Links
AddThis project automates the creation of a complete security lab environment for detection engineering and attack simulation. With a single command, it deploys three virtual machines: a fully configured Splunk server, a Windows Server Active Directory Domain Controller with advanced logging, and a Splunk SOAR server for automated response capabilities.
Detect security threats in real time
Falco is a cloud-native security tool designed for Linux systems. It employs custom rules on kernel events, which are enriched with container and Kubernetes metadata, to provide real-time alerts. Falco helps you gain visibility into abnormal behavior, potential security threats, and compliance violations, contributing to comprehensive runtime security.
Related contents:
- k8s-custom-detections @ GitHub.
- Réagir à temps aux menaces dans Kubernetes avec Falco (Rachid Zarouali, Thomas Labarussias) @ Voxxed Days Luxembourg's YouTube :fr:.
- Extending Falco for Bitcoin @ sysdig.
- Falcoctl: Artifact Management for Falco @ Cloud Native Computing Foundation.
- How Falco and Stratoshark close the gap between open source runtime detection and deep forensic analysis @ sysdig.
- Blueprinting Security in CI/CD: Building Trust Through Open Source @ CD Foundation.
- Episode #540 consacré à Falco @ NoLimitSecu :fr:.
Sirius is an open-source comprehensive vulnerability scanner that leverages community-driven security intelligence and automated penetration testing capabilities.
Got a GitHub token (PAT, App, OAuth) and want to figure out what permissions it has? This repo solves this by allowing you to test and validate the different types of GitHub token..
An auditing tool for detecting vulnerabilities, powered by advisory databases that follow the OSV specification.
One framework for creating powerful cross-platform games.
MonoGame is a simple and powerful .NET framework for creating games for desktop PCs, video game consoles, and mobile devices using the C# programming language. It has been successfully used to create games such as Streets of Rage 4, Carrion, Celeste, Stardew Valley, and many others.
WebGoat is a deliberately insecure application that allows interested developers just like you to test vulnerabilities commonly found in Java-based applications that use common and popular open source components.
Related contents:
Magic is a CSS3 framework with many animations. Is simple to use and many animations are cross-browser compatible.
Login screen for your apps. The simplest way to protect your apps with a login screen.
Tinyauth is a simple authentication middleware that adds a simple login screen or OAuth with Google, Github and any provider to all of your docker apps. It supports all the popular proxies like Traefik, Nginx and Caddy.
Related contents:
Video Gear for Retro Gaming Consoles.
At RetroTINK, we’re all about letting you experience your favorite vintage games on today’s screens—just like you remember, or even better. Whether you need a simple plug-and-play adapter or a high-end video processor, each product is carefully engineered to preserve that classic gaming feel while making the most of modern hardware.
Related contents:
Git with a cup of tea. A painless self-hosted Git service. Gitea is a community managed lightweight code hosting solution written in Go.
Related contents:
10er10 is an HTML5 audio jukebox. It works on Firefox 4+ and Chromium/Chrome.
The Most Widely Deployed Open Source Cloud Software in the World. Deployed by thousands. Proven production at scale. OpenStack is a set of software components that provide common services for cloud infrastructure.
wanderer is a self-hosted trail database. You can upload your recorded tracks or create new ones and add various metadata to build an easily searchable catalogue.
Incrementally adoptable type-safety for your new and existing APIs. RPC-like client, contract, and server implementation for a pure REST API
ts-rest offers a simple way to define a contract for your API, which can be both consumed and implemented by your application, giving you end to end type safety without the hassle or code generation.
Onion addresses for anything.
onionpipe forwards ports on the local host to remote Onion addresses as Tor hidden services and vice-versa. onionpipe is a decentralized way to create virtually unstoppable global network tunnels.
UNIX-to-HTML5-Canvas screencasting (X11 or OS X)
x11-canvas-screencast is a UNIX-to-HTML5-Canvas screencasting system that uses the same animation technique as the anim_encoder project.
A web browser for AI agents & applications. An AI web browsing framework focused on simplicity and extensibility.
SIEM Detection Format. The shareable detection format for security professionals.
Sigma is a generic, open, and structured detection format that allows security teams to detect relevant log events in a simple and shareable way.
Detection engineers, threat hunters and all defensive security practitioners collaborate on detection rules. The repository offers more than 3000 detection rules of different type and aims to make reliable detections accessible to all at no cost.
A native MacOS Postgres client.
Searchlight is a native macOS, open-source PostgreSQL client designed to be simple, lightweight, and developer-friendly. It offers a clean and intuitive interface for managing databases and running queries without the complexity of full-scale database management tools. Searchlight focuses on delivering a smooth and efficient experience for developers who need quick and easy access to their PostgreSQL databases.
GPU worker client for the Talos network. Pairs with your Talos account, serves open-model inference jobs over a WebSocket, and reports uptime for payouts.
A JavaScript toolkit that saves you time and scales with your development process. Provides everything you need to build a Web app. Language utilities, UI components, and more, all in one place, designed to work together perfectly.
Related contents:
The free AI already on your Mac.
macOS Tahoe ships with a 3B parameter LLM. apfel gives you CLI access with one brew install. No model downloads, no API keys, no configuration needed, just works.
Related contents:
lightweight jQuery plugin for fade-as-you-scroll features
Conftest is a utility to help you write tests against structured configuration data. For instance, you could write tests for your Kubernetes configurations, Tekton pipeline definitions, Terraform code, Serverless configs or any other structured data.
Conftest relies on the Rego language from Open Policy Agent for writing policies. If you're unsure what exactly a policy is, or unfamiliar with the Rego policy language, the Policy Language documentation provided by the Open Policy Agent documentation site is a great resource to read.
Related contents:
Oui, je sais, je vous entends d’ici : les méthodes, applications, extensions et autres machins pour télécharger des vidéos du web ont déjà toutes été rebattues des milliers de fois dans les blogs, tout le monde sait faire ça et le sujet est hasbeen depuis le 23 avril 2005 (à 15h56). Et puis, à l’heure du haut débit partout et pour tous et de l’internet mobile, qui charge encore des vidéos sur son pc, mmmh ? Je pensais la même chose.
pbgopy allows to copy and paste between devices.
pbgopy acts like pbcopy/pbpaste but for multiple devices.
It lets you share data across devices like you copy and paste.
A small jQuery plugin that triggers a callback after all the selected/child images have been loaded. Because you can't do .load() on cached images.
Your beautiful, powerful, self-hosted rom manager.
Scan, enrich, and browse your game collection with a clean and responsive interface.
With support for multiple platforms, various naming schemes and custom tags, RomM is a must-have for anyone who plays on emulators.
Related contents:
Related contents:
Lightweight type coercion library.
Of Coerce! is a lightweight, near-zero overhead alternative to Zod and Valibot.
Unlike these libraries, Of Coerce! focuses on a single task: ensuring the data corresponds to the types.
It uses built-in JavaScript features to coerce whatever you pass to it, which makes it the fastest and the most lightweight solution (full library is 381B!).
USB virus cleaning station. Retrieve untrusted files from USB (via keysas-io) or over the network.
Generate your .bashrc PS1 prompt easily with a drag and drop interface
Build your own accurate air quality monitor with the build instructions below. You can either source the components yourself or get a ready-to-build kit from our online shop.
Related contents:
A set of simple stack effects for inspiration. The main idea is to have one item shown initially and then, on some trigger, more items are revealed as decoration. As seen in image grids or on scroll websites as creative effect.
Fully automatic censorship removal for language models.
Heretic is a tool that removes censorship (aka "safety alignment") from transformer-based language models without expensive post-training. It combines an advanced implementation of directional ablation, also known as "abliteration" (Arditi et al. 2024), with a TPE-based parameter optimizer powered by Optuna.
SMI (Services Maintenance Interventions) est un logiciel libre de gestion et de suivi de maintenance ou gestion de SAV et de services, multi professions, développé en PHP/MySQL, placé sous la licence GPL (traduction française non officielle).
Guide, reference and cheatsheet on web scraping using rvest, httr and Rselenium. Inspired by Hartley Brody, this cheat sheet is about web scraping using rvest,httr and Rselenium. It covers many topics in this blog.
While Hartley uses python's requests and beautifulsoup libraries, this cheat sheet covers the usage of httr and rvest. While rvest is good enough for many scraping tasks, httr is required for more advanced techniques. Usage of Rselenium(web driver) is also covered.
Beautiful native macOS video downloader. Download and trim in one app.
Media Downloader lets you download, quickly copy, reveal, and trim videos from social media and video platforms in one focused app. Paste a URL from services such as YouTube, Instagram, X, TikTok, Vimeo, Reddit, and many other sites supported by yt-dlp; the app downloads an MP4, copies the finished file to the clipboard, saves it to your chosen folder, and keeps a local history for fast access.
An installable Diazo theme for Plone 4.1
Real-time collaborative dev environment with shared terminal and code editor. Runs in isolated containers on your own infrastructure.
RawPairâ„¢ is a self-hosted, real-time collaborative development environment. It enables you to spin up isolated containers with a shared terminal and code editor for effective pair (or mob) programming.
Built for fast, focused collaboration on your own infrastructure, RawPair also supports use cases like remote development, penetration testing, and red teaming, as long as it's done ethically and with proper authorization.
Messaging that just works. RabbitMQ is the most widely deployed open source message broker.
Related contents:
🪇 Minimal terminal spinners for Rust.
Rattles is a minimal, dependency-free terminal spinner library for Rust. It makes no assumptions about how the output will be used.
"Sonarr for YouTube" - a tool to periodically check various YouTube playlists and take actions when new videos are posted.
Subarr is a lightweight YouTube channel/playlist/subscription follower that will take action on new uploads (actions can be a webhook - like Discord - or a process - like downloading through yt-dlp). "Lightweight" means it needs few resources and can run on something like a raspberry pi.
Related contents:
animate.css is a bunch of cool, fun, and cross-browser animations for you to use in your projects. Great for emphasis, home pages, sliders, and general just-add-water-awesomeness.
The Programming Language compiled to Bash. Write your scripts in a modern type-safe and runtime-safe programming language that handles many bugs and mistakes during compilation process.
Chat UI for Coderunner.
coderunner-ui is a local‑first AI workspace that lets you:
- Chat with local or remote LLMs
- Run generated code inside a fully isolated Apple Container VM
- Browse the web and automate tasks via a built‑in headless browser (Playwright) All without sending your data to the cloud.
Related contents:
Linux & DevOps Troubleshooting Interviews.
Troubleshoot and make a sad server happy! "Like LeetCode for Linux"
Capture The Flag challenges. Train and prove your debugging skills. Practice for your next SRE/DevOps interview. Get a full remote Linux server with a problem and fix it.
D3 (or D3.js) is a JavaScript library for visualizing data using web standards. D3 helps you bring data to life using SVG, Canvas and HTML. D3 combines powerful visualization and interaction techniques with a data-driven approach to DOM manipulation, giving you the full capabilities of modern browsers and the freedom to design the right visual interface for your data.
A fork of Mozilla Firefox ESR 24 for the Power Macintosh and Mac OS X Tiger PowerPC
A desktop app for isolated, parallel agentic development.
mux (Coding Agent Multiplexer) is a cross-platform desktop application for AI-assisted development with isolated workspace management.
Chat that is simple, secure, and private. Everything you expect from an easy-to-use messaging platform, but now under your control.
Architecture in. Software out. Spec-Driven Code Generation.
An open-source framework that turns architectural specs into working code. You write a specification, optionally lay out the architecture, and Ossature breaks it down into a build plan that gets executed step by step with an LLM doing the code generation under tight constraints. The specs are your source of truth, you review the plan before anything gets built, and when something breaks you fix that step and keep going instead of starting over.
Related contents:
Cowrie is a medium to high interaction SSH and Telnet honeypot designed to log brute force attacks and the shell interaction performed by the attacker. In medium interaction mode (shell) it emulates a UNIX system in Python, in high interaction mode (proxy) it functions as an SSH and telnet proxy to observe attacker behavior to another system.
Meteor is a complete open source platform for building web and mobile apps in pure JavaScript.
Laravel Blade UI Components for Livewire 3.
Gorgeous Laravel Blade UI Components made for Livewire 3 and styled around daisyUI + Tailwind.