Links
Add🐙 untangle complex merges 🐙
mergetopus is a tool that helps teams follow a structured workflow for very large merges by splitting one risky merge into parallelizable tasks
Needle is an open source, modular framework to streamline the process of conducting security assessments of iOS apps.
🕵️♂️ Offensive Google framework.
GHunt (v2) is an offensive Google framework, designed to evolve efficiently. It's currently focused on OSINT, but any use related with Google is possible.
🐙 Track down GitHub users. GitFive is an OSINT tool to investigate GitHub profiles.
All You Badges.
My Badges is a GitHub Action that generates badges for your profile README.md. Badges will be updated automatically every day. And you will get new badges as you progress, or as community adds new badges. Yes, you can add your own badges!
MyDumper is a Logical Backup Tool. It has 2 tools:
mydumperwhich is responsible to export a consistent backupmyloaderreads the backup from mydumper, connects the to destination database and imports the backup.
Both tools use multithreading capabilities
High-quality multi-lingual text-to-speech library by MyShell.ai. Support English, Spanish, French, Chinese, Japanese and Korean.
A privacy-focused iOS app that raises awareness about what native apps can see.
Loupe is an iOS and iPadOS app that gives you a hands-on tour of the device fingerprinting surface. It reads real values from public iOS APIs, the same ones any third-party app can call, and shows them to you raw. The point is simple: see what your iPhone quietly exposes, and why each reading helps an app recognize you again.
Use your phone as a dashcam and save the last 30 minutes when you need them.
Alibi keeps recording audio/video in the background and saves the last 30 minutes at your request. Everything is completely configurable. No internet connection required.
Related contents:
This cheatsheet maps common impacket workflows to their modern alternatives.
noq, a QUIC implementation in Rust.
General purpose implementation of the QUIC transport protocol in pure Rust. Noq is built as an async-friendly API in the noq crate on top of a sans-io protocol library in noq-proto.
Noq started out as a fork of the excellent Quinn project. The main focus of development has been towards adding support for more QUIC (draft) extensions.
Related contents:
Use your locally running AI models to assist you in your web browsing.
Page Assist is an open-source browser extension that provides a sidebar and web UI for your local AI model. It allows you to interact with your model from any webpage.
Tool to statically recompile N64 games into native executables
N64: Recompiled is a tool to statically recompile N64 binaries into C code that can be compiled for any platform. This can be used for ports or tools as well as for simulating behaviors significantly faster than interpreters or dynamic recompilation can. More widely, it can be used in any context where you want to run some part of an N64 binary in a standalone environment.
SSLyze is a fast and powerful SSL/TLS scanning tool and Python library.
SSLyze can analyze the SSL/TLS configuration of a server by connecting to it, in order to ensure that it uses strong encryption settings (certificate, cipher suites, elliptic curves, etc.), and that it is not vulnerable to known TLS attacks (Heartbleed, ROBOT, OpenSSL CCS injection, etc.).
Minimalytics is a standalone minimalist analytics tool built on SQLite. Designed for resource-constrained environments, it provides a lightweight solution for tracking and visualizing event data with a minimal footprint. Whether you're tracking internal services or need a simple analytics tool, Minimalytics delivers performance without the bloat.
Generate HTTP load and plot the results in real-time. A load testing tool capable of performing real-time analysis, inspired by vegeta and jplot.
ali comes with an embedded terminal-based UI where you can plot the metrics in real-time, so lets you perform real-time analysis on the terminal.
pbgopy allows to copy and paste between devices.
pbgopy acts like pbcopy/pbpaste but for multiple devices.
It lets you share data across devices like you copy and paste.
Mellivora is a CTF engine written in PHP.
Make use of Twitter Bootstrap's modal more monkey-friendly.
Redis re-implemented with SQLite.
Redka aims to reimplement the good parts of Redis with SQLite, while remaining compatible with Redis API.
Related contents:
A multi-vault secret injection tool for safely injecting secrets into app environment.
Whispr (Pronounced as whisper) is a CLI tool to safely inject secrets from your favorite secret vault (Ex: AWS Secrets Manager, Azure Key Vault etc.) into your app's environment. This is very useful for enabling secure local software development.
The world's easiest, most powerful random function.
Rando.js helps JavaScript developers code randomness more simply, readably, and securely. Whether you need to find a random int/float between two numbers, pick a random value from an array, choose a random element from your jQuery object, grab a character from a string, toss a coin, or do anything of the like while even preventing repetitions, we've got you covered at a cryptographically strong level. The best part? Our library is extremely lightweight and developer friendly- which means it won't take a toll on your project, and it's uber-simple to implement.
bcachefs based NAS solution.
NASty is a NAS operating system built on NixOS and bcachefs. It turns commodity hardware into a storage appliance serving NFS, SMB, iSCSI, and NVMe-oF — managed from a single web UI, updated atomically, and rolled back when things go sideways.
Related contents:
A compression based language model.
gzipt generates text using gzip as its only model. No neural network, no training, no parameters. You prime it with a corpus, and it continues a prompt by searching for the byte sequences that compress best, because what compresses well is what the model predicts.
Related contents:
🛫 Zero-codegen, no-compile TypeScript type inference from protobuf messages.
protobuf-ts-types lets you define language-agnostic message types in proto format, then infers TypeScript types from them with no additional codegen.
A scriptable stream downloader for Qobuz, Tidal, Deezer and SoundCloud.
A software reverse engineering (SRE) suite of tools developed by NSA's Research Directorate in support of the Cybersecurity mission
Related contents:
Modern Music Server and Streamer compatible with Subsonic/Airsonic.
Navidrome is an open source web-based music collection server and streamer. It gives you freedom to listen to your music collection from any browser or mobile device. It's like your personal Spotify!
This document aims to provide an exhaustive list of all the ways that people get paid for open source work. Hopefully, projects and contributors will find this helpful in figuring out the best options for them.
Related contents:
Minimalistic New Tab Page CLI Tool with a greeting, date and time, inspirational quotes and your personal tasks and to-do list
SEO Macroscope is a website scanning tool, to check your website for broken links; including some technical SEO functionality, site scraping, Excel reporting, and more. SEO Macroscope for Microsoft Windows is a free and open source website broken link checking and scanning tool, with some technical SEO functionality.
Commandlinefu.com is the place to record awesome command-line snippets. This tool allows you to search and view the results into your terminal.
A TUI (terminal UI) kit for Elixir.
Ratatouille is a declarative terminal UI kit for Elixir for building rich text-based terminal applications similar to how you write HTML.
Un parcours théorique complet pour découvrir, comprendre et approfondir PostgreSQL 18, des fondamentaux à la production.
Merlin is a cross-platform post-exploitation Command & Control server and agent written in Go.
Agentic AI security scanner that hunts exploitable vulnerabilities like an adversary, proves them with executable PoCs, and fixes them test-first. A maintained fork of Capital One's VulnHunter, rebuilt for any agent harness.
A Bloat Aware Filesystem for Container Debloating.
BLAFS is a bloat-aware filesystem for container debloating. The design principles of BLAFS are effective, efficient, and easy to use. It detects the files used by the container, and then debloats the container by removing the unused files. The debloated containers are still functional and can run the same workload as the original containers, but with a much smaller size and faster deployment.
An image-to-world skillset for Claude.
Creates 3D environments, SFX, and meshes from a single image using Claude skills, World Labs, and FAL.
Can take you from an image to a fully meshed 3D environment in < 5 minutes, great for jumpstarting 3D work. Go full blast.
Expressive fixtures generator.
Relying on FakerPHP/Faker, Alice allows you to create a ton of fixtures/fake data for use while developing or testing your project. It gives you a few essential tools to make it very easy to generate complex data with constraints in a readable and easy to edit way, so that everyone on your team can tweak the fixtures if needed.
Related contents:
Check your WAF before an attacker does this one.
WAF bypass Tool is an open source tool to analyze the security of any WAF for False Positives and False Negatives using predefined and customizable payloads. Check your WAF before an attacker does. WAF Bypass Tool is developed by Nemesida WAF team with the participation of community.
Simple IOC and YARA Scanner. Scanner for Simple Indicators of Compromise.
An interactive and powerful Git interface for Neovim, inspired by Magit.
Related contents:
Elephantshark helps monitor, understand and troubleshoot Postgres network traffic: Postgres clients, drivers and ORMs talking to Postgres servers, proxies and poolers (also: standby servers talking to their primaries and subscriber servers talking to their publishers).
Elephantshark sits between the two parties in a PostgreSQL-protocol exchange, forwarding messages in both directions while parsing and logging them.
Related contents:
MCP server for interacting with Neon Management API and databases.
Related contents:
Neon Core extends Mycroft core with more modular code, extended multi-user support, and more.
Neon AI is an open source voice assistant.
Strongly typed queries for PostgreSQL and TypeScript
pg-typesafe generates TypeScript types for PostgreSQL queries. It does so with no runtime dependencies, and zero additional verbosity.
AudioMuse AI: Leverages Essentia for deep audio analysis and AI-powered clustering to create smart, tempo and mood-based playlists within Jellyfin API.
AudioMuse-AI is a Dockerized environment that brings smart playlist generation to Jellyfin using deep audio analysis via Essentia with TensorFlow. All you need is in a container that you can deploy locally or on your Kubernetes cluster (tested on K3S). In this repo, you also have a /deployment/deployment.yaml example that you need to configure following the configuration parameter chapter.
Documentation of how to use Meshtastic serial and MQTT functionality to automation custom hardware.
Related contents:
Sysbox is an open-source, next-generation runc that empowers rootless containers to run workloads such as Systemd, Docker, Kubernetes, just like VMs.
Related contents:
Netflix’s Workflow Orchestrator.
Maestro is a general-purpose workflow orchestrator that provides a fully managed workflow-as-a-service (WAAS) to the data platform users at Netflix.
Security Monkey monitors policy changes and alerts on insecure configurations in an AWS account. While Security Monkey’s main purpose is security, it also proves a useful tool for tracking down potential problems as it is essentially a change tracking system.
It works on CPython 2.7. It is known to work on Ubuntu Linux and OS X.
Zuul is a gateway service that provides dynamic routing, monitoring, resiliency, security, and more.
Related contents:
A docker job scheduler (aka. crontab for docker). Ofelia is a modern and low footprint job scheduler for docker environments, built on Go. Ofelia aims to be a replacement for the old fashioned cron.
Related contents:
Attack path mapping for Active Directory, ADCS, SCCM, and MSSQL using BloodHound CE + OpenGraph data.
ADPathFinder is an attack mapping tool for pentesters and red teamers. It analyses SharpHound data and unifies it with OpenGraph plugins to surface attack paths to high-value targets such as Domain Admins and Domain Controllers, starting from low-privileged users and computers. MSSQLHound and ConfigManBearPig are supported natively, extending coverage across AD, ADCS, SCCM, and MSSQL.
Related contents:
PowerHuntShares is an audit script designed in inventory, analyze, and report excessive privileges configured on Active Directory domains.
PowerHuntShares is PowerShell tool designed to help cybersecurity teams and penetration testers better identify, understand, attack, and remediate SMB shares in the Active Directory environments they protect.
Sources:
Network Automation is a cross between the discipline of Network Infrastructure and the discipline of Programming. This list was created to serve as a one-stop shop for information related to Network Automation.
Local-first documentation for AI agents. Up-to-date docs for AI agents — local, instant, plug and play.
Context is an MCP server backed by a community-driven package registry with 100+ popular libraries already built and ready to use. When your AI agent needs documentation, it searches the registry, downloads the right package, and queries it locally — all automatically.
Related contents:
A generic shell script compiler. Shc takes a script, which is specified on the command line and produces C source code. The generated source code is then compiled and linked to produce a stripped binary executable.
The compiled binary will still be dependent on the shell specified in the first line of the shell code (i.e shebang) (i.e. #!/bin/sh), thus shc does not create completely independent binaries.
A collection of links for free stock photography, video and Illustration websites