tag: tools
2026-03-05
2026-03-06
Security Detections MCP
MCP server exposing security detection rules and threat intelligence queries to AI assistants.2026-03-09
Chrome DevTools MCP
MCP server that lets coding agents control and inspect a live Chrome browser for automation, debugging, screenshots, network analysis, and performance tracing.EvilWAF - Web Application Firewall Testing and Bypass Toolkit
Transparent MITM proxy for WAF bypass and detection, with TCP/TLS fingerprint rotation, Tor IP rotation, and origin IP hunting.OBLITERATUS
Open-source toolkit for analyzing and removing refusal behaviors from LLMs using abliteration techniques.VMDragonSlayer
Automated multi-engine framework for unpacking, analyzing, and devirtualizing binaries protected by commercial and custom VM-based protectors.VulHunt Community Edition
Vulnerability hunting framework by Binarly's research team, built on top of the BIAS binary analysis system with MCP integration.2026-03-10
DungBeetle
Lightweight distributed job server for queuing and asynchronously executing heavy SQL read jobs — supports MySQL, PostgreSQL, and ClickHouse as sources, writes results to ephemeral result databases, and exposes an HTTP API for job and group management.Google Workspace CLI (gws)
One CLI for all of Google Workspace — Drive, Gmail, Calendar, Sheets, and more. Dynamically built from Google's own Discovery Service at runtime, with structured JSON output and 100+ bundled AI agent skills.2026-03-25
SENT — Supply-chain Event Network Triage
Real-time supply-chain monitoring for package ecosystems. SENT prioritizes high-impact releases using a cascade-weighted dependency graph, performs diff-first AST behavioral analysis and argument-level "call_diff" detection, and supports optional dynamic detonation to confirm suspicious updates.2026-03-26
MONARC — Optimised Risk Analysis Method
MONARC is a tool and method for optimised, precise and repeatable information‑security risk assessments. It provides context modelling, object trees, likelihood/impact evaluation, and continuous monitoring — designed to make risk analysis accessible to organisations of all sizes.nDPId-rt-analyzer
Real-time network packet inspection and analysis toolkit (nDPId RT Analyzer) — open-source project for high-performance DPI, flow analysis and telemetry; repository on GitLab (AGPLv3).2026-03-30
Lambda Coding (minimalprocedure/lambda_coding)
GitLab repository "Lambda Coding" (in draft) — a small project/repository hosted on GitLab. Contains a README and work-in-progress artifacts; useful to inspect for ideas and experiments around code and tooling.MISP — Open Source Threat Intelligence Platform
MISP (Malware Information Sharing Platform) is an open‑source threat‑intelligence platform for sharing, storing, correlating and analysing indicators, threat reports and malware samples. Includes MISP Galaxy, taxonomies, PyMISP, MISP‑STIX integrations and tools for automation and collaborative CTI workflows.2026-03-31
eBPF.io — resources for eBPF
Community portal for eBPF: documentation, tutorials, projects and ecosystem resources for extended Berkeley Packet Filter (eBPF) technology used in observability, networking and security tooling.EU_compliance_MCP — Ansvar Systems
Repository from Ansvar Systems with tools, checklists and reference material to help projects implement EU Model Compliance Protocol (MCP) requirements — useful for developers, privacy officers and compliance teams.Mihon.app
Homepage for Mihon — web application and project landing page.2026-04-02
SonarQube — static analysis & code quality platform
Official SonarQube repository (SonarSource) — platform for continuous code quality, security and SAST analysis with CI/CD integrations, language analyzers, and developer tooling for maintaining healthy codebases.aquasecurity/trivy
Trivy — open-source vulnerability and misconfiguration scanner for containers, IaC, repositories and runtime environments. Repository with code, documentation, and integrations for CI/CD security scanning.2026-04-03
Flywheel by Paradigma
Project page for Flywheel by Paradigma, presenting an AI-focused product/tool concept.2026-04-07
AutoResearchClaw
Autonomous, collaborative, self-evolving research pipeline that turns a topic into a paper with literature search, sandbox experiments, peer review, LaTeX export, and optional human-in-the-loop co-pilot modes.Caveman
Claude Code skill/plugin and Codex plugin that makes the agent talk like caveman, cutting output tokens while preserving technical accuracy; includes a companion tool to compress memory files and reduce input tokens.Sheets
Terminal spreadsheet application built in Go, aimed at working with tabular data from the command line.2026-04-08
BadClaude
Open-source project for intentionally making Claude worse at following instructions, useful as a stress test for prompt robustness and failure modes.2026-04-10
Charcuterie
A browser-based visual explorer for Unicode that renders glyphs with SigLIP 2 to discover related characters and scripts.CoLaptop
Satirical colocation service that turns an old laptop into an always-online datacenter server for €7/month.Milla J
GitHub profile for Milla J, the architect of MemPalace, an open-source memory system project; Milla Jovovich is also an actress.XState Store
Documentation for `@xstate/store`, a small JavaScript/TypeScript state management library with events, selectors, atoms, persistence, and React integrations.2026-04-13
BlueHammer
GitHub repository for BlueHammer, a project likely related to hardware or systems experimentation.Codex for Open Source
Open-source maintainers can apply for API credits, six months of ChatGPT Pro with Codex, and conditional access to Codex Security for core maintenance workflows.Reverse-Engineering SynthID
A repository for discovering, detecting, and surgically removing Google’s SynthID watermark through spectral analysis, with code for multi-resolution watermark profiles and bypass experiments.2026-04-14
Magika
Google’s AI-powered file type detection tool, with fast on-device inference and bindings for multiple languages.OpenSnitch
OpenSnitch is a GNU/Linux application firewall for monitoring and controlling outbound connections, with GUI-based nftables configuration and centralized management.PAmatch
PAmatch is a platform for public administration mobility, helping employees find compatible matches, browse mobility notices, and manage transfers.2026-04-15
Aegisub
Aegisub is a free, cross-platform open source subtitle editor for timing and styling subtitles with audio and real-time video preview.llama.cpp
High-performance C/C++ inference engine for running LLMs locally across CPUs and GPUs.opkssh (OpenPubkey SSH)
OpenPubkey SSH lets you use OpenID Connect identities to authenticate over SSH, replacing long-lived SSH keys with short-lived PK-token-based certificates.Puma
Puma is a fast, concurrent web server for Ruby and Rack applications.Subtitle Edit
Open-source subtitle editor for creating, syncing, translating, and converting subtitle formats.2026-04-16
Alzheimer's Buddy
A web demo for 40 Hz light and sound therapy for Alzheimer's research, with references to studies on sensory stimulation and cognitive impairment.Galaxy User Guide
Ansible Galaxy is a free site for finding, downloading, and sharing community-developed roles and collections for automation projects.grove
Grove is a distributed ML training tool for MacBooks that discovers nearby peers automatically and synchronizes training across devices with minimal setup.Passbolt
Passbolt is an open source password and secret management platform for teams, with end-to-end encryption, audit trails, and self-hosting options.unicorn
Unicorn is a Ruby Rack HTTP server optimized for fast clients and Unix-like systems, with process-based concurrency and reverse-proxy expectations for slow clients.2026-04-17
ICANN WHOIS Lookup
ICANN’s WHOIS lookup service for checking domain registration information and registrant details.2026-04-20
Federated Industrial Tracker
Federated Industrial Tracker appears to be a web-based tracker for industrial or equipment-related monitoring and management.Hyperframes
Hyperframes is an open-source HTML-native video rendering framework built for agents, with deterministic rendering, browser preview, and MP4 output.rvLLM
rvLLM is a high-performance LLM inference engine in Rust, with TPU and GPU backends, benchmark-heavy optimization work, and a drop-in vLLM replacement goal.2026-04-21
infra-ansible
infra-ansible is an Ansible repository for provisioning and automating infrastructure components such as DNS, DHCP, OpenStack, storage, bastions, and identity-managed hosts.Network Observability Lab
Network Observability Lab provides a hands-on environment for the Modern Network Observability book, with scripts and lab scenarios for Prometheus, Grafana, Loki, Telegraf, Logstash, and related tooling.2026-04-22
ApiPosture
ApiPosture is an open-source project focused on API posture and security assessment, helping teams evaluate exposed endpoints and improve their API attack surface management.Code-Flow-IO
Code-Flow-IO is an open-source project for workflow-oriented code execution and automation, focusing on structured developer task flows and process orchestration.2026-04-23
Your Name in Landsat
NASA special page inviting people to find their name in Landsat imagery and explore Earth observation history.2026-04-27
Carl Sverre ruined my day. And it was glorious
How Turso used Antithesis's new Hegel testing tool to find 5 bugs in minutes and gain confidence to ship their SQLite rewrite.Nowhere — an entire website encoded in a URL
A tool that encodes entire websites (stores, forums, petitions, art) into the URL fragment, using Nostr relays for coordination. No server, no account, no platform.Kysely
TypeScript SQL query builder with type-safe queries for Node.js and Deno.Zeta 2
Zed blog post introducing Zeta 2, their next-generation code editor.2026-04-28
C3
A systems programming language based on C syntax, designed as a safer and simpler alternative to C.Quarkdown
A markdown-based typesetting system for creating documents.Typst
A modern markup-based typesetting system — an alternative to LaTeX with a focus on ease of use and incremental compilation.2026-04-29
AI-Infra-Guard
Tencent's open-source tool for guarding AI infrastructure — monitoring and protecting AI/ML systems.OneCritto: il password manager italiano che elimina il cloud (e i suoi rischi)
Password manager open-source italiano, offline-first, con cifratura AES-256 e Argon2id. Nessun cloud, nessuna telemetria, pieno controllo locale dei dati.pacquet
A fast, drop-in replacement for npm written in Rust by the pnpm team.2026-04-30
copy.fail
A simple website that tests whether your browser's clipboard API is accessible to web pages without permission.2026-05-04
AI Coding Agents
Overview of AI coding agents — from early code completion tools to autonomous agents that can plan, write, debug, and deploy code across entire projectsIPv6 Measurements
Sistema incrociato di misure su IPv6 per vederne lo stato di ICMPv6 / RFC 4890 / PMTUD / RPKI / topologiaKlattsch
A minimal, self-hosted chat application — lightweight, fast, and easy to set up with no external dependenciesLemonade Server
Open-source local LLM server — a lightweight, fast, and easy-to-use API server for running AI models locally with streaming and chat completion supportMacPersistenceChecker
Automated macOS persistence mechanism scanner — analyzes LaunchAgents, LaunchDaemons, CRON jobs, login items, and other persistence vectors to detect suspicious entries2026-05-05
ratman-tui — A TUI REST Client
ratman-tui is a keyboard-driven, vim-modal REST client built with ratatui+crossterm — boots in <100ms, local forever, no accounts, no SaaS, no Chromium. Import from Postman, tree-shaped collections, 5 panes. `cargo install ratman-tui`2026-05-07
Amp, Rebuilt — CLI Codename Neo
Amp Code's AI coding agent CLI rewritten from scratch — remote-controllable threads, automatic context compaction, plugin API, queuing/steering, 70% less memory. Handoff and manual permissions removed in favor of modern frontier modelsDays Without GitHub Incident
A live counter tracking consecutive days since the last GitHub outage — community-maintained tracking of GitHub status historyKubernetes The Hard Way
Kelsey Hightower's classic tutorial for bootstrapping Kubernetes manually — no scripts, no automation. Learn etcd, control plane, worker nodes, TLS certs, and pod networking by walking the long routeTilde.run — Transactional Agent Sandboxes
Agent sandbox with a versioned filesystem — compose GitHub, S3, and Drive into a single ~/sandbox, run agents in isolated transactions with audit trails, built by the lakeFS teamYaak — The API Client You'll Actually Enjoy
Open-source, offline API client by Insomnia's creator — local-only data, encrypted secrets, zero telemetry, Git-friendly, agent-friendly CLI. Supports REST, GraphQL, gRPC, WebSocket, SSE. Import from Postman/Insomnia/OpenAPI2026-05-08
oh-my-openagent v4.0.0 — Team Mode
Major release introducing Team Mode — multiple agents coordinating in parallel via tmux visualization, hyperplan skill (5 hostile agents), security-research skill (3 vuln hunters + 2 PoC engineers), model-specific prompts for GPT-5.2/5.3, hierarchical config discovery, 48k stars2026-05-11
Decepticon
PurpleAILAB's Decepticon — the open-source platform for building and deploying AI agents. Features agent orchestration, multi-modal capabilities, evaluation and monitoring tools, deployment to various platforms including AWS Bedrock, Anthropic, OpenAI, and moreHunk
Review-first terminal diff viewer for agent-authored changesets — multi-file review stream, inline AI/agent annotations, split/stack/responsive auto layouts, watch mode, integrates with Git/Jujtuu. Built on OpenTUI and Pierre diffs, MIT licensellama-swap
Go-based local model swapping for OpenAI/Anthropic compatible servers — llama.cpp, vllm, stable-diffusion.cpp. Web UI, model hot-swapping, Docker/WinGet/Homebrew install, OpenAI/Anthropic API endpoints2026-05-12
Capistrano
Capistrano — remote server automation and deployment tool. Ruby-based, SSH-driven, multi-stage deployments, rollback, hooks, scripting. Originally for Ruby/Rails, now supports any language/frameworkChef Infra
Chef Infra — configuration management platform for automating cloud infrastructure. Policy-driven, idempotent, Ruby-based DSL. Chef Infra Server, Workstation, InSpec for compliance, Chef Automate for analyticschezmoi
chezmoi — manage your dotfiles, directories, and files securely. Git-backed, encrypted, cross-platform. CLI tool for version control and synchronization of your development environmentCrafty
Crafty — configuration management tool by VoxPupuli. Puppet-based, declarative infrastructure, module-driven, CLI and API. Simplifies Puppet module development and deploymentFleet
Fleet — lightweight VM management. Run Linux and Windows on bare metal, VMs, cloud, edge. Fleetctl CLI, REST API, Terraform provider. Containerized, PostgreSQL, no external dependenciesOpenVox
OpenVox — Puppet module framework by VoxPupuli. Simplifies module development, testing, and publishing. Supports Puppet 4+, structured data, Hiera integration, CI/CD pipelines, community-drivenPuppet Labs
Puppet Labs — configuration management, automation, and infrastructure-as-code. Puppet Enterprise, Open Source, R10k, Hiera, Facter, PuppetDB, Bolt. Ruby-based DSL, declarative approach to system administrationSemaphore UI
Semaphore UI — modern UI and API for Ansible, Terraform, OpenTofu, Bash, PowerShell. Pure Go, Docker/K8s support, MySQL/Postgres/SQLite. RBAC, HA, runners, 13K+ GitHub stars2026-05-14
Boneyard
Auto-generated skeleton loading framework — pixel-perfect placeholders extracted from real UI. Works with React, Preact, Vue, Svelte 5, Angular, React Native. CLI captures layout at breakpoints, generates .bones.jsonClassic 7 — Windows 10 LTSC 2021 Modified to Look Like Windows 7
Fan project that transforms Windows 10 IoT Enterprise LTSC 2021 into a 1:1 Windows 7 experience: Aero Glass, desktop gadgets, .themepack support, Windows Media Center, OOBE recreationFactoMCP — MCP Server to Play Factorio with Claude
Python MCP server that connects to Factorio via RCON, exposing tools for navigation, mining, building, crafting, research, and diagnostics. Let Claude build your factory through natural languageODoH — Anonymous DNS Without an Account in a Single Rust Binary
Numa v0.14 ships a client, relay, and public deployment in one Rust binary. Uses HPKE to split the path: ingress proxy sees your IP but not the request, egress proxy sees the request but not your IP. No account required, MIT licensedOSINTukraine v2 — Telegram Intelligence Archive with AI
Production-grade platform for archiving and analyzing Telegram intelligence with AI-powered enrichment. Self-hosted, PostgreSQL + pgvector, supports semantic search, entity relations, EW analysis, geolocation, and forward chain analysis2026-05-15
Codex Now Available on Mobile App with Remote SSH and Programmatic Tokens
OpenAI announces Codex on ChatGPT mobile app (iOS/Android), Remote SSH for managed enterprise environments, programmatic access tokens for CI pipelines, Hooks GA, and HIPAA-compliant use for ChatGPT Enterprise. Over 4M weekly usersColdKey — Post-Quantum Age Key Generation and Paper Backup
Go CLI that generates post-quantum (ML-KEM-768 + X25519) age keys and produces single-page printable HTML backups with QR codes. Features mlock swap protection, Docker security hardening, multi-QR splitting, and SHA-256 verificationExplorer — Wikipedia Explored Like a Windows XP Desktop
Navigate Wikipedia articles as a Windows XP desktop experience. Click icons to open articles, drag and drop to organize, and explore connections between topics in a nostalgic interfaceFeedr — Terminal RSS/Atom Feed Reader in Rust
Feature-rich TUI RSS reader written in Rust. Dashboard view, feed auto-discovery, starred articles, categories, full-text extraction via Mozilla Readability, OPML import, vim-style navigation, macros, exec hooks, and dual themesThe Ferrari in Your Banker's Driveway — How Fees Steal Half Your Wealth
Analysis of how investment fees compound over time — a 3% fee costs 2/3 of final wealth over 40 years at 7% return. Covers expense ratios, transaction costs, performance fees (2-and-20), and shows how even skilled advisors can't overcome fee dragImage Blaster — Image-to-World 3D Skillset for Claude
Creates 3D models (.glb/.obj), Gaussian splats (.spz), and ambient SFX from a single image. Uses World Labs Marble, Hunyuan 3D, and ElevenLabs. Claude skill for jumpstarting 3D work in under 5 minutes. Extensible to Unity, Unreal, Godot, Blender, Three.jsNanoTDB — Tiny Embedded Time-Series Database for Edge/IoT
Go time-series DB for Raspberry Pi and edge nodes. Append-only, WAL-based, S2 compression, VictoriaMetrics-compatible API, no external runtime dependencies. Supports rollups and metric ingestion via line protocolOpen Vehicles — Open Source Electric Vehicle Telemetry
OVMS provides live monitoring, alerts, and remote control for electric vehicles via smartphone apps, web app, and MQTT. Features three CAN buses, SSH access, WebSocket streaming, DBC decoder, and CANopen client. Open source hardware and softwareSigNoz — Open-Source Observability Platform (Logs, Metrics, Traces)
Single tool for logs, metrics, and traces native to OpenTelemetry. Uses ClickHouse as datastore. Open-source alternative to DataDog and New Relic with APM, distributed tracing, LLM observability, and alerts. 26.9k starssx — Package Manager for AI Coding Assistants
Team vault for AI assets (skills, MCP configs, commands, agents, rules, hooks). Scoped installation per org/repo/team/user/bot. Works with Claude Code, Cursor, GitHub Copilot, Gemini, Codex, Kiro. Manifest-and-lock pattern like npm/cargo. Cloud relay for claude.ai/chatgpt.comVelonus — AI-Native Security Scanning CLI for Python
One-command security scanner for Python projects. Bundles trufflehog, Bandit, Semgrep, pip-audit, and Safety. Outputs terminal table, JSON, SARIF for GitHub Security tab. Exits 1 on HIGH/CRITICAL findings for CI gatesZenith Tech — Making Earth's Rotation Visible Through a Telescope
Real-time view of stars above you, zoomed 180x to make Earth's rotation visible. Uses Pan-STARRS telescope images (2010-2014) tiled with Leaflet.js, SIMBAD database for object names. Client-side JavaScript, no server component. Field of view = grain of rice at arm's length2026-05-18
auto-identity-remove — Automated Data Broker Opt-Out Runner
macOS tool that removes your personal info from 500+ people-search sites on a monthly schedule using Playwright, CapSolver for CAPTCHAs, launchd scheduling, and iMessage notifications. Handles 30+ brokers natively plus 470+ generic ones via public datasets — covers Acxiom, LexisNexis, ZoomInfo, Clearbit gaps left by paid services like IncogniAwesome CUDA Books — Curated List of Best CUDA Programming Books
598 stars. Curated list covering beginner to advanced CUDA programming — architecture, optimization, Python bindings, and 2024-2026 releases. Includes Kirk & Hwu's PMP 3rd Ed., CUDA for Deep Learning (2025), and CUDA C++ Optimization (2024)Brotli — Google's Lossless Compression Algorithm
General-purpose lossless compression algorithm developed by Google, designed as a replacement for DEFLATE with better compression ratios. Uses a modified LZ77, Huffman coding, and second-order context modeling. Adopted by nginx, Apache, Cloudflare, and the web ecosystem. Produces .br files. Open source under MIT licenseClickHouse Query Plan Contention — Cloudflare Billing Pipeline
Cloudflare's petabyte-scale ClickHouse billing pipeline slowed after migrating from (day) to (namespace, day) partitioning. Hidden bottleneck: 45% CPU + 50% wall-clock spent waiting on MergeTreeData mutex. Three upstream patches: shared lock instead of exclusive, deferred vector copy via read-through cache, binary search on sorted namespace key. Stable at 160k parts/replica. PR #85535 merged in ClickHouse 25.11Six SQL Patterns to Catch Transaction Fraud
Practical fraud detection using SQL — velocity checks, impossible travel (haversine >600mph), amount anomalies ($99.50-$100 ID thresholds, round card tests), suspicious merchants (spike ratio vs 7-day baseline), off-hours spending, and window-function primitives for composable fraud rules. Works for credit cards, healthcare claims, e-commerce, benefits programs2026-05-19
hsrs — Type-Safe Haskell Rust Bindings
Rust crate generating type-safe FFI bindings between Rust and Haskell. Annotate Rust types/functions with proc macros (#[hsrs::data_type], #[hsrs::function], etc.), run codegen to produce idiomatic Haskell with ForeignPtr memory management and Borsh serialization. Supports Result→Either, Option→Maybe, Vec→[], String→Text. MIT/Apache-2.0, 21 starsPaper2Galgame — Turn Academic Papers into Interactive Visual Novels
AI-powered tool that converts research papers into story-driven visual novels with anime partners. Features smart PDF parsing, chapter-by-chapter reading, voice notes, and blackboard study aids. Upload PDFs, pick custom characters, and study complex material through interactive scenes2026-05-28
ClusterControl Getting Started
Documentation for ClusterControl, an all-in-one database management platform for deploying, monitoring, and automating high-availability clusters across MySQL, PostgreSQL, MongoDB, Redis, and more.israeli-alloc
Rust library that allocates memory on a random victim program's address space — a research tool and political statement.2026-06-04