Wenyuan Xu

Spiritual-Spell-Red-Teaming. A repo for jailbreaking various LLMs, mainly Claude

codex-redteam-mode. 针对于红队攻击思维做出的red team模式(破限项目，封号概不负责）##可自行适配其他Agent。项目问题请提issue

AgentGuide. https://adongwanai.github.io/AgentGuide | AI Agent开发指南 | LangGraph实战 | 高级RAG | 转行大模型 | 大模型面试 | 算法工程师 | 面试题库 | 强化学习｜数据合成

IPQuality. IP质量检测脚本 - IP Quality Check Script

TinyButler. Rust

Supervisor-Skills. 将博导十年科研经验炼化为可直接调用的 AI 技能。从 Idea 构思到论文投稿，你的 AI 科研副导师。

rebased. A git client based on the IntelliJ platform

rmkit. reMarkable 平板的中文化 / AI / 拼音 IME / 扩展工具集 (xovi + qmldiff)

OpenShell. OpenShell is the safe, private runtime for autonomous AI agents.

RTranslator. Open source real-time translation app for Android that runs locally

sherpa-onnx. Speech-to-text, text-to-speech, speaker diarization, speech enhancement, source separation, and VAD using next-gen Kaldi with onnxruntime without Internet connection. Support embedded systems, Android, iOS, HarmonyOS, Raspberry Pi, RISC-V, RK NPU, Axera NPU, Ascend NPU, x86_64 servers, websocket server/client, support 12 programming languages

TMSpeech. 腾讯会议摸鱼工具

kmonad. An advanced keyboard manager

Agent-Reach. Give your AI agent eyes to see the entire internet. Read & search Twitter, Reddit, YouTube, GitHub, Bilibili, XiaoHongShu — one CLI, zero API fees.

fara. Fara1.5 – A family of frontier computer use agent models

autoresearch. AI agents running research on single-GPU nanochat training automatically

awesome-ai-research-writing. Elevate your AI research writing, no more tedious polishing ✨

AI-Research-SKILLs. Comprehensive open-source library of AI research and engineering skills for any AI model. Package the skills and your claude code/codex/gemini agent will be an AI research agent with full horsepower. Maintained by Orchestra Research.

SuperCmd. Powerful MacOS Launcher

MinerU. Transforms complex documents like PDFs and Office docs into LLM-ready markdown/JSON for your Agentic workflows.

qmd. mini cli search engine for your docs, knowledge bases, meeting notes, whatever. Tracking current sota approaches while being all local

nooxy. Zero dependency Notion proxy (reverse) for custom domains with seamless in-domain navigation for inner Notion pages, complete HTML/CSS/JS and MetaData customization, CLI tools, local development, multi-instance support, and edge performance. Transform Notion pages into professional websites

go-file. 基于 Go 的文件分享工具，仅单可执行文件，开箱即用，内置图床和视频播放页面. File sharing tool based on Go.

WritingAIPaper. Writing AI Conference Papers: A Handbook for Beginners

universal-skills. Shell

kanata. Improve keyboard comfort and usability with advanced customization

sqlite3-editor. TypeScript

haiku.rag. Opinionated agentic RAG powered by LanceDB, Pydantic AI, and Docling

garak. the LLM vulnerability scanner

rift. a tiling window manager for macos

z3-noodler. The Z3-Noodler String Solver

claude-code-security-review. An AI-powered security review GitHub Action using Claude to analyze code changes for security vulnerabilities.

headscale. An open source, self-hosted implementation of the Tailscale control server

firecracker. Secure and fast microVMs for serverless computing.

ipatool. Command-line tool that allows searching and downloading app packages (known as ipa files) from the iOS App Store

Easydict. 一个简洁优雅的词典翻译 macOS App。开箱即用，支持离线 OCR 识别，支持有道词典，🍎 苹果系统词典，🍎 苹果系统翻译，OpenAI，Gemini，DeepL，Google，Bing，腾讯，百度，阿里，小牛，彩云和火山翻译。A concise and elegant Dictionary and Translator macOS App for looking up words and translating text.

srcML. srcML Toolkit

WeClone. 🚀 One-stop solution for creating your AI twin from chat history 💡 Fine-tune LLMs with your chat logs to capture your unique style, then bind to a chatbot to bring your digital self to life.

bass. Make Bash utilities usable in Fish shell

malicious-software-packages-dataset. An open-source dataset of malicious software packages found in the wild, 100% vetted by humans.

RIME-LMDG. 简繁扩展词库/声调编码/最全声调标注工具链/万象更新工具链/Rime语法模型：LMDG - Language, Model, Dictionary, Grammar。没错这里是万象拼音的“罗马帝国”!

PLCT-Open-Reports. PLCT实验室的公开演讲，或者决定公开的组内报告

HassLife. 天猫精灵、小爱同学、小度音箱控制HomeAssistant设备和属性上报查询

tmall-bot-x1. 天猫精灵智能家居技能对接homeassistant

alfred-dblp-search. DBLP search Alfred workflow

CodeQL-Community-Packs. Collection of community-driven CodeQL query, library and extension packs

codemod. codemod rewrites JavaScript and TypeScript using babel plugins.

SpotveeC. Compiled EeveeSpotify IPA's.

webcrack. Deobfuscate obfuscator.io, unminify and unpack bundled javascript

online-tools. Online tools provides md2, md5, sha1, sha2, sha512, bas64, html encode / decode functions

svelte-jsoneditor. A web-based tool to view, edit, format, repair, query, transform, and validate JSON

SpotX-Bash. SpotX Mac and Linux adblocker for the Spotify desktop client, in Bash

Nice2Predict. Learning framework for program property prediction

UnuglifyJS. A simpler open-source version of JavaScript deobfuscator JSNice

Ventoy. A new bootable USB solution.

ZhiBot. Uniform Bot Platform for HomeAssistant

ExpoSE. A Dynamic Symbolic Execution (DSE) engine for JavaScript. ExpoSE is highly scalable, compatible with recent JavaScript standards, and supports symbolic modelling of strings and regular expressions.

observable-membrane. A Javascript Membrane implementation using Proxies to observe mutation on an object graph

jazzer. Coverage-guided, in-process fuzzing for the JVM

jazzer.js. Coverage-guided, in-process fuzzing for Node.js

boogie. Boogie

telegram-phone-number-checker. Check if phone numbers are connected to Telegram accounts.

compiler-explorer. Run compilers interactively from your web browser and interact with the assembly

medium-unlocker. Read Medium content without limit!

graphjs. MDG-based static vulnerability scanner specialized in analyzing npm packages and detecting taint-style and prototype pollution vulnerabilities.

Dasty. Performant prototype pollution gadgets detection tool for Node.js applications.

VulChecker. A deep learning model for localizing bugs in C/C++ source code (USENIX'23)

FastGPT. FastGPT is a knowledge-based platform built on the LLMs, offers a comprehensive suite of out-of-the-box capabilities such as data processing, RAG retrieval, and visual AI workflow orchestration, letting you easily develop and deploy complex question-answering systems without the need for extensive setup or configuration.

cve-rs. Blazingly 🔥 fast 🚀 memory vulnerabilities, written in 100% safe Rust. 🦀

graph-of-thoughts. Official Implementation of "Graph of Thoughts: Solving Elaborate Problems with Large Language Models"

code. JavaScript

gdlog. Cuda

iRime. iRime

Hamster. librime for iOS App

AppFlowy. Bring projects, wikis, and teams together with AI. AppFlowy is the AI collaborative workspace where you achieve more without losing control of your data. The leading open source Notion alternative.

weggli. weggli is a fast and robust semantic search tool for C and C++ codebases. It is designed to help security researchers identify interesting functionality in large codebases.

ts-node. TypeScript execution and REPL for node.js

hw2023-bigbang. HW2023中安全厂和超级大厂的大爆炸

monitor. Distributed advertisement-based BTLE presence detection reported via mqtt

autogen. A programming framework for agentic AI

OSSGadget. Collection of tools for analyzing open source packages.

SecBooks. 安全类各家文库大乱斗

MobileSec. 记录一些我自己在学习Android逆向过程中的有意思的东西

flowistry. Flowistry is an IDE plugin for Rust that helps you focus on relevant code.

Tai-e. An easy-to-learn/use static analysis framework for Java and Android

rustdesk. An open-source remote desktop application designed for self-hosting, as an alternative to TeamViewer.

trojan-go. 使用最新的uTLS来缓解GFW自2022年10月3日以来的大规模封锁。 Use the latest uTLS library to mitigate the GFW's large scale blocking since October 3, 2022.

live-captioning. Live caption with speech-to-text using the Chrome browser and your computer's microphone.

guidance. A guidance language for controlling large language models.

HEU_KMS_Activator.

WindowsSimplify. Windows Simplify Project

starcoder. Home of StarCoder: fine-tuning & inference!

programming-dp. Jupyter Notebook

latex-diff. Diff latex-based project

chatgpt-chrome-extension. A ChatGPT Chrome extension. Integrates ChatGPT into every text box on the internet.

iPhone-SSH-Backdoor. This is a shell script that creates an SSH backdoor on an iPhone.

vimr. VimR — Neovim GUI for macOS in Swift

MiniGPT-4. Open-sourced codes for MiniGPT-4 and MiniGPT-v2 (https://minigpt-4.github.io, https://minigpt-v2.github.io/)

Awesome-LLM. Awesome-LLM: a curated list of Large Language Model

ml4se. A curated list of papers, theses, datasets, and tools related to the application of Machine Learning for Software Engineering

cloudgpt. Vulnerability scanner for AWS customer managed policies using ChatGPT

ChatGPT. Reverse engineered ChatGPT API

oh-my-rime. The Simple Config Template Of Rime By Mintimate.

node-semver. The semver parser for node (the one npm uses)

DeepSpeed. DeepSpeed is a deep learning optimization library that makes distributed training and inference easy, efficient, and effective.

GenSym. A high-performance, parallel, compilation-based symbolic execution engine

tmux-mem-cpu-load. CPU, RAM, and load monitor for use with tmux

WCPotatso. iOS Potatso源码(配置下自己的开发证书就能编译版本)

ShadowCoel. ShadowCoel is a ss/ssr client based on Potatso

Potatso. Potatso is an iOS client that implements Shadowsocks proxy with the leverage of NetworkExtension framework. ***This project is unmaintained, try taking a look at this fork https://github.com/shadowcoel/shadowcoel instead.

ChatPaper. Use ChatGPT to summarize the arXiv papers. 全流程加速科研，利用chatgpt进行论文全文总结+专业翻译+润色+审稿+审稿回复

AI-Papers-of-the-Week. 🔥Highlighting the top ML papers every week.

ml-stable-diffusion. Stable Diffusion with Core ML on Apple Silicon

langchain. The agent engineering platform.

ColossalAI. Making large AI models cheaper, faster and more accessible

dolly. Databricks’ Dolly, a large language model trained on the Databricks Machine Learning Platform

llama. Inference code for Llama models

dl4math. Resources of deep learning for mathematical reasoning (DL4MATH).

Troupe. Troupe programming language

alacritty. A cross-platform, OpenGL terminal emulator.

pinduoduo_backdoor. 拼多多apk内嵌提权代码，及动态下发dex分析

jelly. JavaScript/TypeScript static analyzer for call graph construction, library usage pattern matching, and vulnerability exposure analysis

peda. PEDA - Python Exploit Development Assistance for GDB

ROP_STEP_BY_STEP. 一步一步学ROP

cloudreve. 🌩 Self-hosted file management and sharing system, supports multiple storage providers

NeteaseReverseLadder. Play your favorite songs in Netease Cloud Music that are banned outside Mainland China. 解除网易云音乐海外播放限制。

zotero-pdf-translate. Translate PDF, EPub, webpage, metadata, annotations, notes to the target language. Support 20+ translate services.

companies-hiring-security-remote. This repo is meant to be a list of companies that hire security people full remote.

java-airplay. Java

stacktrace.js. Generate, parse, and enhance JavaScript stack traces in all web browsers

sync-request. Make synchronous web requests with cross platform support.

o-mvll. :electron: O-MVLL is a code obfuscation tool based on LLVM for native code (Android and iOS).

func-loc. A simple tool that helps you to retrieve the function location from its reference.

graalvm-ce-builds. GraalVM CE binaires built by the GraalVM community

graalvm-ce-dev-builds. GraalVM Dev Build Downloads

js-introspection. CodeQL

CodeInspector. 基于Java ASM技术和GadgetInspector的原理，尝试实现一个自动Java代码审计工具。目前做到了可控参数分析和数据流跟踪分析

v8_inspector_example. V8 Inspector example

licca. LICCA (Language Independent Code Clone Analyzer) demo

PlotNeuralNet. Latex code for making neural networks diagrams

registry. npm registry documentation

ai-deadlines. :alarm_clock: AI conference deadline countdowns

vim-codefmt. Vim plugin for syntax-aware code formatting

cytoscape-no-overlap. cytoscape extension to help prevent ovelap of nodes on dragging

graal. GraalVM compiles applications into native executables that start instantly, scale fast, and use fewer compute resources 🚀

v8. The official mirror of the V8 Git repository

flast. Provides a flat Abstract Syntax Tree and an Arborist to trim and modify the tree

obfuscation-detector. Detect different types of JS obfuscation by their AST structure

javascript-obfuscator. A powerful obfuscator for JavaScript and Node.js

MSRC-Security-Research. Security Research from the Microsoft Security Response Center (MSRC)

lightsocks-python. ⚡️一个轻巧的网络混淆代理🌏

lightsocks-androidx. 你也可以做个Shadowsocks(Android篇)

paper2gui. Convert AI papers to GUI，Make it easy and convenient for everyone to use artificial intelligence technology。让每个人都简单方便的使用前沿人工智能技术

jaro-winkler-JS. A JS implementation of the Jaro-Winkler string similarity algorithm.

all-the-package-names. 🔤 A list of all the public package names on npm. Updated daily.

all-the-package-repos. 🌍 Normalized repository URLs for every package in the npm registry. Updated daily.

DefinitelyTyped. The repository for high quality TypeScript type definitions.

Wechat_0day. JavaScript

javascript-deobfuscator. General purpose JavaScript deobfuscator

How-to-create-a-csgo-cheating-program. CSGO游戏透视自瞄辅助实现教程

NeteaseMusicAbroad. Unblock regional restrictions for NeteaseCloudMusic on macOS/Linux. 网易云音乐macOS/Linux解除歌曲锁区限制。

academicpages.github.io. Github Pages template based upon HTML and Markdown for personal, portfolio-based websites.

redex. A bytecode optimizer for Android apps

awesome-websocket-security. Awesome information for WebSockets security research

just-the-docs. A modern, high customizable, responsive Jekyll theme for documentation with built-in search.

Iroh. Dynamic code analysis tool - Exploit, record and analyze running JavaScript

scan4all. Official repository vuls Scan: 15000+PoCs; 23 kinds of application password crack; 7000+Web fingerprints; 146 protocols and 90000+ rules Port scanning; Fuzz, HW, awesome BugBounty( ͡° ͜ʖ ͡°)...

hexo-theme-fluid. :ocean: 一款 Material Design 风格的 Hexo 主题 / An elegant Material-Design theme for Hexo

Scrapy-CVE-CNVD. 漏洞监控，基于scrapy，scrapy-redis，获取每日最新的CVE和CNVD漏洞，邮件通知

nodejsscan. nodejsscan is a static security code scanner for Node.js applications.

cyberowl. Aggregates security advisories from 10 international CERTs daily and provides an AI skill that cross-references alerts against your project's tech stack.

HyperDbg. State-of-the-art native debugging tools

Scanners-Box. A powerful and open-source toolkit for hackers and security automation - 安全行业从业者自研开源扫描器合辑

Java-WebSocket. A barebones WebSocket client and server implementation written in 100% Java.

p2p. 🖥️ P2P Remote Desktop - Portable peer-to-peer remote desktop with no installation required.

cellift-meta. All the tools you need to reproduce the CellIFT paper experiments

context-sensitive-reachability. Indexing reachability for context-sensitive data flow analysis.

learning-real-bug-detector. Python

extensiondeltas. JavaScript

JaSt. Syntactic detection of malicious (obfuscated) JavaScript files

augur. Performant taint analysis for Node.js

follina.py. POC to replicate the full 'Follina' Office RCE vulnerability for testing purposes

Static-Analysis-and-Automated-Code-Audit. 静态分析及代码审计自动化相关资料收集

Qilin. Qilin: A New Framework for Supporting Fine-Grained Context-Sensitivity in Java Pointer Analysis

cloud-middleware-dataset.

ivy. Convert Machine Learning Code Between Frameworks

PolyCruise. A Cross-Language Dynamic Information Flow Analysis.

issta2020. This repository contains materials related to our DeepSQLi paper published in ISSTA 2020.

rivulet. RIVULET is a system for detecting code injection vulnerabilities in Java web applications by combining existing JUnit tests with dynamic taint tracking and input generation

malicious-updates-icse2021. C++

VulCNN. C++

public-apis. A collective list of free APIs

DouZero_For_HLDDZ_FullAuto. 将DouZero用于欢乐斗地主自动化

weather-action. Github action自动化每天早上自动推送新闻简报 配合快捷指令使用https://www.icloud.com/shortcuts/85a83cbaff524a338d129e0d262704f3

TestabilityTarpits. Testability Tarpits: the Impact of Code Patterns on the Security Testing of Web Applications (NDSS 2022)

pyscript. An open source platform for Python in the browser. https://pyscript.net Docs: https://docs.pyscript.net/ Try it: https://pyscript.com/ Community: https://discord.gg/HxvBtukrg2

visiblev8. A instrumented variant of the V8 JavaScript Engine

rust-mir-checker. Rust

de4js. JavaScript Deobfuscator and Unpacker

amalfi-artifact. Artifact accompanying our ICSE '22 paper "Practical Automated Detection of Malicious npm Packages"