Discover quality open-source projects, submit projects anonymously, and claim and edit your own project.
A little curiosity. A world of open source.
THE FIRST COLLECTIONChaosSQL is a deterministic concurrency and isolation fuzzer for PostgreSQL, MySQL and SQLite. It schedules concurrent transactions, detects invariant violations such as lost updates and write skew, shrinks failures to minimal reproductions, and can guard CI pipelines against regressions.
CytoScnPy is a fast, memory‑efficient Python static analyzer written in Rust. It detects dead code, security issues (including taint analysis), and code quality metrics such as complexity, Halstead, maintainability, and nesting depth, with support for major web frameworks.
NiceTOTP is an air-gapped, standalone TOTP hardware key built on the nRF52840, designed to provide secure 2FA codes without phone dependency. It features a built-in display, RTC, and long battery life, with configuration via a Python app or serial commands.
Shescape is a lightweight JavaScript library for escaping user input to prevent shell injection. It supports Bash, PowerShell, cmd.exe, and other major shells on macOS, Linux, and Windows.
A curated list of computer science courses with video lectures, covering algorithms, AI, databases, operating systems, and more.
29 agent skills for firewall and network-security work: parsing, auditing, converting and diffing Cisco, Fortinet, Palo Alto and Juniper SRX configs, SRX operational playbooks, compliance and STIG evidence mapping, plus Proxmox deployment guides.
Obtainium is an Android application that allows users to install and update apps directly from their original release pages, providing notifications for new versions.
Microsandbox runs untrusted workloads in fast, local microVMs with hardware isolation. Supports Docker-like workflows, instant startup, and embeddable SDKs for AI agents, CI jobs, and automation across Linux, macOS, and Windows.
Matomo is a full-featured, open-source web analytics platform that serves as a privacy-focused alternative to Google Analytics, allowing users to host their own data.
An interactive, TLS-capable intercepting HTTP proxy designed for penetration testers and software developers to analyze network traffic.
A transport-agnostic OAuth 2.1 and OpenID Connect server built on OpenIddict and redb.Route, supporting multiple databases, MFA, WebAuthn, SCIM, and in-process direct-vm calls.
Self-hosted GitHub App that publishes a required check accepting human CODEOWNER approval or approval from explicitly enrolled GitHub Apps, with organization and repository policies; pre-release and shadow-mode only.
Dart wrapper for OpenMLS implementing Messaging Layer Security (MLS) protocol for encrypted group messaging, with TreeKEM, encrypted storage, cross‑platform Flutter support, and experimental post‑quantum ciphersuites.
Cilium is an eBPF-based networking, security, and observability solution for Kubernetes. It offers CNI networking, identity-based L3-L7 policies, distributed load balancing that can replace kube-proxy, multi-cluster Cluster Mesh, service mesh with mutual authentication, and Hubble observability. It is a CNCF Graduated project with Apache 2.0-licensed user space code.
Falco is a cloud‑native runtime security tool for Linux that monitors kernel events and container activity, detects anomalies, and alerts on potential threats using customizable rules. It integrates with SIEMs and Kubernetes.
Open-source disassembly framework written in pure C, supporting 20+ architectures including x86, ARM, AArch64, RISC-V, MIPS and PowerPC, with a clean architecture-neutral API, multi-language bindings, and detailed instruction semantics for binary analysis and reverse engineering.
Sniffnet is a free, cross-platform, open-source application for comfortably monitoring network traffic, with real-time charts, host geolocation, service identification, PCAP import/export and customizable notifications.
x64dbg is an open-source user-mode debugger for Windows, aimed at reverse engineering and malware analysis of executables whose source code is unavailable. It ships 32-bit and 64-bit builds, a plugin system, and can be compiled from source by users.
Iris is a local-first MCP server that scores AI agent runs for quality, safety, and cost using 20 built-in deterministic rules, an optional LLM judge, and a web dashboard — all on your machine with no account or telemetry.
An advanced, system-level personal security and anti-coercion suite for Android. Running as a systemless priv-app with LSPosed hooks, it provides duress PINs, hardware tripwires, and remote SMS control.
