Links
AddA Modern Linker 🦠.
mold is a faster drop-in replacement for existing Unix linkers. It is several times quicker than the LLVM lld linker, the second-fastest open-source linker, which I initially developed a few years ago. mold aims to enhance developer productivity by minimizing build time, particularly in rapid debug-edit-rebuild cycles.
ESP32-based focus timer with an epaper display and rotary dial.
This is the repository for an ESP32 based focus timer. It uses an ePaper display and a rotary dial for input. The code in this repository will not be ready-to-use, as some assets and fonts have been removed. However, if you really want to you should be able to adapt the code to your needs.
Talk to your Mac, query your docs, no cloud required. On-device voice AI + RAG.
RCLI is an on-device voice AI for macOS. A complete STT + LLM + TTS pipeline running natively on Apple Silicon — 38 macOS actions via voice, local RAG over your documents, sub-200ms end-to-end latency. No cloud, no API keys.
Unexpected Exposures in SSH. SSHamble is a research tool for SSH implementations.
SSHamble simulates potential attack scenarios, including unauthorized remote access due to unexpected state transitions, remote command execution in post-session login implementations, and information leakage through unlimited high-speed authentication requests. The SSHamble interactive shell provides raw access to SSH requests in the post-session (but pre-execution) environment, allowing for simple testing of environment controls, signal processing, port forwarding, and more.
A bot that integrates with GitHub and your favorite continuous integration service.
Homu listens to the pull request comments, waiting for an approval comment from one of the configured reviewers. When the pull request is approved, Homu tests it using your favorite continuous integration service, and only when it passes all the tests, it is merged into master.
Related contents:
An interpreter for Rust's mid-level intermediate representation.
Miri is an Undefined Behavior detection tool for Rust. It can run binaries and test suites of cargo projects and detect unsafe code that fails to uphold its safety requirements.
A lightweight, high-performance Rust email archiver with WebUI.
Bichon is a minimal, high-performance, standalone Rust email archiver with a built-in WebUI. Its name is inspired by the puppy my daughter adopted last month. It runs as a single binary, requires no external dependencies, and provides fast, efficient email archiving, management, and search.
Related contents:
🤖 The Modern Port Scanner 🤖.
RustScan is a modern take on the port scanner. Sleek & fast. All while providing extensive extendability to you.
Not to mention RustScan uses Adaptive Learning to improve itself over time, making it the best port scanner for you.
Multi-agent AI orchestration for Claude Code.
Orchestrate 100+ specialized AI agents across machines, teams, and trust boundaries. Ruflo adds coordinated swarms, self-learning memory, federated comms, and enterprise security to Claude Code — so agents don't just run, they collaborate.
🌊 The leading agent orchestration platform for Claude. Deploy intelligent multi-agent swarms, coordinate autonomous workflows, and build conversational AI systems. Features enterprise-grade architecture, self-learning swarm intelligence, RAG integration, and native Claude Code / Codex Integration
The vector database that gets smarter the more you use it — and now ships as a cognitive container.
RuVector is a High Performance, Real-Time, Self-Learning, Vector Graph Neural Network, and Database built in Rust.
Most vector databases are static — they store embeddings and search them. That's it. RuVector is different: it learns from every query, runs LLMs locally, scales horizontally, boots as a Linux microservice from a single file, and costs nothing to operate.
A key remapping daemon for linux.
Linux lacks a good key remapping solution. In order to achieve satisfactory results a medley of tools need to be employed (e.g xcape, xmodmap) with the end result often being tethered to a specified environment (X11). keyd attempts to solve this problem by providing a flexible system wide daemon which remaps keys using kernel level input primitives (evdev, uinput).
Related contents:
An updated sample database for PostgreSQL, building off of the Pagila database.
A vector index built on TurboQuant, written in Rust with Python bindings.
A 10 million document corpus takes 31 GB of RAM as float32. turbovec fits it in 4 GB - and searches it faster than FAISS.
turbovec is a Rust vector index with Python bindings, built on Google Research's TurboQuant algorithm — a data-oblivious quantizer that matches the Shannon lower bound on distortion, with no codebook training and no separate train phase.
This package contains a variety of hooks for Alpine.js that can be used to improve the developer experience of common front-end development tasks.
A simple, barebones "multiplayer" middleware for zustand.
A barebones middleware to sync zustand stores across multiple clients. zustand-sync uses JSON Patch (RFC 6902) under the hood to translate state changes into patches that can be sent over a transport layer.
age-encrypted secrets for NixOS and Home manager.
agenix is a small and convenient Nix library for securely managing and deploying secrets using common public-private SSH key pairs: You can encrypt a secret (password, access-token, etc.) on a source machine using a number of public SSH keys, and deploy that encrypted secret to any another target machine that has the corresponding private SSH key of one of those public keys.
Related contents:
Self-hosted app that enables Plex scrobbling (and rating) integration with Trakt via webhooks.
Scrobblex is a self-hosted nodejs app that enables Plex scrobbling integration with Trakt via webhooks. It also allows you to push your ratings to Trakt.
Plex provides webhook integration for all Plex Pass subscribers, and users of their servers. A webhook is a request that the Plex application sends to third party services when a user takes an action, such as watching a movie or episode.
one-click face swap
Take a video and replace the face in it with a face of your choice. You only need one image of the desired face. No dataset, no training.
Most advanced XSS scanner. XSStrike is a Cross Site Scripting detection suite equipped with four hand written parsers, an intelligent payload generator, a powerful fuzzing engine and an incredibly fast crawler.
Pentest Harness — Heaven for Hackers. A self-hosted AI agent harness for authorized pentests, bug bounty, security labs, and CTFs. Bring your own AI model API; sessions stay local.
An open-source, dark-first AI agent harness for authorized penetration tests, bug bounty research, security labs, and CTF engagements. Built on a plugin architecture where every layer — model adapters, tools, sessions, settings, and credentials — is replaceable from configuration.
Works with any AI model API. Bring your own key from OpenAI, Anthropic, DeepSeek, Google, Mistral, Groq, OpenRouter, Azure OpenAI, or any OpenAI-compatible gateway — one click auto-discovers your models and you're running.
A comprehensive solution for archiving, searching, and exporting emails.
Mail-Archiver is a web application for archiving, searching, and exporting emails from multiple accounts. Featuring folder sync, attachment support, mailbox migration and a dashboard.
FUSE-based file system backed by Amazon S3.
s3fs allows Linux, macOS, and FreeBSD to mount an S3 bucket via FUSE(Filesystem in Userspace). s3fs makes you operate files and directories in S3 bucket like a local file system. s3fs preserves the native object format for files, allowing use of other tools like AWS CLI.
Related contents:
A dynamic programming language built entirely by Claude Code.
Cutlet is a dynamic programming language written in C. Its long-term goal is to replace Bash for anything beyond trivial one-liners, combining the expressiveness of Python, Ruby, Lua, and JavaScript with first-class support for running subprocesses, building pipelines, and scripting your system. It focuses on REPL-driven development.
Related contents:
Web Dashboard and Reporting. A Web Dashbord for Nmap XML Report.
Firefly, the easiest using and high performance WireGuard VPN server, plus version of wg-easy.
Firefly is a simple and easy to install WireGuard server software, which can be widely used in scenarios such as remote networking, remote work, and expose a local server behind a NAT or firewall to the internet.
This isn't open source. Don't trust it.
Create a vulnerable active directory that's allowing you to test most of the active directory attacks in a local lab
PMG protects developers, AI agents from malicious open source packages using proxy, sandbox and SafeDep's threat intelligence feed.
PMG intercepts every package install and checks it for malware before code executes. Install it once, and every npm install, pip install, and poetry add is protected automatically.
🏔 Love Freedom - ❌ Block Mass Surveillance. Portmaster is a free and open-source application firewall that does the heavy lifting for you. Restore privacy and take back control over all your computer's network activity.
A tiny JavaScript runtime
txiki.js is a small and powerful JavaScript runtime. It targets state-of-the-art ECMAScript and aims to be WinterCG compliant.
Online AlignmenT for LLMs.
Oat 🌾 is a simple yet efficient system for running online LLM alignment algorithms.
Kubernetes Compliance & Security Checks Extension. Browser extension for Kubernetes YAML guardrails – security & compliance linting directly in GitHub/GitLab.
Guardon is a lightweight browser extension that helps developers and reviewers detect common Kubernetes misconfigurations and security issues directly on code hosting sites (GitHub, GitLab, Bitbucket) or from pasted YAML. It parses multi-document YAML, applies configurable rules, and can suggest safe fixes.
Related contents:
An LLM-native health app for iOS that turns a cheap Bluetooth "smart ring" (the generic Chinese 56ff BLE ring sold under dozens of brands) into a real, conversational health tracker.
PulseLoop talks to the ring directly over Bluetooth LE — no vendor cloud, no account — and layers an AI Coach on top of your own data. Instead of static charts, you get a coach that can read your metrics, run its own analysis, draw charts, remember context about you, and answer questions about your sleep, heart rate, activity, and recovery.
Related contents:
Easily Read & Write XML in PHP.
XML Wrangler is a simplistic PHP library designed to make reading and writing XML easy. XML Wrangler has been built with developer experience in mind - you can read any type of XML file, even with complex namespaces and even large XML files. It will also throw exceptions if the XML is invalid!
A simple jQuery plugin to allow users to create equal height containers and grids using JavaScript where CSS2 cannot.
Your entire game library in one place with metadata and advanced filtering.
Stop jumping between Steam, Epic, GOG, Amazon, and a dozen other launchers just to see what you own. Backlogia aggregates all your games into a single, beautifully organized library with rich metadata, ratings, and discovery features—all running locally on your machine.
Super-fast Runtime validator (type checker) with only one line.
typia is a transformer library of TypeScript, supporting below features:
- Super-fast Runtime Validators
- Safe JSON parse and fast stringify functions
- JSON schema generator
- Random data generator
Hi, I’m Sam Gold. Did you know that you have rights a lid angle sensor in your MacBook? The human interface device utility says you do.
This is a little utility that shows the angle from the sensor and, optionally, plays a wooden door creaking sound if you adjust it reeaaaaaal slowly.
Convert any music library into a music production sample-library with ML.
Polymath uses machine learning to convert any music library (e.g from Hard-Drive or YouTube) into a music production sample-library. The tool automatically separates songs into stems (beats, bass, etc.), quantizes them to the same tempo and beat-grid (e.g. 120bpm), analyzes musical structure (e.g. verse, chorus, etc.), key (e.g C4, E3, etc.) and other infos (timbre, loudness, etc.), and converts audio to midi. The result is a searchable sample library that streamlines the workflow for music producers, DJs, and ML audio developers.
A GPU-accelerated 2D graphics environment for Node.js.
Skia Canvas is a browser-less implementation of the HTML Canvas drawing API for Node.js. It is based on Google’s Skia graphics engine and, accordingly, produces very similar results to Chrome’s <canvas> element. The library is well suited for use on desktop machines where you can render hardware-accelerated graphics to a window and on the server where it can output a variety of image formats.
CredData (Credential Dataset) is a set of files including credentials in open source projects. CredData includes suspicious lines with manual review results and more information such as credential types for each suspicious line.
CredData can be used to develop new tools or improve existing tools. Furthermore, using the benchmark result of the CredData, users can choose a proper tool among open source credential scanning tools according to their use case. We sincerely hope that CredData will help minimize credential leaks.
Related contents:
CredSweeper is an advanced credential detection tool designed to identify exposed credentials such as passwords, API keys, tokens, and other sensitive information across source code, configuration files, documents, and binary assets. CredSweeper scans regular files, embedded data in containers, and files added in Git commits. The tool combines pattern-based detection, machine learning–based validation, and deep file inspection to deliver comprehensive and accurate security scanning for modern codebases and repositories.
Related contents:
Unmask the hidden before the world does.
An AI-powered agentic red team framework that automates offensive security operations, from reconnaissance to exploitation to post-exploitation, with zero human intervention.
Produces persistent, respawning "super" cookies in a browser, abusing over a dozen techniques. Its goal is to identify users after they've removed standard cookies and other privacy data such as Flash cookies (LSOs), HTML5 storage, SilverLight storage, and others.
Apple TV for Torrent Streaming.
A Smart TV application to stream movies using BitTorrent. (Yes it actually streams them in order even though it's BitTorrent)
Tv.js used iTunes' API to find movies, isoHunt to search torrents and BitTorrent to downloading/stream movies.
Play lunar lander in you windows file copy dialog. Here is one of the most pressing issues of our times: You need to download a huge file from the other side of the world to continue your work. You literally can't do anything but wait. Now there is finally a solution to this problem! Play lunar lander in these inviting hills generated by the progress dialog. Time flies when you are having fun!
Symfony bundle to generate PDFs with headless Chrome using chrome-php/chrome.
The ChromePdfBundle is a Symfony bundle that leverages the chrome-php/chrome project to render HTML and save the output as a PDF file.
A carefully curated collection of high-quality React component libraries and design systems. Each library has been selected for its unique features, documentation quality, and community support.
An AI-powered sidecar for Pi-hole that classifies the domains passing through your network, lets you review them, and exports a custom blocklist back to Pi-hole. It does not replace Pi-hole — it works alongside it.
Pi-hole handles your DNS blocking as usual. Donut-Hole pulls the domains Pi-hole has seen, classifies them using an LLM, and gives you a UI to review, approve, or block them. Decisions are exported as a hosts-format blocklist you add to Pi-hole. Over time it learns from your decisions using vector embeddings.
Sentrifugo is a FREE and powerful Human Resource Management System (HRMS) that can be easily configured to meet your organizational needs.
A cloudflare verification bypass script for webscraping.
We love scraping, don't we? But sometimes, we face Cloudflare protection. This script is designed to bypass the Cloudflare protection on websites, allowing you to interact with them programmatically.
An open-source web application to manage product warranties, track expiration dates, and store related documents.
Related contents:
"putzen" is German and means cleaning. It helps keeping your disk clean of build and dependency artifacts safely.
Blazingly fast terminal recorder that generates animated gif images for the web written in rust.
Analyze assets authorization, who has access to what and how.
universal-data-permissions-scanner (AKA udps) helps DevOps and data engineers quickly understand who has access to what data and how.
DevOps and data engineers are often tasked with managing the security of the databases, data lakes or warehouses they operate. This usually involves setting permissions to enable users to query the data they need. However, as the number of users and use-cases increase, complexity explodes. It's no longer humanly possible to remember who had access to what, how and why, which makes meeting security and compliance requirements impossible.