A standards-compliant OpenID Connect and OAuth 2.x framework for ASP.NET Core, including IdentityServer, the Backend-for-Frontend pattern and JWT DPoP support.DuendeSoftware
Concrete is Zama's open-source fully homomorphic encryption compiler and Python library. It compiles ordinary Python functions into FHE circuits so computations run directly on encrypted data without decryption.zama-ai
A reverse-engineering framework and command-line toolkit, forked from radare2, for disassembling, debugging and analyzing binaries, used directly by security researchers and forensic analysts.rizinorg
Mason is a set of Dart packages and a CLI that lets developers create and consume reusable project templates called bricks for consistent code generation.felangel
A Prometheus instrumentation library for PHP applications, providing counters, gauges, histograms and summaries with Redis, APCu or in-memory storage adapters.PromPHP
DevSidecar is a desktop sidecar proxy that accelerates access to GitHub, git clone, releases, Stack Overflow and npm through DNS optimization, request interception and mirror routing.docmirror
Scilla is a Go command-line reconnaissance tool for penetration testing that enumerates DNS records, subdomains, ports, and web directories, with JSON, HTML, or text report output.edoardottt
An unofficial Android port of Linux Mint's Warpinator that lets phones exchange files with desktop Warpinator users on the same local network.slowscript
An app store for Raspberry Pi and ARM Linux that uses shell scripts to install hard-to-set-up software, with a graphical interface for one-click install, removal and updates.Botspot
A penetration-testing utility that downloads and reconstructs Git repositories exposed by misconfigured websites, recovering much of the history even when directory listings are disabled.liamg
Microsoft's official collection of Windows App SDK feature samples, covering AI, app lifecycle, graphics, notifications and more, intended as learning references for developers.microsoft
A command-line tool and Go library for querying, modifying and converting structured data across JSON, YAML, TOML, XML, CSV, HCL, INI and KDL.TomWright
A personal blog system built with Flask and Bootstrap 4, offering public pages plus an admin panel for posts, albums, comments, users and small online utilities.weijiang1994
A fast, Sigma-based threat hunting and forensics timeline generator for Windows event logs, consolidating events into CSV or JSON for incident response and enterprise-wide analysis.Yamato-Security
Global Socket is a toolkit for connecting machines behind NAT and firewalls, offering encrypted reverse shells, file transfer, SFTP, mounts and proxies through a shared-secret relay network.hackerschoice
PTerm is a Go library for building beautiful command-line interfaces, offering charts, progress bars, tables, trees, interactive prompts, and more.pterm
A lightweight toolkit for managing Zsh plugins and Git repositories, speeding up shell startup with cached eval, automatic completion setup, and asynchronous compilation.marlonrichert
Lagrange is a cross-platform graphical client for browsing Geminispace, offering tabs, bookmarks, history, inline images, themes, and TLS identity management in a minimalist browser-like interface.skyjake
Integrates the Everything search engine into the Windows taskbar, offering instant file search, themes, custom filters and regex-based file actions on Windows 10 and 11.srwi
A Spring Boot and Vue rapid admin development platform with a code generator, multi-tenant SaaS support, permissions and common system modules.hiparker
A friendly, fast command-line HTTP client that reimplements HTTPie's design with HTTP/2, downloads, sessions, authentication and curl command translation.ducaale
Lumibot is a Python framework for AI trading agents, letting research agents hand findings to a trading agent and run the same strategy in backtests or live trading across many brokers.Lumiwealth
Horusec is an open-source static application security testing tool that scans 18 languages for vulnerabilities and leaked secrets, usable from the CLI or CI/CD.ZupIT
Cocogitto is a Conventional Commits and SemVer toolbox for the command line, handling compliant commits, automatic version bumps, changelog generation, and release workflows.cocogitto
TREVORspray is a modular password-spraying tool for security testing. It supports Microsoft 365, Okta, ADFS and other services, with threading, proxy rotation, recon and credential validation features.blacklanternsecurity
A lightweight Unity editor extension that restyles the Hierarchy window with headers, icons, toggles and visual helpers to keep complex scenes readable and organized for game developers.WooshiiDev
A portable POSIX shell fetch script that displays system information with Nerd Fonts, emoji, or other icon sets across many Unix-like systems.ThatOneCalculator
An infrastructure runtime and Terraform orchestration CLI that deploys Terraform, Helm, and Kubernetes consistently with DRY stack configuration.cloudposse
A JavaScript library implementing JSON CRDT, operational transformation, and fast codecs, schemas, and utilities for building real-time collaborative and offline-first applications.streamich
Zellij is a terminal workspace and multiplexer for developers, offering panes, layouts, plugins, and multiplayer collaboration. Install it and use it directly in your terminal.zellij-org
A detailed guide to modern Node.js testing, offering more than 50 best practices plus a complete example backend. It covers component and integration tests, databases, message queues, external services, mocking, and test infrastructure setup.goldbergyoni
Watcher is an AI-powered cyber threat intelligence and hunting platform that aggregates CVEs, ransomware, leak data and domain monitoring, with AI-generated threat summaries.thalesgroup-cert
Finamp is an open-source Jellyfin music player for Android, iOS, and desktop that streams and downloads your own library, with lyrics, offline playback, and car integration.finamp-app
FizzGate is a Java API aggregation gateway offering API management, orchestration, masking, security, and tracing, plus an LLM gateway with multi-provider routing and MCP support.fizzgate
A production-ready NestJS boilerplate with JWT and social OAuth, TOTP two-factor auth, RBAC, and multi-workspace tenancy on Prisma and MongoDB, giving teams a head start on enterprise APIs.andrechristikan
age-plugin-yubikey is an age encryption client plugin that stores age identities on YubiKeys, enabling files to be encrypted to and decrypted with hardware-backed keys.str4d
Clapper is a modern GNOME media player built on GStreamer and GTK4, offering a clean interface, playback queue, hardware acceleration, and Flatpak packaging.Rafostar
swyh-rs is a Rust desktop application that streams whatever audio is playing on your computer to UPnP/DLNA/OpenHome speakers and players in lossless formats.dheijl
Hurl is a command-line tool that runs and tests HTTP requests written in plain text, supporting chained requests, assertions, CI integration, and multiple report formats.Orange-OpenSource
EMBA is a firmware security analyzer for embedded devices: it extracts firmware, runs static and emulated dynamic analysis, builds an SBOM and produces a web vulnerability report.e-m-b-a
Tongsuo is an open-source cryptographic library providing Chinese and international algorithms, homomorphic and post-quantum primitives, plus TLCP, TLS 1.3, and QUIC secure communication protocols.Tongsuo-Project
A production-ready NestJS REST API boilerplate with authentication, TypeORM and Mongoose support, mailing, i18n, file uploads, Swagger, tests, Docker, and CI. It gives developers a solid starting point for new backend projects.brocoders
SecretScanner is a standalone tool that scans container images and host filesystems for unprotected secrets, matching roughly 140 secret types and reporting discovered keys, passwords, and tokens as JSON.deepfence
Wikiman is a universal offline documentation search engine for the terminal, indexing man pages, tldr, ArchWiki, Gentoo Wiki, FreeBSD docs, and DevDocs for fast local lookup.filiparag
A modern desktop graphical interface for managing Redis databases, with SSH tunneling, namespacing, a JSON viewer, a console, TTL management and light and dark themes.ekvedaras
A personal npx business card that prints an interactive terminal profile with clickable social links, meant to introduce its author in a fun way.anmol098
OWASP WrongSecrets is a deliberately insecure application packed with challenges that show common secrets-management mistakes, built as hands-on training for developers and security teams.OWASP
htop is a cross-platform interactive process viewer for the terminal, showing CPU, memory, and per-process details with sorting, filtering, and process management.htop-dev
Auxio is a simple, private, offline music player for Android with a modern Material interface, robust library support, gapless playback, and ReplayGain.OxygenCobalt
Aura Theme is a coordinated dark color theme ported to dozens of popular apps, including code editors, terminals, browsers and chat clients.daltonmenezes
Xiu is a high-performance live media server written in Rust, supporting RTMP, RTSP, WebRTC, HLS and HTTP-FLV with protocol conversion and clustering.harlanc
Mozilla VPN is a fast, secure cross-platform VPN client from the makers of Firefox. It offers one-tap encrypted connections, multi-hop server selection, and apps for desktop and mobile.mozilla-mobile
A Chinese-localized version of Microsoft Activation Scripts, a tool that activates Windows and Office through methods such as HWID, Ohook, TSforge, and KMS. It runs from a single PowerShell command or a downloaded script.nickvourd
EAS CLI is Expo's command-line tool for building, submitting, and updating React Native and Expo apps, offering cloud builds, over-the-air updates, and release automation.expo
An open-source utility that explains and reproduces how WinRAR license files are generated, with CLI, GUI, and GitHub Actions workflows for creating rarreg.key files.bitcookies
An experimental terminal text editor built on Scintilla and Turbo Vision, offering syntax highlighting, multiple documents, search and replace, and Unicode support.magiblot
Generates and publishes ready-to-use Surge rule sets, including direct, proxy, ad-block, Apple/iCloud, GFWList domain and IP lists, rebuilt daily by GitHub Actions for subscription use.Loyalsoldier
A cross-platform local music player and library manager with lyrics, tag editing, gapless playback and native media controls on Windows, Linux, macOS, Android and iOS.harmonoid