Stars
A list of Free Software network services and web applications which can be hosted on your own servers
wp2shell (CVE-2026-63030 & CVE-2026-60137) - full RCE chain
OSINT & recon toolkit // 100+ tools, one-command installer, SOCMINT, GEOINT, network recon, dark web, forensics & more.
A single archive of public exploit PoCs and vulnerability research writeups. At the time I post these, none have been reported. Feel free to report them yourself and take credit for the CVE if hand…
Send and receive SMS messages using your Android phone programmatically via a simple HTTP API
SSO plugin (OIDC/JWT/SAML) & SCIM provisioning for OPNsense
A vector index built on TurboQuant, written in Rust with Python bindings
HTTP/2 Bomb PoC — CVE-2026-49975 (HPACK indexed reference bomb + flow-control stall)
An agent-managed museum exhibit, built in Rust with Gajae-Code / LazyCodex — developed and maintained with no human intervention.
Your personal intelligence agent. Watches the world from multiple data sources and pings you when something changes.
TheFlash2k / containers
Forked from phannhat17/CTFd-Docker-PluginCTFd plugin allowing for individual Docker containers per team
frankli0324 / ctfd-whale
Forked from glzjin/CTFd-WhaleCTFd plugin that allows your users to have exclusive environments for each challenge, with dynamic flags.
AutoPentestX – Automated Pentesting & Vulnerability Reporting Tool
Instructions for controlling Harmony Hub over Websocket and HTTP
This GitHub repo is a powerhouse collection of APIs you can start using immediately to build everything from simple automations to full-scale applications. One of the most valuable API lists on Git…
Identity-aware VPN and tunneled reverse proxy for remote access based on WireGuard®.
LLM Council works together to answer your hardest questions
☄🌌️ The minimal, blazing-fast, and infinitely customizable prompt for any shell!
A smarter cd command. Supports all major shells.
Wintux — beautiful fullscreen Windows Linux dual boot GRUB theme. Clean, fast, and easy to install.
SafeLine is a self-hosted WAF(Web Application Firewall) / reverse proxy to protect your web apps from attacks and exploits.
HexStrike AI MCP Agents is an advanced MCP server that lets AI agents (Claude, GPT, Copilot, etc.) autonomously run 150+ cybersecurity tools for automated pentesting, vulnerability discovery, bug b…