open-source
A security-focused library OS supporting kernel- and user-mode execution.
LiteBox is a sandboxing library OS that drastically cuts down the interface to the host, thereby reducing attack surface. It focuses on easy interop of various "North" shims and "South" platforms. LiteBox is designed for usage in both kernel and non-kernel scenarios.
Context window optimization for LLMs. Reliable LLM outputs start with clean context.
A reliability layer for LLM context. Deterministic deduplication that removes redundancy before it reaches your model. Less redundant data. Lower costs. Faster responses. More efficient & deterministic results.
Related contents:
Fine-grained authorization for AI agents using OpenFGA.
AI agents are getting access to production systems - databases, APIs, file systems. But who decides what they can do? Traditional RBAC wasn't designed for autonomous agents that make decisions without human approval.
Related contents:
Fine-Grained Authorization. A high performance and flexible authorization/permission engine built for developers and inspired by Google Zanzibar
Relationship-based access control made fast, scalable, and easy to use.
OpenFGA is an open-source authorization solution that allows developers to build granular access control using an easy-to-read modeling language and friendly APIs.
Related contents:
Multi-track audio editor for the web. Built with React & Tone.js.
Multitrack Web Audio editor and player with canvas waveform preview. Set cues, fades and shift multiple tracks in time. Record audio tracks or provide audio annotations. Export your mix to AudioBuffer or WAV! Add effects from Tone.js. Project inspired by Audacity.
Professionally crafted React & Figma components for building beautiful products or starting your own design system.
UI Components and Blocks Built with Tailwind CSS.
Discover a curated collection of over 100 handcrafted UI components made with Tailwind CSS, React, and shadcn/ui. Designed for seamless integration, these components combine aesthetic precision with developer-friendly flexibility to help you build beautiful, production-ready interfaces faster.
Proof-of-Concept tool for extracting NTLMv1 hashes from sessions on modern Windows systems.
Related contents:
LLM Service Fingerprinting Tool.
Simple LLM service identification - translate IP:Port to Ollama, vLLM, LiteLLM, or 30+ other AI services in seconds.
Julius is an LLM service fingerprinting tool for security professionals. It detects which AI server software is running on network endpoints during penetration tests, attack surface discovery, and security assessments.
Unlike model fingerprinting tools that identify which LLM generated text, Julius identifies the server infrastructure: Is that endpoint running Ollama? vLLM? LiteLLM? A Hugging Face deployment? Julius answers in seconds.
Related contents:
The bridge between Burp Suite and modern AI.
Burp AI Agent is an extension for Burp Suite that integrates AI capabilities into your security workflow.
Burp Suite extension that adds built-in MCP tooling, AI-assisted analysis, privacy controls, passive and active scanning and more
Related contents:
Minimal CVE Hardened container image collection.
A collection of production-ready container images with minimal CVEs, rebuilt daily using Chainguard's apko and Wolfi packages. By including only required packages, these images maintain a reduced attack surface and typically have zero or near-zero known vulnerabilities.
Related contents:
Open Source DevOps Control Plane.
Run operational workflows across the tools you already use. Stay in control of releases, incident response, infrastructure provisioning, notifications, disaster recovery, and everything in between. SuperPlane is an open source DevOps control plane for defining and running event-based workflows. It works across the tools you already use such as Git, CI/CD, observability, incident response, infra, and notifications.
Related contents:
SysWarden is a tool based on the Data-Shield IPv4 Blocklists Community, Wazuh and Fail2ban that blocks up to 99% of noisy, disruptive, and malicious IP addresses and focuses on real signals.
Related contents:
Data-Shield IPv4 Blocklist Community provides an official, curated registry of IPv4 addresses identified as malicious. Updated continuously, this resource offers vital threat intelligence to bolster your Firewall and WAF instances,...
Related contents:
The formatter multiplexer.
treefmt streamlines the process of applying formatters to your project, making it a breeze with just one command line.
Chrome automation from the command line. CLI tool for interacting with the web.
A Go CLI tool that drives a persistent headless Chrome instance using the rod browser automation library. Each command connects to the same long-running Chrome process, making it easy to script multi-step browser interactions from shell scripts or interactive use.
Related contents:
Create executable demo documents that show and prove an agent's work.
Showboat helps agents build markdown documents that mix commentary, executable code blocks, and captured output. These documents serve as both readable documentation and reproducible proof of work. A verifier can re-execute all code blocks and confirm the outputs still match.
Related contents:
the Honeycomb Sampling Proxy.
Refinery is a trace-aware tail-based sampling proxy. It examines whole traces and intelligently applies sampling decisions (whether to keep or discard) to each trace.
Refinery is a tail-based sampling proxy and operates at the level of an entire trace. Refinery examines whole traces and intelligently applies sampling decisions to each trace. These decisions determine whether to keep or drop the trace data in the sampled data forwarded to Honeycomb.
A tail-based sampling model allows you to inspect an entire trace at one time and make a decision to sample based on its contents. For example, your data may have a root span that contains the HTTP status code to serve for a request, and another span that contains information on whether the data was served from a cache. Using Refinery, you can choose to keep only traces that had a 500 status code and were also served from a cache.
Shannon is your fully autonomous AI pentester.
Shannon’s job is simple: break your web app before anyone else does. The Red Team to your vibe-coding Blue team. Every Claude (coder) deserves their Shannon.
Fully autonomous AI hacker to find actual exploits in your web apps. Shannon has achieved a 96.15% success rate on the hint-free, source-aware XBOW Benchmark.
Related contents:
A place for all types of Termux packages.
Sounds like Archlinux User repository aka AUR? TUR functioning mechanism is bit different. Instead of building packages in device that too in android is quite hectic work for user. So TUR saves resources and time since user could install pre-compiled package.
Apache Parquet is an open source, column-oriented data file format designed for efficient data storage and retrieval. It provides high performance compression and encoding schemes to handle complex data in bulk and is supported in many programming languages and analytics tools.
Related contents:
Web UI for Claude Code built on a reverse-engineered WebSocket protocol. Launch sessions, stream responses, approve tools. All from your browser / mobile.
Claude Code in your browser. We reverse-engineered the undocumented WebSocket protocol hidden inside the CLI and built a web UI on top of it. No API key needed, it runs on your existing Claude Code subscription.
Related contents:
Skills for Claude Code CLI such as full stack dev Cloudflare, React, Tailwind v4, and AI integrations.
Reinschrift combines a native GNOME interface with the simplicity of plain text. Your tasks remain a normal Markdown file – easy to back up, versionable via Git, and editable on any device with your favorite editor.
The app syncs the file via Nextcloud/WebDAV, reads changes live, writes directly back, and thus makes classic to-do lists in plain text suitable for everyday use – without proprietary silos. The format remains open, portable, and transparent.
Related contents:
App compatibility on de-Googled devices. Crowdsourced de-Googled Android apps status ratings.
Related contents:
MCP server for accessing Podcasting 2.0 RSS feed episode data.
A FastMCP server that parses Podcasting 2.0 RSS feeds and provides access to episode data through MCP tools.
The Ultra-Lightweight Clawdbot
🐈 nanobot is an ultra-lightweight personal AI assistant inspired by Clawdbot.
A lightweight alternative to Clawdbot / OpenClaw that runs in Apple containers for security. Connects to WhatsApp, has memory, scheduled jobs, and runs directly on Anthropic's Agents SDK.
My personal Claude assistant that runs securely in containers. Lightweight and built to be understood and customized for your own needs.
Related contents:
Agentic AI Infrastructure for magnifying HUMAN capabilities.
PAI is a Personalized AI Platform designed to magnify your capabilities.
It's designed for humans most of all, but can be used by teams, companies, or Federations of Planets desiring to be better versions of themselves.
The scale of the entity doesn't matter: It's a system for understanding, articulating, and realizing its principal's goals using a full-featured Agentic AI Platform.
Related contents:
Agent Skills are folders of instructions, scripts, and resources that AI agents can discover and use to perform at specific tasks. Write once, use everywhere.
Codex uses skills to help package capabilities that teams and individuals can use to complete specific tasks in a repeatable way. This repository catalogs skills for use and distribution with Codex.
A community trust management system based on explicit vouches to participate.
People must be vouched for before interacting with certain parts of a project (the exact parts are configurable to the project to enforce). People can also be explicitly denounced to block them from interacting with the project.
Matchlock secures AI agent workloads with a Linux-based sandbox.
Matchlock is a CLI tool for running AI agents in ephemeral microVMs - with network allowlisting, secret injection via MITM proxy, and VM-level isolation. Your secrets never enter the VM.
Repository automation, running the coding agents you know and love, with strong guardrails in GitHub Actions.
Use GitHub Copilot, Claude by Anthropic or OpenAI Codex for event-triggered, recurring and scheduled jobs to improve, document and analyze your repository.
Read Smarter with AI.
A modern, cross-platform, and free AI RSS reader.
Related contents:
Grab your DNS logs, detect anomalies, and finally understand what's happening on your network. The missing piece between DNS servers and your data stack.
DNS-collector is a lightweight tool that captures DNS queries and responses from your DNS servers, processes them intelligently, and sends clean data to your monitoring or analytics systems.
Related contents:
A Complete WebGPU Game Engine for Browser & Desktop Arcade Oriented.
ArcadeGPU is a high performance WebGPU game engine inspired by classic techniques that made retro games legendary.
Related contents:
One-Click system reinstallation script for VPS.
- One-click reinstallation to Linux: Supports 19 common distributions.
- One-click reinstallation to Windows: Uses the official original ISO instead of custom images. The script can automatically fetch the ISO link and installs public cloud drivers like VirtIO.
Related contents:
Production-grade Ghidra MCP Server — 132 endpoints, cross-binary documentation transfer, batch analysis, headless mode, and Docker deployment for AI-powered reverse engineering.
A production-ready Model Context Protocol (MCP) server that bridges Ghidra's powerful reverse engineering capabilities with modern AI tools and automation frameworks.
Related contents:
Exploration 3D Interactive du Système Solaire.
AstroClick est une expérience web éducative qui revisite l'astronomie avec une esthétique pixel-art unique. Conçu pour les curieux de tous âges, ce simulateur interactif permet de voyager de Mercure à Neptune, d'apprendre des faits surprenants et d'accéder à une galerie d'images officielles, dédiée au savoir.
Related contents:
A simple application that extracts your IoCs from garbage input and checks their reputation using multiple CTI services.
Cyberbro is an open-source threat intelligence and indicator analysis platform. Whether you're a new user or a seasoned developer, this documentation will help you get started, configure, and make the most of Cyberbro's features.
Related contents:
Industrial-grade secure snippet warehouse for your system tray. 📦 Built with Rust (Tauri v2) & React. Offline-first, AES-256 encrypted, and recursive.
Sklad is a cross-platform snippet manager that lives in your system tray. Store passwords, API keys, code snippets, and any text you copy frequently — encrypted and always one click away.
Related contents:
Privacy-First Android Keyboard.
Privacy-focused Android keyboard with swipe typing, custom layouts, and password manager support. No tracking, 100% on-device, and fully open source.
Related contents:
PineTS is a TypeScript implementation of the Pine Script language, allowing you to write trading indicators and strategies using TypeScript while leveraging the power of Pine Script’s execution model and functions.
Related contents:
Easy Linux virtual machine on MacOS to sandbox LLM agents.
Vibe is a quick, zero-configuration way to spin up a Linux virtual machine on Mac to sandbox LLM agents.
Related contents:
Zero-Cost Contact Forms. Stop paying for contact forms.
Perfect for MVPs, personal projects, and prototypes. Uses GitHub Issues as storage. Zero monthly costs, automatic notifications.
Related contents:
A developer's worst nightmare: a tool that silently corrupts your Git history.
Related contents:
SDLC Infrastructure Threat Framework
A comprehensive framework for understanding and mitigating supply chain security threats across the Software Development Lifecycle infrastructure.
Related contents:
Kubernetes simplified, containerized, and democratized for rootless environments.
Single-node rootless Kubernetes cluster running in a Podman container.
Spring Boot helps you to create Spring-powered, production-grade applications and services with absolute minimum fuss.
Related contents:
Ghostferry is a library that enables you to selectively copy data from one mysql instance to another with minimal amount of downtime.
It is inspired by Github's gh-ost, although instead of copying data from and to the same database, Ghostferry copies data from one database to another and has the ability to only partially copy data.
Free Open-source Q&A Platform. Build a Knowledge Base with Apache Answer.
A Q&A platform software for teams at any scale. Whether it’s a community forum, help center, or knowledge management platform, you can always count on Answer.
the continuous thing-doer.
Concourse is an automation system written in Go. It is most commonly used for CI/CD, and is built to scale to any kind of automation pipeline, from simple to complex.
Concourse is very opinionated about a few things: idempotency, immutability, declarative config, stateless workers, and reproducible builds.
Slurm is an open source, fault-tolerant, and highly scalable cluster management and job scheduling system for large and small Linux clusters.
Related contents:
Minimal library for distributed python work. Can efficiently run CPU and GPU tasks across 100s of machines.
Miniray is a library for distributed compute across a datacenter. Miniray is designed to dispatch tasks of arbitrary python code through redis. Miniray uses python's concurrent.futures API.
Related contents:
Fed up with the complexity of distributed filesystems?
minikeyvalue is a ~1000 line distributed key value store, with support for replication, multiple machines, and multiple drives per machine. Optimized for values between 1MB and 1GB. Inspired by SeaweedFS, but simple. Should scale to billions of files and petabytes of data.
Related contents:
Parallel Python, Fast and Easy. Scale the Python tools you love.
Easy Parallel Python that does what you need. Dask is a flexible parallel computing library for analytics.
Related contents:
Stable. Lightweight. Instantly Familiar.
A lightweight, stable, instantly familiar free open-source content management system. Forked from WordPress without the block editor (Gutenberg).
Related contents:
PHP basic ressource profiler (CPU/memory), safe and useful for production sites.
phptop prints per query and average metrics comparable to 'time' (wallclock, user and system CPU time) along with memory and other ressource usages.
It can be easily globally activated on a LAMP server and requires little resources and a single line configuration change in your php.ini. It has been used by Bearstech on many production servers for years without any problems.