Links
Addar-go-tools (Argot) is a collection of analysis tools for Go
Find AWS resources that are not logging, and turn them on.
Assisted Log Enabler for AWS is for customers who do not have logging turned on for various services, and lack knowledge of best practices and/or how to turn them on.
[Node, Python, Java] Repository of sample Custom Rules for AWS Config. AWS Community repository of custom Config rules. Contributions welcome. Instructions for leveraging these rules are below.
eks-node-viewer is a tool for visualizing dynamic node usage within a cluster. It was originally developed as an internal tool at AWS for demonstrating consolidation with Karpenter. It displays the scheduled pod resource requests vs the allocatable capacity on the node. It does not look at the actual pod resource usage.
simple, high-throughput file client for mounting an Amazon S3 bucket as a local file system. Mountpoint for Amazon S3 is a simple, high-throughput file client for mounting an Amazon S3 bucket as a local file system. With Mountpoint for Amazon S3, your applications can access objects stored in Amazon S3 through file operations like open and read. Mountpoint for Amazon S3 automatically translates these operations into S3 object API calls, giving your applications access to the elastic storage and throughput of Amazon S3 through a file interface.
A Dynamic DNS system built with API Gateway, Lambda & Route 53.
SOCI Snapshotter is a containerd snapshotter plugin. It enables standard OCI images to be lazily loaded without requiring a build-time conversion step. "SOCI" is short for "Seekable OCI", and is pronounced "so-CHEE".
Related contents:
Threat Designer is a GenerativeAI application designed to automate and streamline the threat modeling process for secure system design.
Threat Designer is an AI-driven agent that automates and streamlines the threat modeling process for secure system design. Harnessing the power of large language models (LLMs), it analyzes system architectures, identifies potential security threats, and generates detailed threat models—empowering developers and security professionals to incorporate security from the earliest stages of development.
pgactive is a PostgreSQL replication extension for creating an active-active database.
RDS Extended Support Cost Estimator Script.
These scripts can be used to help estimate the cost of RDS Extended Support for RDS instances & clusters in your AWS account and organization.
These scripts should be run from the payer account of your organization to identify the RDS clusters in your organization that will be impacted by the extended support and the estimated additional cost.
SlimFaas : The slimest and simplest Function As A Service.
Makes reverse engineering Android apps easier, automating repetitive tasks like pulling, decoding, rebuilding and patching an APK.
apk.sh is a Bash script that makes reverse engineering Android apps easier, automating some repetitive tasks like pulling, decoding, rebuilding and patching an APK.
Related contents:
Lightweight CLI download accelerator.
Axel tries to accelerate the download process by using multiple connections per file, and can also balance the load between different servers.
An email and SMTP testing tool with API for developers.
Mailpit is a multi-platform email testing tool & API for developers.
It acts as both an SMTP server, and provides a web interface to view all captured emails. It also contains an API for automated integration testing.
A command-line vanity (public) key generator for WireGuard. By default, it only matches the prefix of generated public keys, and not whether the search matches anywhere in the public key. The concept is based on wireguard-vanity-address, however I wanted something a little more streamlined.
Related contents:
A tiny, zero-dependency effect system for writing pure, testable JavaScript without mocks.
Pure Effect is a tiny, zero-dependency effect system for writing pure, testable JavaScript without mocks.
It implements the "Functional Core, Imperative Shell" pattern, allowing you to decouple your business logic from external side effects like database calls or API requests. Instead of executing side effects immediately, your functions return Commands which are executed later by an interpreter.
Public malware techniques used in the wild: Virtual Machine, Emulation, Debuggers, Sandbox detection.
al-khaser is a PoC "malware" application with good intentions that aims to stress your anti-malware system. It performs a bunch of common malware tricks with the goal of seeing if you stay under the radar.
Related contents:
🗄 Zero dependency streaming tar parser and writer for every JavaScript runtime. Built with the browser-native Web Streams API for performance and memory efficiency.
🌊 Interactive CLI tool to update GitHub Actions to latest versions with SHA pinning .
Actions Up scans your workflows and composite actions to discover every referenced GitHub Action, then checks for newer releases.
Interactively upgrade and pin actions to exact commit SHAs for secure, reproducible CI and low-friction maintenance.
🛰 Monitor how many tokens your code and configs consume in AI tools. Set budgets and get alerts when limits are hit.
Token Limit helps you monitor how many tokens your AI context files consume. Set token budgets for your prompts, documentation, and configs, then get alerts when limits are exceeded.
Keep your AI costs predictable and avoid hitting context window limits that break your applications.
DloadBox is a complete download management platform combining aria2c, Caddy, ariaNG, RPC integration, and a Telegram bot It offers a user-friendly web interface and remote control, enabling efficient and scalable management of downloads from anywhere.
A compilation of challenges that aims to provide practice in simple to advanced concepts in the following topics: Digital Forensics, Incident Response, Malware Analysis and Threat Hunting.
This is aimed at Professionals, Security Researchers, Students, CTF Players as well as DFIR & Malware Analysis Enthusiasts in the field of Cyber Security who want to practice or have an interest in the aforementioned topics.
MCP server that turns the full ticket lifecycle into a guided conversation — no portal, no context switch, no re-typing the resource ID Azure already knows about.
Connect home devices into a powerful cluster to accelerate LLM inference. More devices mean faster performance, leveraging tensor parallelism and high-speed synchronization over Ethernet.
Supports Linux, macOS, and Windows. Optimized for ARM and x86_64 AVX2 CPUs.
Related contents:
Babylon.js: a complete JavaScript framework for building 3D games with HTML 5 and WebGL
Backstage is an open platform for building developer portals. Powered by a centralized software catalog, Backstage restores order to your microservices and infrastructure and enables your product teams to ship high-quality code quickly — without compromising autonomy.
Backup Checker is a fully automated backup checker
Boot-to-Breach red team lab on AWS. Mythic, Sliver, and Havoc C2 behind a production-style Apache redirector. Deployed via Terraform.
Related contents:
AI agent toolkit: coding agent CLI, unified LLM API, TUI & web UI libraries, Slack bot, vLLM pods.
Validate and Run GitHub Actions locally.
WRKFLW is a powerful command-line tool for validating and executing GitHub Actions workflows locally, without requiring a full GitHub environment. It helps developers test their workflows directly on their machines before pushing changes to GitHub.
Related contents:
PaddlePaddle (PArallel Distributed Deep LEarning) is an easy-to-use, efficient, flexible and scalable deep learning platform, which is originally developed by Baidu scientists and engineers for the purpose of applying deep learning to many products at Baidu.
Bootable Model As System (BMASS) – an offline-first AI operating environment.
BMASS is an open-source experiment that treats a local language model as the primary interface to a computer rather than another application running inside one.
Related contents:
A complete starter kit for an Obsidian + Claude Code personal knowledge management system.
A complete personal knowledge management system that combines Obsidian's powerful note-taking with Claude Code's AI assistance. Go from zero to a fully functional PKM in 15 minutes or less.
fast & lightweight self-hosted messenger. A federated messenger for self-hosting.
Redis in Zig.
A Redis-compatible in-memory data store written in Zig, designed for learning and experimentation. Zedis implements the core Redis protocol and data structures with a focus on simplicity, performance, and thread safety.
The Filesystem That Makes S3 your Primary Storage. ZeroFS is 9P/NFS/NBD on top of S3.
ZeroFS makes S3 storage feel like a real filesystem. It provides file-level access via NFS and 9P and block-level access via NBD. Fast enough to compile code on, with clients already built into your OS. No FUSE drivers, no kernel modules, just mount and go.
It's a presentation framework based on the power of CSS3 transforms and transitions in modern browsers and inspired by the idea behind prezi.com. — Read more
Firezone Inspired Wireguard VPN Server and nftables Firewall. A self-hosted WireGuard VPN management platform built with Python, NiceGUI, and PostgreSQL.
WireGUI gives you a clean web interface for managing WireGuard peers, firewall rules, and user authentication -- without depending on any third-party cloud service. It's designed for teams and individuals who want full control over their VPN infrastructure.
A free and open documentation platform built with Laravel and Filament, enhanced by Ollama for local AI features, focused on clarity, structure, and self-hosted simplicity.
Local CI. Sign off on your own work.
A GitHub CLI extension for local CI. Run your tests on your own machine and sign off when they pass.
Remote CI runners are fantastic for repeatable builds, comprehensive test suites, and parallelized execution. But many apps don't need all that. Maybe yours doesn't either.
Easy self-hosting for Docker-based web apps.
ONCE is a platform for installing and managing Docker-based web applications. Its goal is to make self-hosting applications as simple as possible.
As well as simplifying the initial setup, ONCE also provides automatic updates, backups, and system information. It has a TUI interface with a dashboard for monitoring and operating your applications, as well as CLI commands for common operations should you (or your AI agent) prefer that.
ONCE runs on Linux and macOS, and can be used to run applications on a variety of hardware: a physical server, a cloud VPS, a Raspberry Pi, or your laptop, are all suitable.
ONCE comes with a set of 37signals apps built-in, but you can use it to install any compatible Docker image as well.
Campfire is web-based chat application.
Campfire is single-tenant: any rooms designated "public" will be accessible by all users in the system. To support entirely distinct groups of customers, you would deploy multiple instances of the application.
Related contents:
Thruster is an HTTP/2 proxy for simple production-ready deployments of Rails applications. It runs alongside the Puma webserver to provide a few additional features that help your app run efficiently and safely on the open Internet.
Synthetic monitoring engine with Playwright and Prometheus metrics.
Upright is a self-hosted synthetic monitoring system. It provides a framework for running health check probes from multiple geographic sites and reporting metrics via Prometheus. Alerts can then be configured with AlertManager.
Related contents:
A package manager for shell scripts and functions.
Basher allows you to quickly install shell packages directly from github (or other sites). Instead of looking for specific install instructions for each package and messing with your path, basher will create a central location for all packages and manage their binaries for you.
bspwm is a tiling window manager based on binary space partitioning. It represents windows as the leaves of a full binary tree. It only responds to X events, and the messages it receives on a dedicated socket.
Simple X hotkey daemon.
sxhkd is an X daemon that reacts to input events by executing commands. Its configuration file is a series of bindings that define the associations between the input events and the commands. The format of the configuration file supports a notation for mapping shortcuts to commands in parallel.
Bolt is a fast and lightweight PHP framework. Its simple and flexible structure makes it ideal for small to medium-sized projects.
jQuery plugin that switches background images of a website - can be used as an image slider or a full screen background image switcher as well as image preloader.
Unison is a file-synchronization tool for POSIX-compliant systems (e.g. *BSD, GNU/Linux, macOS) and Windows. It allows two replicas of a collection of files and directories to be stored on different hosts (or different disks on the same host), modified separately, and then brought up to date by propagating the changes in each replica to the other.
pg_shmemviz captures PostgreSQL's main and dynamic shared memory segments and presents named allocations, exact structure layouts, padding, pointer targets, and raw bytes in a local browser.
The capture uses an extension. Structure metadata comes from DWARF in the exact postgres executable used for the capture.
Related contents:
Semantic grep tool for use by AI and humans!
ck (seek) finds code by meaning, not just keywords. It's a drop-in replacement for grep that understands what you're looking for — search for "error handling" and find try/catch blocks, error returns, and exception handling code even when those exact words aren't present.
A lightweight, lightning-fast, type-safe embeddable language for real-time applications.
bbdb uses Bash's internal debugging mechanism to provide a kind of debugger which will help you to trace and understand the execution of Bash scripts, even large and multi-files ones.
PHP basic ressource profiler (CPU/memory), safe and useful for production sites.
phptop prints per query and average metrics comparable to 'time' (wallclock, user and system CPU time) along with memory and other ressource usages.
It can be easily globally activated on a LAMP server and requires little resources and a single line configuration change in your php.ini. It has been used by Bearstech on many production servers for years without any problems.
AI-Powered Doorbell Intelligence
Transform your doorbell into an intelligent visitor identification system with advanced face recognition, multi-provider AI analysis, and comprehensive visitor insights.
Open-source PCB designs to add composite AV output to the Nintendo Famicom. Includes through-hole and SMD versions, based on the HVC-CPU-07 board. Provides cleaner video/audio than RF, following Miko’s original AV-mod guide. Gerber files included.
Related contents: