Scale @ HackerNoon.

dav1d is a new AV1 cross-platform decoder, open-source, and focused on speed, size and correctness.

• dav1d @ GitHub.

The Universal Process Orchestrator. Process Orchestration for end-to-end automation.

Fast, Git Friendly API Client

Bruno is a new and innovative open source API client, aimed at revolutionizing the status quo represented by Postman, Insomnia and similar tools out there.

Bruno stores your collections directly in a folder on your filesystem. We use a plain text markup language, Bru, to save information about API requests.

• Bruno @ GitHub.
• Dites adieu à Postman grâce à Bruno qui vous aidera à concevoir les meilleurs API de l’univers @ Korben :fr:.

USB virus cleaning station. Retrieve untrusted files from USB (via keysas-io) or over the network.

A highly customizable way to play chess in your terminal / command line. Play online (via Lichess.org) and offline against the Fairy-Stockfish engine. All Lichess variants are supported.

• CLI-Chess – Jouez aux échecs dans votre terminal @ Korben (fr).

Tools for building custom lint rules.

💡 Easily write powerful Dart & Flutter lint rules for your projects or for users of your packages.

• custom_lint @ GitHub.
• Un IDE Flutter sur mesure avec custom_lint @ Octo talks! (fr).

Openrouteservice is a open source route planner with plenty of features for car, heavy vehicles, hiking, cycling and wheelchair.

This application implements a map client for the openrouteservice API as Single Page Application (SPA). It is a base application that can be used for multiple purposes, customized via configurations and extended via plug-ins.

OpenRouteService map client @ GitHub.

The Volatility Foundation is an independent 501(c) (3) non-profit organization that maintains and promotes The Volatility memory forensics framework.

• Volability 3 @ GitHub.

Dropwizard pulls together stable, mature libraries from the Java ecosystem into a simple, light-weight package that lets you focus on getting things done.

Dropwizard has out-of-the-box support for sophisticated configuration, application metrics, logging, operational tools, and much more, allowing you and your team to ship a production-quality web service in the shortest time possible.

Dropwizard @ GitHub

HookPhish is a Python script designed to aid in the detection of phishing websites. It performs various checks on suspected URLs to identify potential threats.

Starter theme WordPress with Tailwind CSS and Vite JS.

• PressWind - Starter thème WordPress basé sur TailwindCSS et ViteJS @ WP Performance (fr).

Apache Tika bindings for PHP: extract text and metadata from documents, images and other formats.

The Apache Tika™ toolkit detects and extracts metadata and text from over a thousand different file types (such as PPT, XLS, and PDF).

The most powerful vector database for building AI applications. Open-source PostgreSQL database extension for vector data and vector search operations.

Lantern is an open-source PostgreSQL database extension to store vector data, generate embeddings, and handle vector search operations.

• Lantern @ GitHub.

The open-source alerts management and automation platform. Imagine you had GitHub Action for any part of your observability stack.

Keep makes it easy to consolidate all your alerts into a single pane of glass and to orchestrate workflows to automate your end-to-end processes.

Keep @ GitHub.

Track Financial Transactions at Scale. The world’s fastest financial accounting database

Not to mention the smallest and toughest. An incredible storage fault model. TigerBeetle is the system of record for the next generation of financial services.

TigerBeetle is a financial accounting database designed for mission critical safety and performance to power the future of financial services.

TigerBeetle @ GitHub.

Related contents:

• Episode #626: Turso is rewriting SQLite in Rust @ Changelog Interviews.
• Episode #635: The 1000x faster financial database @ Changelog Interviews.

An operating system I've been writing since ~June 2017. Although it's a long shot (and very optimistic), I ultimately intend it to replace Linux and Windows as a desktop operating system.

• Essence @ GitLab.

a simple container runtime that aspires to become runc for unikernels

PuzzleFS is a next-generation container filesystem.

Puzzlefs is a container filesystem designed to address the limitations of the existing OCI format. The main goals of the project are reduced duplication, reproducible image builds, direct mounting support and memory safety guarantees, some inspired by the OCIv2 design document.

corrosion is a distributed system for propagating SQLite state across a cluster of nodes.

• Corrosion @ GitHub

The unified data layer

Connect your APIs, databases and microservices to a unified API at the edge. Delight your users with fast response times globally. Deploy globally fast GraphQL APIs with a top-notch developer experience.

• Grafbase @ GitHub.

The Ultimate Server Management Tool.

Vito is a self-hosted web application that helps you to manage your servers and deploy your PHP applications into production servers without a hassle.

• VitoDeploy @ GitHub.

Zig is a general-purpose programming language and toolchain for maintaining robust, optimal and reusable software.

• Zig @ GitHub.

Related contents:

• Zig guide.
• Episode #635: The 1000x faster financial database @ Changelog Interviews.
• Things Zig comptime Won’t Do @ matklad.
• Zig’s Lovely Syntax @ matklad.
• Reserve First @ matklad.

TIO is a family of online interpreters for an evergrowing list of practical and recreational programming languages. To use TIO, simply click the arrow below, pick a programming language, and start typing. Once you click the run button, your code is sent to a TIO arena, executed in a sandboxed environment, and the results are sent back to your browser. You can share your code by generating a client-side permalink that encodes code and input directly in the URL.

• TIO – Des interpréteurs de code gratuits pour les développeurs et les enseignants @ Korben (fr).

Collection of utility functions for use with Scroll-Driven Animations.

• Run a Scroll-Driven Animation only once @ Bram.us.

Collection of malware source code for a variety of platforms in an array of different programming languages.

• VX Underground.
• Le code source de nombreux malwares exposés dans ce dépôt GitHub ! @ Korben (fr).

Snaffler is a tool for pentesters and red teamers to help find delicious candy needles (creds mostly, but it's flexible) in a bunch of horrible boring haystacks (a massive Windows/AD environment).

• Cybersécurité : les erreurs courantes de configuration réseau @ Silicon (fr).
• Analysez vos partages de fichiers Active Directory avec Snaffler pour protéger vos données @ IT-Connect :fr:.

Enumerate all network shares in the current domain. Also, can resolve names to IP addresses.

Quick and dirty binary to list network share information from all machines in the current domain and if they're readable. Can also translate all computer names to ip addresses.

• Cybersécurité : les erreurs courantes de configuration réseau @ Silicon (fr).

World's fastest and most advanced password recovery utility.

hashcat is the world's fastest and most advanced password recovery utility, supporting five unique modes of attack for over 300 highly-optimized hashing algorithms. hashcat currently supports CPUs, GPUs, and other hardware accelerators on Linux, Windows, and macOS, and has facilities to help enable distributed password cracking.

• hashcat @ GitHub.

Related contents:

• Cybersécurité : les erreurs courantes de configuration réseau @ Silicon (fr).

Reference implementation of OpenPubkey.

OpenPubkey adds user generated cryptographic signatures to OpenID Connect (OIDC) to enable users to sign messages or artifacts under their OpenID identity. Verifiers can check that these signatures are valid and associated with the signing OpenID identity. OpenPubkey does not add any new trusted parties beyond what is required for OpenID Connect and is fully compatible with existing OpenID Providers (Google, Azure/Microsoft, Okta, OneLogin, Keycloak) without any changes to the OpenID Provider.

Related contents:

• Linux Foundation Announces OpenPubkey Open Source Cryptographic Protocol @ Security Week.
• Ce qu’il faut savoir sur le projet OpenPubkey @ Goodtech.info :fr:.
• Turning Github Actions into an oracle @ Ethan Heilman.

DevDocs combines multiple API documentations in a fast, organized, and searchable interface.

Gather all the documentation for your dependencies in one place instantly! 🪄

Naming things needn’t be hard. Find inspiration for naming things – be that HTML classes, CSS properties or JavaScript functions – using these lists of useful words.

Linux for 8086.

• ELKS and Fuzix: Linux – and Unix – writ very, very small @ The Register.

API Management Platform. Govern, Secure & Manage APIs and Event Streams.

Try the first-ever event-native API Management solution that natively supports synchronous REST APIs, asynchronous APIs, and event brokers like Kafka and MQTT.

• Gravitee.io @ GitHub.

Choices.js is a lightweight, configurable select box/text input plugin. Similar to Select2 and Selectize but without the jQuery dependency.

• Choices @ GitHub.

ESASky is an application that allows to visualize and download public astronomical data.

It's Google Earth but for the night sky :heart_eyes:

Charts.css is an open source CSS framework for data visualization.

Visualization help end-users understand data. Charts.css help frontend developers turn data into beautiful charts and graphs using simple CSS classes.

• Charts.css @ GitHub.

Frontend-as-a-service for eCommerce.

PWA Frontend Solution for Headless & Composable Front-Commerce is the only front-end that improves the developer, merchant & customer experience all at the same time.

Create a custom website. No-code website builder. Build with the power of code — without writing any.

Take control of HTML, CSS, and JavaScript in a visual canvas. Webflow generates clean, semantic code that’s ready to publish or hand to developers.

• Webflow @ YouTube.

GSAP – A wildly robust JavaScript animation library built for professionals.

• GSAP @ GitHub. - GSAP @ CodePen.

Bring your code, we'll handle the rest.

Made for any language, for projects big and small. Railway is the cloud that takes the complexity out of shipping software.

The ultimate multi-model database. Develop easier. Build faster. Scale quicker.

SurrealDB is an end-to-end cloud-native database designed for modern applications, including web, mobile, serverless, Jamstack, backend, and traditional applications. With SurrealDB, you can simplify your database and API infrastructure, reduce development time, and build secure, performant apps quickly and cost-effectively.

• SurrealDB @ GitHub.
• SurrealDB University.

SQLite for modern applications.libSQL is a fork of SQLite that is both Open Source, and Open Contributions.

libSQL is an open source, open contribution fork of SQLite, created and maintained by Turso. We aim to evolve it to suit many more use cases than SQLite was originally designed for, and plan to use third-party OSS code wherever it makes sense.

• libSQL @ GitHub.

SQLite is a C-language library that implements a small, fast, self-contained, high-reliability, full-featured, SQL database engine.

Related contents:

• SQLite: How it works, by Richard Hipp @ Prof. Dr. Jens Dittrich, Big Data Analytics' YouTube.
• Optimizing SQLite for servers @ Sylvain Kerkour :fr:.
• What you need to know about SQLite @ Joy of Rails.
• Collection of insane and fun facts about SQLite @ avi.im's blag.

Nue is a complete frontend development toolset. An alternative to ecosystems like Vite, Next.js, and Astro.

Nue JS is an exceptionally small (2.3kb minzipped) JavaScript library for building web interfaces. It is the core of the upcoming Nue toolset. It’s like Vue.js, React.js, or Svelte but there are no hooks, effects, props, portals, watchers, provides, injects, suspension, or other unusual abstractions on your way. Learn the basics of HTML, CSS, and JavaScript and you are good to go.

• Nue @ GitHub.

Ship AI features in minutes. Pezzo enables you to build, test, monitor and instantly ship AI all in one platform, while constantly optimizing for cost and performance.

🕹️ Open-source, developer-first LLMOps platform designed to streamline prompt design, version management, instant delivery, collaboration, troubleshooting, observability and more.

• Pezzo @ GitHub.

Active Directory data collector for BloodHound written in Rust. 🦀

RustHound generates users, groups, computers, OUs, GPOs, containers, and domain JSON files that can be analyzed with BloodHound.

BloodHound uses graph theory to reveal the hidden and often unintended relationships within an Active Directory or Azure environment. Attackers can use BloodHound to easily identify highly complex attack paths that would otherwise be impossible to quickly identify. Defenders can use BloodHound to identify and eliminate those same attack paths. Both blue and red teams can use BloodHound to easily gain a deeper understanding of privilege relationships in an Active Directory or Azure environment.

• BloodHound @ GitHub.
• Installation de BloodHound via Docker @ IT-Connect :fr:.
• Identifiez les faiblesses de votre Active Directory avec BloodHound @ IT-Connect :fr:.

Open Vulnerability Assessment Scanner.

OpenVAS is a full-featured vulnerability scanner. Its capabilities include unauthenticated and authenticated testing, various high-level and low-level internet and industrial protocols, performance tuning for large-scale scans and a powerful internal programming language to implement any type of vulnerability test.

• OpenVAS @ GitHub