Fabio Baroni

Textractor. Extracts text from video games and visual novels. Highly extensible.

dify. Production-ready platform for agentic workflow development.

Janus. Janus-Series: Unified Multimodal Understanding and Generation Models

DeepSeek-V3. Python

bilibot. A local chatbot fine-tuned by bilibili user comments.

anything-llm. Stop renting your intelligence. Own it with AnythingLLM. Everything you need for a powerful local-first agent experience

vector-admin. The universal tool suite for vector database management. Manage Pinecone, Chroma, Qdrant, Weaviate and more vector databases with ease.

HTBtui. HTBtui is a TUI (terminal user interface) client built with Textual for interacting with the Hack the Box api

awesome-shodan-queries. 🔍 A collection of interesting, funny, and depressing search queries to plug into shodan.io 👩‍💻

awesome-remnote. A curated list of RemNote plugins, themes, tutorials and other resources.

moderncardthemes. Modern Anki card templates

ropgadgetlib. Library for rop gadgets extraction for personal experiments

hugo-theme-hello-friend-ng. Pretty basic theme for Hugo that covers all of the essentials. All you have to do is start typing!

fuxploider. File upload vulnerability scanner and exploitation tool.

sh00t. Security Testing is not as simple as right click > Scan. It's messy, a tough game. What if you had missed to test just that one thing and had to regret later? Sh00t is a highly customizable, intelligent platform that understands the life of bug hunters and emphasizes on manual security testing.

Powerless. Windows privilege escalation (enumeration) script designed with OSCP labs (legacy Windows) in mind

Invoke-LoginPrompt. Invokes a Windows Security Login Prompt and outputs the clear text password.

PowerShdll. Run PowerShell with rundll32. Bypass software restrictions.

hackthebox-writeups. Writeups for HacktheBox 'boot2root' machines

bug-bounty-reference. Inspired by https://github.com/djadmin/awesome-bug-bounty, a list of bug bounty write-up that is categorized by the bug nature

InputScanner. PHP

bugbounty-cheatsheet. A list of interesting payloads, tips and tricks for bug bounty hunters.

Material. Collections of tools, scripts, snippets and so on, used in Rev3rse Security Live

shellen. :cherry_blossom: Interactive shellcoding environment to easily craft shellcodes

boot2root-scripts. Homemade scripts to-do various vulnerable challenges

exploit-pattern. generate and search pattern string for exploit development

mentalist. Mentalist is a graphical tool for custom wordlist generation. It utilizes common human paradigms for constructing passwords and can output the full wordlist as well as rules compatible with Hashcat and John the Ripper.

resources. A general collection of information, tools, and tips regarding CTFs and similar security competitions

stego-toolkit. Collection of steganography tools - helps with CTF challenges

tbhm. The Bug Hunters Methodology

WHP. Micro$oft Windows Hacking Pack

pentest-wiki. PENTEST-WIKI is a free online security knowledge library for pentesters / researchers. If you have a good idea, please share it with others.

sqli-labs. SQLI labs to test error based, Blind boolean based, Time based.

python-pty-shells. Python PTY backdoors - full PTY or nothing!

Reconnoitre. A security tool for multithreaded information gathering and service enumeration whilst building directory structures to store results, along with writing out recommendations for further testing.

linux-re-101. A collection of resources for linux reverse engineering

PTPv3. Source code for my lab solutions for PTPv3 course.

ctf-tools. Some setup scripts for security research tools.

lena_reversing. lena reversing hangul. https://tuts4you.com/download.php?view.2876

awesome-chinese-infosec-websites. A curated list of Chinese websites and personal blogs about ethical hacking and pentesting

awesome-pentest. A collection of awesome penetration testing resources, tools and other shiny things

awesome-web-hacking. A list of web application security

awesome-exploit-development. A curated list of resources (books, tutorials, courses, tools and vulnerable applications) for learning about Exploit Development

SecLists. SecLists is the security tester's companion. It's a collection of multiple types of lists used during security assessments, collected in one place. List types include usernames, passwords, URLs, sensitive data patterns, fuzzing payloads, web shells, and many more.

sshuttle. Wrong project! You should head over to http://github.com/sshuttle/sshuttle

python-pentest-tools. Python tools for penetration testers

awesome-pentest. A collection of awesome penetration testing resources, tools and other shiny things

awesome-infosec. A curated list of awesome infosec courses and training resources.

awesome-pcaptools. A collection of tools developed by other researchers in the Computer Science area to process network traces. All the right reserved for the original authors.

awesome-hacking. A curated list of awesome Hacking tutorials, tools and resources

awesome-ctf. A curated list of CTF frameworks, libraries, resources and softwares

awesome-answers. Curated list of inspiring and thoughtful answers given on stackoverflow, quora, etc.

awesome-frontend. A curated list of amazingly awesome frontend libraries, resources and shiny things.

awesome-conferences. :ticket: A list of awesome conferences

awesome-appsec. A curated list of resources for learning about application security

android-security-awesome. A collection of android security related resources

awesome-public-datasets. A topic-centric list of HQ open datasets.

scrapy. Scrapy, a fast high-level web crawling & scraping framework for Python.

linux. Linux kernel source tree

php-the-right-way. An easy-to-read, quick reference for PHP best practices, accepted coding standards, and links to authoritative tutorials around the Web

awesome-courses. :books: List of awesome university courses for learning Computer Science!

awesome-malware-analysis. Defund the Police.

afl-utils. Utilities for automated crash sample processing/analysis, easy afl-fuzz job management and corpus optimization

honeypot-setup-script. Honeypot (Dionaea and kippo) setup script

cowrie. Cowrie SSH/Telnet Honeypot https://docs.cowrie.org/

computer-science. 🎓 Path to a free self-taught education in Computer Science!

awesome-community. A curated list of awesome programming, development, technical support and discussion channels, groups, communities, resources and other shiny things

awesome-honeypots. an awesome list of honeypot resources

freeCodeCamp. freeCodeCamp.org's open-source codebase and curriculum. Learn math, programming, and computer science for free.

iOSPrework. Learn the the good parts of iOS as fast as possible

scribe. DEPRECATED: A rich text editor framework for the web platform

Olly.js. Translate URLs into Rich Media

css-elements. CSS3 interface elements.

webicons. Webicons is a set of resolution-independent social icons for use on your website. They use feature-detected SVG graphics (with PNG fallbacks) to display the icons over their appropriate negatively indented anchor titles.

fontcustom. Generate custom icon webfonts from the comfort of the command line.

Font-Awesome. The iconic SVG, font, and CSS toolkit

shop. Single-page shop

Landy-v1.0. A flexible one-page fully responsive HTML template for your app

pichichi. Simple one page responsive portfolio template

SpinKit. A collection of loading indicators animated with CSS

pageres. Capture website screenshots

js-the-right-way. An easy-to-read, quick reference for JS best practices, accepted coding standards, and links around the Web

launchrocket. A Mac PrefPane to manage all your Homebrew-installed services

stringer. A self-hosted, anti-social RSS reader.

jasmine. Simple JavaScript testing framework for browsers and node.js

devtools-snippets. A collection of helpful snippets to use inside of browser devtools

parker. Stylesheet analysis tool.

CleanScrape. A no-nonsense web scraping tool which removes the crap and preserves the content in epub and pdf formats.

Hasher. Browser history manager for rich media websites

placeholder. Spoofs placeholders in browsers that don't support them. (eg Firefox 3)

stress-css. JavaScript to test each CSS class on a page and report which are hindering performance

turbolinks-classic. Classic version of Turbolinks. Now deprecated in favor of Turbolinks 5.

responsive-elements. Provides basic element media query functionality.

toolkit. Toolkit for Responsive Web Design and Progressive Enhancement with Compass

Imager.js. Responsive images while we wait for srcset to finish cooking

CSRFT. A lightweight CSRF Toolkit for easy Proof of concept

interview. Everything you need to prepare for your technical interview

Scout. Scout is a Functional Testing extension for PhantomJS

cve-2014-0038. Linux local root exploit for CVE-2014-0038

quietnet. Simple chat program that communicates using inaudible sounds