Ky-Anh Huynh

scalable-cli. Scalable CLI

chdb. chDB is an in-process OLAP SQL Engine 🚀 powered by ClickHouse

superpowers. An agentic skills framework & software development methodology that works.

spinel. C

kubernetes-engine-customize-fluentbit. Learn how to customize Fluent Bit for Google Kubernetes Engine logs.

netbird. Connect your devices into a secure WireGuard®-based overlay network with SSO, MFA and granular access controls.

mysqld_exporter. Exporter for MySQL server metrics

awesome-ai-tools. A curated list of Artificial Intelligence Top Tools

s3proxy. Access other storage backends via the S3 API

Nginx-Rift. exploit for CVE-2026-42945

zfdash. ZFS Management GUI & Web UI for Linux, macOS and FreeBSD. Provides both Desktop GUI and Web UI interfaces. Simplifies common ZFS administration tasks for pools, datasets, volumes, and snapshots, including creation, destruction, property editing, snapshots, rollback, and encryption management.

webzfs. A modern web-based management interface for ZFS pools, datasets, snapshots, and SMART disk monitoring built with Python FastAPI and HTMX. Runs on Linux, FreeBSD, and NetBSD.

just-bash. Bash for Agents

cli. a lightweight, security focused, BDD test framework against terraform.

opencode. The open source coding agent.

diy-idp. This is a reference architecture for building your own IDP using Pulumi Cloud APIs

sing-box. The universal proxy platform

3proxy. 3proxy - tiny free proxy server

ada-awa. Ada Web Application - Framework to build high performance secure web applications

k8s-deployment-strategies. Kubernetes deployment strategies explained

rockstor-core. Linux/BTRFS based Network Attached Storage(NAS)

lite3. A JSON-Compatible Zero-Copy Serialization Format

android-security-awesome. A collection of android security related resources

android-mitm-ssl-interceptor. A comprehensive toolkit for intercepting, analyzing, and reverse engineering Android application traffic, with advanced tools for decoding and understanding complex protocols and payloads.

copybara. Copybara: A tool for transforming and moving code between repositories.

Youtube_BlockAds_List. This is an open project to maintain a list of domain names that serve YouTube ads. The original project only produced a Pi-hole blocklist.

dnsproxy. proxy queries to split recursive/authoritative servers

fastcache. Fast thread-safe inmemory cache for big number of entries in Go. Minimizes GC overhead

gozstd. go wrapper for zstd

cortex. A horizontally scalable, highly available, multi-tenant, long term Prometheus.

httpstat. It's like curl -v, with colours.

httpstat. curl statistics made simple

google-authenticator-exporter. Get the TOTP secrets exported by Google Authenticator

Bashfuscator. A fully configurable and extendable Bash obfuscation framework. This tool is intended to help both red team and blue team.

mosh. Mobile Shell

spegel. Stateless cluster local OCI registry mirror.

ops-agent. Go

k3d. Little helper to run CNCF's k3s in Docker

awx. AWX provides a web-based user interface, REST API, and task engine built on top of Ansible. It is one of the upstream projects for Red Hat Ansible Automation Platform.

File-Manager. Easy app for managing your files without ads, respecting your privacy & security

kubernetes. Python

rundeck-plugin-examples. Detailed working examples for every flavor of Rundeck Plugins

OpenMemories-Tweak. Unlock your Sony camera's settings

Sony-PMCA-RE. Reverse Engineering Sony Digital Cameras

ImagingEdge4Linux. Download images from your Sony DSLR camera via WiFi onto Linux without the crappy mobile app

sonshell. An effort to "ssh into my Sony camera"

pocorgtfo. a "Proof of Concept or GTFO" mirror with an extensive index with also whole issues or individual articles as clean PDFs.

collision-webshell. A webshell and a normal file that have the same MD5

sj.h. A tiny little JSON parsing library

Totolink-N350RT-Vulnerability. some of TOTOLINK N350RT Vulnerability

termux-cloudflare-ddns-script. A script using Cloudflare as a DDNS provider, for use with Python 3 on Termux.

ddns-updater. Container to update DNS records periodically with WebUI for many DNS providers

qmk_configurator. The QMK Configurator

qmk_firmware. Open-source keyboard firmware for Atmel AVR and Arm USB families

running-qix-malware.

install-tools. A repository of example scripts, templates and modules for deploying SentinelOne agents

pi-hole. A black hole for Internet advertisements

AdminLTE. AdminLTE - Free admin dashboard template based on Bootstrap 5

awx-operator. An Ansible AWX operator for Kubernetes built with Operator SDK and Ansible. 🤖

resolv. A thread-aware DNS resolver library written in Ruby

rubygems. Library packaging and distribution for Ruby.

net-dns. Net::DNS is a DNS library written in Ruby.

Ultimate.Hosts.Blacklist. The Ultimate Unified Hosts file for protecting your network, computer, smartphones and Wi-Fi devices against millions of bad web sites. Protect your children and family from gaining access to bad web sites and protect your devices and pc from being infected with Malware or Ransomware.

async-dns. An asynchronous DNS resolver and server.

ProcMon-for-Linux. A Linux version of the Procmon Sysinternals tool

helm-secrets. A helm plugin that help manage secrets with Git workflow and store them anywhere

qnap. Shell

terraform-provider-vercel. Terraform Vercel Provider

dbcrust. Fast psql-style database CLI/workbench for PostgreSQL, MySQL, SQLite, ClickHouse, MongoDB, Elasticsearch, and SQL over Parquet/CSV/JSON — with optional AI, SSH/Vault, Python & Django.

QNAP-LVM-recovery.

mergerfs. a featureful union filesystem

entware-packages. Modified OpenWrt feed

vello. A GPU compute-centric 2D renderer.

himg. You give it HTML and get back an image - perfect for dynamic OpenGraph social image previews.

Entware. Ultimate repo for embedded devices

go-containerregistry. Go library and CLIs for working with container registries

anteon. Anteon (formerly Ddosify): eBPF-based Kubernetes Monitoring and Performance Testing

v. Simple, fast, safe, compiled language for developing maintainable software. Compiles itself in <1s with zero library dependencies. Supports automatic C => V translation. https://vlang.io

Claude-Command-Suite. Professional slash commands for Claude Code that provide structured workflows for software development tasks including code review, feature creation, security auditing, and architectural analysis.

gosoline. Gosoline is our framework which fuels all of our Golang applications

tgpt. AI Chatbots in terminal for free

modern-latex. A short guide to LaTeX that avoids legacy cruft.

OpenHands. 🙌 OpenHands: AI-Driven Development

gatus. Automated developer-oriented status page with alerting and incident support

async. An awesome asynchronous event-driven reactor for Ruby.

static_status. 🚦Bash script to generate a static status page.

statping-ng. An updated drop-in for statping. A Status Page for monitoring your websites and applications with beautiful graphs, analytics, and plugins. Run on any type of environment.

tinystatus. Static status page generator

aPulse. A One-File Nodejs Server Status Monitoring Tool.

awesome-status-pages. Awesome list of status page open source software, services and public status pages of major internet companies

amazon-cloudfront-functions. JavaScript

script_exporter. Prometheus exporter to execute scripts and collect metrics from the output or the exit status.

phpiredis. PHP extension for Redis based on Hiredis

dragonfly. A modern replacement for Redis and Memcached

redis. Efficient asynchronous communication with Redis servers, enabling scalable and responsive data storage and retrieval.

predis. A flexible and feature-complete Redis/Valkey client for PHP.

hiredis. Minimalistic C client for Redis >= 1.2

relay. The fastest Redis client for PHP. 100× faster cache reads, near-zero bandwidth, no code changes required.

connection_pool. Generic connection pooling for Ruby

subtrace. Network inspector for your backend

ini-files. Ini file manager: a standalone, portable Ada package for configuration files

quickwit. Cloud-native OSS search engine for observability

sqlite-page-explorer. Visual tool to explore SQLite databases page-by-page, the way they're stored on disk and the way SQLite sees them.

gmsl. GNU Make Standard Library

curl-impersonate. curl-impersonate: A special build of curl that can impersonate Chrome & Firefox

httptap. View HTTP/HTTPS requests made by any Linux program

ecapture. Capturing SSL/TLS plaintext without a CA certificate using eBPF. Supported on Linux/Android kernels for amd64/arm64.

meson. The Meson Build System

selfextracttar. self extracting tar archives

ps. Shell

openbao. OpenBao is a software solution to manage, store, and distribute sensitive data including secrets, certificates, and keys.

Unexpected-Keyboard. A lightweight keyboard for Android

geany-plugins. The combined Geany Plugins collection

geany. A fast and lightweight IDE

awesome-tuis. List of projects that provide terminal user interfaces

go-jinja2. Jinja2 wrapper for Go

iftop. display bandwidth usage on an interface

python-gitlab. A python wrapper for the GitLab API.

tip-toi-reveng. Trying to understand the file format of Tip Toi

trailbase. An open, sub-millisecond, single-executable Firebase alternative with type-safe APIs, built-in WebAssembly runtime, realtime subscriptions, auth, and admin UI built on Rust, SQLite & Wasmtime.

cloud-sql-proxy-operator. A Kubernetes Operator to automatically configure secure connections to Cloud SQL

awesome-container-tinkering. List of awesome tools to tinker with containers.

php_filter_chain_generator. Python

googerteller. audible feedback on just how much your browsing feeds into google

on_ruby. :gem: :diamonds: Whitelabel Site for Ruby Communities

node-problem-detector. This is a place for various problem detectors running on the Kubernetes nodes.

visualizer-ng-ideas. Wiki and discussions to collect features and ideas for a next-generation visualizer library and preset format. See the ReadMe for additional details.

presets-milkdrop-original. The original preset pack that was deployed with the last official Milkdrop release, textures excluded.

cli. A declarative, simple, fast, and fun package for building command line tools in Go

redis-mirror. Realtime Redis Traffic Mirror to another Redis instance

RedisShake. RedisShake is a Valkey/Redis data processing and migration tool.

dagitty. Graphical analysis of structural causal models / graphical causal models.

hev-socks5-tproxy. A lightweight, fast and reliable socks5 transparent proxy

xdg-override. Override xdg-open behavior. Because the way it already works is not confusing enough

rbac-manager. A Kubernetes operator that simplifies the management of Role Bindings and Service Accounts.

chart-testing. CLI tool for linting and testing Helm charts

k8s-stackdriver. Go

fluent-operator. Operate Fluent Bit and Fluentd in the Kubernetes way - Previously known as FluentBit Operator

cluster-operator. RabbitMQ Cluster Kubernetes Operator

helm-charts. Redpanda Helm Chart

vcluster. vCluster - Create fully functional virtual Kubernetes clusters - Each vcluster runs inside a namespace of the underlying k8s cluster. It's cheaper than creating separate full-blown clusters and it offers better multi-tenancy and isolation than regular namespaces.

redis-operator. A golang based redis operator that will make/oversee Redis standalone/cluster/replication/ sentinel mode setup on top of the Kubernetes.

secret-detection. Finding your secret(Credential, API Key, AWS Key, Token, etc.) in your source code, files

detect-secrets. An enterprise friendly way of detecting and preventing secrets in code.

SecretScanner. :unlock: :unlock: Find secrets and passwords in container images and file systems :unlock: :unlock:

happy. Happy SDK is an open-source Go framework for building fast, reliable applications. Its modular tools simplify development and prototyping, supporting integration with multi-language projects for technical and non-technical users.

sh. A shell parser, formatter, and interpreter with bash and zsh support; includes shfmt

tfsec. Tfsec is now part of Trivy

renovate. Home of the Renovate CLI: Cross-platform Dependency Automation by Mend.io

elastalert2. ElastAlert 2 is a continuation of the original yelp/elastalert project. Pull requests are appreciated!

roxy-wi. Web interface for managing Haproxy, Nginx, Apache and Keepalived servers

leaky-vessels-dynamic-detector. Leaky Vessels Dynamic Detector

volta. Volta is a high performance, low resource URI rewriter for use with the ​Squid caching proxy server. With it, you can dynamically alter URI requests that pass through Squid based on various criteria. It uses a state machine to parse URIs and rules, and a constant database to store and access those rules. It can then either perform conditional rewrites internally, or by evaluating Lua scripts or bytecode.

distroless. 🥑 Language focused docker images, minus the operating system.

badssl.com. :lock: Memorable site for testing clients against bad SSL configs.

quicktemplate. Fast, powerful, yet easy to use template engine for Go. Optimized for speed, zero memory allocations in hot paths. Up to 20x faster than html/template

iptables-nat-helper. Simple interface to iptables to help set up a NAT between two interfaces.

autoscaler. Autoscaling components for Kubernetes

nodeshift. CLI application for OpenShift Node.js deployment 🚀

hexapdf. Versatile PDF creation and manipulation for Ruby

gitops-engine. Democratizing GitOps

rustdesk. An open-source remote desktop application designed for self-hosting, as an alternative to TeamViewer.

prism. Prism Ruby parser

racc. Racc is an LALR(1) parser generator. It is written in Ruby itself, and generates ruby programs.

kubenav. kubenav is the navigator for your Kubernetes clusters right in your pocket.

k8s-cleaner. Cleaner is a Kubernetes controller that identifies unused or unhealthy resources, helping you maintain a streamlined and efficient Kubernetes cluster. It provides flexible scheduling, label filtering, Lua-based selection criteria, resource removal or update and notifications via Slack, Webex and Discord. it can also automate clusters operations.

vale. :pencil: A markup-aware linter for prose built with speed and extensibility in mind.

pgtracer. Tracing tools for PostgreSQL, using eBPF

myhoard. MySQL Backup and Point-in-time Recovery service

klaw. Klaw, the latest OS tool by Aiven, helps enterprises cope with Apache Kafka(r) topics, schema registry and connectors governance by introducing roles/authorizations to users of various teams of an org.

delve. Delve is a debugger for the Go programming language.

Blog. :memo:

sbctl. :computer: :lock: :key: Secure Boot key manager

deepmerge. A deep merging tool for Python core data structures

percona-xtradb-cluster-operator. Percona Operator for MySQL based on Percona XtraDB Cluster

djinja. Implementing Jinja2 template engine on D language

mELT-output.

dynaconf. Configuration Management for Python ⚙

vyper. Python configuration with (more) fangs

viper. Go configuration with fangs

applicationset-hello-plugin. Python

aws. D

kbench. Benchmark your Kubernetes storage.

addon-operator. A system to manage additional components for Kubernetes cluster in a simple, consistent and automated way.

kwok. Kubernetes WithOut Kubelet - Simulates thousands of Nodes and Clusters.

terramate. Open-source Infrastructure as Code (IaC) orchestration platform: GitOps workflows, orchestration, code generation, observability, drift detection, asset management, policies, Slack notifications, and more. Integrates with Terraform, OpenTofu, Terragrunt, Kubernetes, GitHub Actions, GitLab CI/CD, BitBucket Pipelines, and any other CI/CD platform.

shell-operator. Shell-operator is a tool for running event-driven scripts in a Kubernetes cluster

ghactionspermissions. Go

ghaction-import-gpg. GitHub Action to import a GPG key

ksync. Sync files between your local system and a kubernetes cluster.

cyclonus. Tools for understanding, measuring, and applying network policies effectively in kubernetes

super-linter. Combination of multiple linters to run as a GitHub Action or standalone

kyverno. Unified Policy as Code

config-lint. Command line tool to validate configuration files

keyvaluestorage. POC for a KVS engine in GO

awesomesocksproxy. OSX Socks Proxy Manager

minio. MinIO is a high-performance, S3 compatible object store, open sourced under GNU AGPLv3 license.

cert-management. Manages TLS certificates in Kubernetes clusters using custom resources

gardener. Homogeneous Kubernetes clusters at scale on any infrastructure using hosted control planes.

karmada. Open, Multi-Cloud, Multi-Cluster Kubernetes Orchestration