eness / php2shell-CVE-2026-109618-CVE-2026-109619-PoC

Proof-of-Concept (PoC) exploit for php2shell (CVE-2026-109618 / CVE-2026-109619), demonstrating remote code execution in vulnerable PHP environments. For security research and educational purposes only.

omacom / omarchy

Beautiful, Modern & Opinionated Linux

sno-ai / sno-station-skills

Sno Station Skills: 31 tested skills that turn Claude Code and Codex into one working team. Cross-vendor peer review, automatic handoff when an agent hits its quota, a one-page morning brief, work orders with proof, and a nightly loop that learns from your own sessions. Open source, installed with one sno setup.

kunchenguid / firstmate

Talk to one agent. Ship with a crew.

rawfilejson / awesome-osint-arsenal

OSINT & recon toolkit // 100+ tools, one-command installer, SOCMINT, GEOINT, network recon, dark web, forensics & more.

papers-we-love / papers-we-love

Papers from the computer science community to read and discuss.

modelsphere / modelsphere

ModelSphere is an open-source LLM inference infrastructure designed to make production-grade model serving simple, efficient, and continuously optimized.

seacen / meetcap

Powerful, free, context-aware AI native meeting assistant that transcribes real-time and locally on your computer, writes the minutes, and lets your AI agent drive it.

free-dam-man / homeline-residential-exit-skill

—

justxor / deepseek-local-guide-ru

🐋 Полный гайд на русском: как установить и запустить DeepSeek локально (V4, R1) на ПК, Mac и сервере — Ollama, llama.cpp, LM Studio, vLLM, Open WebUI, API, RAG, агенты, fine-tuning, лучшие фишки

233boy / sing-box

最好用的 sing-box 一键安装脚本 & 管理脚本，自动创建 REALITY 协议；支持 TUIC，Trojan，Hysteria2 等所有常见的协议

SimoneAvogadro / android-reverse-engineering-skill

Claude Code skill to support Android app's reverse engineering

free-dam-man / cf-global-edge-node-skill

—

t4t5 / bitcoin-0.1-rebuilt

the original bitcoin executable, rebuilt byte for byte

ohmyzsh / ohmyzsh

🙃 A delightful community-driven (with 2,500+ contributors) framework for managing your zsh configuration. Includes 300+ optional plugins (rails, git, macOS, hub, docker, homebrew, node, php, python, etc), 140+ themes to spice up your morning, and an auto-update tool that makes it easy to keep up with the latest updates from the community.

PaperMC / Folia

Fork of Paper which adds regionised multithreading to the dedicated server.

liandu2024 / Open-Box

Open-Box 一体化透明代理：OpenWrt / Debian / Ubuntu / Docker；自有程序闭源，第三方组件遵守原许可。

Anton-Barinov / php2shell-patches

php2shell (CVE-2026-109618 & CVE-2026-109619) security patches for EOL PHP 5.4–8.1. Official & enhanced backports for vanilla php.net and Remi Collet trees. Restores safe file uploads & progress bars without RCE. Fleet-tested on OpenCart, WordPress, HestiaCP, aaPanel.

VSCodium / vscodium

binary releases of VS Code without MS branding/telemetry/licensing

bin456789 / reinstall

一键DD/重装脚本 (One-click reinstall OS on VPS)

cschalle / hw-harness

Small set of tools for helping with reverse engineering Linux drivers

Steam-Headless / docker-steam-headless

A Headless Steam Docker image supporting NVIDIA GPU and accessible via Web UI

SpotX-Official / SpotX-Bash

SpotX Mac and Linux adblocker for the Spotify desktop client, in Bash

fossaryhq / catalog

Public catalog of self-hosted applications with reviewed Docker Compose recipes

pingmike2 / instabox-keepalive

用 activity lease 让 InstaBox 云机器不被 30 分钟空闲休眠带走：纯 POSIX sh 一条命令安装（systemd/OpenRC/cron 自动适配），另附 Cloudflare Worker 版

Wangnov / codex-app-mirror

原样镜像官方 Codex 桌面应用:每 15 分钟探测、SHA256 可校验、国内直连下载、 Mac 可增量更新 | Verbatim, verifiable mirror of the official Codex desktop app — probed every 15 min, with a Sparkle delta-update feed.

jqssun / android-titanium-browser

Secure open-source Android browser with support for extensions

yonggekkk / sing-box-yg

Sing-box精装桶五合一协议VPS专用脚本：三大独家功能！自签/acme双证书切换、Argo固定临时双隧道（可共存）、Psiphon赛风VPN（30个国家）分流功能、本地IP订阅生成

free-nodes / vpn

快速搭建个人VPN/科学上网/翻墙/教程/ssr/ss/bbr/梯子搭建/自建机场/自由上网/代理服务/VPN最新教程

six2dez / reconftw

reconFTW is a tool designed to perform automated recon on a target domain by running the best set of tools to perform scanning and finding out vulnerabilities

LongQT-sea / macos-iso-builder

Generate bootable macOS installer ISO or DMG images directly from Apple servers via GitHub Actions - no Mac required. Mac OS X 10.7 - macOS 26 Tahoe

peonist-ai / halogen-flash-server

The fastest way to run Qwen3.8-Flash-Next on Strix Halo (gfx1151)

edoardottt / awesome-hacker-search-engines

A curated list of awesome search engines useful during Penetration testing, Vulnerability assessments, Red/Blue Team operations, Bug Bounty and more

fscarmen / sing-box

Sing-box 全家桶 --- 一键多协议脚本。支持 Reality、Hysteria2 、TUIC 、Trojan 、Shadowsocks 、 AnyTLS 、ShadowTLS 、 Vmess 、 VLESS 、NaiveProxy，搭配 Argo 隧道等，多客户端订阅（Clash / V2rayN / Throne / ShadowRocket / SFA ），无须域名、功能强大、配置灵活。

InfinityLoop1308 / PipePipe

An open-source Android app to let you browse YouTube and other services freely.

hwdsl2 / setup-ipsec-vpn

Set up your own IPsec VPN server in just a few minutes, with IPsec/L2TP, Cisco IPsec and IKEv2. Supports Ubuntu, Debian, CentOS/RHEL, Alpine Linux and Raspberry Pi OS. Includes client config and management scripts.

kejilion / sh

KEJILION.SH 一款全功能的Linux管理脚本！An all-in-one Linux management script!

theorem-labs / oss-verify

OSS Verify: enrollment and build instructions for formally verifying open-source fuzz targets

google / oss-fuzz

OSS-Fuzz - continuous fuzzing for open source software.

nagi-studio / skills

《Re:从零开始的AI学习》配套 skills，每个 skill 有一期视频讲为什么。Companion skills for the Bilibili series.

macnative / electron-detector

Find which of your Mac apps are secretly Electron. Zero-dependency Bash scanner with sizes, versions, and native alternatives.

linux-surface / linux-surface

Linux Kernel for Surface Devices

docker-mailserver / docker-mailserver

Production-ready fullstack but simple mail server (SMTP, IMAP, LDAP, Antispam, Antivirus, etc.) running inside a container.

CachyOS / linux-cachyos

Archlinux Kernel based on different schedulers and some other performance improvements.

serversideup / docker-php

🐳 Production-ready Docker images for PHP. Optimized for Laravel, WordPress, and more!

Astrosp / Awesome-OSINT-List

📡 Comprehensive collection of OSINT tools for cybersecurity professionals, researchers, and bug bounty hunters. Topics: information gathering, reverse search, red team, trust & safety, AI.

vukkt / iglass

A Liquid Glass–inspired theme for iTerm2, Ghostty, kitty and Warp, on macOS and Linux. Real Liquid Glass in Ghostty on macOS 26+; contrast-checked, light/dark, fully reversible.

robbraxman / readylinux

This is a script to correct the common usability issues in Linux and will improve the Linux desktop experience for both new and advanced users. This will be a community effort and a work in progress.

themactep / thingino-firmware

Open-source firmware for Ingenic SoC IP cameras

alibaba / last-secure-code-benchmark

—

Alvin9999-newpac / fanqiang

免费翻墙、免费科学上网、翻墙翻墙、科学上网、Mac/iOS/安卓翻墙、翻墙翻墙、自由上网、 一键翻墙浏览器、免费shadowsocks/ss/ssr/v2ray/hysteria/hysteria2/vmess/vless/reality/goflyway账号/节点、fanqiang、翻墙翻墙、科学上网、翻墙翻墙翻墙翻墙翻墙翻墙翻墙、 翻墙科学上网翻墙科学上网翻墙科学上网翻墙科学上网翻墙科学上网 翻墙科学上网翻墙科学上网翻墙科学上网翻墙科学上网翻墙科学上网 翻墙科学上网翻墙科学上网翻墙科学上网翻墙科学上网翻墙科学上网 翻墙科学上网翻墙科学上网翻墙科学上网翻墙科学上网翻墙科学上网 翻墙科学上网翻墙科学上网翻墙科学上网翻墙科学上网翻墙科学上网翻墙科学上网翻墙科学上网翻墙科学上网翻墙翻墙翻墙翻墙

IceWhaleTech / ZimaOS

A Simplified, Focused and Open NAS OS_

shibco / ableton-linux

Run Ableton 12 and Push on Linux

mack-a / v2ray-agent

Xray、Tuic、hysteria2、sing-box 八合一一键脚本

termux / termux-packages

A package build system for Termux.

LukeZGD / Legacy-iOS-Kit

An all-in-one tool to restore/downgrade, save SHSH blobs, jailbreak legacy iOS devices, and more

vercel-labs / web-interface-guidelines

Guidelines for building interfaces on the Web.

Niek / php7

PHP 7.4 security-backport packages for older Ubuntu and Debian releases

StressOzz / Zapret-Manager

Универсальный менеджер для обхода блокировок на OpenWrt

yetone / magpie-releases

Signed builds of magpie