ikow / php2shell-poc
CVE-2026-109618/109619 — 5 RCE chains + detection rules (Suricata, Sigma, ModSecurity). PHP session.upload_progress pre-auth exploit research.
ikow / php2shell-poc
southroadball / Hwid-Spoofer
Complete standalone setup for Hwid Spoofer Free, a professional desktop utility configuration, ready to run and activate with all features.
evren-oct / vigil-watt
Windows 无线外设电量监控 —— 蓝牙耳机、2.4G 键鼠手柄。桌面小组件、任务栏 显示 Unified battery level indicators for 2.4GHz mice, headsets and Bluetooth devices in the Windows tray
MODSetter / SurfSense
Air-gapped, privacy-focused, open-source NotebookLM alternative. AI agent that researches, transforms, and edits your documents. Join our Discord: https://discord.gg/ejRNvftDp9
liustack / modsearch
🥇 The strongest free web search plugin for DeepSeek Harness, and the search bridge for every model without native web access. Free, no signup, no API key. Ask the web or X, get structured JSON evidence. | 🥇 全网最强的 DeepSeek Harness 免费联网搜索插件，免费免注册免 API key。为不能联网的模型补上搜索，问网页或 X，拿回结构化 JSON 证据（搜索、抓取、引用）。
crowdsecurity / crowdsec
Open-source IDS/IPS, WAF and bot detection for Linux, Windows, Docker and Kubernetes, with a crowdsourced blocklist of malicious IPs.
goodseafly / how-to-make-work-pay
教你把工资、加班费和没休完的年假一分不少地要回来，社保断了怎么接、工伤生育怎么办；被针对、被调岗、被裁时知道怎么走、怎么不留尾巴。576 条建议，每条写明花掉什么、换回什么、证据有多硬，来源只引官方文件原文和研究文献。
corazawaf / coraza
OWASP Coraza WAF is a golang modsecurity compatible web application firewall library
CluvexStudio / ZedSecure
Multi-core VPN client for Android and desktop: Xray, sing-box, Psiphon, Tor, DNS tunnels, WireGuard/AmneziaWG, OpenConnect, IKEv2
DedSecInside / TorBot
Dark Web OSINT Tool
Ozark-Connect / NetworkOptimizer
Self-hosted optimization, monitoring (NMS), and security audit tool for UniFi Networks. Includes Wi-Fi Optimizer for wireless health scoring and channel optimization, advanced DNS/VLAN/firewall security checks, config optimization suggestions, centralized WAN and LAN speed test server w/ L2 tracing, CM, ONT, SFP, 5G modem stats +more.
bunkerity / bunkerweb
🛡️ Open-source and cloud-native Web Application Firewall (WAF)
prowler-cloud / prowler
This repo hosts Prowler OSS (CLI and Local Server). Prowler is the world’s most widely used open-source cloud security platform that automates security and compliance across any cloud environment for Humans and AI Agents.
TheDuffman85 / crowdsec-web-ui
A self-hosted dashboard for CrowdSec: investigate alerts, manage decisions, monitor runtime metrics, and send notifications from one responsive UI.
beyondtahir / beyondseo
Your complete SEO house: native crawling, SEO/AEO/GEO, content, competitors and reputation. Includes 206 publishing sources with DR context and tailored backlink plans. No API keys required by the native engine.
owasp-modsecurity / ModSecurity
ModSecurity is an open source, cross platform web application firewall (WAF) engine for Apache, IIS and Nginx. It has a robust event-based programming language which provides protection from a range of attacks against web applications and allows for HTTP traffic monitoring, logging and real-time analysis.
Producdevity / reframed-vr
An independent operating system (SteamOS) project for standalone VR headsets. [Meta Quest and Pico Neo]
HellzYeahh / earshot
One Android app for any Bluetooth headset: Bose, Sony, Sennheiser, Soundcore, Skullcandy and more. No account, no internet permission.
HeyOkay / HaloBattery
Unified battery level indicators for 2.4GHz mice, headsets and Bluetooth devices in the Windows tray
bigmak94 / AstroQuest
ASTRO BOT Rescue Mission (PS4, PlayStation VR) in virtual reality on Meta Quest 3: on the headset alone, or from a Windows PC through Virtual Desktop or SteamVR. A PS4 emulator (shadPS4) with the PlayStation VR it needs. Bring your own copy of the game.
YusufOzmen01 / quest-kexec
Quest KeXec (QKX) is a kernel module that allows rooted Meta Quest headsets to load into another kernel via a custom implementation of kexec
midoks / mdserver-web
Simple Linux Panel
cirosantilli / x86-bare-metal-examples
Collection of dozens of minimal bare-metal x86 operating system examples for learning low-level system programming, tested in QEMU and on real hardware.
codse / animata
Bring your site to life with easy to use animation & interaction code. Copy. Paste. Animate.
maxlerebourg / crowdsec-bouncer-traefik-plugin
Traefik plugin for Crowdsec - WAF and IP protection
alvr-org / ALVR
Stream VR games from your PC to your headset via Wi-Fi
hfiref0x / KDU
Kernel Driver Utility
beelzebub-labs / beelzebub
A secure low code deception runtime framework, leveraging AI for System Virtualization.
WiVRn / WiVRn
The Linux OpenXR streaming application to standalone headsets
jaredrhod / barehands
Move things on your screen with your bare hands. A webcam-powered, hand-tracked interface for your AI. No headset. No controllers.
pieeg-club / ironbci
Wearable (BLE) Brain-Computer Interface, ADS1299 and STM32 with SDK for mobile application
saphid / frame-control
Frame Control: a free, open-source app for Valve Steam Frame on macOS, Windows, Linux and iPhone. View the headset, install games and apps, transfer files, and manage your Frame.
owasp-modsecurity / ModSecurity-nginx
ModSecurity v3 Nginx Connector
OpenVR-Advanced-Settings / OpenVR-AdvancedSettings
OpenVR Advanced Settings Dashboard Overlay
Igalia / wolvic
A fast and secure browser for standalone virtual-reality and augmented-reality headsets.
dedsec1121fk / DedSec
Official repository of the DedSec Project.
kubernetes-sigs / lws
LeaderWorkerSet & DisaggregatedSet: Kubernetes APIs for Distributed and Disaggregated AI Serving
f-droid / fdroidserver
F-Droid server and build tools.
talkincode / toughradius
A powerful, open-source RADIUS server designed for ISPs, enterprise networks, and carriers. Supports standard RADIUS protocols, a full EAP / 802.1X authentication suite (EAP-TLS, PEAPv0/EAP-MSCHAPv2, EAP-TTLS), RadSec (RADIUS over TLS), and a modern Web management interface.
redisson / redisson
Redisson: Valkey & Redis Java Client and Real-Time Data Platform. Sync/Async/RxJava/Reactive API. Over 50 Valkey and Redis based Java objects and services: Set, Multimap, SortedSet, Map, List, Queue, Deque, Semaphore, Lock, AtomicLong, Map Reduce, Bloom filter, Spring, Tomcat, Scheduler, JCache API, Hibernate, RPC, local cache..
Sapd / HeadsetControl
Sidetone and Battery status for Logitech G930, G533, G633, G933 SteelSeries Arctis 7/PRO 2019 and Corsair VOID (Pro) in Linux and MacOSX
Safe3 / uusec-waf
Industry-leading free, high-performance, AI and semantic technology Web Application Firewall and API Security Gateway (WAAP) - UUSEC WAF.
jurkovic-nikola / OpenLinkHub
Open source interface for iCUE LINK Hub and other Corsair AIOs, Hubs for Linux. Manage RGB lighting, fan speeds, system metrics, as well as keyboards, mice, headsets via a web dashboard.
shinyflvre / OpenVR-SpaceSync
Synchronizes Lighthouse devices with SLAM headsets using a Follow SLAM HMD mode that keeps the headset pose authoritative and continuously aligns Lighthouse tracking to it.
moistman42069 / HaloCE-DecompRemix-VR-PC-Android
Unofficial OpenCE-based Halo CE port for standalone Meta Quest VR/Steam Frame/Pico Headsets alongside PCVR/Flat PC and Android
elliotttate / OpenXR-Layer-OBSMirror
Headset-safe OpenXR capture for OBS with recording-only FOV overscan, camera smoothing, D3D11/D3D12 support, and a WinUI 3 Control Center.
navidseyedain / ALAD-Mobile
Real-time AI voice dubbing for any Android app, powered by Google's Gemini 3.5 Live Translate.
salesforce / policy_sentry
IAM Least Privilege Policy Generator
scality / cloudserver
Zenko CloudServer, an open-source Node.js implementation of the Amazon S3 protocol on the front-end and backend storage capabilities to multiple clouds, including Azure and Google.
revive-adserver / revive-adserver
The world's most popular free, open source ad serving system. You can download the latest release at:
projectdiscovery / cloudlist
Cloudlist is a tool for listing Assets from multiple Cloud Providers.
trustedsec / COFFLoader
—
doraemonkeys / WindSend
Quickly and securely sync clipboard, transfer files and directories between devices. 快速安全的同步剪切板，传输文件或文件夹
tinsarfal / SourceVR
Standalone VR ports of Half-Life 2, Portal, Portal 2, Episode One, and Episode Two for Meta Quest and PICO headsets.
tinsarfal / Qualyx
Native standalone Half-Life: Alyx for Meta Quest headsets.
eugenemindset / water
Water tracking concept: the fill level is a real fluid sim reacting to your gyroscope. One WebGL shader, zero dependencies.
lifusdev / lifusbounce
Rainbow six siege external (no wpm) + driver with DSE bypass
navidseyedain / ALAD
Real-time AI voice dubbing for any Chrome tab — 78 languages, powered by Gemini 3.5 Live Translate
lefayjey / linWinPwn
linWinPwn is a bash script that streamlines the use of a number of Active Directory tools
ADD-SP / ngx_waf
Handy, High performance, ModSecurity compatible Nginx firewall module & 方便、高性能、兼容 ModSecurity 的 Nginx 防火墙模块