Links
Addmquire, a play on the memory and inquire words, is a memory querying tool inspired by osquery.
Zero-dependency Linux memory forensics PoC — leverages kernel-embedded BTF and kallsyms for type-aware memory analysis without external debug info.
Related contents:
Boot-to-Breach red team lab on AWS. Mythic, Sliver, and Havoc C2 behind a production-style Apache redirector. Deployed via Terraform.
Related contents:
Extensible MacOS system telemetry generator.
MacNoise is an extensible and modular macOS system telemetry generation framework. It generates real system events (network connections, file writes, process spawns, plist mutations, TCC permission probes, and more) so security teams can validate that their EDR, SIEM, and firewall tooling detects what it is supposed to detect.
Related contents:
CredData (Credential Dataset) is a set of files including credentials in open source projects. CredData includes suspicious lines with manual review results and more information such as credential types for each suspicious line.
CredData can be used to develop new tools or improve existing tools. Furthermore, using the benchmark result of the CredData, users can choose a proper tool among open source credential scanning tools according to their use case. We sincerely hope that CredData will help minimize credential leaks.
Related contents:
CredSweeper is an advanced credential detection tool designed to identify exposed credentials such as passwords, API keys, tokens, and other sensitive information across source code, configuration files, documents, and binary assets. CredSweeper scans regular files, embedded data in containers, and files added in Git commits. The tool combines pattern-based detection, machine learning–based validation, and deep file inspection to deliver comprehensive and accurate security scanning for modern codebases and repositories.
Related contents:
An executable to convert SOCKS5 proxy into HTTP proxy.
Related contents:
An open-source desktop application to create and manage application launchers (.desktop files) on GNOME-based Linux systems.
Related contents:
a light-weight HTTP/HTTPS proxy daemon for POSIX operating systems.
Tinyproxy is a small, efficient HTTP/SSL proxy daemon released under the GNU General Public License. Tinyproxy is very useful in a small network setting, where a larger proxy would either be too resource intensive, or a security risk. One of the key features of Tinyproxy is the buffering connection concept. In effect, Tinyproxy will buffer a high speed response from a server, and then relay it to a client at the highest speed the client will accept. This feature greatly reduces the problems with sluggishness on the Internet. If you are sharing an Internet connection with a small network, and you only want to allow HTTP requests to be allowed, then Tinyproxy is a great tool for the network administrator.
Related contents:
A self-hosted control plane for Nebula overlay networks.
Related contents:
Incus-based container management with native KDE/Plasma integration. A distrobox-like tool using Incus as the container/VM backend, designed for KDE Linux.
Related contents:
Symfony bundle to isolate your app's doctrine database tests and improve the test performance.
This bundle provides features that help you run your Symfony-framework-based App's testsuite more efficiently with isolated tests.
It provides a StaticDriver that will wrap your originally configured Driver class (like DBAL\Driver\PDOMysql\Driver) and keeps a database connection statically in the current php process.
Related contents:
The free and open source React Native vibe coding IDE Text to mobile apps in seconds Ask chat anything, and turn your words into iOS, Android and web apps at the same time.
The React Native Vibe Code SDK lets you build text to mobile & web apps in seconds. A full suite of packages to run your your own vibe coding features or platform.
Get Better at Getting Better.
DORA is the largest and longest running research program of its kind, that seeks to understand the capabilities that drive software delivery and operations performance. DORA helps teams apply those capabilities, leading to better organizational performance.
Related contents:
Take Back Control of DevOps.
Configuration as data lets you see what will happen before it happens.
Related contents:
The Open Container Initiative is an open governance structure for the express purpose of creating open industry standards around container formats and runtimes.
Established in June 2015 by Docker and other leaders in the container industry, the OCI currently contains three specifications: the Runtime Specification (runtime-spec), the Image Specification (image-spec) and the Distribution Specification (distribution-spec). The Runtime Specification outlines how to run a “filesystem bundle” that is unpacked on disk. At a high-level an OCI implementation would download an OCI Image then unpack that image into an OCI Runtime filesystem bundle. At this point the OCI Runtime Bundle would be run by an OCI Runtime.
Related contents:
Universal Sandbox Infrastructure for AI Applications.
Securely run commands, filesystems, code interpreters, browsers, and developer tools in isolated runtime environments.
OpenSandbox is a general-purpose sandbox platform for AI applications, offering multi-language SDKs, unified sandbox APIs, and Docker/Kubernetes runtimes for scenarios like Coding Agents, GUI Agents, Agent Evaluation, AI Code Execution, and RL Training.
The Swiss Army knife for WiFi, Bluetooth Low Energy, wireless HID hijacking, CAN-bus and IPv4 and IPv6 networks reconnaissance and MITM attacks.
bettercap is a powerful, easily extensible and portable framework written in Go which aims to offer to security researchers, red teamers and reverse engineers an easy to use, all-in-one solution with all the features they might possibly need for performing reconnaissance and attacking WiFi networks, Bluetooth Low Energy devices, CAN-bus, wireless HID devices and Ethernet networks.
OS for z80 calculators
KnightOS is a third-party operating system for TI calculators. It provides a passable Unix-like system for calculators. KnightOS is built on top of the KnightOS kernel.
Vite plugin that reimplements the Next.js API surface — deploy anywhere.
Related contents:
In December 1990, an application called WorldWideWeb was developed on a NeXT machine at The European Organization for Nuclear Research (known as CERN) just outside of Geneva. This program – WorldWideWeb — is the antecedent of most of what we consider or know of as "the web" today.
In February 2019, in celebration of the thirtieth anniversary of the development of WorldWideWeb, a group of developers and designers convened at CERN to rebuild the original browser within a contemporary browser, allowing users around the world to experience the rather humble origins of this transformative technology.
Advanced Command and Control Framework for Authorized Red Team Operations
Security proxy for AI agents. Scans every message for prompt injection, PII, and secrets. Defense-in-depth: Go proxy + iptables firewall + eBPF kernel monitor. YAML policy engine, audit logging, 5 AI agents with RAG knowledge bases.
Security proxy for AI agents. Sits in front of OpenClaw and scans every message for prompt injection, PII leaks, and secrets — before they reach the model or leave the network.
Turn GitHub Copilot into OpenAI/Anthropic API compatible server. Usable with Claude Code!
A reverse-engineered proxy for the GitHub Copilot API that exposes it as an OpenAI and Anthropic compatible service. This allows you to use GitHub Copilot with any tool that supports the OpenAI Chat Completions API or the Anthropic Messages API, including to power Claude Code.
Related contents:
sub-500ms latency phone agent orchestration. A voice agent framework in ~600 lines of Python.
Related contents:
pre-trained enterprise-grade Voice Activity Detector.
Related contents:
A collection of AI agent skills for working with Expo projects and Expo Application Services
A batteries-included framework for building interactive terminal user interfaces with React and Ink.
giggles is a batteries-included framework for building terminal user interfaces (TUIs) with React and Ink. It handles focus management, input routing, screen navigation, and theming out of the box — along with a component library covering most TUI use cases and terminal utilities for things like handing off control to external programs. Everything is declarative and composable, so you can build polished CLI apps without wiring up the low-level details yourself.
Dependency tools for git
A git subcommand that indexes your dependency changes into a queryable database. Find out who added a package, when, and why.
Related contents:
Square’s meticulous HTTP client for the JVM, Android, and GraalVM.
Related contents:
Java Evolved. Your Code Can Evolve Too!.
A collection of side-by-side code comparisons showing old Java patterns next to their clean, modern replacements — from Java 8 all the way to Java 25.
Mesurons le niveau de dépendance technologique de nos organisations, et reprenons notre destin numérique en main.
Related contents:
la Démarche NIRD : pour un numérique libre et écocitoyen dans les établissements scolaires !
Related contents:
Continuously update everything. A Declarative Update Policy Engine.
"Automatically open a PR on your GitOps repository when a third party service publishes an update"
Updatecli is a tool used to apply file update strategies. Designed to be used from everywhere, each application "run" detects if a value needs to be updated using a custom strategy then apply changes according to the strategy.
You describe your update strategy in a file then you run updatecli to it.
Related contents:
The Terminal for Coding Agents.
IDE for the AI Agents Era - Run an army of Claude Code, Codex, etc. on your machine. Superset is a turbocharged terminal that allows you to run any CLI coding agents along with the tools to 10x your development workflow.
Convert Ingress resources to Gateway API resources.
Ingress2gateway helps translate Ingress and provider-specific resources (CRDs) to Gateway API resources. Ingress2gateway is managed by the Gateway API SIG-Network subproject.
Related contents:
A simple HTTP Request & Response Service. HTTP Request & Response Service, written in Python + Flask.
Related contents:
Memory for Proactive 24/7 Agents.
MemU powers autonomous AI agents with persistent, evolving memory. Continuously predict user intentions, act proactively, and work for you — even while you sleep.
Minimal CLI coding agent by Mistral.
Mistral Vibe is a command-line coding assistant powered by Mistral's models. It provides a conversational interface to your codebase, allowing you to use natural language to explore, modify, and interact with your projects through a powerful set of tools.
Python app to work with pictures and associated metadata from Apple Photos on macOS. Also includes a package to provide programmatic access to the Photos library, pictures, and metadata.
OSXPhotos provides the ability to interact with and query Apple's Photos.app library on macOS and Linux. You can query the Photos library database — for example, file name, file path, and metadata such as keywords/tags, persons/faces, albums, etc. You can also easily export both the original and edited photos. OSXPhotos also works with iPhoto libraries though some features are available only for Photos.
Related contents:
A musical ear training game.
Related contents:
Free your wrist.
AsteroidOS is an open-source Linux distribution for smartwatches.
Related contents:
Free Disk Cloning, Backup and Erasing Software.
High-speed disk management toolkit for Windows. Backup, clone, erase and restore entire drives with ease. Free CLI support included.
Related contents:
Reticulum is the cryptography-based networking stack for building local and wide-area networks with readily available hardware. Reticulum can continue to operate even in adverse conditions with very high latency and extremely low bandwidth.
Related contents:
shell teleporter plugin/dotfiles manager (bash/zsh/ksh).
bash/zsh/ksh plugin/dotfiles manager and teleporter
Your shell env and plugins are available everywhere (hosts/users)
bzzz bzzz !
What's the point to have a fine tuned local shell environment if you lose it as soon as you connect to another server / sudo to another user ?
The Cursor for Designers • An Open-Source AI-First Design tool • Visually build, style, and edit your React App with AI.
Related contents:
Like gh for GitHub, but for Notion. 39 commands. One binary.
Work seamlessly with Notion from the command line. Full Notion API coverage in a single binary.
A full-featured command-line interface for Notion. Manage pages, databases, blocks, comments, users, and files — all from your terminal. Built for developers and AI agents who need programmatic access without the browser.
Related contents:
Testing Wi-Fi Client Isolation.
a set of attacks that enable a guest user to bypass Wi-Fi client isolation. Or put differently, it allows an adverary who can connect to your network, either as a malicious insider or by connecting to a co-located open network, to 'bypass Wi-Fi encryption'.
Related contents:
Our world is made of information that competes for our attention. What is necessary? What is not?
When we design products, we aim to choose the best position for user interface components, placing the most important ones in the most accessible places on the screen.
Equally important is the design of communication. How many notifications are necessary? How and when should they be displayed? To answer this, we can be inspired by the principles of calm technology.
Related contents:
CLI Code Agent Orchestrator. Autonomous AI agent orchestrator powered by Claude Code CLI.
OpenSwarm orchestrates multiple Claude Code instances as autonomous agents. It picks up Linear issues, runs Worker/Reviewer pair pipelines to produce code changes, reports progress to Discord, and retains long-term memory via LanceDB vector embeddings.
Transform SQL queries into interactive visual flow diagrams.
SQL Crack is a VS Code extension that visualizes SQL queries as interactive execution flow diagrams. Understand complex queries at a glance, track data lineage across your entire workspace, and identify optimization opportunities with professional-grade visual analysis.
Open-source task management for the agentic era. The command center for solo entrepreneurs who delegate work to AI agents.
Open-source task management for the agentic era. The command center for solo entrepreneurs who delegate work to AI agents.
Mission Control gives your AI agents structure. Agents get roles, inboxes, and reporting protocols. You delegate work through a visual dashboard, they execute and report back. You stay in control without micromanaging.
S3-native event streaming. One binary, zero ops.
StreamHouse is an Apache Kafka alternative that stores events directly in S3. No broker fleet, no disk management, no replication — just S3's 99.999999999% durability out of the box.
S3-native streaming platform. A Kafka alternative with infinite scalability, 10x lower cost, and Kafka-compatible APIs. Written in Rust.
MCP security testing framework for evaluating Model Context Protocol server vulnerabilities.
A Model Context Protocol (MCP) server built with FastMCP that provides various tools including Claude AI integration, text injection capabilities, and server information utilities. It is definitely super secure, you should definitely send confidential data through it, and definitely take everything it says as fact.
Related contents:
A sandboxed bash interpreter for AI agents. Pure TypeScript with in-memory filesystem.
A simulated bash environment with an in-memory virtual filesystem, written in TypeScript. Designed for AI agents that need a secure, sandboxed bash environment. Supports optional network access via curl with secure-by-default URL filtering.
Secure Snake Home, or ssh, is a protocol and client for securely playing multiplayer snake over the internet.
Related contents:
Colmena is a software solution to create and share content, developed together with local and community media from the Global South. Colmena is free software self-hosted that can be installed on its own instance.
Colmena is your digital tool box for local and community media productions. It's a 100% free of charge, secure, open source solution for mobile and desktop environments. Colmena is mantained and developed by a non-profit consortium of civil society organisations dedicated to the freedom of expression and digital rights.
Colmena bundles all essential tools for resilient local and community media productions in just one application. With our free and open source software you can: record, edit, do remote interviews, live-stream, meet and plan with your team, share files and publish from almost any digital device.
attempting to detect smart glasses nearby and warn you.
Related contents:
Elastic2025 is a dark Roundcube theme based on the Elastic2022 by Seb1k.
Gmail removed ability to pull messages from other providers as of Jan 2026. This project aim to offer a simple drop in replacement webmail experience in Roundcube (especially on desktop). Please consider donating if you liked it.
The Ultimate Datacenter Management Solution for Proxmox VE
PegaProx transforms your Proxmox VE experience with unified multi-cluster control, intelligent load balancing, seamless cross-cluster migrations, and enterprise-grade LDAP & OIDC authentication – all in one beautiful interface.
Related contents:
A lightweight, self-hosted application for managing your personal medical information. Keep your health records organized and accessible while maintaining complete control over your data privacy.