Awesome List Updates on Sep 05, 2026

13 awesome lists updated today.

🏠 Home · 🔍 Search · 🔥 Feed · 📮 Subscribe · ❤️ Sponsor

1. Awesome Web Security

CSRF - Cross-Site Request Forgery

• PayloadsAllTheThings - CSRF Injection (⭐81k) - Written by @swisskyrepo.

AngularJS

• DOM based Angular sandbox escapes - Written by @garethheyes.

• XSS without HTML: Client-Side Template Injection with AngularJS - Written by Gareth Heyes.

Crypto

• What is a Side-Channel Attack ? - Written by J.M Porup.

JWT

• Hardcoded secrets, unverified tokens, and other common JWT mistakes - Written by @ermil0v.

CSP

• GitHub's CSP journey - Written by @ptoomey3.

• GitHub's post-CSP journey - Written by @ptoomey3.

Remote Code Execution

• How I Chained 4 vulnerabilities on GitHub Enterprise, From SSRF Execution Chain to RCE! - Written by Orange.

SQL Injection

• GitHub Enterprise SQL Injection - Written by Orange.

XXE

• Automating local DTD discovery for XXE exploitation - Written by Philippe Arteau.

Frontend (like SOP bypass, URL spoofing, and something like that)

• JSON hijacking for the modern web - Written by portswigger.

Reconnaissance / OSINT - Open-Source Intelligence

• SpiderFoot (⭐22k) - Open source footprinting and intelligence-gathering tool by @binarypool.

Application / Server-Side Request Forgery

• Where the LLM Stops: Deterministic Scoring in an AI-Assisted VAPT Pipeline - Technical write-up on designing an AI-assisted VAPT pipeline with deterministic CVSS scoring, passive confidence verification, and LLM-generated vulnerability explanations and remediation.

• The 200 That Proved Nothing - Why a 200 OK is not proof of an access-control bug: a seeded BOLA benchmark where a model asked to confirm a secure endpoint 79 times and a downgrade-only code gate refused every one, plus the similarity thresholds, a deterministic check that failed the same way, and a plausible fix measured and rejected for making results worse.

Miscellaneous / Server-Side Request Forgery

• A glimpse into GitHub's Bug Bounty workflow - Written by @gregose.

• How we abused Slack's TURN servers to gain access to internal services - Written by @sandrogauci.

2. Open Source Mac Os Apps

🛠️ Utilities (120) / ✏️ Text (14)

• HomeRec (⭐6) - Lightweight native macOS app for recording system audio as high-quality WAV files using ScreenCaptureKit.

  Languages: Swift

• Dorothy (⭐342) - Desktop app to orchestrate multiple AI CLI agents simultaneously with automations, Kanban management, and remote control via Telegram.

  Languages: TypeScript

  Website: https://dorothyai.app

  Screenshots

  

• Bolo (⭐9) - Voice dictation menubar app using Telnyx STT and LLM APIs.

  Languages: Python

• ClaudeUsageBar (⭐27) - See your Claude.ai and ChatGPT usage limits live in your macOS menu bar.

  Languages: Python

  Website: https://yagcioglutoprak.github.io/AIQuotaBar/

  Screenshots

  

• R2Drop (⭐5) - Native macOS menu bar application for uploading files to Cloudflare R2 storage.

  Languages: Swift Rust

  Website: https://r2drop.com

• Fazm (⭐333) - The fastest AI computer agent for macOS. Takes voice commands and controls your entire desktop.

  Languages: Swift TypeScript

  Website: https://fazm.ai

• Terminator (⭐2.7k) - Terminal emulator that lets you open multiple GNOME terminals in one window.

  Languages: Python

  Website: https://gnome-terminator.org

• ScreenTranslate (⭐64) - Capture any area or select text to translate instantly, fully on-device with Apple Vision OCR and Apple Translation.

  Languages: Swift

  Website: https://screentranslate.filient.ai

📤 Sharing Files (12) / ✏️ Text (14)

• OnionShare (⭐7.1k) - Securely and anonymously share files, host websites, and chat with friends using the Tor network.

  Languages: Python JavaScript

  Website: https://onionshare.org/

⏱️ Productivity (80) / ✏️ Text (14)

• Shark (⭐7) - Cursor IDE workspace manager for macOS.

  Languages: Swift

  Website: https://ssbun.github.io/Shark

📝 Editors (8) / ✏️ Text (14)

• Markout (⭐10) - Native Markdown editor with live preview, offline KaTeX math, Mermaid diagrams, and HTML/PDF export.

  Languages: Swift

  Website: https://github.com/maxmilian/markout (⭐10)

  Screenshots

  

⌨️ Keyboard (11) / ✏️ Text (14)

• LangSwitcher (⭐28) - Open-source keyboard layout text converter for macOS.

  Languages: Swift

  Website: https://reg2005.github.io/langSwitcher/

  Screenshots

  

📊 Menubar (57) / ✏️ Text (14)

• AIQuotaBar (⭐27) - See your Claude.ai and ChatGPT usage limits live in your macOS menu bar.

  Languages: Python

  Website: https://yagcioglutoprak.github.io/AIQuotaBar/

  Screenshots

  

⚙️ System (25) / ✏️ Text (14)

• ClearDisk (⭐578) - Visualize and clean developer caches to reclaim disk space on macOS.

  Languages: Swift

  Website: https://bysiber.github.io/cleardisk

  Screenshots

  

3. Awesome Mac

Utilities / Productivity

• OpenClip - Lightweight floating action bar for macOS that turns selected text into instant actions.

4. Awesome Homematic

Community Ressources (mostly german language)

• Homematic Forum: Addons & Tools Übersicht - Übersicht über Addons und Tools für CCU / OpenCCU.

Documentation

• ccu-addon-howto (⭐12) - Howto für die Entwicklung von Addons für die Homematic CCU und OpenCCU.

• HomeMatic-Script Dokumentation - Offizielle Dokumentation von eQ-3: Teil 1 Sprachbeschreibung, Teil 2 Objektmodell, Teil 3 Beispiele, Teil 4 Datenpunkte.

• HomeMatic XML-RPC API - Offizielle Spezifikation der XML-RPC Schnittstelle der Interface-Prozesse von eQ-3.

• OpenCCU Wiki (⭐1.8k) - Installation, Administration und Nutzung von OpenCCU.

CCU Alternatives

• OCCU (⭐213) - The HM-OCCU-SDK published by eQ-3, the base of debmatic, piVCCU and OpenCCU.

• OpenCCU (⭐1.8k) - Lightweight, OCCU and Linux/buildroot-based distribution for running a HomeMatic CCU on embedded devices like the RaspberryPi, x86/ARM or as virtual appliance (formerly known as RaspberryMatic).

Alternative Sensors, Actuators and Hardware Modifications

• AskSin++ - Dokumentation, Sketche und Community-Projekte rund um Selbstbau-Komponenten für HomeMatic auf Basis von Arduino/STM32 und CC1101.

• HB-RF-ETH (⭐58) - Platine und Firmware um ein Homematic Funkmodul (HM-MOD-RPI-PCB, RPI-RF-MOD) per Netzwerk an debmatic oder piVCCU anzubinden.

• HB-RF-ETH-ng (⭐14) - Modernisierte Next-Generation-Firmware für die HB-RF-ETH Platine mit neuer Weboberfläche und MQTT-Monitoring.

• HB-UNI-Sen-WEA (⭐69) - Selbstbau-Wetterstation für HomeMatic.

CCU Addons

• ccu-addon-mui (⭐6) - Moderne, responsive Progressive Web App (PWA) für die CCU3 mit integriertem WebSocket-Server.

• CUxD (⭐67) - Der "Leatherman" für die CCU. Verbindet FS20, ... (💵 EnOcean, ...), stellt virtuelle Geräte und hilfreiche Tools zur Verfügung.

• CUxD-Highcharts (⭐16) - Visualisiert CUxD DEVLOGS mit Highcharts/Highstock (verwaist, Maintainer gesucht).

• Email (⭐47) - HomeMatic CCU Addon für den Email Versand.

• hm-influxdb2 (⭐1) - Addon for the CCU3/OpenCCU to log data from devices into an InfluxDB2.

• hm-print (⭐12) - CCU Programme drucken.

• hm-sonos (⭐17) - HomeMatic CCU Addon zur Steuerung von Sonos Playern.

• hm_pdetect (⭐73) - Anwesenheitserkennung über die FRITZ!-Box

• homematic-node-exporter (⭐2) - Prometheus Node Exporter packaged as Addon for the Homematic CCU3 and OpenCCU.

• HQ-WebUI (⭐50) - Schnelles alternatives WebUI für die Homematic CCU mit Skript-Editor (verwaist, Maintainer gesucht).

• JP-HB-Devices-addon (⭐57) - Addon das über 80 Selbstbau-Geräte (AskSinPP HomeBrew) in die CCU/OpenCCU Firmware integriert.

• Mosquitto (⭐33) - Mosquitto packaged as Addon for the Homematic CCU3 and OpenCCU

• ScriptParser (⭐13) - Addon zur Syntaxprüfung von HomeMatic Skripten.

• WebMatic (⭐27) - Alternative, für Mobilgeräte optimierte Bedienoberfläche, läuft direkt auf der CCU.

• XML-API (⭐128) - Vereinfachter CCU Zugriff via HTTP/XML.

Interfacing Software

• CCU-AI-MCP (⭐3) - MCP-Server für OpenCCU/CCU, gibt KI-Assistenten (LLMs) über konfigurierbare HM-Skripte Zugriff auf das Smart Home.

• ccu-mcp (⭐8) - MCP server enabling AI assistants to control Homematic devices via the CCU's JSON-RPC API, no addon required.

• hm2mqtt.js (⭐23) - Node.js based interface between Homematic and MQTT.

• homematicip-hcu (⭐73) - Home Assistant Integration zur lokalen Anbindung der Homematic IP Home Control Unit (HCU) ohne Cloud.

• homematicip_local (⭐590) - Home Assistant Custom Component zur lokalen Anbindung von CCU/OpenCCU (Homematic und Homematic IP), basiert auf aiohomematic.

• matterbridge-homematic (⭐4) - Matterbridge (⭐965) Plugin to bridge a Homematic CCU's devices to the Matter ecosystem.

• OpenCCU-Loom (⭐5) - Standalone Go daemon bridging Homematic / Homematic IP CCUs to MQTT (with Home Assistant Discovery), REST + WebSocket, an MCP server and a native Matter bridge.

• RedMatic-HomeKit (⭐58) - HAP-Nodejs basierte Node-RED Nodes um (Homematic-)Geräte in HomeKit einzubinden.

• RedMatic-Matter (⭐0) - Matter.js basierte Node-RED Nodes, die Homematic-Geräte und beliebige Node-RED-Daten als Matter-Bridge bereitstellen.

Misc Software

• godevccu (⭐1) - Virtual HomeMatic CCU with XML-RPC and JSON-RPC servers written in Go, single static binary for testing integrations.

• hm-buildroot (⭐4) - Buildroot environments / cross compiler toolchains to build native applications for the CCU and OpenCCU.

• HM-Explorer (⭐8) - Electron based helper app for the Homematic CCU (macOS/Windows).

• HMDeviceFirmware (⭐33) - Archive of current and past firmware update files for HomeMatic and Homematic IP devices.

• hmGetInfo (⭐0) - Collect paramsets and paramsetDescriptions from your Homematic CCU as JSON.

• HomeHub (⭐18) - PHP/XML-API basiertes Webfrontend. Forum

• Homematic Script Language - Visual Studio Code extension providing syntax highlighting for HomeMatic Script (.hms) files.

• pydevccu (⭐9) - Virtual HomeMatic CCU XML-RPC and JSON-RPC server with fake devices for development and testing.

• ReGaHss-Test (⭐3) - Automated System Tests of ReGaHss - the HomeMatic (O)CCU "Logic Layer" (formerly occu-test).

Software Modules

• aiohomematic (⭐167) - Python 3 interface to interact with Homematic devices via XML-RPC and JSON-RPC, successor of pyhomematic (⭐82) and base of homematicip_local.

• go-hmccu (⭐5) - Go library for interfacing the CCU.

• Homematic IP Connect API (⭐34) - Official WebSocket API and example plugins (Java, Node.js) for developing plugins for the Homematic IP Home Control Unit (HCU).

• homematicip-rest-api (⭐239) - Python wrapper for the homematicIP REST API (Cloud / Access Point Based).

• openccu-loom-client (⭐0) - Async Python REST + WebSocket client for the OpenCCU-Loom daemon.

Smart Home Software supporting Homematic

• SmartHomeNG - via Plugins (⭐44).

5. Awesome Selfhosted

Software / Media Management

• Houndarr - Scheduled backlog searches for Radarr, Sonarr, Lidarr, Readarr and Whisparr. Works through missing and cutoff-unmet items in small rate-limited batches with per-item cooldowns and hourly caps, to avoid overloading indexers. (Source Code (⭐281)) AGPL-3.0 Python/Docker

6. Awesome Scientific Writing

Bibliography

• ScholarRef (⭐1) - Convert citation styles (APA 7, Harvard, Vancouver) directly inside Word .docx files.

Converters and Filters

• Manubot - Workflow for writing and publishing scholarly manuscripts with Markdown, persistent-identifier citations, and reproducible builds.

• latex2arxiv (⭐5) - Command-line tool which converts a LaTeX project into an arXiv-ready ZIP: prunes unused files, strips comments and draft markup, and flags arXiv submission blockers before upload.

• MyST Markdown CLI - Command-line tools for building scientific documents from MyST Markdown with citations, cross-references, and HTML, PDF, and Word output.

• Typst (⭐56k) - Markup-based typesetting system with math, bibliography management, and fast incremental compilation to PDF.

7. Awesome Digital History

Archives and primary sources / Global

• LUX: Yale Collections Discovery - Cross-collection discovery portal for exploring cultural and natural heritage materials held by Yale University’s museums, libraries, archives, and galleries.

Archives and primary sources / Switzerland

• e-codices - Virtual manuscript library of Switzerland.

8. Awesome Bitcoin

Playgrounds

• Raw transaction decoder - Paste a raw Bitcoin transaction (legacy, SegWit or Taproot) and see every byte named: scripts disassembled, addresses derived, witness and sequence fields explained. Runs in the browser, no server.

Read

• Bitcoin Book of BIPs - Deployed and complete BIPs (⭐11k), grouped by theme. PDF, ePUB, and web.

9. Awesome Terraform

Learning and Studying

• Terraform Terminal Simulator - Practice init, plan, and apply in a simulated terminal in the browser. Free and open source, no signup.

Community Modules / Miscellaneous

• terraform-helm-kepler (⭐0) - Terraform module to deploy Kepler (Kubernetes power profiling) via Helm.

Providers / Community providers

• terraform-provider-seerr (⭐5) - Terraform provider for Seerr (Overseerr/Jellyseerr).

• terraform-provider-paddle (⭐0) - Terraform provider for Paddle Billing catalog resources, lifecycle actions, and lookup data sources.

Tools / CI

• opentofu-updater-action (⭐1) - GitHub Action that keeps OpenTofu/Terraform providers, modules, Helm charts and container images up to date by opening pull requests.

10. Awesome Claude Code

Agent Orchestration / Obsidian

• claude-intercom (⭐15) by MuhammadTalhaMT - Relays messages between two Claude Code sessions on separate machines using the Channels API, with delivery tracking and per-message reply budget. Pairs sessions belonging to different accounts, which native cross-session messaging does not. Although this sort of functionality is now a platform feature, it's always cool to see people who have built their own solutions.\       

11. Awesome Go

Relational Database Drivers

• go-mssqldb (⭐409) - Microsoft's official Go driver for SQL Server, Azure SQL, Azure Synapse, SQL database in Fabric, and Fabric Data Warehouse. Supports Azure AD, Always Encrypted, bulk operations.

Server Applications

• Casdoor (⭐14k) - Identity and access management (IAM) and single sign-on (SSO) server with a web UI, supporting OAuth 2.0, OIDC, SAML, CAS and LDAP.

Other Software / Libraries for creating HTTP middlewares

• Plakar (⭐2k) - An encrypted, deduplicated, verifiable, and scalable backup engine with no vendor lock-in.

12. Awesome Rust

Applications / Database

• teaql/teaql-rs (⭐13) [teaql-core] - A model-driven runtime with typed queries, governed mutations, and SQL providers

Applications / Video

• Jorji49/streamtop (⭐84) [streamtop] - Terminal HLS, DASH, and IPTV stream monitor with wire probes, TR 101 290, and SCTE-35 metrics.

Libraries / GUI

• smithay (⭐3.2k) - [smithay] is a safe and well-documented library directed to provide building blocks to create Wayland coptositors

13. Awesome Datascience

Tools

• Kitaru (⭐279) - Open-source platform that records real AI agent runs, replays them against changes, and evaluates outcomes before deployment.

YouTube Videos & Channels / Book Deals (Affiliated)

• AI Talks - Searchable summaries and topic index for practical AI engineering talks and conference videos.

• Next: Sep 04, 2026