Links
AddA Red Team Script to Detect Canary Tokens and Seed Files. How to Detect Canary and Seed Microsoft Office Files with Python Without Triggering an Alert.
In the realm of cybersecurity, vigilance is key. One way malicious actors might infiltrate systems is through seemingly innocuous Microsoft Office files. These files might contain hidden URLs or macros designed to execute harmful actions. In this blog post, we'll explore a Python script designed to detect potentially suspicious Microsoft Office documents by examining their contents without opening them directly, reducing the risk of inadvertently triggering malicious code.
A FUSE Filesystem for your Google calendar.
WhenFS turns your Google Calendar into a FUSE filesystem. It whimsically supports the following features:
- Create a filesystem out of existing Google Calendars, or create a new one from scratch
- Read and write files, directories and... well, just files and directories
- Mount your friends' WhenFS calendar file systems to share files in the silliest way possible
A long list of (advanced) JavaScript questions, and their explanations. From basic to advanced: test how well you know JavaScript, refresh your knowledge a bit, or prepare for your coding interview! muscle rocket I update this repo regularly with new questions. I added the answers in the collapsed sections below the questions, simply click on them to expand it. It's just for fun, good luck! heart
Easy Linux virtual machine on MacOS to sandbox LLM agents.
Vibe is a quick, zero-configuration way to spin up a Linux virtual machine on Mac to sandbox LLM agents.
Related contents:
AirLLM 70B inference with single 4GB GPU.
AirLLM optimizes inference memory usage, allowing 70B large language models to run inference on a single 4GB GPU card without quantization, distillation and pruning. And you can run 405B Llama3.1 on 8GB vram now.
GooFuzz is a tool to perform fuzzing with an OSINT approach, managing to enumerate directories, files, subdomains or parameters without leaving evidence on the target's server and by means of advanced Google searches (Google Dorking).
Inventory is a web dashboard that displays data extracted from the Wazuh API via SysCollector. The solution provides quick access to system details, all presented in a simple interface for IT teams. It uses Wazuh’s own agents, eliminating the need to install additional software and reducing the attack surface.
Terminal based spreadsheet tool. Spreadsheets in your terminal.
Pi-hole-class DNS ad-blocker on a $2 ESP32-C3 (no PSRAM): 537k domains as 40-bit FNV-1a hashes in flash, binary-searched. UDP DNS sinkhole + web dashboard.
Related contents:
-Un demi-million de domaines anti-pub stockés dans 50 Ko de RAM @ Korben :fr:.
I've always wondered if there's a better way of doing transitions and, rather than hard coding positions, delegate layout to the browser. Inspired by Keynote's Magic Move effect, I've made a little jQuery library to do transitions between DOM states.
Real-time Claude Code usage monitor with predictions and warnings.
A beautiful real-time terminal monitoring tool for Claude AI token usage. Track your token consumption, burn rate, and get predictions about when you'll run out of tokens.
An Interactive Menu for Proxmox VE Management.
ProxMenux is a management tool for Proxmox VE that simplifies system administration through an interactive menu, allowing you to execute commands and scripts with ease.
Related contents:
Claude Code. Any Model. The most powerful AI coding agent now speaks every language.
Run Claude Code with any AI model - OpenRouter, Gemini, OpenAI, or local models.
Claudish (Claude-ish) is a CLI tool that allows you to run Claude Code with any AI model by proxying requests through a local Anthropic API-compatible server. Supports OpenRouter (100+ models), direct Google Gemini API, direct OpenAI API, and local models (Ollama, LM Studio, vLLM, MLX).
🔌 Command-line reverse proxy for forwarding HTTP requests through an outbound proxy.
prxy is a command-line reverse proxy written in Go for forwarding HTTP requests through an outbound proxy, while automatically rewriting the Host header for you.
Related contents:
Shell command suggestion. A faster and more efficient way to use your shell history.
Bayesh suggests relevant commands to you in your shell (using fzf). This is done by maintaining a database of your shell history and suggesting you relevant commands based on a statistical model.
Related contents:
An app that uses RDAP to collect publicly available info about domains, track their history, and purchase them
CLI tool to automate docker image updates. Selective, notifications, autoprune, no pre-pulling.
get things from one computer to another, safely.
This package provides a library and a command-line tool named wormhole, which makes it possible to get arbitrary-sized files and directories (or short pieces of text) from one computer to another. The two endpoints are identified by using identical "wormhole codes": in general, the sending machine generates and displays the code, which must then be typed into the receiving machine.
Sources:
Installs GNU/Linux distributions in a chroot environment on Android.
Related contents:
Command-line utility for limiting an adapter's bandwidth.
Wonder Shaper is a script that allows the user to limit the bandwidth of one or more network adapters. It does so by using iproute's tc command, but greatly simplifies its operation.
Free split-flap display emulator for any TV. The classic flip-board look, without the $3,500 hardware.
Turn any TV into a retro split-flap display. The classic flip-board look, without the $3,500 hardware. And it's free. FlipOff is a free, open-source web app that emulates a classic mechanical split-flap (flip-board) airport terminal display — the kind you'd see at train stations and airports. It runs full-screen in any browser, turning a TV or large monitor into a beautiful retro display.
AI-Powered Configuration Assistant for Home Assistant.
Related contents:
Terraform runtime TUI 🫧 .
pipeform is a TUI for Terraform runtime progress.
an open-source btrfs driver for Windows.
WinBtrfs is a Windows driver for the next-generation Linux filesystem Btrfs. A reimplementation from scratch, it contains no code from the Linux kernel, and should work on any version from Windows XP onwards. It is also included as part of the free operating system ReactOS.
NT-like POSIX-compatible operating system.
Moxnox is an NT-like, POSIX-compatible hobby OS which runs on btrfs and is capable of self-hosting. That means:
- Its design, such as the choice of syscalls, is modelled after that of Windows NT...
- ...yet at the same time, it should be capable of running software written for Unix-like systems, provided that they have been recompiled for it, and comes with a full GNU base system
Automatically add trending, popular, and highly-rated movies and TV shows from Trakt.tv to your Radarr and Sonarr instances.
Trust Scores for GitHub Repositories.
CLI that detects fake-star campaigns, dependency hijacks, licence red-flags and other signs of repository risk. Inspired by the “4.5 million fake stars” study, StarGuard helps CTOs, security teams and investors perform fast, automated open-source due-diligence.
SMTP Server + Web Interface for viewing and testing emails during development. MailDev is a simple way to test your project's generated email during development, with an easy to use web interface that runs on your machine built on top of Node.js.
A Cloudflare-based email service.
A simple, responsive email service designed to run on Cloudflare Workers 🎉. With only one domain, you can create multiple different email addresses, similar to major email platforms. This project can be deployed on Cloudflare Workers to reduce server costs and build your own email service.
A self-paced course to learn Rust, one exercise at a time.
The AI-Native Cinematic Studio. A professional Non-Linear Editor (NLE) for filmmakers.
Milimo Video is a state-of-the-art, open-source AI video production studio designed for filmmakers. It unifies the world's best foundation models into a cohesive, professional workflow — running entirely local-first on your own machine.
Related contents:
Self-contained user/group management and authentication service.
Portunus was the ancient Roman god of keys and doors. However, this repo does not contain the god. It contains Portunus, a small and self-contained user/group management and authentication service.
Portunus is aimed at individuals and small organizations that want to manage users and permissions across different services, and don't want to deal with the minutiae of LDAP administration.
A CLI tool that synchronizes metadata from an Immich photo server back into the original files.
Immich stores rich metadata (GPS, descriptions, ratings, camera info, dates) in its database, but this metadata isn't always embedded in the file itself. This tool bridges that gap by downloading each asset, embedding the missing tags via exiftool, and re-uploading the modified file.
Apple Wallet Card Skinner for iOS 18+ (No Jailbreak Required)
Related contents:
Maker Management Platform, or MMP, aims to simplify and unify the management of a variety of digital assets related to 3d printing, manufacturing, laser engraving and such.
Open-source vacuum robot cleaner.
oomwoo is an open-source home robot vacuum you can build yourself, made for the Raspberry Pi, ROS2, Home Assistant, and 3D-printing communities. It uses an affordable 2D LiDAR to map your home and navigate on its own. Local, no cloud required for regular functionality, no vendor lock-in.
Related contents:
Passive API Contract Monitoring for PHP 8.3+. Detects breaking changes, json schema drift, and unexpected structural modifications in third-party REST APIs via probabilistic inference.
Passive API Contract Monitoring for strictly typed PHP 8.3+.
Sentinel silently monitors the JSON payloads returning from the third-party APIs you consume, automatically infers their structural JSON Schema, and detects when they change unexpectedly (drift).
RansomLord is a proof-of-concept Anti-Ransomware exploitation tool that automates the creation of PE files, used to compromise ransomware pre-encryption.
Automated Command Line Identity Generation Tool for OSINT Investigators. Command Line Sock Puppet Creator for Investigators.
Loki can create a sock puppet identity, that you can use to create a fake online presence to start your investigations. As an OSINT, Private or any other Investigator who seeks to conduct OSINT investigations; you need a sock puppet which cannot be traced back to you. Setting up a sock puppet is easy; only if you know where to look for.
✨ GO server for lorem.space website ✨ 🪐. API for placeholder images but useful! Server hosting categorised random image with an on-demand thumbnailing API for integration in web-design mockups.
GoCrack is a management frontend for password cracking tools written in Go.
GoCrack provides APIs to manage password cracking tasks across supported cracking engines.
Gopacket is a clean Go implementation of Impacket, a library intended for working with network protocols.
A complete Go implementation of Impacket - 63 tools and 24 library packages for Windows network protocol interaction, Active Directory enumeration, and attack execution. Built as a native Go framework so you can compile once and run anywhere without Python dependencies.
Marreta is a tool that breaks access barriers and elements that hinder reading!
Claude Code IDE integration for Emacs.
Claude Code IDE for Emacs provides native integration with Claude Code CLI through the Model Context Protocol (MCP). Unlike simple terminal wrappers, this package creates a bidirectional bridge between Claude and Emacs, enabling Claude to understand and leverage Emacs’ powerful features—from LSP and project management to custom Elisp functions. This transforms Claude into a true Emacs-aware AI assistant that works within your existing workflow and can interact with your entire Emacs ecosystem.
Pipe your nix-build output through the nix-output-monitor a.k.a nom to get additional information while building.
Index your Gmail account to a SQLite DB and play with the data.
This is a script to download emails from Gmail and store them in a SQLite database for further analysis. I find it extremely useful to have all my emails in a database to run queries on them. For example, I can find out how many emails I received per sender, which emails take the most space, and which emails from which sender I never read.
A Python package to draw maps with customizable styles from OpenStreetMap data. Created using the osmnx, matplotlib, shapely and vsketch packages.
Bring Back YouTube Email Notifications! YouTube upload email notification replacement
In August 2020, YouTube removed the feature of sending email notifications when a subscriber uploads a video. Many watchers, myself included, prefer email notifications to app notifications. This project aims to provide a replacement to YouTube's email notifications. Running this small program checks all your subscribers and sends emails with the links to new videos.
Cognitive architecture for Claude Code — persistent memory, self-reflection, and foresight.
A plain-text cognitive architecture for Claude Code — simple by design, so the model can reason over its own memory with the same Unix tools (grep, find, git diff) it already knows.
rtfmbro provides always-up-to-date, version-specific package documentation as context for coding agents. An alternative to context7
A structural code search engine for AI agents. Provides sub-500ms file ranking across massive codebases without embeddings, vector databases, or external dependencies.
Mantic is an infrastructure layer designed to remove unnecessary context retrieval overhead for AI agents. It infers intent from file structure and metadata rather than brute-force reading content, enabling retrieval speeds faster than human reaction time.
Turn your computer into a wireless audio transmitter or receiver.
A desktop application for streaming audio over a local network. It allows you to stream your computer's internal audio to any device on the network. Developed in Kotlin and Jetpack Compose.
Live hunting of code injection techniques.
Memhunter is an endpoint sensor tool that is specialized in detecing resident malware, improving the threat hunter analysis process and remediation times. The tool detects and reports memory-resident malware living on endpoint processes. Memhunter detects known malicious memory injection techniques. The detection process is performed through live analysis and without needing memory dumps. The tool was designed as a replacement of memory forensic volatility plugins such as malfind and hollowfind. The idea of not requiring memory dumps helps on performing the memory resident malware threat hunting at scale, without manual analysis, and without the complex infrastructure needed to move dumps to forensic environments.
You might never open your editor again.
Use sidecar next to CLI agents for diffs, file trees, conversation history, and task management with td.
Sidecar puts your entire development workflow in one shell: plan tasks with td, chat with AI agents, review diffs, stage commits, review past conversations, and manage workspaces—all without leaving Sidecar.