📈 GH Trending Explorer 🎲 Surprise me
tw93 / Mole

🐹 Keep your Mac and PC clean, light, and running like new. Fast open-source CLI, plus native Mac and Windows apps.

▲ 2.0k/7d ★ 73k Shell 🔥 today
SnailSploit / Claude-Red

claude-red is a curated library of offensive security skills designed for the Claude skills system. Each skill is a structured SKILL.md file that primes Claude with expert-level methodology for a specific attack surface — from SQLi to shellcode, EDR evasion to exploit development.

▲ ~1.8k/7d ★ 8.6k Python 🔥 11d ago
Raphire / Win11Debloat

A simple, lightweight PowerShell script that allows you to remove pre-installed apps, disable telemetry, as well as perform various other changes to declutter and customize your Windows experience. Win11Debloat works for both Windows 10 and Windows 11.

▲ 1.3k/7d ★ 61k PowerShell 🔥 today
T-Auto / dsh-ops

A toolkit for low-level operations in DSH, designed to reduce token usage and task execution time / DSH 底层操作工具插件,旨在减少 Token 消耗与任务耗时

▲ ~987/7d ★ 4.0k JavaScript today
eness / php2shell-CVE-2026-109618-CVE-2026-109619-PoC

Proof-of-Concept (PoC) exploit for php2shell (CVE-2026-109618 / CVE-2026-109619), demonstrating remote code execution in vulnerable PHP environments. For security research and educational purposes only.

▲ 972/7d ★ 972 Shell 2d ago
datawhalechina / hello-agents

📚 《从零开始构建智能体》——从零开始的智能体原理与实践教程

▲ ~768/7d ★ 84k Python 10d ago
Tencent / BrowserSkill

Let AI agents use your real, logged-in browser without interrupting your work. CLI + extension for browser automation across any shell-capable AI agent.

▲ ~324/7d ★ 9.5k TypeScript today
NCSC-NL / php2shell

Operational information regarding the 2026 php2shell vulnerabilities

▲ 274/7d ★ 274 Python today
helloianneo / ian-xhs-carousel

把文章、案例或笔记排成 3:4 小红书图文 | 1080×1440 | 20 个母版 | 浅色 / 深色 | Claude Code Skill

▲ 247/7d ★ 247 HTML 3d ago
krahets / hello-algo

《Hello 算法》:动画图解、一键运行的数据结构与算法教程。支持简中、繁中、English、日本語,提供 Python, Java, C++, C, C#, JS, Go, Swift, Rust, Ruby, Kotlin, TS, Dart 等代码实现

▲ ~243/7d ★ 131k Java 13d ago
43PR / dotfiles

Hyprland + Quickshell Setup for Arch-based distributions

▲ ~236/7d ★ 1.7k QML today
duxlabs-dev / dux-shell

Desktop shell for wayland compositors built with Quickshell & GO, optimized for niri, hyprland, sway, MangoWC, labwc, and MiracleWM.

▲ ~163/7d ★ 8.6k QML today
HexaFuture / HexaShell

HexaShell: a thin harness in which a coding agent drives a robot from RGB images and writes its own tools; frozen tools for the 42 RoboDojo tasks

▲ ~152/7d ★ 135 Python 3d ago
krishhgg / Insomnia

A macOS menu bar app that safely keeps your MacBook awake with the lid closed, for timed agent sessions.

▲ ~144/7d ★ 1.7k Swift today
devploit / php2shell

PHP2Shell: version-aware research toolkit for CVE-2026-109618 / CVE-2026-109619 — pre-auth RCE in PHP session.upload_progress (mod_php). Build profiles, labs, heap calibration and detection guidance for authorized security testing.

▲ 144/7d ★ 144 Python 1d ago
HOSTED-POWER / php_uploadprogress_guard

Protects an unpatched PHP against php2shell (CVE-2026-109618 / CVE-2026-109619): a small extension that mirrors the official fix component by component and steps aside once the engine carries it. PHP 5.6-8.5; Sury, cPanel EA4, DirectAdmin, Docker, Windows.

▲ 143/7d ★ 143 C today
danielmiessler / SecLists

SecLists is the security tester's companion. It's a collection of multiple types of lists used during security assessments, collected in one place. List types include usernames, passwords, URLs, sensitive data patterns, fuzzing payloads, web shells, and many more.

▲ ~138/7d ★ 74k PHP 🔥 today
warpdotdev / warp

Warp is an agentic development environment, born out of the terminal.

▲ ~133/7d ★ 66k Rust today
233boy / sing-box

最好用的 sing-box 一键安装脚本 & 管理脚本,自动创建 REALITY 协议;支持 TUIC,Trojan,Hysteria2 等所有常见的协议

▲ ~133/7d ★ 5.0k Shell 4mo ago
syrex1013 / php2shell

CVE-2026-109618/109619 PoC — PHP session.upload_progress heap use-after-free (CVSS 9.2)

▲ 131/7d ★ 131 Python 1d ago
NextKde / NextKde

NextKde (KOS Desktop Shell) is a modern desktop shell project.It replaces or enhances parts of Plasma's native interface, providing an integrated user interface that combines a top panel, application dock, launcher, global search, notification center, and system settings.

▲ ~126/7d ★ 619 QML today
git / git

Git Source Code Mirror - This is a publish-only repository but pull requests can be turned into patches to the mailing list via GitGitGadget (https://gitgitgadget.github.io/). Please follow Documentation/SubmittingPatches procedure for any of your improvements.

▲ ~117/7d ★ 64k C 🔥 today
Yu-tao-Li / dsh-computer-use-win

Windows computer use for DeepSeek Harness (dsh): MCP stdio server + PowerShell UIA backend, 22 desktop tools

▲ ~112/7d ★ 153 JavaScript today
ohmyzsh / ohmyzsh

🙃 A delightful community-driven (with 2,500+ contributors) framework for managing your zsh configuration. Includes 300+ optional plugins (rails, git, macOS, hub, docker, homebrew, node, php, python, etc), 140+ themes to spice up your morning, and an auto-update tool that makes it easy to keep up with the latest updates from the community.

▲ ~110/7d ★ 190k Shell 🔥 2d ago
dinosn / php-cve-2026-10961x-lab-poc

PHP CVE-2026-109618/109619 — self-contained unauthenticated RCE on stock PHP 8.5.11 (in-band PS(id)→cookie memory disclosure + UAF chain), full control ladders, fixed-version negative control on 8.5.12

▲ 107/7d ★ 107 Python 1d ago
JoasASantos / php2shell-scanner

Non-destructive scanner for CVE-2026-109618 / CVE-2026-109619 (PHP core RCE). Subdomain recon via crt.sh + subfinder, robust banner grabbing, version-based detection.

▲ 105/7d ★ 105 Python 2d ago
Datalux / Osintgram

Osintgram is a OSINT tool on Instagram. It offers an interactive shell to perform analysis on Instagram account of any users by its nickname

▲ ~103/7d ★ 15k Python 4d ago
syhunt / php2shell-protection

Defensive mitigation and testing toolkit for PHP security vulnerabilities (CVE-2026-109618, CVE-2026-109619, CVE-2026-115560), including Apache protections and PHP hardening guidance

▲ 103/7d ★ 103 PHP today
ravensclawx / HBLauncher

SmileBASIC homebrew launcher and documented GPU app SDK, with Pico setup and a Hello World example.

▲ 103/7d ★ 103 JavaScript today
code-zm / plex2shell

CVE-2026-96652 CVE-2026-96654 CVE-2026-96655 CVE-2026-96656

▲ 99/7d ★ 99 Python 2d ago
Anton-Barinov / php2shell-patches

php2shell (CVE-2026-109618 & CVE-2026-109619) security patches for EOL PHP 5.4–8.1. Official & enhanced backports for vanilla php.net and Remi Collet trees. Restores safe file uploads & progress bars without RCE. Fleet-tested on OpenCart, WordPress, HestiaCP, aaPanel.

▲ 97/7d ★ 97 Shell today
starship / starship

☄🌌️ The minimal, blazing-fast, and infinitely customizable prompt for any shell!

▲ ~94/7d ★ 60k Rust today
Kuddev / pebrel

AI-native, GPU-accelerated terminal emulator for Windows with SSH, persistent sessions, split panes, and first-class AI CLI workflows.

▲ ~89/7d ★ 3.6k Rust today
MystiaFin / amane

A framework for building Wayland desktop shell purely in Rust

▲ ~89/7d ★ 399 Rust 2d ago
NVIDIA / NemoClaw

Run agents like Hermes, LangChain Deep Agents, and OpenClaw more securely inside NVIDIA OpenShell with managed inference

▲ ~82/7d ★ 23k TypeScript today

Load more →