bsd3-licensed
Attack path mapping for Active Directory, ADCS, SCCM, and MSSQL using BloodHound CE + OpenGraph data.
ADPathFinder is an attack mapping tool for pentesters and red teamers. It analyses SharpHound data and unifies it with OpenGraph plugins to surface attack paths to high-value targets such as Domain Admins and Domain Controllers, starting from low-privileged users and computers. MSSQLHound and ConfigManBearPig are supported natively, extending coverage across AD, ADCS, SCCM, and MSSQL.
Related contents:
Thundering Herd replication and Thanos Snap durability, together at last.
Thundersnap is a collection of new and old ideas in distributed filesystem design. It’s named after the primary two ways this early version is likely to fail: the thundering herd (its mesh replication protocol) and the Thanos Snap (which is likely to lose roughly half your data).
Related contents:
Compile Zod schemas into zero-overhead validation functions at build time.
Keep your existing Zod schemas. Get 2-75x faster validation. No code changes required.
EPUBCheck is a command line tool. Unzip the downloaded package, open a terminal program, and start checking your EPUB files!
Related contents:
AVM (AOM Video Model) is the reference software for AV2 codec from Alliance for Open Media
A virtio-fs vhost-user device daemon written in Rust.
Related contents:
Mvm is a fast interpreter and virtual machine for Go and beyond.
Mvm is a Go interpreter that compiles source to bytecode and runs it on a stack-based virtual machine. It ships as a single static binary with the full Go standard library bundled in, and embeds in Go or C host programs.
High-performance asymmetric lossless compression. 40%+ faster decompression than LZ4 on ARM64 with better compression ratios. Optimized for Game Assets, Firmware & App Bundles.
Related contents:
Enumerate Azure RBAC and Microsoft Entra ID permissions for Entra ID groups, service principals, and users.
The Python web framework for building apps.
A familiar foundation, reimagined for humans and agents. Plain is a fork of Django, driven by ongoing development at PullApprove — with the freedom to reimagine it for the agentic era.
Scrapy, a fast high-level web crawling & scraping framework for Python.
ANTLR (ANother Tool for Language Recognition) is a powerful parser generator for reading, processing, executing, or translating structured text or binary files. It's widely used to build languages, tools, and frameworks. From a grammar, ANTLR generates a parser that can build and walk parse trees.
Real-time audio in NixOS.
musnix provides a set of simple, high-level configuration options for doing real-time audio work in NixOS, including optimizing the kernel, applying the CONFIG_PREEMPT_RT patch to it, and adjusting various low-level system settings.
ANSI, ASCII and Unicode Art Animation Studio for Linux.
Versatile ASCII and ANSI Art text editor for drawing in the Linux/Unix/macOS terminal, with animation, 256 and 16 colors, Unicode and CP437, and customizable themes
Durdraw is an ASCII, Unicode and ANSI art editor for UNIX-like systems (Linux, macOS, etc). It runs in modern Utf-8 terminals and supports high speed frame animation, 256 and 16 color modes, mouse drawing and paint brushes, MS-DOS ANSI art, CP437 and Unicode mixing and conversion, HTML and mIRC color output, custom themes, and many other interesting features.
Deterministic browser automation. Works out of the box with Claude/Codex/OpenCode.
Web browsing is continuous and async. Agents think in tools and steps. ABP reformats web navigation into the discrete, multimodal chat format agents know and love.
ABP is a Chromium build with MCP + REST baked directly into the browser engine.
Incus-based container management with native KDE/Plasma integration. A distrobox-like tool using Incus as the container/VM backend, designed for KDE Linux.
Related contents:
🕷️ An adaptive Web Scraping framework that handles everything from a single request to a full-scale crawl!
Its parser learns from website changes and automatically relocates your elements when pages update. Its fetchers bypass anti-bot systems like Cloudflare Turnstile out of the box. And its spider framework lets you scale up to concurrent, multi-session crawls with pause/resume and automatic proxy rotation — all in a few lines of Python. One library, zero compromises.
Related contents:
A TypeScript implementation of the age file encryption format, available as an npm package or as a bundled .js file.
Related contents:
A Docker Swarm secrets plugin that integrates with multiple secret management providers including HashiCorp Vault, AWS Secrets Manager, Azure Key Vault, and OpenBao.
Proof-of-Concept tool for extracting NTLMv1 hashes from sessions on modern Windows systems.
Related contents:
Parallel Python, Fast and Easy. Scale the Python tools you love.
Easy Parallel Python that does what you need. Dask is a flexible parallel computing library for analytics.
Related contents:
There's a different way to put pictures in QR codes. Instead of scribbling on redundant pieces and relying on error correction to preserve the meaning, we can engineer the encoded values to create the picture in a code with no inherent errors.
Related contents:
CHICKEN is a compiler for the Scheme programming language. It produces portable and efficient C and supports the R5RS and R7RS (work in progress) standards, and many extensions. It runs on Linux, OS X, Windows, many Unix flavours, and aims to be...
AI-Powered Reverse Engineering with Ghidra.
OGhidra bridges Large Language Models (LLMs) via Ollama with the Ghidra reverse engineering platform, enabling AI-driven binary analysis through natural language. Interact with Ghidra using conversational queries and automate complex reverse engineering workflows.
Related contents:
Jupyter Docker Stacks are a set of ready-to-run Docker images containing Jupyter applications and interactive computing tools.
Chromium fork for Windows XP/2003 and up.
An up-to-date Chromium-based web browser compatible with Windows XP, 2003, Vista, 7, 8.x, and newer.
Webmin is a web-based system administration tool for Unix-like servers, and services with about 1,000,000 yearly installations worldwide. Using it, it is possible to configure operating system internals, such as users, disk quotas, services or configuration files, as well as modify, and control open-source apps, such as BIND DNS Server, Apache HTTP Server, PHP, MySQL, and many more.
Easily run old versions of UNIX for PDP-11 on modern hardware
A Flutter library to enable developers to easily add interactive generative UI to their applications.
Acceleration Framework For Cloud-Native Distribution.
the Dragonfly image service, providing fast, secure and easy access to container images. Nydus implements a content-addressable file system on the RAFS format, which enhances the current OCI image specification by improving container launch speed, image space and network bandwidth efficiency, and data integrity.
Related contents:
Modern Docker Management, Designed for Everyone.
Arcane is designed to be an easy and modern Docker management platform, built with everybody in mind. The goal of Arcane is to be built for and by the community to make sure nobody feels left out or behind with their specific features or processes.
Related contents:
Rust implementation of the H3 geospatial indexing system.
Related contents:
audio waveform player JavaScript library.
Wavesurfer.js is an open-source audio visualization library for creating interactive, customizable waveforms.
Wavesurfer.js is an interactive waveform rendering and audio playback library, perfect for web applications. It leverages modern web technologies to provide a robust and visually engaging audio experience.
An efficient, small mobile key-value storage framework developed by WeChat. Works on Android, iOS, macOS, Windows, POSIX, and OHOS.
MMKV is an efficient, small, easy-to-use mobile key-value storage framework used in the WeChat application. It's currently available on Android, iOS/macOS, Windows, POSIX and HarmonyOS NEXT.
Private, fast, and honest web browser.
The Chromium-based web browser made for people, with love. Best privacy by default, unbiased ad-blocking, no bloat and no noise.
Related contents:
Dhall is a programmable configuration language that you can think of as: JSON + functions + types + imports
Related contents:
a streaming JSON parser.
jsonriver is a simple JS library that will parse JSON incrementally as it streams in, e.g. from a network request or a language model. It gives you a sequence of increasingly complete values.
Mockery is a project that creates mock implementations of Golang interfaces. It inspects source code and generates implementations of the interface that aid in testing.
In addition to providing a number of different styles of mocks, mockery also allows users to provide their own template files that will then be rendered using a set of template data, methods, and functions that provide comprehensive typing information about the Go interface in question.
Simple H.264 decoder.
Minimalist software decoder with state-of-the-art performance for the H.264/AVC video format.
This tool automates Cisco Catalyst SD-WAN lab deployment inside Cisco Modeling Labs (CML).
Cross-platform filesystem notifications for Go.
fsnotify is a Go library to provide cross-platform filesystem notifications on Windows, Linux, macOS, BSD, and illumos.
a fast golang HTML sanitizer (inspired by the OWASP Java HTML Sanitizer) to scrub user generated content of XSS.
bluemonday takes untrusted user generated content as an input, and will return HTML that has been sanitised against an allowlist of approved HTML elements and attributes so that you can safely include the content in your web page.
Related contents:
A text-based user interface for a screen-based platform.
Related contents:
Simple and Effective Cron Job Monitoring.
Open-source cron job and background task monitoring service, written in Python & Django.
Healthchecks is a cron job monitoring service. It listens for HTTP requests and email messages ("pings") from your cron jobs and scheduled tasks ("checks"). When a ping does not arrive on time, Healthchecks sends out alerts.
The pattern matching swiss knife for malware researchers.
YARA is a tool aimed at (but not limited to) helping malware researchers to identify and classify malware samples. With YARA you can create descriptions of malware families (or whatever you want to describe) based on textual or binary patterns. Each description, a.k.a rule, consists of a set of strings and a boolean expression which determine its logic.
Related contents:
Chat Gipitty (Chat Get Information, Print Information TTY) is a command line client primarily intended for the official OpenAI Chat Completions API. It allows you to chat with language models in a terminal and even pipe output into it. While optimized for OpenAI's ChatGPT (with GPT-4 as the default model), it can also work with other providers that expose OpenAI-compatible endpoints.
Related contents:
A simple plugin for Composer that allows you to apply patches to your dependencies.
Related contents:
Python Data Analysis Library.
pandas is a fast, powerful, flexible and easy to use open source data analysis and manipulation tool. Flexible and powerful data analysis / manipulation library for Python, providing labeled data structures similar to R data.frame objects, statistical functions, and much more
Related contents:
The Data-Oriented Language for Sane Software Development.
Odin is a general-purpose programming language with distinct typing, built for high performance, modern systems, and built-in data-oriented data types. The Odin Programming Language, the C alternative for the joy of programming.
Related contents:
uMurmur is a minimalistic Mumble server primarily targeted to run on embedded computers, like routers, with an open OS like e.g. OpenWRT. The server part of Mumble is called Murmur, hence the name uMurmur. It is available as a precompiled package for quite a lot distributions. Check your distribution's package repository.
Related contents:
distraction-free writing for Emacs.
writeroom-mode is a minor mode for Emacs that implements a distraction-free writing mode similar to the famous Writeroom editor for OS X. writeroom-mode is meant for GNU Emacs 24, lower versions are not actively supported.
Related contents:
Modern compositor with the looks.
Hyprland provides the latest Wayland features, dynamic tiling, all the eyecandy, powerful plugins and much more, while still being lightweight and responsive.
Related contents:
A Fast, Concurrent Web Server for Ruby & Rack.
Puma is a simple, fast, multi-threaded, and highly parallel HTTP 1.1 server for Ruby/Rack applications.
Related contents:
detect API auth weaknesses.
Autoswagger is a command-line tool designed to discover, parse, and test for unauthenticated endpoints using Swagger/OpenAPI documentation. It helps identify potential security issues in unprotected endpoints of APIs, such as PII leaks and common secret exposures.
Related contents:
a go library for parsing command line arguments.
This library provides similar functionality to the builtin flag library of go, but provides much more functionality and nicer formatting. From the documentation:
Package flags provides an extensive command line option parser. The flags package is similar in functionality to the go builtin flag package but provides more options and uses reflection to provide a convenient and succinct way of specifying command line options.
the hacker's browser. Never leave the keyboard. Quickly analyze, navigate, and extract information from the Internet.
Nyxt [nýkst] is a keyboard-driven web browser designed for hackers. Inspired by Emacs and Vim, it has familiar keybindings (Emacs, vi, CUA), and is infinitely extensible in Lisp.
Prebuilt UI blocks to ship beautiful MVPs fast.
Copy-paste beautiful, responsive components without worrying about styling or animations. Build faster, launch sooner.
MVPBlocks is an open-source component library for developers to copy, customize, and launch MVPs lightning-fast—no installations, just pure productivity.