Michael Scott

codesearch. Fast, indexed regexp search over large file trees

nano-analyzer. A minimal LLM-powered zero-day vulnerability scanner by AISLE.

provenance-cli. CLI tool for software supply chain intelligence. Queries the NetRise Provenance API to assess package risk across SBOMs, OCI containers, and individual packages. Evaluates contributor security, repo health, advisory exposure, and geo-compliance via a YAML policy engine with CI/CD-native exit codes. Outputs human tables, JSON, or SARIF.

OpenGauss. Python

saas-starter. Get started quickly with Next.js, Postgres, Stripe, and shadcn/ui.

courses. Anthropic's educational courses

turborepo-shadcn-ui. Turborepo starter with shadcn/ui pre-configured.

ElfHacks. Dive into ELF files using simple self-contained examples

professional-programming. A collection of learning resources for curious software engineers

RL-book. Python

go-concurrency-guide. Practical concurrency guide in Go, communication by channels, patterns

ml-study-plan. The Ultimate FREE Machine Learning Study Plan

gopher-reading-list. A curated selection of blog posts on Go

ddd-starter-modelling-process. If you're new to DDD and not sure where to start, this process will guide you step-by-step

consul-canary-deployment. Example showing how to do automated canary deployments with Consul and Flagger

linux_kernel_hacking. Linux Kernel Hacking

jsend. JSend is a specification for a simple, no-frills, JSON based format for application-level communication.

Posh-ACME. PowerShell module and ACME client to create certificates from Let's Encrypt (or other ACME CA)

svu. semantic version utility

Reverse-Engineering. A FREE comprehensive reverse engineering tutorial covering x86, x64, 32-bit/64-bit ARM, 8-bit AVR and 32-bit RISC-V architectures.

gotraining. Go Training Class Material :

contained.af. A stupid game for learning about containers, capabilities, and syscalls.

Projects. Projects released by the Team

Labeled-Elfs. A collection of well labeled ELF binaries compiled from benign and malicious code in various ways. Great for exploring similarity in executables and training various ML models.

sampleproject. A sample project that exists for PyPUG's "Tutorial on Packaging and Distributing Projects"

sysmon-modular. A repository of sysmon configuration modules

Microsoft-365-Defender-Hunting-Queries. Sample queries for Advanced hunting in Microsoft 365 Defender

nodebestpractices. ✅ The Node.js best practices list (July 2026)

learn-go-with-tests. Learn Go with test-driven development

google-images-download. Python Script to download hundreds of images from 'Google Images'. It is a ready-to-run code!

awesome-web-security. 🐶 A curated list of Web Security materials and resources.

awesome-python. An opinionated list of Python frameworks, libraries, tools, and resources

xss_payloads. Exploitation for XSS