Devansh Batham

open-claude-in-chrome. Claude in Chrome, reverse-engineered and open-source. No domain blocklist. Any Chromium browser. Same 18 MCP tools, same performance.

microcloud. Automated private cloud based on LXD, Ceph and OVN

honggfuzz. Security oriented software fuzzer. Supports evolutionary, feedback-driven fuzzing based on code coverage (SW and HW based)

iptv. Collection of publicly available IPTV channels from all over the world

autoresearch. Autonomous experiment loop extension for Claude, Codex

browser. Lightpanda: the headless browser designed for AI and automation

IPTV. M3U Playlist for free TV channels

signals. Manage state with style in every framework

novaVM. fastest and secure Hypervisor

LLMs-from-scratch. Implement a ChatGPT-like LLM in PyTorch from scratch, step by step

ECC. The agent harness performance optimization system. Skills, instincts, memory, security, and research-first development for Claude Code, Codex, Opencode, Cursor and beyond.

black. The uncompromising Python code formatter

bbscope. Scope aggregation tool for HackerOne, Bugcrowd, Intigriti, YesWeHack, and Immunefi!

openfang. Open-source Agent Operating System

oh-my-openagent. omo/lazycodex: The coding agent for tokenmaxxers;the one and only agent harness for complex codebases. For your Codex, for your OpenCode

mission-control. Self-hosted AI agent orchestration platform: dispatch tasks, run multi-agent workflows, monitor spend, and govern operations from one mission control dashboard.

better-hub. Re-imagining code collaboration for humans and agents

better-auth. The most comprehensive authentication framework

domain-list-community. Community managed domain list. Generate geosite.dat for V2Ray.

coolify. An open-source, self-hostable PaaS alternative to Vercel, Heroku & Netlify that lets you easily deploy static sites, databases, full-stack applications and 280+ one-click services on your own servers.

dokploy. Open Source Alternative to Vercel, Netlify and Heroku.

nixopus. Run production apps without thinking about infrastructure. On your server or ours. Fully agentic.

epicenter. Open-source, local-first apps.

gopacket. Provides packet processing capabilities for Go

Browser-Security-Research. Resources for Browser Security Research

zod. TypeScript-first schema validation with static type inference

kntrl. kntrl is an eBPF based runtime agent that monitors and prevents anomalous behaviour defined by you on your pipeline. kntrl achieves this by monitoring kernel calls, and denying access as soon as your defined behaviour is detected. For more: https://kntrl.dev

hextra. 🔯 Modern, batteries-included Hugo theme for creating beautiful doc, blog and static websites

Android-Security-Exploits-YouTube-Curriculum. 🔓A Curated List Of Modern Android Exploitation Conference Talks

lipgloss. Style definitions for nice terminal layouts 👄

gum. A tool for glamorous shell scripts 🎀

Cap. Open source Loom alternative. Beautiful, shareable screen recordings.

fastmcp. 🚀 The fast, Pythonic way to build MCP servers and clients.

adk-python. An open-source, code-first Python toolkit for building, evaluating, and deploying sophisticated AI agents with flexibility and control.

cline. Autonomous coding agent as an SDK, IDE extension, or CLI assistant.

yOS. A simple personal website stack

HITCON-Training-writeup. Learn binary exploitation from angelboy's hitcon-training

MyBooks-1. my books

jekyll-theme-chirpy. A minimal, responsive, and feature-rich Jekyll theme for technical writing.

comrak. CommonMark + GFM compatible Markdown parser and renderer

hugo-theme-til. A Hugo theme focused on simplicity and readability, and content discovery.

broken-dns. Go

Pentest-Cheatsheets. Python

siyuan. A privacy-first, self-hosted, fully open source personal knowledge management software, written in typescript and golang.

bbot. The recursive internet scanner for hackers. 🧡

jekyll-klise. :beach_umbrella: Klisé is a minimalist Jekyll theme for running a personal site or blog, light & dark mode support. (https://klise.vercel.app)

academic_website. SCSS

sidey. Sidey is a simple and minimalistic jekyll blogging theme.

cheat-sheets. A list of cheat sheets for application security

github-actions-goat. GitHub Actions Goat: Deliberately Vulnerable GitHub Actions CI/CD Environment

gato-x. GitHub Attack Toolkit - Extreme Edition - A static analysis and exploit toolkit for GitHub Actions.

scorecard. OpenSSF Scorecard - Security health metrics for Open Source

ImHex. 🔍 A Hex Editor for Reverse Engineers, Programmers and people who value their retinas when working at 3 AM.

ethernaut-foundry. Solutions and Walkthrough for Openzeppelin's Ethernaut CTF written in Solidity with the help of Foundry

GitHacker. 🕷️ A `.git` folder exploiting tool that is able to restore the entire Git repository, including stash, common branches and common tags.

scrabble. Simple tool to recover .git folder from remote server

Information_Security_Books. 信息安全方面的书籍

Flask-Unsign. Command line tool to fetch, decode, brute-force and craft session cookies of a Flask application by guessing secret keys.

manim. Animation engine for explanatory math videos

SuperPrompt. SuperPrompt is an attempt to engineer prompts that might help us understand AI agents.

full-stack-fastapi-template. Full stack, modern web application template. Using FastAPI, React, SQLModel, PostgreSQL, Docker, GitHub Actions, automatic HTTPS and more.

fasten. Analyse package dependency networks at the call graph level

quartz. 🌱 a fast, batteries-included static-site generator that transforms Markdown content into fully functional websites

novel. Notion-style WYSIWYG editor with AI-powered autocompletion.

drizzle-orm. ORM

fromthetensor. From the Tensor to Stable Diffusion, a rough outline for a 10 week course.

Iosevka. Versatile typeface for code, from code.

blessed. Blessed is an easy, practical library for making python terminal apps

reth. Modular, contributor-friendly and blazing-fast implementation of the Ethereum protocol, in Rust

werdlists. :keyboard: Wordlists, Dictionaries and Other Data Sets for Writing Software Security Test Cases

open-webui. User-friendly AI Interface (Supports Ollama, OpenAI API, ...)

sandbox. Code editing environment with an AI copilot and real-time collaboration

supermemory. Memory and context engine + app that is extremely fast, scalable, and can be run fully locally. The Memory API for the AI era.

algopy. Python

ollama. Get up and running with Kimi-K2.6, GLM-5.1, MiniMax, DeepSeek, gpt-oss, Qwen, Gemma and other models.

ReplayMarketData. Replay Market Data

textual. The lean application framework for Python. Build sophisticated user interfaces with a simple Python API. Run your apps in the terminal and a web browser.

pytermgui. Python TUI framework with mouse support, modular widget system, customizable and rapid terminal markup language and more!

openpilot. openpilot is an operating system for robotics. Currently, it upgrades the driver assistance system on 300+ supported cars.

uv. An extremely fast Python package and project manager, written in Rust.

rye. a Hassle-Free Python Experience

inav. INAV: Navigation-enabled flight control software

inference. Turn any computer or edge device into a command center for your computer vision projects.

dRehmFlight. Teensy/Arduino flight controller and stabilization for small-scale VTOL vehicles

UTM. Virtual machines for iOS and macOS

apk.sh. Makes reverse engineering Android apps easier, automating repetitive tasks like pulling, decoding, rebuilding and patching an APK.

canvas-lms. The open LMS by Instructure, Inc.

odoo. Odoo. Open Source Apps To Grow Your Business.

MMSF. Massive Mobile Security Framework

tracker-radar. Data set of top third party web domains with rich metadata about them

typesense. Open Source alternative to Algolia + Pinecone and an Easier-to-Use alternative to ElasticSearch ⚡ 🔍 ✨ Fast, typo tolerant, in-memory fuzzy Search Engine for building delightful search experiences

openinterpreter. A lightweight coding agent for open models like Deepseek, Kimi, and Qwen

Tiny-XSS-Payloads. A collection of tiny XSS Payloads that can be used in different contexts. https://tinyxss.terjanq.me

hyperscan. High-performance regular expression matching library

quivr. Opiniated RAG for integrating GenAI in your apps 🧠 Focus on your product rather than the RAG. Easy integration in existing products with customisation! Any LLM: GPT4, Groq, Llama. Any Vectorstore: PGVector, Faiss. Any Files. Anyway you want.

LibAFL. Advanced Fuzzing Library - Slot your Fuzzer together in Rust! Scales across cores and machines. For Windows, Android, MacOS, Linux, no_std, ...

financial-machine-learning. A curated list of practical financial machine learning tools and applications.

AllForOne. AllForOne allows bug bounty hunters and security researchers to collect all Nuclei YAML templates from various public repositories,

allxfr. AXFR all the things!

fuzzing. Tutorials, examples, discussions, research proposals, and other resources related to fuzzing

shell-ai. LangChain powered shell command generator and runner CLI

entro.py. Search files for high entropy strings.

FingerprintHub. 侦查守卫(ObserverWard)的指纹库

public-cloud-provider-ip-ranges. Unified datasets for public cloud provider IP ranges. Providers include AWS, Azure, CloudFlare, DigitalOcean, Fastly, Google Cloud and Oracle Cloud.

zone-nameservers. Walk the DNS tree to find which nameservers a particular zone (or "domain") uses. Mimics "dig +trace", but in Go.

viewvc. ViewVC is a browser interface for CVS and Subversion version control repositories.

armory. A one-stop shop for blockchain security researchers looking for educational material and alpha to level-up and get an edge on competition. This is not your standard roadmap, top 10 vulnerabilities, or find-the-bug content. This is for the real researchooors.

solidity-notes.

ccxt. A cryptocurrency trading API with more than 100 exchanges in JavaScript / TypeScript / Python / C# / PHP / Go / Java

theauditorbook. The Auditor Book

exploitnotes. A security research site.

developer. the first library to let you embed a developer agent in your own app!

awesome-quant. A curated list of insanely awesome libraries, packages and resources for Quants (Quantitative Finance)

awesome-algorithmic-trading. A curated list of awesome algorithmic trading frameworks, libraries, software and resources

quantstats. Portfolio analytics for quants, written in Python

can-i-take-over-dns. "Can I take over DNS?" — a list of DNS providers and how to claim vulnerable domains.

QuantLib. The QuantLib C++ library

learn-evm-attacks. 🚀 Try the Learn EVM Explorer we just launched!!!

Awesome-Android-Reverse-Engineering. A curated list of awesome Android Reverse Engineering training, resources, and tools.

rootAVD. Script to root AVDs running with QEMU Emulator from Android Studio

Solidity-Security-Compendium. A mission to breakout every single solidity vuln I come across and categorize it

Web3Bugs. Demystifying Exploitable Bugs in Smart Contracts

bearer. Code security scanning tool (SAST) to discover, filter and prioritize security and privacy risks.

tornado-cats. A book for learning zero-knowledge applications and decentralized mixing by creating a simple mixer protocol based on Tornado Cash

pacu. The AWS exploitation framework, designed for testing the security of Amazon Web Services environments.

act. Run your GitHub Actions locally 🚀

YouPlot. A command line tool that draw plots on the terminal.

cookiemonster. 🍪 CookieMonster helps you detect and abuse vulnerable implementations of stateless sessions.

On-Chain-Investigations-Tools-List. Here we discuss how one can investigate crypto hacks and security incidents, and collect all the possible tools and manuals! PRs are welcome! If any tool is missing - please open PR!

puredns. Puredns is a fast domain resolver and subdomain bruteforcing tool that can accurately filter out wildcard subdomains and DNS poisoned entries.

test_github_action.

raccoon. Salesforce object access auditor

malicious-pdf. 💀 Generate malicious PDF test files for testing phone-home callbacks, SSRF, XSS, NTLM credential theft, and data exfiltration in PDF viewers, converters, and web applications. Can be used with Burp Collaborator or Interact.sh

game-hacking. Tutorials, tools, and more as related to reverse engineering video games.

Dependency-Confusion. All About Dependency Confusion Attack, (Detecting, Finding, Mitigating)

GAP-Burp-Extension. Burp Extension to find potential endpoints, parameters, and generate a custom target wordlist

inventory. Asset inventory of over 800 public bug bounty programs.

feroxbuster. A fast, simple, recursive content discovery tool written in Rust.

Dependency-Confusion-RCE-POC. Shell

nginxpwner. Nginxpwner is a simple tool to look for common Nginx misconfigurations and vulnerabilities.

SonarSearch. A rapid API for the Project Sonar dataset

pdtm. ProjectDiscovery's Open Source Tool Manager

gplaydl. Command Line Google Play APK downloader. Download APK files to your PC directly from Google Play Store.

apk-downloader. A package that helps users to directly download an APK from Google Play by providing the package id of the app.

zdns. Fast DNS Lookup Library and CLI Tool

chaosDump. A powerful and clean bash script to dump and extract information from Project Discovery's Chaos Project https://chaos.projectdiscovery.io.

SmartContracts-audit-checklist. A checklist of things to look for when auditing Solidity smart contracts.

elpscrk. An Intelligent wordlist generator based on user profiling, permutations, and statistics. (Named after the same tool in Mr.Robot series S01E01)

ipranges. 🔨 List all IP ranges from: Google (Cloud & GoogleBot), Bing (Bingbot), Amazon (AWS), Microsoft, Oracle (Cloud), GitHub, Facebook (Meta), OpenAI (GPTBot) and other with daily updates.

cloud_ip_ranges. Identify IP addresses owned by public cloud providers

match-replace-burp. Useful "Match and Replace" burpsuite rules

cent. Community edition nuclei templates, a simple tool that allows you to organize all the Nuclei templates offered by the community in one place

xray. 一款长亭自研的完善的安全评估工具，支持常见 web 安全问题扫描和自定义 poc | 使用之前务必先阅读文档

CVE-2022-36537. POC of CVE-2022-36537

deepdarkCTI. Collection of Cyber Threat Intelligence sources from the deep and dark web

osv-scanner. Vulnerability scanner written in Go which uses the data provided by https://osv.dev

mitmproxy2swagger. Automagically reverse-engineer REST APIs via capturing traffic

smart-contract-auditing-heuristics. Heuristics for smart contract auditors

awesome-MEV-resources. Get up to speed on Maximum Extractable Value

recollapse. REcollapse is a helper tool for black-box regex fuzzing to bypass validations and discover normalizations in web applications

dispatch-docker. Shell

dispatch. All of the ad-hoc things you're doing to manage incidents today, done for you, and much more!

tlsx. Fast and configurable TLS grabber focused on TLS based data collection.

TLDR-2. TLDR 2 (TLD Records 2) is a continually updated DNS archive of zone transfer attempts against all existing TLD nameservers as well as the root servers.

stable-diffusion-studio. An animation focused workflow frontend for Stable Diffusion

socialhunter. crawls the website and finds broken social media links that can be hijacked

dnstrace. DNS resolution tracing tool

awesome-buggy-erc20-tokens. A Collection of Vulnerabilities in ERC20 Smart Contracts With Tokens Affected

plagiarism-basic. Offline quick-and-dirty text plagiarism checker written in Rust

massdns. A high-performance DNS stub resolver for bulk lookups and reconnaissance (subdomain enumeration)

resolvers. List of periodically validated public DNS resolvers

czds. golang API and tools to interact with czds.icann.org

dnsReaper. dnsReaper - subdomain takeover tool for attackers, bug bounty hunters and the blue team!

cloudstream. Android app for streaming and downloading media.

checkthechain. ctc is a tool for collecting and analyzing historical data of Ethereum and other EVM chains

fuzz.txt. Potentially dangerous files

quant-trading. Python quantitative trading strategies including VIX Calculator, Pattern Recognition, Commodity Trading Advisor, Monte Carlo, Options Straddle, Shooting Star, London Breakout, Heikin-Ashi, Pair Trading, RSI, Bollinger Bands, Parabolic SAR, Dual Thrust, Awesome, MACD

Awesome-MEV. A list of MEV resources with a focus on past research papers/talks.

EIPs. The Ethereum Improvement Proposal repository

chaos-hunt. Bash Script to Hunt all the targets/Subdomains from Chaos by Project Discovery Team

secureum-mind_map. Central Repository for the Epoch 0 coursework and quizzes. Contains all the content, cross-referenced and linked.

stable-diffusion.

pysheeet. Python Cheat Sheet

solidity-shell. An interactive Solidity Shell

sol2uml. Solidity contract visualisation tool

lil-web3. Simple, intentionally-limited versions of web3 protocols & apps.

gitfiti. abusing github commit history for the lulz

AuditorsRoadmap.

pro-bono-spot-checks. Chaotic good security research

simple-security-toolkit. A collection of practical security-focused guides and checklists for smart contract development

BITB-framwork. Hack

solidity-patterns. A compilation of patterns and best practices for the smart contract programming language Solidity

c4-common-issues. A collection of common security issues and possible gas optimizations in solidity smart contracts

prb-math. Solidity library for advanced fixed-point math

ethereum-developer-tools-list. A guide to available tools and platforms for developing on Ethereum.

awesome-solidity-gas-optimization. Best resources for Solidity gas optimizations ⛽

scrcpy. Display and control your Android device

flare-vm. A collection of software installations scripts for Windows systems that allows you to easily setup and maintain a reverse engineering environment on a VM.

cve. Gather and update all available and newest CVEs with their PoC.

forge-template. Forkable template to get you started with Foundry's Forge