Links
AddVLM app for video analytics.
Unblink is a camera monitoring application that runs AI vision models on your camera streams in real-time.
A memory safe implementation of sudo and su.
A safety oriented and memory safe implementation of sudo and su written in Rust.
Related contents:
Nmap on steroids. Simple CLI with the ability to run pure Nmap engine, 31 modules with 459 scan profiles.
sandmap is a tool supporting network and system reconnaissance using the massive Nmap engine. It provides a user-friendly interface, automates and speeds up scanning and allows you to easily use many advanced scanning techniques.
Open reimplementation of Sakana Fugu — the 'one model to command them all' LLM orchestrator. Read → run → train → serve.
An open, runnable reverse-engineering of Sakana AI's Fugu — the "one model to command them all" LLM orchestrator.
Fugu is sold as a single model; it is really a policy over models — a tiny coordinator that, per query, routes work to a pool of frontier LLMs and returns one answer. Sakana's product and trained weights are closed. OpenFugu rebuilds the mechanism from the two papers + released artifacts, verifies it against real weights, trains a Conductor of our own, and serves it behind one OpenAI-compatible endpoint. Four stages, all working: read → run → train → serve.
A cross-platform ebook reader. A modern ebook manager and reader with sync and backup capacities for Windows, macOS, Linux and Web.
SSH Honeypot that gathers creds and attempted commands.
SSH Honeypot that gathers attempted creds, IP addresses and versions. The SSH server will either issue a warning, or drop the attacker into a fake shell.
A cross-platform Electron Desktop App to stream and download any Movie, TV Series or Anime in the World. Zero Ads and Tracking
Scan for secrets in dangling commits on GitHub using GH Archive data.
This tool scans for secrets in dangling (dereferenced) commits on GitHub created by force push events. A force push occurs when developers overwrite commit history, which often contains mistakes, like hard-coded credentials. This project relies on archived force push event data in the GHArchive to identify the relevant commits.
Related contents:
Automatic audio mastering plugin for live-streaming, podcasting and internet radio stations.
A lightweight CLI and local API server to create, run and manage macOS and Linux virtual machines (VMs) natively on Apple Silicon.
HTTP load testing tool and library. It's over 9000!'
Vegeta is a versatile HTTP load testing tool built out of a need to drill HTTP services with a constant request rate. It's over 9000!
Instant MicroVMs/Unikernels for macOS and Linux.
A Firecracker-style microVM launcher for BSD, Linux, and unikernel guests on macOS and Linux, built on libkrun (which drives Apple's Hypervisor.framework on macOS and KVM on Linux).
The Log File Navigator, lnav for short, is an advanced log file viewer for the small-scale. It is a terminal application that can understand your log files and make it easy for you to find problems with little to no setup.
Your reading list, as a podcast you own. Self-hosted Podcasting 2.0 service that turns saved articles into a personal podcast feed.
Paste a URL or upload a document (PDF, DOCX, Markdown, text, or HTML), wait a few minutes, and get an episode with cloned-voice narration, artwork, an LLM-written episode summary, and a WebVTT transcript. Subscribe in Pocket Casts, Overcast, or Apple Podcasts like any other show.
Script that allows the easy creation of OpenVPN endpoints in any AWS region. To create a VPN endpoint is done with a single command takes ~3 minutes. It will create a VPC with proper security groups. It spins up a tagged ec2 instance and configures OpenVPN software. Once instance is configured an OpenVPN configuration file is downloaded and ready to use. There is also functionality to see which instances are running in which region and ability to terminate the instance when done. Additional functionality includes specifying instance type, generate ssh keypairs, specify custom ami, change login user and more to come.
MinusPod is a self-hosted server that removes ads before you ever hit play.
MinusPod is a self-hosted server that removes ads before you ever hit play. It transcribes episodes with Whisper, uses an LLM to detect and cut ad segments, and builds cross-episode ad patterns from your corrections so repeat sponsors get caught without re-asking the LLM. Bring your own LLM: Claude, Ollama, OpenRouter, or any OpenAI-compatible provider.
Tiny Tiny RSS (tt-rss) is a free, flexible, open source, web-based news feed (RSS/Atom/other) reader and aggregator.
List system USB buses and devices. A modern cross-platform lsusb that attempts to maintain compatibility with, but also add new features.
Related contents:
Modern Zod-based CLI builder, fully type-safe, super lightweight and flexible.
Turbulenz is a modular 3D and 2D game framework for making HTML5 powered games for browsers and mobile devices.
libSQL is a fork of SQLite that is both Open Source, and Open Contributions.
We aim to evolve it to suit many more use cases than SQLite was originally designed for, and plan to use third-party OSS code wherever it makes sense.
Limbo is a work-in-progress, in-process OLTP database management system, compatible with SQLite.
Related contents:
Simple H.264 decoder.
Minimalist software decoder with state-of-the-art performance for the H.264/AVC video format.
Audit your Claude Code configuration health across all layers.
A Claude Code skill that systematically reviews your project's setup using the six-layer framework: CLAUDE.md → rules → skills → hooks → subagents → verifiers. It detects project complexity, runs two parallel diagnostic agents, and outputs a prioritized report telling you what to fix first.
🤱🏻 Turn any webpage into a desktop app with Rust.
Related contents:
Tokenflood is a load testing framework for simulating arbitary loads on instruction-tuned LLMs.
Tokenflood is a load testing tool for instruction-tuned LLMs that allows you to run arbitrary load profiles without needing specific prompt and response data. Define desired prompt lengths, prefix lengths, output lengths, and request rates, and tokenflood simulates this workload for you.
TwigStan is a static analyzer for Twig templates powered by PHPStan.
TwigStan uses Twig to compile templates to PHP code. It then optimizes the compiled PHP code slightly, allowing PHPStan to analyze it better. It then reports any errors back to the original template and line number.
Docker Authorization Plugin.
A basic extendable Docker authorization plugin that runs directly on the host or inside a container. The framework depends on docker authentication plugin support. Basic authorization is provided when Docker daemon is started with --tlsverify flag (username is extracted from the certificate common name).
Twemcache (pronounced "two-em-cache") is the Twitter Memcached. Twemcache is based on a fork of Memcached v.1.4.4 that has been heavily modified to make to suitable for the large scale production environment at Twitter.
OpenSource note-taking & archiving alternative to Evernote, Microsoft OneNote & Google Keep
OptiStack is a professional-grade, self-hosted platform designed for biohackers and health optimizers. It brings order to complex protocols with AI-powered interaction analysis, smart inventory tracking, precise timing schedules, and doctor-ready PDF reports.
Whether you're taking a daily multivitamin or managing a complex longevity protocol, OptiStack handles the cognitive load—tracking dosages, checking for contraindications, and helping you stay consistent—all in a privacy-first, Docker-deployable package.
Related contents:
Lightweight modern Python library to add security headers (CSP, HSTS, etc.) to Django, Flask, FastAPI, and more. Secure defaults or fully customizable.
onak is an OpenPGP compatible keyserver. It was originally written concentrating on providing real time path finding between 2 keys, but over time has moved to concentrating on providing standard keyserver storage and retrieval functionality.
ADR secures enterprise AI agents through observability, security benchmarking, and threat detection. Deployed at Uber.
ADR (Agentic AI Detection and Response) is an enterprise security system for AI agents. It helps organizations secure employee-facing agents such as Cursor, Claude Code, and Codex, as well as customer-facing agents such as AI support agents.
GoMock is a mocking framework for the Go programming language.
Go Reference
gomock is a mocking framework for the Go programming language. It integrates well with Go's built-in testing package, but can be used in other contexts too.
This project originates from Google's golang/mock repo. Unfortunately, Google no longer maintains this project, and given the heavy usage of gomock project within Uber, we've decided to fork and maintain this going forward at Uber.
An OCI base image of Fedora CoreOS with batteries included.
uCore is an OCI image of Fedora CoreOS with "batteries included". More specifically, it's an opinionated, custom CoreOS image, built daily with some common tools added in. The idea is to make a lightweight server image including commonly used services or the building blocks to host them.
ChainReactor is a research project that leverages AI planning to discover exploitation chains for privilege escalation on Unix systems. The project models the problem as a sequence of actions to achieve privilege escalation from initial access to a target system.
Insert is a programming language for self-modifying code.
It can be used to create programs that produce modified versions of themselves. For example, the pong game above (which was one of the winners of IOCCC29) can be found at test/snapshots/pong-target.stdout, with the source code used to create it at test/src/pong.int and a helper script to run it at quineRun.sh.
A C++ library for reading MacBook lid angle sensor data, based on reverse engineering of HID device specifications.
Read and extract text and other content from PDFs in C# (port of PDFBox).
PdfPig supports reading text and content from PDF files. It also supports basic PDF file creation.
Related contents:
Cameradar hacks its way into RTSP videosurveillance cameras.
Related contents:
YOLOv5 in PyTorch > ONNX > CoreML > TFLite. YOLOv5 is the world's most loved vision AI, representing Ultralytics open-source research into future vision AI methods, incorporating lessons learned and best practices evolved over thousands of hours of research and development.
Rewrite of Claude Code
The fastest repo in history to surpass 50K stars ⭐, reaching the milestone in just 2 hours after publication. Better Harness Tools that make real things done. Now writing in Rust using oh-my-codex.
Related contents:
A library that unifies the APIs of IndexedDB, localStorage and other storage into a consistent API.
modern storage toolkit that keeps localForage compatibility while using async/await, TypeScript, and zero legacy baggage.
Automated resources sizing tool for containers in kubernetes.
Kondense is an automated resource sizing tool. It runs as a sidecar in kubernetes pods. Kondense uses memory pressure to apply just the right amount of memory on a container to page out the unused memory while not getting out-of-memory killed.
A cinematic Git commit replay tool for the terminal, turning your Git history into a living, animated story.
A CLI code-typing game that turns your source code into typing challenges.
GitType turns your own source code into typing challenges. Because why practice with boring lorem ipsum when you can type your beautiful fn main() implementations?
Related contents:
Self hosted Pandora/Spotify. Allows for creation of stations and autoplay for music discovery.
Helix is a self-hosted music player, discovery tool, and shared listening system built around a Subsonic-compatible music library.
It is meant for people who run their own music server but still want a more modern experience: search, queues, generated stations, playlists, shared listening, and optional fulfillment for tracks that are not already in the library.
Firefox Decrypt is a tool to extract passwords from profiles of Mozilla (Fire/Water)fox™, Thunderbird®, SeaMonkey® and derivates.
It can be used to recover passwords from a profile protected by a Master Password as long as the latter is known. If a profile is not protected by a Master Password, passwords are displayed without prompt.
A post-processing tool for scanned sheets of paper.
unpaper is a post-processing tool for scanned sheets of paper, especially for book pages that have been scanned from previously created photocopies. The main purpose is to make scanned book pages better readable on screen after conversion to PDF. Additionally, unpaper might be useful to enhance the quality of scanned pages before performing optical character recognition (OCR).
An evolving recon & pentest skill pack. CORS, XSS, SQLi, SSRF, RCE, WordPress, MCP, cloud, subdomain takeover, and more. Field-tested.
A curated pack of security skills for external reconnaissance, web applications, APIs, authentication, vulnerability validation, attack-path analysis, and reporting.
✨ A fast, cross-platform CLI tool to check the git status of multiple projects organized by categories.
Run check-projects to see which of your projects have uncommitted changes, are ahead of remote, or have other git status indicators.
Just a simply easy way to label each element you want!
A self-hosted API that takes a URL and returns a file with browser screenshots. You run the API on your machine, you send it a URL, and you get back the website data as a file plus screenshots of the site. Simple as.
A Completely Modular LLM Reverse Engineering, Red Teaming, and Vulnerability Research Framework.
Open DMARC Analyzer is an Open Source DMARC Report Analyzer to be used with DMARC reports that have been parsed by John Levine's rrdmarc script or techsneeze's dmarcts-report-parser.
Lightweight, container-free sandbox for running commands with network and filesystem restrictions.
Fence wraps commands in a sandbox that blocks network access by default and restricts filesystem operations based on configurable rules. It's most useful for running semi-trusted code (package installs, build scripts, CI jobs, unfamiliar repos) with controlled side effects, and it can also complement AI coding agents as defense-in-depth.