command-line
Blazingly fast terminal recorder that generates animated gif images for the web written in rust.
ElectricEye is a multi-cloud, multi-SaaS Python CLI tool for Asset Management, Security Posture Management & Attack Surface Monitoring supporting 100s of services and evaluations to harden your CSP & SaaS environments with controls mapped to over 20 industry, regulatory, and best practice controls frameworks
Automating situational awareness for cloud penetration tests.
CloudFox helps you gain situational awareness in unfamiliar cloud environments. It’s an open source command line tool created to help penetration testers and other offensive security professionals find exploitable attack paths in cloud infrastructure.
JavaScript to WASM compiler.
Jawsm (pronounced like "awesome") is a JavaScript to WebAssembly compiler written in Rust. It is similar to porffor in a way it also results in a standalone WASM binary that can be executed without an interpreter, but it takes a different implementation approach.
Security tool against dependency typosquatting attacks.
Twyn is a security tool that compares the name of your dependencies against a set of the most popular ones, in order to determine if there is any similarity between them, preventing you from using a potentially illegitimate one. In short, Twyn protects you against typosquatting attacks.
Automatically detect potential vulnerabilities and analyze repository metrics to prioritize open source security research targets .
sastsweep is a tool designed for identifying vulnerabilities in open source codebases at scale. It can gather and filter on key repository metrics such as popularity and project size, enabling targeted vulnerability research. It automatically detects potential vulnerabilities using semgrep and provides a streamlined HTML report, allowing researchers to quickly drill down to the affected portion of the codebase.
A command-line tool to get valuable information out of AWS CloudTrail and a general purpose toolbox for working with IAM policies
Zebar is a tool for creating customizable and cross-platform taskbars, desktop widgets, and popups.
Publish packages as git tags.
- 🔧 Works with projects with build steps.
- 👯 Works with projects with multiple packages (monorepos).
- 🏎 Lightweight git tags (only the files needed are included).
the event driven initramfs infrastructure.
The dracut (the tool) is used to create an initramfs image by copying tools and files from an installed system and combining it with the dracut framework, usually found in /usr/lib/dracut/modules.d.
📦🚀 Fully automated version management and package publishing.
semantic-release automates the whole package release workflow including: determining the next version number, generating the release notes, and publishing the package.
🌈 React for interactive command-line apps. React for CLIs. Build and test your CLI output using components.
Ink provides the same component-based UI building experience that React offers in the browser, but for command-line apps. It uses Yoga to build Flexbox layouts in the terminal, so most CSS-like props are available in Ink as well. If you are already familiar with React, you already know Ink.
A TUI for managing *arr servers. Built with 🤎 in Rust.
Managarr is a TUI and CLI to help you manage your HTPC (Home Theater PC).
Manage your Observability Systems. Command Line utility for managing Grafana Resources.
Software engineers know how to version and deploy their resources. Tools like Git or CI enable reliable workflows that track changes, with meaningful review processes giving confidence in the expected outcomes. Now, with Grizzly, you can have all this with Grafana resources, dashboards, datasources and more.
A tiny JavaScript runtime
txiki.js is a small and powerful JavaScript runtime. It targets state-of-the-art ECMAScript and aims to be WinterCG compliant.
An interpreter for Rust's mid-level intermediate representation.
Miri is an Undefined Behavior detection tool for Rust. It can run binaries and test suites of cargo projects and detect unsafe code that fails to uphold its safety requirements.
An advanced, yet simple, tunneling/pivoting tool that uses a TUN interface.
Ligolo-ng is a simple, lightweight and fast tool that allows pentesters to establish tunnels from a reverse TCP/TLS connection using a tun interface (without the need of SOCKS).
Penelope Shell Handler.
Penelope is a shell handler designed to be easy to use and intended to replace netcat when exploiting RCE vulnerabilities. It is compatible with Linux and macOS and requires Python 3.6 or higher. It is a standalone script that does not require any installation or external dependencies, and it is intended to remain this way.
Internal Tools Deployment Platform. Webapp Management for Internal Tools.
Platform for securely developing and deploying web tools across a team. Application server for containerized webapps. Create and share webapps for CLI applications.
Clace combines the functionality of a reverse proxy, a hypermedia based micro-framework and a container orchestrator (using Docker or Podman) in a single lightweight binary. After starting the Clace server and ensuring Docker or Podman is running, new apps can be installed in one command from GitHub source repo. Clace builds the image and starts the container lazily, on the first API call. Clace can also automatically build simple form based UI for backend APIs.
Zero shot vulnerability discovery using LLMs. A tool to identify remotely exploitable vulnerabilities using LLMs and static code analysis.
Vulnhuntr leverages the power of LLMs to automatically create and analyze entire code call chains starting from remote user input and ending at server output for detection of complex, multi-step, security-bypassing vulnerabilities that go far beyond what traditional static code analysis tools are capable of performing.
Related contents:
The firmware security analyzer.
EMBA is designed as the central firmware analysis and SBOM tool for penetration testers, product security teams, developers and responsible product managers. It supports the complete security analysis process starting with firmware extraction, doing static analysis and dynamic analysis via emulation, building the SBOM and finally generating a web report. EMBA automatically discovers possible weak spots and vulnerabilities in firmware. Examples are insecure binaries, old and outdated software components, potentially vulnerable scripts, or hard-coded passwords. EMBA is a command line tool with the possibility to generate an easy-to-use web report for further analysis.
Use SQL for everything. Query anything with old-school cool SQL.
Anyquery is a CLI tool to run SQL queries on any data source, no matter if it's a file, an API, logs, or a local app. See the integrations for the full extent of what you can do.
A Git-compatible VCS that is both simple and powerful.
Jujutsu is a powerful version control system for software projects. You use it to get a copy of your code, track changes to the code, and finally publish those changes for others to see and use. It is designed from the ground up to be easy to use—whether you're new or experienced, working on brand new projects alone, or large scale software projects with large histories and teams.
Related contents:
- Jujutsu for everyone.
- Steve's Jujutsu Tutorial.
- Tools Worth Changing To in 2025 @ Matthew Sanabria.
- Episode #77: Fallthrough & Friends @ Changelog & Friends.
- What I've learned from jj @ zerowidth positive lookahead.
- Git experts should try Jujutsu @ pksunkara.
- Jujutsu For Busy Devs @ Madeleine Mortensen.
- Jujutsu (jj) - quand Google réinvente Git en mode ninja @ Korben :fr:.
- Switch to Jujutsu already: a tutorial @ Stavros' Stuff.
- I see a future in jj @ Steve Klabnik.
- Reviewing large changes with Jujutsu @ Ben Gesoff.
- Jujutsu megamerges for fun and profit @ Isaac Corbrey.
- Git Is Not Fine @ Bill Jings.
- Reviewing large changes with Jujutsu @ Ben Gesoff.
An Open-source LTE Downlink/Uplink Eavesdropper.
LTESniffer is a tool that can capture the LTE wireless messages that are sent between a cell tower and smartphones connected to it. LTESniffer supports capturing the messages in both directions, from the tower to the smartphones, and from the smartphones back to the cell tower.
It first decodes the Physical Downlink Control Channel (PDCCH) to obtain the Downlink Control Informations (DCIs) and Radio Network Temporary Identifiers (RNTIs) of all active users. Using decoded DCIs and RNTIs, LTESniffer further decodes the Physical Downlink Shared Channel (PDSCH) and Physical Uplink Shared Channel (PUSCH) to retrieve uplink and downlink data traffic.
Fast Rust bundler for JavaScript/TypeScript with Rollup-compatible API.
Rolldown is a JavaScript/TypeScript bundler written in Rust intended to serve as the future bundler used in Vite. It provides Rollup-compatible APIs and plugin interface, but will be more similar to esbuild in scope.
Related contents:
Stop wrestling with code dependencies. Use Codependence! 🤼♀️
Codependence is a JavaScript utility for checking dependencies to ensure they're up-to-date or match a specified version.
Beautifully shows Express/Koa/Hapi/Fastify routes in CLI.
🚀 FTL is a powerful deployment tool that simplifies the process of setting up servers and deploying applications.
FTL (Faster Than Light) is a powerful deployment tool designed specifically for developers who want to deploy their applications to popular cloud providers like Hetzner, DigitalOcean, Linode, or even Raspberry Pi and other servers but aren't sure where to start. FTL simplifies the process of setting up servers and deploying applications, making deployment easy and reliable, even for those who aren't experts in server management or advanced deployment techniques.
Perfect Terminal-based file manager 🚀! Superfile is a very fancy and modern terminal file manager that can complete the file operations you need!!
A safe and ergonomic alternative to rm
rip is a rust-based rm with a focus on safety, ergonomics, and performance. It favors a simple interface, and does not implement the xdg-trash spec or attempt to achieve the same goals.
fzf is a general-purpose command-line fuzzy finder.
It’s an interactive filter program for any kind of list; files, command history, processes, hostnames, bookmarks, git commits, etc. With its novel “fuzzy” matching algorithm, you can quickly type in patterns with omitted characters and still get the results you want.
🤖 CLI AI Assistant
A simple command-line AI assistant that translates natural language into shell commands. Supports all Windows and Unix-based systems (Linux, MacOS).
Node Version Audit is a convenience tool to easily check a given Node.js version against a regularly updated list of CVE exploits, new releases, and end of life dates.
Node Version Audit is not: exploit detection/mitigation, vendor-specific version tracking, a replacement for staying informed on Node.js releases and security exploits.
Simple way to manage your remote machines and SSH keys.
Bare metal servers are awesome. They let you pick where to run your software and how to deploy it. You get full control to make the most of the server's resources. No limits, no compromises. That's real freedom.
Viking makes it easier to work with them.
Wireit upgrades your npm/pnpm/yarn scripts to make them smarter and more efficient.
The Ultimate Information Gathering Toolkit. A Python-based toolkit for Information Gathering and Reconnaissance.
Argus is an all-in-one, Python-powered toolkit designed to streamline the process of information gathering and reconnaissance. With a user-friendly interface and a suite of powerful modules, Argus empowers you to explore networks, web applications, and security configurations efficiently and effectively.
sshx lets you share your terminal with anyone by link, on a multiplayer infinite canvas.
It has real-time collaboration, with remote cursors and chat. It's also fast and end-to-end encrypted, with a lightweight server written in Rust.
Related content:
YouTube, Apple Podcast (and more) to readable Markdown.
yt2doc transcribes videos & audios online into readable Markdown documents.
CLI tool to automate docker image updates. Selective, notifications, autoprune, no pre-pulling.
a structural diff that understands syntax 🟥🟩 Difftastic is a structural diff tool that compares files based on their syntax.
Related contents:
kubernetes log viewer.
Kubernetes tail. Streams logs from all containers of all matched pods. Match pods by service, replicaset, deployment, and others. Adjusts to a changing cluster - pods are added and removed from logging as they fall in or out of the selection.
Code signing and transparency for containers and binaries. Signing OCI containers (and other artifacts) using Sigstore! Cosign aims to make signatures invisible infrastructure.
Related contents:
API Security Vulnerability Scanner designed to help you secure your APIs.
Your First Line of Defense in API Security. Scan your APIs for vulnerabilities with VulnAPI.
Help developers and security professionals quickly and efficiently scan their APIs for security vulnerabilities and weaknesses.
Run Composer packages, effortlessly. The entire PHP ecosystem, always at your fingertips.
Run any command from any composer package, even if it's not installed in your project.
🐍 A toolkit for testing, tweaking and cracking JSON Web Tokens
Harper is an English grammar checker designed to be just right. I created it after years of dealing with the shortcomings of the competition.
Related contents:
Home Manager is a Nix-powered tool for reproducible management of the contents of users’ home directories. This includes programs, configuration files, environment variables and, well… arbitrary files.
Take control of your $HOME
Install and manage all the tools you need to be productive. Use a simple command line tool or edit one YAML file and you're off to the races.
Fleek is an all-in-one management system for everything you need to be productive on your computer. Fleek wraps Nix Home Manager, giving you almost all the power of a declarative home configuration without having to learn Nix.
Custom bash scripts used to automate various penetration testing tasks including recon, scanning, enumeration, and malicious payload creation using Metasploit. For use with Kali Linux.
Slack enumeration and exposed secrets detection tool. Monitoring and enumerating Slack for exposed secrets
SBOM quality score - Quality metrics for your sboms. sbomqs is your primary tool to assess an SBOM's quality and compliance. The higher the score the more consumable & compliant your SBOMs are.
With one command, create a natural-sounding audiobook from a variety of input formats (epub, mobi, txt, PDF, HTML and more!)
CLI to spin your CI/CD for react-native!
The problem we noticed is that setting up CI is performed once, needs to be researched every time, and is often trial and error driven. The process is repetitive.
We created a tool that bootstraps CI with the most used features, which are ready for customization in the future. Running npx setup-ci generates GitHub workflows for the most popular CI tasks.
wrangle data.
sq is a command line tool that provides jq-style access to structured data sources: SQL databases, or document formats like CSV or Excel. It is the lovechild of sql+jq.
Twistr is a Domain name permutation and enumeration library powered by Rust. It aims to directly port the well-known dnstwist tool allowing for fast and flexible interfacing capabilities with the core libraries based on client's requirements.