The open-source alternative to Webflow, Framer and WordPress. Agentic self-hosted visual CMS outputting clean static pages. Users, roles, plugins, content, database, it's all there.

Easy to maintain open source documentation websites.

A powerful and open-source toolkit for hackers and security automation - 安全行业从业者自研开源扫描器合辑

Based on The Minimalist Entrepreneur by Sahil Lavingia

AI-native MITM proxy — MCP server for traffic interception, recording & replay

Intent Runtime Inspection System

Vigolium - High-fidelity vulnerability scanner fusing agentic AI with native speed, modularity, and precision

Opencode Plugin for AI-Agent Orchestration

The agent that grows with you

1 script run the vphone

Network reconnaissance and asset discovery tool

A calm, open system for organizing life and work. Tasks, projects, notes, areas, and smart workflows - self-hosted or hosted.

ALLWEONE® Open source AI presentation generator Gamma Alternative. Create professional slides with customizable themes and AI-generated content in minutes.

🍯 T-Pot - The All In One Multi Honeypot Platform 🐝

Security Onion is a free and open platform for threat hunting, enterprise security monitoring, and log management. It includes our own interfaces for alerting, dashboards, hunting, PCAP, detections…

CLI to control iOS and Android devices for AI agents

Centralized network visibility and continuous asset discovery. Monitor devices, detect change, and stay aware across distributed networks.

A list of SaaS, PaaS and IaaS offerings that have free tiers of interest to devops and infradev

Digging Deeper....

Two WinForms GUI tools for enumerating, searching, and exfiltrating data from M365 environments using application-level OAuth tokens

AI-powered vulnerability scanner extension for Burp Suite with multi-provider support (Ollama, OpenAI, Claude, Gemini)

Awesome-Cellular-Hacking

GitHub Action to alert on security patches before the CVE drops.

Writeup and exploit for CVE-2025-22441: Privilege escalation from installed app to SystemUI process on Android due to pass of untrusted ApplicationInfo to LoadedApk

Open-source AI penetration testing tool to find and fix your app’s vulnerabilities.

Slides and videos from my public speeches / conferences

Fix Play Integrity <A13 verdicts, allowing custom fields and props

Disposable email inbox powered by serverless mailgun kittens

The RedStack DB extracted as an Obsidian Vault