ZigZagBoi1 / PS5-14.10-Research

Open PS5 firmware 14.10 research: Lua userland experiments, syscall and attack-surface analysis. Kernel read/write and a complete exploit are not demonstrated.

Surfacepleblock / Autodesk-CFD

Autodesk Cfd 2025: Complete standalone setup with all features unlocked and ready to run.

Surfacenoexist / IBM-SPSS

IBM SPSS Statistics 2025 complete standalone setup, fully activated and ready to run.

CyberDefenderAI / AI-Data-Security-Governance

In the era of Generative AI, the data is the primary attack surface. This module focuses on securing the ML data pipeline from ingestion to vector storage, ensuring that the foundation of the AI model remains uncompromised and privacy-compliant.

midasmatterhorn / artcraft-skills

Agent skills (SKILL.md) for the ArtCraft Rust creative suite — evidence-verified, MCP/CLI surfaces — for Claude Code, Codex, OpenCode, Devin, CommandCode, ZCode

projectdiscovery / nuclei

Nuclei is a fast, customizable vulnerability scanner powered by the global security community and built on a simple YAML-based DSL, enabling collaboration to tackle trending vulnerabilities on the internet. It helps you find vulnerabilities in your applications, APIs, networks, DNS, and cloud configurations.

blacklanternsecurity / bbot

The recursive internet scanner for hackers. 🧡

cloudflare / vinext

Vite plugin that reimplements the Next.js API surface — deploy anywhere

nexu-io / html-anything

✨ The agentic HTML editor — your local AI agent writes the HTML, you ship it. 🚀 75 Skills × 9 Surfaces (magazine · deck · poster · XHS / tweet · prototype · data report · Hyperframes) 🛡️ Sandboxed preview · 📤 1-click to WeChat / X / Zhihu / HTML / PNG 🔑 Zero API key — Claude Code / Cursor / Codex / Gemini / Copilot / OpenCode / Qwen / Aider.

linux-surface / linux-surface

Linux Kernel for Surface Devices

SnailSploit / Claude-Red

claude-red is a curated library of offensive security skills designed for the Claude skills system. Each skill is a structured SKILL.md file that primes Claude with expert-level methodology for a specific attack surface — from SQLi to shellcode, EDR evasion to exploit development.

j3ssie / osmedeus

A Modern Orchestration Engine for Security

cloudquery / cloudquery

Data pipelines for cloud config and security data. Build cloud asset inventory, CSPM, FinOps, and vulnerability management solutions. Extract from AWS, Azure, GCP, and 70+ cloud and SaaS sources.

projectdiscovery / naabu

A fast port scanner written in go with a focus on reliability and simplicity. Designed to be used in combination with other tools for attack surface discovery in bug bounties and pentests

0xNyk / awesome-hermes-agent

Independent directory of useful skills, plugins, memory providers, tools, surfaces, and guides for Nous Research's open-source Hermes Agent.

kungfu-systems / kungfu

Your agents don’t hand off the work. Kungfu keeps the same Work moving across Codex, Claude, OpenCode, and your own execution surface.

nyldn / claude-octopus

Run multiple AI models against the same research, design, or coding task. Surface disagreements before you ship.

ivre / ivre

Network recon framework. Build your own, self-hosted and fully-controlled alternatives to Shodan / ZoomEye / Censys and GreyNoise, run your Passive DNS service, build your taylor-made EASM tool, collect and analyse network intelligence from your sensors, and much more! Uses Nmap, Masscan, Zeek, p0f, ProjectDiscovery tools, etc.

cdcseacave / openMVS

open Structure-fom-Motion and Multi-View Stereo reconstruction library

subsurface / subsurface

This is the official upstream of the Subsurface divelog program

samugit83 / redamon

Open-source, self-hosted AI penetration testing framework: maps your attack surface into a graph, autonomously exploits it from a Kali sandbox with human approval gates, and opens PRs that fix what it finds. MCP both ways: plug in any MCP server as a tool, or drive RedAmon from Claude Code or your own agent.

projectdiscovery / uncover

Quickly discover exposed hosts on the internet using multiple search engines.

PixarAnimationStudios / OpenSubdiv

An Open-Source subdivision surface library.

microsoft / AttackSurfaceAnalyzer

Attack Surface Analyzer can help you analyze your operating system's security configuration for changes during software installation.

googleprojectzero / sandbox-attacksurface-analysis-tools

Set of tools to analyze Windows sandboxes for exposed attack surface.

bitfocus / companion

Bitfocus Companion enables the Elgato Stream Deck and other controllers to be a professional shotbox surface for an increasing amount of different presentation switchers, video playback software and broadcast equipment.

flowsurface-rs / flowsurface

A native desktop charting platform for crypto markets

tttapa / Control-Surface

Arduino library for creating MIDI controllers and other MIDI devices.

ken0225 / RIS-Codes-Collection

RIS-Codes-Collection: A Complete Collection contains the Codes for RIS(IRS) Researches.

owasp-noir / noir

Hunt every Endpoint in your code, expose Shadow APIs, map the Attack Surface.

meziantou / Meziantou.Analyzer

A powerful C# Roslyn analyzer that uses static analysis to detect bugs, surface security issues, and enforce best practices—helping developers and AI write more reliable code.

Mininglamp-OSS / octo-web

Web & desktop (Electron) client for the OCTO open workplace — one React + TypeScript codebase shipping browser and PC surfaces, with first-class AI agent UX.

android / snippets

Main repository for snippets surfaced on developer.android.com.

K3D-tools / K3D-jupyter

WebGL 3D plotting for Jupyter: meshes, isosurfaces, volumes, voxels and point clouds from NumPy arrays, with a path-traced cinematic renderer.

stanislav-web / OpenDoor

OWASP Web Recon & Directory Discovery Platform

precice / precice

A coupling library and ecosystem for partitioned multi-physics and multi-scale simulations, including surface and volume coupling.

hhoppe / Mesh-processing-library

C++ libraries and programs demonstrating mesh processing research published in ACM SIGGRAPH (1992-2003)

bonfire-networks / bonfire-app

Bonfire - tend to your digital life in community. Customise and host your own online space and control your experience at the most granular level.

snes19xx / surface-dots

Personal linux dotfiles + UI setup

AcademySoftwareFoundation / OpenPBR

Specification and reference implementation for the OpenPBR Surface shading model

hyqzz / Solar-Wanderer

Solar Wanderer / 遨游太阳系 - 1:1 Real-Time Solar System Explorer in the Browser. NASA JPL ephemeris, WebGL2, Three.js. From solar surface to 100,000 AU Oort Cloud.

RareSense / Nova3D

Design workspace for programmable 3D. Nova builds assets and worlds as editable, versioned programs: parametric, articulated and simulation-ready, compiled to CAD tools, 3D applications and robotics simulators.

oneshot-agent / oneshot-gtm

GTM agent for technical founders. Pay-per-result. Two surfaces: terminal CLI + local web dashboard.

yyhuni / xingrin

Open-source attack surface management and authorized security automation platform for asset discovery, service probing, scan orchestration, and security result management.

gallantlab / pycortex

Pycortex is a python-based toolkit for surface visualization of fMRI data

natlas / natlas

Attack Surface Management since before Attack Surface Management was a thing

pablosnt / rekono

Offensive security platform that automates attack surface discovery and vulnerability management

FormidableLabs / use-editable

A small React hook to turn elements into fully renderable & editable content surfaces, like code editors, using contenteditable (and magic)

jackson-storm / DynamicNotch

Turn the MacBook notch into a living system surface.

vmfunc / sif

the blazing-fast pentesting suite.

microsoft / react-native-windows-samples

A repository showcasing React Native samples and templates for Windows, macOS, and Surface Duo.

cc1a2b / JShunter

jshunter is a command-line tool designed for analyzing JavaScript files and extracting endpoints. This tool specializes in identifying sensitive data, such as API endpoints and potential security vulnerabilities, making it an essential resource for and bug bounty hunters and security researchers.

gircore / gir.core

A C# binding generator for GObject based libraries providing a C# friendly API surface

mkeeter / fidget

blazing fast implicit surface evaluation

pis10 / TraceSurface

发现藏在前端代码里的 API，验证未授权访问风险 · 动态浏览器追踪 × JavaScript 静态分析

joeseesun / qiaomu-seo

Audit, diagnose, research, plan, implement, experiment on, and verify website SEO across Google, Bing, and AI-search surfaces. Use for technical SEO,

NulightJens / humanizer-stack

Two-pass pipeline for removing AI writing tells from outward-facing text: a surface pass plus a structural pass grounded in the StoryScope study. Packaged as Claude Code Skills. Free community: skool.com/jens-ai-community-1306

ESCOMP / CTSM

Community Terrestrial Systems Model (includes the Community Land Model of CESM)

aliihsaad / WinDock

Remote app dock and control surface for a Windows or Linux (Hyprland) PC, driven from a phone over Wi-Fi or USB.

Jueze-2019 / dsh-redteam-mode

DSH RedTeam 模式：把 DeepSeek Harness 变成红队作战指挥台——一个靶标名称拉起信息收集/漏洞检测/漏洞利用/内网渗透四个角色，资产与战果实时落入本地 SQLite 事实库（仅供已授权测试）