jumpserver / jumpserver
JumpServer is an Open-source Privileged Access Management (PAM) platform with AI-powered capabilities, providing DevOps and IT teams a unified workspace to securely access SSH, RDP, Kubernetes, databases, websites, RemoteApp, VirtualApp, and more.
frappe / builder
Craft beautiful websites effortlessly with an intuitive visual builder and publish them instantly
selkies-project / selkies
Low-Latency Accelerated Web Remote Desktop Streaming Platform for Self-Hosting, Containers, Kubernetes, or Cloud/HPC
OpenAdaptAI / OpenAdapt
For EHRs, payer portals, and any app your team clicks through. A person or an agent shows the task; OpenAdapt turns it into a local program that repeats the steps with no model calls, checks each save, and stops when something doesn't match.
jimmy201602 / webterminal
ssh rdp vnc telnet sftp bastion/jump web putty xshell terminal jumpserver database audit realtime monitor rz/sz 堡垒机 云桌面 linux devops sftp websocket file management rz/sz otp 自动化运维 审计 录像 文件管理 sftp上传 实时监控 录像回放 网页版rz/sz上传下载/动态口令 go
topscoder / nuclei-wordfence-cve
80k+ WordPress Nuclei templates, updated daily from Wordfence intel—filter by severity/tags/CVE and scan in one line. 🚀🔒
7h30th3r0n3 / Raspyjack
Small offensive network toolkit for Raspberry Pi (+ Waveshare 1.44″ LCD HAT) and Cardputer Zero inspired by pager and sharkjack fonctionnalities. For redteam and educational purposes only.
nextcord / nextcord
A Python wrapper for the Discord API forked from discord.py
Env-Kit / envkit-releases
EnvKit — free local development environment for Windows & macOS: nginx/Apache, multiple PHP versions, MySQL/MariaDB, PostgreSQL, Redis, MongoDB, Mailpit, Node.js, trusted .test HTTPS, and a built-in MCP server for AI-assistant control. A Laragon/XAMPP/Herd alternative.
WordPress / library
Our book about WordPress. Volume 1, first ten years
TidyFactor / Styler
Production-Stage Visual Design & In-Codebase UI Engineering Suite
DeathShotXD / Comment2Shell
Comment2Shell is a zero click pre auth RCE exploit for WordPress CVE-2026-93485. An anonymous comment plants stored XSS that fires when an admin views the post and drops a self deleting webshell. Full chain PoC with scanner interactive shell Nuclei template and Docker
Boreas37 / CVE-2026-64638-PoC-XSS2Shell-
XSS2Shell (CVE-2026-64638) WordPress pre-auth XSS to RCE chain — PoC exploit + defensive audit tool + nuclei template
XuanRanL / loamwright-SEO-Skill
Production-grade SEO + GEO content factory for Claude Code — research, write, fact-check, optimize, publish to WordPress, monitor. Battle-tested by Loamwright 沃匠 SEO agency.
ressl / cve-2026-87902-poc
PoC for CVE-2026-87902 — unauthenticated path traversal in WordPress page-template resolution (local PHP inclusion, conditional RCE) with a pinned vulnerable lab
Artem76228 / PaperOS
A whole little OS for the M5Stack Cardputer - launcher, file manager, paint, browser, offline AI, game emulator, Lua scripting, and more.
abraxas / CVE-2026-87902
CVE-2026-87902 - WordPress - WordPress Core - Critical 9.2 - Unauthenticated Local File Inclusion (conditional RCE)
Mohamed-Elgaraihy / Modawen_Agent-For-Wordpress
Modawen Agent for WordPress is a completely autonomous, AI-powered multi-agent SaaS that researches live trends, writes deep-dive SEO-optimized articles, manages your WordPress site, and generates viral social media marketing entirely on autopilot.
ivanusto / changming-serif-tc
ChangMing Serif TC: a humanist serif webfont for Traditional Chinese, built on Noto Serif TC with softened serifs, rounded turns and lower stroke contrast. Covers Taiwanese Hokkien and Hakka characters and romanization. Sliced unicode-range web kit, TTF/WOFF2 and a WordPress plugin. 昌明體：以思源明體為骨架的繁體中文人文明體，涵蓋台語、客語用字，提供分片網頁字型、TTF／WOFF2 與 WordPress 外掛。