tools

toeverything/AFFiNE: There can be more than Notion and Miro. AFFiNE(pronounced [ə‘fain]) is a next-gen knowledge base that brings planning, sorting and creating all together. Privacy first, open-source, customizable and ready to use.

theteatoast/local-vuln-research-pipeline: Fully local vulnerability research pipeline - 14B code-specialized LLM reviews every source file exhaustively.

cloudflare/cloudflared: Cloudflare Tunnel client

Hashcracky Resources

NVIDIA/SkillSpector: Security scanner for AI agent skills. Detect vulnerabilities, malicious patterns, and security risks.

GitHub - Andyyyy64/whichllm: Find the local LLM that actually runs and performs best on your hardware. Ranked by real, recency-aware benchmarks, not parameter count. One command, run it instantly.

trailofbits/trailmark: Build and query a graph database representation of source code

trailofbits/trailmark: Build and query a graph database representation of source code

ZeroPrime9/WordListeXplorer: A local wordlist intelligence and workflow management tool for offensive security & Bug Bounty workflows.

zakirullin/files.md: 🌱 Private, quiet space for thinking. A simple app for your .md files.

httpbin.org

PayloadBox

GitHub - salesforce/url-content-auditor: Audit content (pdfs, media files, images) sensitivity on urls

GitHub - SunWeb3Sec/llm-sast-scanner: A SAST skill that gives AI coding agents structured vulnerability detection across 34 vulnerability classes.

GitHub - ChiChou/grapefruit: Open-source mobile security testing suite for iOS and Android. Previously Passionfruit · GitHub

nip.io - wildcard DNS for any IP Address

noperator/siftrank: Use LLMs to rank anything

anthropics/claude-code: Claude Code is an agentic coding tool that lives in your terminal, understands your codebase, and helps you code faster by executing routine tasks, explaining complex code, and handling git workflows - all through natural language commands.

ticarpi/jwt_tool: :snake: A toolkit for testing, tweaking and cracking JSON Web Tokens

yusuf-musleh/mmar: mmar is a zero-dependency, self-hostable, cross-platform HTTP tunnel that exposes your localhost to the world on a public URL. Written in Go.

ossf/criticality_score: Gives criticality score for an open source project

Home · tmux/tmux Wiki · GitHub

GitHub - junegunn/fzf: :cherry_blossom: A command-line fuzzy finder

GitHub - sharkdp/fd: A simple, fast and user-friendly alternative to 'find'

GitHub - BurntSushi/ripgrep: ripgrep recursively searches directories for a regex pattern while respecting your gitignore · GitHub

GitHub - ajeetdsouza/zoxide: A smarter cd command. Supports all major shells.

GitHub - pemistahl/grex: A command-line tool and Rust library with Python bindings for generating regular expressions from user-provided test cases

GitHub - schollz/croc: Easily and securely send things from one computer to another :package:

asciinema docs

GitHub - gh0stkey/Web-Fuzzing-Box: Web Fuzzing Box - Web 模糊测试字典与一些Payloads · GitHub