Lenin Alevski

local-agent-sandbox. A local emulator to develop with the agent-sandbox SDK locally

sdd-govplan. Governance Planning for Spec-Driven Development — conversational requirement gathering, project brief, features, ADRs, acceptance criteria

kbs. SkillVault: Knowledge Operating System — Go binary · SQLite+FTS5 · MCP stdio · CLI · HTTP API

chisel. A fast TCP/UDP tunnel over HTTP

tukituki. A format and TUI to simplify running development processes

spec-kit. 💫 Toolkit to help you get started with Spec-Driven Development

mempalace. The best-benchmarked open-source AI memory system. And it's free.

AgentCore. ARCHIVED — consolidated into QuantumEdu/sdd-govplan

mailpit. An email and SMTP testing tool with API for developers

ECC. The agent harness performance optimization system. Skills, instincts, memory, security, and research-first development for Claude Code, Codex, Opencode, Cursor and beyond.

OpenSpec. Spec-driven development (SDD) for AI coding assistants.

guardian-cli. Guardian is a production-ready AI-powered penetration testing automation CLI tool that leverages Google Gemini and LangChain to orchestrate intelligent, step-by-step penetration testing workflows while maintaining ethical hacking standards.

ccusage. npx ccusage

superpowers. An agentic skills framework & software development methodology that works.

LifeOS. ⛰️A General Hill-climbing AI harness that helps you move from Current State to Ideal State in both Life and Work.

claude-mem. Persistent Context Across Sessions for Every Agent – Captures everything your agent does during sessions, compresses it with AI, and injects relevant context back into future sessions. Works with Claude Code, OpenClaw, Codex, Gemini, Hermes, Copilot, OpenCode + More

Cybersecurity-Engineer-Handbook. This repo has all the resources you need to become an amazing security engineer!

awesome-mcp-servers. A collection of MCP servers.

nocodb. 🔥 🔥 🔥 A Free & Self-hostable Airtable Alternative

awesome-claude-code. A hand-picked collection of the finest of resources for the most awesome of agents, Claude Code, the undisputed champion of coding companions, from the unstoppable team at Anthropic PBC. A delectable showcase of top tier skills, ambidextrous agents, scintillating status lines, top notch developer tooling, and also we have plugins

ollama. Get up and running with Kimi-K2.6, GLM-5.2, MiniMax, DeepSeek, gpt-oss, Qwen, Gemma and other models.

rql. A rest filter parser for Go that returns built queries

kubecolor. Colorize your kubectl output

Fabric. Fabric is an open-source framework for augmenting humans using AI. It provides a modular system for solving specific problems using a crowdsourced set of AI prompts that can be used anywhere.

spiderfoot. SpiderFoot automates OSINT for threat intelligence and mapping your attack surface.

uptime-kuma. A fancy self-hosted monitoring tool

CyberChef. The Cyber Swiss Army Knife - a web app for encryption, encoding, compression and data analysis

juicefs. JuiceFS is a distributed POSIX file system built on top of Redis and S3.

k3sup. bootstrap K3s over SSH in < 60s 🚀

picfit. An image resizing server written in Go

excalidraw. Virtual whiteboard for sketching hand-drawn like diagrams

arsenal. Arsenal is just a quick inventory and launcher for hacking programs

Awesome-GPT-Agents. A curated list of GPT agents for cybersecurity

kubeshark. eBPF-powered network observability for Kubernetes. Indexes L4/L7 traffic with full K8s context, decrypts TLS without keys. Queryable by AI agents via MCP and humans via dashboard.

cilium. eBPF-based Networking, Security, and Observability

grype. A vulnerability scanner for container images and filesystems

MeshCentral. A complete web-based remote monitoring and management web site. Once setup you can install agents and perform remote desktop session to devices on the local network or over the Internet.

bbot. The recursive internet scanner for hackers. 🧡

kube-hunter. Hunt for security weaknesses in Kubernetes clusters

www-project-kubernetes-top-ten. OWASP Foundation Web Respository

manageiq. ManageIQ Open-Source Management Platform

proxmark3. Iceman Fork - Proxmark3

semaphore. Modern UI and powerful API for Ansible, Terraform/OpenTofu/Terragrunt, PowerShell and other DevOps tools.

prompts.chat. f.k.a. Awesome ChatGPT Prompts. Share, discover, and collect prompts from the community. Free and open source — self-host for your organization with complete privacy.

developer-community-projects. Go

mailspoof. Scans SPF and DMARC records for issues that could allow email spoofing.

magicRecon. MagicRecon is a powerful shell script to maximize the recon and data collection process of an objective and finding common vulnerabilities, all this saving the results obtained in an organized way in directories and with various formats.

katana. A next-generation crawling and spidering framework.

axiom. The dynamic infrastructure framework for everybody! Distribute the workload of many different scanning tools with ease, including nmap, ffuf, masscan, nuclei, meg and many more!

homer. A very simple static homepage for your server.

passbolt_api. Passbolt Community Edition (CE) API. The JSON API for the open source password manager for teams!

OnionSearch. OnionSearch is a script that scrapes urls on different .onion search engines.

StratosphereLinuxIPS. Slips, a free software behavioral Python intrusion prevention system (IDS/IPS) that uses machine learning to detect malicious behaviors in the network traffic. Stratosphere Laboratory, AIC, FEL, CVUT in Prague.

gh-workflow-auditor. Script to audit GitHub Action Workflow files for potential vulnerabilities.

upx. UPX - the Ultimate Packer for eXecutables

dvka. Damn Vulnerable Kubernetes App (DVKA) is a series of apps deployed on Kubernetes that are damn vulnerable.

certgen. A dead simple tool to generate self signed certificates for MinIO TLS deployments

CTF. CTF challenge (mostly pwn) files, scripts etc

for-open-source. Get a 1Password team account for free to support your open source initiatives!

lf. Terminal file manager

duckhunt. :dart: Prevent RubberDucky (or other keystroke injection) attacks

virtual-kubelet. Virtual Kubelet is an open source Kubernetes kubelet implementation.

highwayhash. Native Go version of HighwayHash with optimized assembly implementations on Intel and ARM. Able to process over 10 GB/sec on a single core on Intel CPUs - https://en.wikipedia.org/wiki/HighwayHash

certified-operators. Production catalog for Red Hat Certified Operator Bundles

hperf. Distributed HTTP Speed Test.

kubesploit. Kubesploit is a cross-platform post-exploitation HTTP/2 Command & Control server and agent written in Golang, focused on containerized environments.

itc-coding-questions. Go

madmin-go. The MinIO Admin Go Client SDK provides APIs to manage MinIO services

minio-iam-testing. Shell

uuid. Go package for UUIDs based on RFC 4122 and DCE 1.1: Authentication and Security Services.

memguard. Software sandbox for storage of sensitive information in memory.

openapi-fuzzer. Black-box fuzzer that fuzzes APIs based on OpenAPI specification. Find bugs for free!

kalidokit. Blendshape and kinematics calculator for Mediapipe/Tensorflow.js Face, Eyes, Pose, and Finger tracking models.

react-syntax-highlighter. syntax highlighting component for react with prismjs or highlightjs ast using inline styles

kubescape. Kubescape is an open-source Kubernetes security platform for your IDE, CI/CD pipelines, and clusters. It includes risk analysis, security, compliance, and misconfiguration scanning, saving Kubernetes users and administrators precious time, effort, and resources.

tsunami-security-scanner. Tsunami is a general purpose network security scanner with an extensible plugin system for detecting high severity vulnerabilities with high confidence.

pkg. Repository to hold all the common packages imported by MinIO projects

directpv. Kubernetes CSI driver for Direct Attached Storage :minidisc:

krew-index. Plugin index for https://github.com/kubernetes-sigs/krew. This repo is for plugin maintainers.

go-ethereum. Go implementation of the Ethereum protocol

sidekick. High Performance HTTP Sidecar Load Balancer

testssl.sh. Testing TLS/SSL encryption anywhere on any port

locust. Write scalable load tests in plain Python 🚗💨

bottlenet. Find bottlenecks in distributed network

gitignore. A collection of useful .gitignore templates

RustScan. 🤖 The Modern Port Scanner 🤖

kubebuilder. Kubebuilder - SDK for building Kubernetes APIs using CRDs

beautiful-react-diagrams. 💎 A collection of lightweight React components and hooks to build diagrams with ease 💎

prometheus-operator. Prometheus Operator creates/configures/manages Prometheus clusters atop Kubernetes

dmt. Direct MinIO Tunnel

gift. Go Image Filtering Toolkit

project-layout. Standard Go Project Layout

pixel. A hand-crafted 2D game library in Go

enviro-monitor. Indoor/outdoor environmental monitor project for the Enviro+ environmental monitoring board for Raspberry Pi Zero/W

hetty. An HTTP toolkit for security research.

present. A terminal-based presentation tool with colors and effects.

hackaday-u. Course materials for hackaday.io Ghidra training

radare2. UNIX-like reverse engineering framework and command-line toolset

WebKit-http. Deprecated unofficial http mirror of the WebKit SVN repository

gf. A wrapper around grep, to help you grep for things

meg. Fetch many paths for many hosts - without killing the hosts

httprobe. Take a list of domains and probe for working HTTP and HTTPS servers

gobuster. Directory/File, DNS and VHost busting tool written in Go

assetfinder. Find domains and subdomains related to a given domain

scapy. Scapy: the Python-based interactive packet manipulation program & library.

cadvisor. Analyzes resource usage and performance characteristics of running containers.

Findomain. The fastest and complete solution for domain recognition. Supports screenshoting, port scan, HTTP check, data import from other tools, subdomain monitoring, alerts via Discord, Slack and Telegram, multiple API Keys for sources and much more.

selfupdate. Build self-updating Go programs

dns. DNS library in Go

goquery. A little like that j-thing, only in Go.

vault. A tool for secrets management, encryption as a service, and privileged access management

community-operators. The canonical source for Kubernetes Operators that appear on OperatorHub.io, OpenShift Container Platform and OKD.

hyper-scale-tensorflow-with-minio. Hyper-Scale Machine Learning with MinIO and TensorFlow

operator. Simple Kubernetes Operator for MinIO clusters :computer:

minio-go. MinIO Go client SDK for S3 compatible object storage

StartFlagExploit. A local Android DoS Exploit for API 29 and API 30

kubectl. Issue tracker and mirror of kubectl code

kubeletmein. Security testing tool for Kubernetes, abusing kubelet credentials on public cloud providers.

md5-simd. Accelerate aggregated MD5 hashing performance up to 8x for AVX512 and 4x for AVX2. Useful for server applications that need to compute many MD5 sums in parallel.

jwt-go. ARCHIVE - Golang implementation of JSON Web Tokens (JWT). This project is now maintained at:

semgrep. Lightweight static analysis for many languages. Find bug variants with patterns that look like source code.

secure. HTTP middleware for Go that facilitates some quick security wins.

zdns. Fast DNS Lookup Library and CLI Tool

vim-fugitive. fugitive.vim: A Git wrapper so awesome, it should be illegal

YouCompleteMe. A code-completion engine for Vim

vim-go. Go development plugin for Vim

Vundle.vim. Vundle, the plug-in manager for Vim

lightline.vim. A light and configurable statusline/tabline plugin for Vim

vimrc. The ultimate Vim configuration (vimrc)

vim-colors-solarized. precision colorscheme for the vim text editor

vim-plug. :hibiscus: Minimalist Vim Plugin Manager

emotion. 👩‍🎤 CSS-in-JS library designed for high performance style composition

react-diagrams. a super simple, no-nonsense diagramming library written in react that just works

protobuf. Protocol Buffers - Google's data interchange format

go-swagger. Swagger 2.0 implementation for go

multipass. Multipass orchestrates virtual Ubuntu instances

warp. S3 benchmarking tool

redirect. Easily expose ports on live/running containers

cli. 🧰 A zero trust swiss army knife for working with X509, OAuth, JWT, OATH OTP, etc.

bcc. BCC - Tools for BPF-based Linux IO analysis, networking, monitoring, and more

kops. Kubernetes Operations (kOps) - Production Grade k8s Installation, Upgrades and Management

compress. Optimized Go Compression Packages

charts. ⚠️(OBSOLETE) Curated applications for Kubernetes

cert-manager. Automatically provision and manage TLS certificates in Kubernetes

Serverless-Workshop. Serverless Workshop

keywhiz. A system for distributing and managing secrets

auditd. Best Practice Auditd Configuration

clair-scanner. Docker containers vulnerability scan

dive. A tool for exploring each layer in a docker image

dockerscan. The Most Comprehensive Docker Security Scanner

autocert. ⚓ A kubernetes add-on that automatically injects TLS/HTTPS certificates into your containers

HackingNeuralNetworks. A small course on exploiting and defending neural networks

bane. Custom & better AppArmor profile generator for Docker containers.

mkcert. A simple zero-config tool to make locally trusted development certificates with any names you'd like.

bank-vaults. A Vault swiss-army knife: A CLI tool to init, unseal and configure Vault (auth methods, secret engines).

kes. [Deprecated] Key Encryption Server

accounting.js. A lightweight JavaScript library for number, money and currency formatting - fully localisable, zero dependencies.

recharts. Redefined chart library built with React and D3

yara. The pattern matching swiss knife

nebula. A scalable overlay networking tool with a focus on performance, simplicity and security

delve. Delve is a debugger for the Go programming language.

kubernetes. Production-Grade Container Scheduling and Management

client-go. Go client for Kubernetes.

ceryx. Dynamic reverse proxy based on NGINX OpenResty with an API

openresty. High Performance Web Platform Based on Nginx and LuaJIT

go. OpenAPI based generated Go Client for Kubernetes

kind. Kubernetes IN Docker - local clusters for testing Kubernetes

m3. MinIO Kubernetes Cloud

fuzzit. CLI to integrate continuous fuzzing with Fuzzit (no longer available)

minio. MinIO is a high-performance, S3 compatible object store, open sourced under GNU AGPLv3 license.

mc. Unix like utilities for object store

Notes.

pwnjs. A Javascript library for browser exploitation

lazydocker. The lazier way to manage everything docker

gosec. Go security checker

CBM. Car Backdoor Maker

google-ctf. Google CTF

capirca. Multi-platform ACL generation system

todo_redux_to_not. Let's remove Redux from the Redux todo example 😂

API-Security. OWASP API Security Project

BloodHound-Legacy. Six Degrees of Domain Admin

ssrf_filter. A ruby gem for defending against Server Side Request Forgery (SSRF) attacks

GTFOBins.github.io. GTFOBins is a curated list of Unix-like executables that can be used to bypass local security restrictions in misconfigured systems.

evilginx2. Standalone man-in-the-middle attack framework used for phishing login credentials along with session cookies, allowing for the bypass of 2-factor authentication

takeover.sh. Wipe and reinstall a running Linux system via SSH, without rebooting. You know you want to.

ghidra. Ghidra is a software reverse engineering (SRE) framework

system-design-primer. Learn how to design large-scale systems. Prep for the system design interview. Includes Anki flashcards.

exploit-exercises. Mirror for exploit-exercises.com

LinEnum. Scripted Local Linux Enumeration & Privilege Escalation Checks

ohmyzsh. 🙃 A delightful community-driven (with 2,500+ contributors) framework for managing your zsh configuration. Includes 300+ optional plugins (rails, git, macOS, hub, docker, homebrew, node, php, python, etc), 140+ themes to spice up your morning, and an auto-update tool that makes it easy to keep up with the latest updates from the community.

migrate. Database migrations. CLI and Golang library.

tweepy. Twitter for Python!

golang-webapp. Write a Web App in Go.

assembly-intro. Intro to x86 Assembly Language.

accesscontrol. Role and Attribute based Access Control for Node.js

node_acl. Access control lists for node applications

retire.js. scanner detecting the use of JavaScript libraries with known vulnerabilities. Can also generate an SBOM of the libraries it finds.

meltdown. This repository contains several applications, demonstrating the Meltdown bug.

meltdown-poc. A quick PoC to try out the "meltdown" timing attack.

dotenv. Loads environment variables from .env for nodejs projects.