Links
AddGiving types to jq. JQ is a successful tool for json manipulation.
JQ has a problem though, it's errors are kind of hard to decipher. When you start creating some internal data as part of some larger transformation, it might be hard to pinpoint the source of an error. That is because JQ doesn't keep track of the input data flow, it merely interprets it. So, when jq has an error, it is local.
Security through scrutiny.
A local tool for scanning open source repositories for security vulnerabilities and managing the disclosure process. You add a repo by URL, scrutineer runs a pipeline of agent skills against it inside a container, and presents the results in a web UI where you can triage findings, identify maintainers, and track disclosures. The agent CLI is pluggable: claude-code by default, or codex, opencode, or GitHub Copilot CLI with -backend.
Related contents:
An automated e-mail OSINT tool.
Mosint is an automated email osint tool written in Go that allows you investigate for target emails in a fast and efficient manner. It consolidates numerous services, enabling security researchers to swiftly access a wealth of information.
Base de connaissances techniques et bonnes pratiques internes à l'agence Alsacréations.
A Positively Charged JavaScript Runtime. A JavaScript Runtime for Rust.
Ion is a JavaScript runtime for integrating a JavaScript engine within a Rust program. This is useful for cases like building out a JavaScript powered plug-in system - but it can also be used directly from a stand alone executable.
🎧 mpris media player command-line controller for vlc, mpv, RhythmBox, web browsers, cmus, mpd, spotify and others.
Playerctl is a command-line utility and library for controlling media players that implement the MPRIS D-Bus Interface Specification. Playerctl makes it easy to bind player actions, such as play and pause, to media keys. You can also get metadata about the playing track such as the artist and title for integration into statusline generators or other command-line tools.
Tool for easy backup and restore for ClickHouse® using object storage for backup files.
A Git porcelain outside of Emacs. A TUI Git client inspired by Magit.
A terminal user interface for Git. Inspired by Magit, and launched straight from the terminal. Gitu aims to implement many of the core features of Magit over time. It should be familiar to any previous Magit users.
Reducing BigQuery Costs Through Its Biggest Problem: The Users.
Related contents:
Almond.CSS is a collection of class-less CSS styles to make simple websites look better. Almond.CSS helps in two ways: it normalizes the CSS styles to provide similar experience cross-browser, and it spices things a little by adding custom styles (that can be personalized!)
Pretty print your Ruby objects with style -- in full color and with proper indentation.
AmazingPrint is a fork of AwesomePrint, which became stale, and should be used in its place to avoid conflicts. It is a Ruby library that pretty prints Ruby objects in full color, exposing their internal structure with proper indentation. Rails ActiveRecord objects and usage within Rails templates are supported via included mixins.
A tasty, but malicious SSL-VPN server 🌮
NachoVPN is a Proof of Concept that demonstrates exploitation of SSL-VPN clients, using a rogue VPN server.
It uses a plugin-based architecture so that support for additional SSL-VPN products can be contributed by the community. It currently supports various popular corporate VPN products, such as Cisco AnyConnect, SonicWall NetExtender, Palo Alto GlobalProtect, and Ivanti Connect Secure.
The reverse-engineering expert agent: plans its own analysis path, derives every fact from raw evidence, and converges under mechanical verification gates — firmware, protocols, web/JS, risk-control, binaries.
kunglao-agent is an autonomous reverse-engineering system. You hand it a target and the questions you need answered; it works the problem for hours or days on its own — planning its own path, recovering from worker deaths, resuming after crashes — and converges only when every answer is derived from raw evidence and survives mechanical verification gates.
Open-source, agent-agnostic CLI that gives AI coding agents eyes. Your agent builds a feature — ProofShot records video proof it works.
Give AI coding agents eyes. Records browser sessions, captures screenshots, collects errors, and bundles proof artifacts — so humans can verify what the agent built.
Guard skills for coding agents, quality gates that catch AI-generated failure modes in code, tests, and docs.
Focused guard skills for coding agents: second-pass quality gates that catch the systematic failure modes of AI-generated code, tests, and docs before they ship.
Best use: let your agent do the work, then invoke the relevant guard on the diff before you present, commit, or merge it. These skills can guide writing when you explicitly ask for that, but they are strongest as reactive review passes.
Official Implementation of KnobGen: Controlling the Sophistication of Artwork in Sketch-Based Diffusion Models
Schedule automated simulations of actions you would perform on your PC.
Related contents:
An offensive postexploitation tool that will give you complete control over the Outlook desktop application and therefore to the emails configured in it.
A Wayland layer-shell logout prompt, now ported to GTK4! A fork of wlogout with a bunch of quality-of-life features.
A highly configurable Windows status bar written in Python.
Related contents:
🔂 Run Claude Code in a continuous loop, autonomously creating PRs, waiting for checks, and merging
Automated workflow that orchestrates Claude Code in a continuous loop, autonomously creating PRs, waiting for checks, and merging - so multi-step projects complete while you sleep.
🚀 AI-powered MongoDB explorer & optimizer | 🔍 Effortless insights | 🤖 Smart suggestions.
Mongo Explorer is a powerful web-based application for exploring, managing, and optimizing MongoDB databases. It offers a user-friendly interface for a wide range of MongoDB operations, from basic querying to advanced performance optimization.
NMIG is a database migration tool, written in Node.js and highly inspired by FromMySqlToPostgreSql. NMIG is an app, intended to make a process of migration from MySQL to PostgreSQL as easy and smooth as possible.
A vulnerability scanner for container images and filesystems.
Related contents:
A vulnerability scanner for container images and filesystems.
A CLI tool and Go library for generating a Software Bill of Materials (SBOM) from container images and filesystems. Exceptional for vulnerability detection when used with a scanner like Grype.
Related contents:
Turn an existing markdown-and-diagram workspace into a realtime collaborative web app.
Realtime collaboration for Markdown folders, diagrams, and git-backed docs, without migrating your files.
CollabMD turns a local Markdown folder, Obsidian-style vault, or docs repo into a collaborative workspace you can open in the browser. Throughout this guide, vault simply means a regular folder on your computer that contains Markdown files.
Automate scripts with Claude Code. Use shebang support for executable markdown files, pipe data through AI scripts in standard Unix pipelines, and switch between providers (Pro/Max, Anthropic API, AWS, Google Cloud, Azure, Vercel) without logging out.
dashwise is an all-in-one homelab dashboard
A Universal Attack on Defensive Image Watermarking.
Related contents:
Draw attention to the important parts of your website.
How is this different from a Modal ? The black mask appears around existing elements on the page.
Store git objects and refs in PostgreSQL tables. Standard git push/clone work against the database through a libgit2-based backend.
Related contents:
poop is a command line tool that uses Linux's perf_event_open functionality to compare the performance of multiple commands with a colorful terminal user interface.
Related contents:
A Copilot for Git.
Cocommit is a command-line tool that works with your HEAD commit and leverages an LLM of your choice to enhance commit quality.
A good commit consists of multiple elements, but at a minimum, it should have a well-crafted commit message. Cocommit analyzes the message from the last (HEAD) commit and suggests improvements, highlighting both strengths and areas for enhancement.
Simple, unified interface to multiple Generative AI providers.
aisuite makes it easy for developers to use multiple LLM through a standardized interface. Using an interface similar to OpenAI's, aisuite makes it easy to interact with the most popular LLMs and compare the results. It is a thin wrapper around python client libraries, and allows creators to seamlessly swap out and test responses from different LLM providers without changing their code. Today, the library is primarily focussed on chat completions. We will expand it cover more use cases in near future.
Self-hosted image sharing service. Slink is a self-hosted image sharing platform built with Symfony and SvelteKit️.
Solves the problem of sharing images with friends, family, and colleagues without relying on third-party services. It also offers a platform for artists to share their work with the community. Additionally, developers may find it useful for self-hosting screenshots of personal projects, which can then be used on GitHub, portfolios, blogs, etc.
Autonomous multi-agent coding framework that plans, builds, and validates software for you.
Related contents:
Find the best local LLM that actually runs on your hardware.
Auto-detects your GPU/CPU/RAM and ranks the top models from HuggingFace that fit your system.
Find the local LLM that actually runs and performs best on your hardware. Ranked by real, recency-aware benchmarks, not parameter count. One command, run it instantly.
Artificial Neural Engine Machine Learning Library.
ANEMLL (pronounced like "animal") is an open-source project focused on accelerating the porting of Large Language Models (LLMs) to tensor processors, starting with the Apple Neural Engine (ANE).
skytrack is a planespotting and aircraft OSINT tool made using Python 🛩🔍.
skytrack is a command-line based plane spotting and aircraft OSINT reconnaissance tool made using Python. It can gather aircraft information using various data sources, generate a PDF report for a specified aircraft, and convert between ICAO and Tail Number designations. Whether you are a hobbyist plane spotter or an experienced aircraft analyst, skytrack can help you identify and enumerate aircraft for general purpose reconnaissance.
The Angular skills are designed to help coding agents create applications aligned with the latest versions of Angular, best practices, new features and manage Angular applications effectively. These skills provide architectural guidance, generate idiomatic Angular code, and help scaffold new projects using modern best practices.
Web Codegen Scorer is a tool for evaluating the quality of web code generated by LLMs.
Lumen is a menu bar application for macOS that magically sets the screen brightness based on your screen contents.
GUI for a Vocal Remover that uses Deep Neural Networks. This application uses state-of-the-art source separation models to remove vocals from audio files. UVR's core developers trained all of the models provided in this package (except for the Demucs v3 4-stem models).
A performance dashboard for Postgres
🔥 Feature-rich interactive Jira command line.
JiraCLI is an interactive command line tool for Atlassian Jira that will help you avoid Jira UI to some extent. This tool may not be able to do everything, but it has all the essential features required to improve your day-to-day workflow with Jira.
Related contents:
Weaponizing Wayback for Recon, BugBounties, OSINT & More!
Weaponizing WaybackUrls for Recon, BugBounties , OSINT, Sensitive Endpoints and what not
You’ve heard of time travel in movies and comics, right? Well, this isn’t fiction anymore 😎. TheTimeMachine lets you dig through the past of any web app by scraping archived URLs from the Wayback Machine — and helps you find sensitive, forgotten, or deprecated endpoints for further exploitation.
Whether you’re into bug bounty, red teaming, or just love good ol’ recon, this tool was built to make my recon workflow faster, cleaner, and more effective. No more juggling multiple scripts — TheTimeMachine does it all in one shot.
Related contents:
This web component creates a mostly accessible pagination element.
etter alternative to git worktrees
- copy on write (saves space)
- instant (< 0.1s on 10gb folder)
- fast cli
- use as FFI lib with bun or node
mac and linux with btrfs or native reflinks for now more support soon.
Related contents:
encrypted messaging, anonymous email, VPNs, Tor, password managers, secure file sharing, browser privacy, and self-hosted privacy software.
A curated list of the best privacy tools, open-source privacy tools, encrypted messaging apps, anonymous email services, VPNs, Tor tools, password managers, secure file sharing apps, browser privacy extensions, and self-hosted privacy software.
Awesome Privacy Tools helps people find practical tools for private email, encrypted chat, anonymous browsing, password security, data removal, device hardening, and self-hosted alternatives to surveillance-based products.
Vertigo is a self-hosted web app designed to help you track your comic book collection with ease.
Docker image & resource cleanup helper, on a schedule!
A sleek, lightweight web interface to automatically clean up Docker resources on a schedule.
A Browser Extension for Bionic Reading on ANY website!
AWX provides a web-based user interface, REST API, and task engine built on top of Ansible. It is one of the upstream projects for Red Hat Ansible Automation Platform.
La démarche d’amélioration cyber, thématique et progressive (Dalton) est un projet de la division assistance technique (DAT) visant à recenser et organiser les mesures techniques permettant d’améliorer la sécurité des SI.
La doctrine de l'ANSSI est un terme parapluie regroupant l'ensemble des recommandations et positions de l'ANSSI. Elle est diffusée au travers de guides (les guides techniques, les "Fondamentaux", les "Essentiels"), de billets et notes techniques sur le site du CERT-FR, de présentations réalisées dans diverses instances publiques et privées, ou de publications open source.
Powershell module for VMWare vSphere forensics. The DFIR4vSphere PowerShell module collects logs and forensics artefacts on both ESXi hosts and the vCenter console.
A user-friendly solution to transfer files through a physical diode using the Lidi utility, complete with data retention, file history, user accounts and admin management. Provides a scriptable API and a web interface.
Fuzzowski-based OPCUA fuzzer.
Fuzzing should never be conducted on production equipment or systems. This testing technique can cause unexpected behavior, system crashes, data corruption, or security vulnerabilities. Always perform fuzzing in a controlled, isolated environment to ensure the safety and stability of production systems.
FuzzySully is an OPC UA fuzzer built upon Fuzzowski. It is a specialized testing tool designed to identify vulnerabilities and bugs in OPC UA (Open Platform Communications Unified Architecture) implementations. These fuzzers typically operate by generating and sending a large number of malformed or unexpected messages to an OPC UA server or client, with the goal of triggering unexpected behavior or crashes.
Related contents: