GhostLock One-Tap Execution App (CVE-2026-43499)

Spectral simulation of analog photography processes

SpektraLab — a macOS film and print simulator. SwiftUI app + a Metal/C++ render engine, linked in, no Python at run time. A fork of andreavolpato/spektrafilm.

A php2shell exploit that requires no modifications to the official version, and does not require display_errors or limit_memory.

Send and receive files with nearby Apple devices over AirDrop. Made for Omarchy Linux

The Open Standard for Generative UI

The terminal that outlives its window. Shells survive quitting the app, agents can drive other agents, and remote machines work the same way. Pure Rust, GPU-rendered.

Open source Loom alternative. Beautiful, shareable screen recordings.

Desktop shell for wayland compositors built with Quickshell & GO, optimized for niri, hyprland, sway, MangoWC, labwc, and MiracleWM.

Transparent proxying for Linux applications using seccomp user notifications. Supports SOCKS5, HTTP CONNECT, and domain/IP routing.

Code-rendered music video for "I'm Upping My P(doom)"

Run any process, on your machine or in an AI agent's environment, as if it were a pod in your Kubernetes cluster: real env vars, DNS, network, traffic.

Boot anything nixpkgs ever shipped, in your browser.

The ripgrep of AI context: a zero-dependency C++23 CLI + MCP server for coding agents. Find what you want without reading the repo, then check you built what you meant — blast radius, tests-to-run,…

Pre-indexed code knowledge graph, auto syncs on code changes, for Claude Code, Codex, Gemini, Cursor, OpenCode, AntiGravity, Kiro, CoPilot, and Hermes Agent — fewer tokens, fewer tool calls, 100% l…

SVG recreation of the x.ai bot avatar. One shape morphing through 14 states, measured off the reference video frame by frame.

the runtime your coding agents live on

A coding-agent skill for multi-phase security audits with independently verified, machine-readable findings

Skills for threat modeling, scanning, triage, patching, plus an autonomous scanning harness you can /customize

OpenAI's Codex Security CLI and TypeScript SDK for finding, validating, and fixing security vulnerabilities. npm: https://www.npmjs.com/package/@openai/codex-security

WebStrike 是一套以 Chromium 系浏览器扩展（Manifest V3） 为受控端点的指挥与控制（C2）套件。与传统以进程/驱动为主的 C2 相比，其工作重心落在 浏览器安全域：在合规授权与攻防演练场景下，可显著降低与终端 EDR 在 进程注入、驱动、内核回调 等层面的直接对抗成本，同时将能力锚定在用户 真实访问的 Web 会话 上。

A lightweight process isolation tool that utilizes Linux namespaces, cgroups, rlimits and seccomp-bpf syscall filters, leveraging the Kafel BPF language for enhanced security.

Low-level unprivileged sandboxing tool used by Flatpak and similar projects

📚 从零开始构建大模型

Project Muteki (無敵): Open-source AI-powered offensive security harness for automated penetration testing.

Intercept and inspect Coding Agent API traffic from Claude Code, Codex CLI, Gemini CLI, Cursor CLI, OpenCode, Kimi/Kimi Code, Pi, and Hermes in a local trace viewer.

Vibe Reverse Engineer with IDA Pro: An interface for IDA in SQL via live virtual tables. Don't let appearances deceive you! :)

Use Claude Code, OpenCode, Cursor CLI, and Codex on mobile and web with CloudCLI (aka Claude Code UI). CloudCLI is a free open source webui/GUI that helps you manage your Claude Code session and pr…

Linux CLI tool that transparently routes applications through SOCKS5 or HTTP proxies using network namespaces, TUN, smoltcp, and fake DNS to prevent DNS leaks