Caleb Gross

local-deep-research. ~95% on SimpleQA (e.g. Qwen3.6-27B on a 3090). Supports all local and cloud LLMs (llama.cpp, Ollama, Google, ...). 10+ search engines - arXiv, PubMed, your private documents. Everything Local & Encrypted.

pi-bench. Common Lisp

mlx-vulkan. Home for the Development of MLX Vulkan backend

ds4. DeepSeek 4 Flash and PRO local inference engine for Metal, CUDA and ROCm

matchlock. Matchlock secures AI agent workloads with a Linux-based sandbox.

gvisor. Application Kernel for Containers

sysbox. An open-source, next-generation "runc" that empowers rootless containers to run workloads such as Systemd, Docker, Kubernetes, just like VMs.

llmfit. Hundreds of models & providers. One command to find what runs on your hardware.

most-stars. This repository will have the most Stars on GitHub

heretic. Fully automatic censorship removal for language models

nanoclaw. A lightweight alternative to OpenClaw that runs in containers for security. Connects to WhatsApp, Telegram, Slack, Discord, Gmail and other messaging apps,, has memory, scheduled jobs, and runs directly on Anthropic's Agents SDK

scribe. Local transcription and speaker diarization with pyannote and parakeet

VoiceInk. The best open-source alternative to Superwhisper & Wispr Flow. Voice-to-text app for macOS with no subscription

voxtral.c. Pure C inference of Mistral Voxtral Realtime 4B speech to text model

Morefixes. MoreFixes: A Large-Scale Dataset of CVE Fix Commits Mined through Enhanced Repository Discovery

binpool. Python

Cyber-AutoAgent. AI agent for autonomous cyber operations

openwork. An open-source alternative to Claude Cowork (powered by opencode)

skills. Trail of Bits Claude Code skills for security research, vulnerability detection, and audit workflows

pcopy. pcopy is a temporary file host, nopaste and clipboard across machines. It can be used from the Web UI, via a CLI or without a client by using curl.

tally. Let agents classify your bank transactions.

LifeOS. An General Purpose AI Harness for magnifying human capabilities. [CODING, BUILDING, CREATING, BUSINESS, LIFE, WORK, ...]

shannon. Shannon is an autonomous, white-box AI pentester for web applications and APIs. It analyzes your source code, identifies attack vectors, and executes real exploits to prove vulnerabilities before they reach production.

raptor. Raptor turns Claude Code into a general-purpose AI offensive/defensive security agent. By using Claude.md and creating rules, sub-agents, and skills, and orchestrating security tool usage, we configure the agent for adversarial thinking, and perform research or attack/defense operations.

ir_datasets. Provides a common interface to many IR ranking datasets.

CVE-2025-6980-check. Safely test Arista NGFW for information disclosure

index.php. Alas, GitHub does not run on WordPress. Yet.

fortiweb-auth-bypass-check. Python

cpgqls-client-python. Python library for CPGQL server

diffalayze. LLM-based automated patch diffing

aerospace-swipe. switch workspaces in AeroSpace with trackpad swipes

shpool. Think tmux, then aim... lower

instructor-go. structured outputs for llms

kittentts-server. A FastAPI-based TTS server that provides OpenAI-compatible API endpoints using KittenTTS

claude-code-security-review. An AI-powered security review GitHub Action using Claude to analyze code changes for security vulnerabilities.

KittenTTS. State-of-the-art TTS model under 25MB 😻

chatterbox. SoTA open-source TTS

awesome-selfhosted. A list of Free Software network services and web applications which can be hosted on your own servers

matcha. Daily Digest Reader - for markdown readers or terminals

RSSbrew. Self-hosted, easy-to-deploy RSS tool - Aggregate, filter, digest and AI summarize articles in RSS feeds.

mcpo. A simple, secure MCP-to-OpenAPI proxy server

mcp-searxng. Private web search for AI assistants via SearXNG — supports Claude, Cursor, and any MCP client

LLMSCAN. Parsing-based Analyzer

RepoAudit. An autonomous LLM-agent for large-scale, repository-level code auditing

s5cmd. Parallel S3 and local filesystem execution tool.

delayed-streams-modeling. Kyutai's Speech-To-Text and Text-To-Speech models based on the Delayed Streams Modeling framework.

Hex. VOICE → WORDS

wallabagger. Chrome-like / Firefox plugin for wallabag v2.

golem. Golem automates C/C++ vulnerability discovery with SemGrep+LLVM+LLM

fraim. A flexible framework for security teams to build and deploy AI-powered workflows that complement their existing security operations.

request-minimizer. Python

ffuf. Fast web fuzzer written in Go

graftcp. A flexible tool for redirecting a program's TCP, UDP, and DNS traffic to SOCKS5 or HTTP proxies.

fingerprintx. Standalone utility for service discovery on open ports!

o3_finds_cve-2025-37899. Artefacts for blog post on finding CVE-2025-37899 with o3

Homeassistant-polygonal-zones. Python

turbodrone. reverse engineering the best-selling drones on Amazon to control programmatically

uit. Uithub-Inspired Tool

homebrew-autoupdate. :tropical_drink: An easy, convenient way to automatically update Homebrew.

litellm. Python SDK, Proxy Server (AI Gateway) to call 100+ LLM APIs in OpenAI (or native) format, with cost tracking, guardrails, loadbalancing and logging. [Bedrock, Azure, OpenAI, VertexAI, Cohere, Anthropic, Sagemaker, HuggingFace, VLLM, NVIDIA NIM]

kill-the-newsletter. Convert email newsletters into Atom feeds

FreshRSS. A free, self-hostable news aggregator…

Drag.spoon. Drag window to a new space in Mission Control

tabwrangler. A browser extension that automatically closes your unused tabs so you can focus on the tabs that matter

NotaGen. NotaGen: Advancing Musicality in Symbolic Music Generation with Large Language Model Training Paradigms

hexyl. A command-line hex viewer

rogue. Automated web vulnerability scanning with LLM agents

baby-naptime. A very simple open source implementation of Google's Project Naptime

dalfox. 🌙🦊 Dalfox is a powerful open-source XSS scanner and utility focused on automation.

gopy. gopy generates a CPython extension module from a go package.

raink. Use LLMs for document ranking

llm-sort. Sort input lines semantically with llm

binja-headless. Binja (sort of) headless

pam_rssh. Remote sudo authenticated via ssh-agent

browser-use. 🌐 Make websites accessible for AI agents. Automate tasks online with ease.

oauth2c. User-friendly OAuth2 CLI

trafilatura. Python & Command-line tool to gather text and metadata on the Web: Crawling, scraping, extraction, output as CSV, JSON, HTML, MD, TXT, XML

gguf-parser-go. Review/Check GGUF files and estimate the memory usage and maximum tokens per second.

ollama-grid-search. A multi-platform desktop application to evaluate and compare LLM models, written in Rust and React.

open-webui. User-friendly AI Interface (Supports Ollama, OpenAI API, ...)

yubikey-touch-detector. A tool to detect when your YubiKey is waiting for a touch (to send notification or display a visual indicator on the screen)

ndt7-client-go. ndt7 reference client implementation in Go

hAFL1. Python

ghidriff. Python Command-Line Ghidra Binary Diffing Engine

grandorgue. GrandOrgue software

facebook-marketplace-scraper. This repository contains a script to scrape Facebook Marketplace data using Playwright, BeautifulSoup and Streamlit.

yq. yq is a portable command-line YAML, JSON, XML, CSV, TOML, HCL and properties processor

ntfy. Send push notifications to your phone or desktop using PUT/POST

nerve. The Simple Agent Development Kit.

autobrowse. AutoBrowse is an autonomous AI agent that can perform web browsing tasks.

goleveldb. LevelDB key/value database in Go.

ccl_chromium_reader. (Sometimes partial) Python re-implementations of the technologies involved in reading various data sources in Chrome-esque applications.

json-viewer. Web Component to visualize JSON data in a tree view

morss. Get full text RSS feeds

python-readability. fast python port of arc90's readability tool, updated to match latest readability.js!

unshield. Tool and library to extract CAB files from InstallShield installers

ISx. ISx is an InstallShield installer extractor

katana. A next-generation crawling and spidering framework.

wordlist. English Speller Database (ESDB)

udedup. A modular URL deduplication tool.

xsv. A fast CSV command line toolkit written in Rust.

faup. Fast URL decoder library

Log4jAttackSurface.

twofactorauth. List of sites with two factor auth support which includes SMS, email, phone calls, hardware, and software.

jq-tutorial. Interactive exercises for learning jq

python-vipaccess. A free software implementation of Symantec's VIP Access application and protocol

vimium. The hacker's browser.

opensnitch. OpenSnitch is a GNU/Linux interactive application firewall inspired by Little Snitch.

NoiseTorch. Real-time microphone noise suppression on Linux.

docker-swag. Nginx webserver and reverse proxy with php support and a built-in Certbot (Let's Encrypt) client. It also contains fail2ban for intrusion prevention.

playwright-go. Playwright for Go a browser automation library to control Chromium, Firefox and WebKit with a single API.

kitty. If you live in the terminal, kitty is made for you! Cross-platform, fast, feature-rich, GPU based.

barrier. Open-source KVM software

leadsheets. A LaTeX package for creating leadsheets and songbooks

dog. A command-line DNS client.

exa. A modern replacement for ‘ls’.

simple-node-logger. simple multi-level logger for console and file

i3-balance-workspace. Balance windows and workspaces in i3wm

playwright. Playwright is a framework for Web Testing and Automation. It allows testing Chromium, Firefox and WebKit with a single API.

docker-nginx-fpm-alpine. PrivateBin docker image based on Nginx, php-fpm & Alpine Linux stack

h2csmuggler. HTTP Request Smuggling over HTTP/2 Cleartext (h2c)

send. Simple, private file sharing from the makers of Firefox

ShouldIShred. Web app to check surf conditions at your local spots

github-search. A collection of tools to perform searches on GitHub.

nicinfo. NicInfo is a smart, command-line RDAP client

lastpass-cli. LastPass command line interface tool

ysoserial.net. Deserialization payload generator for a variety of .NET formatters

pwntools. CTF framework and exploit development library

ysoserial. A proof-of-concept tool for generating payloads that exploit unsafe Java object deserialization.

websocat. Command-line client for WebSockets, like netcat (or curl) for ws:// with advanced socat-like functions

sc-im. sc-im - Spreadsheet Calculator Improvised -- An ncurses spreadsheet program for terminal

tridactyl. A Vim-like interface for Firefox, inspired by Vimperator/Pentadactyl.

webshell. This is a webshell open source project

skhd. Simple hotkey daemon for macOS

marshalsec. Java

PoC-in-GitHub. 📡 PoC auto collect from GitHub. ⚠️ Be careful Malware.

CVE-2020-2551. Weblogic IIOP CVE-2020-2551

electric-scan. Electron based screenshot scanner

RAU_crypto. Telerik UI for ASP.NET AJAX File upload and .NET deserialisation exploit (CVE-2017-11317, CVE-2017-11357, CVE-2019-18935)

iodine. Official git repo for iodine dns tunnel

yabai. A tiling window manager for macOS based on binary space partitioning

uebersicht. ˈyːbɐˌzɪçt

ghidra. Ghidra is a software reverse engineering (SRE) framework

minio-arm. This Dockerfile installs Minio on your ARM-Plarform (e.g. Raspberry Pi)

Validity90. Reverse engineering of Validity/Synaptics 138a:0090, 138a:0094, 138a:0097, 06cb:0081, 06cb:009a fingerprint readers protocol

libfprint. Library for fingerprint readers

twill-legacy. A simple command-line Web browser, for testing and Web automation.

gphotos-uploader-cli. Command line tool to mass upload media folders to your google photos account(s) (Mac OS / Linux)

ccat. Colorizing `cat`

qutebrowser. A keyboard-driven, vim-like browser based on Python and Qt.

linuxatemyram.com. The contents on linuxatemyram.com

sparsebundlefs. FUSE filesystem for reading Mac OS sparse-bundle disk images

compiletools. Build C++ fast, with practically no configuration

Detect-SSLmitm. This PowerShell script will determine if your connection to external servers over HTTPS is being decrypted by an intercepting proxy such as the internet proxies commonly found in corporate environments. It does this by comparing the SSL intermediate certificate being used for your connection to the true/known SSL certificate for the server.

platform. Ushahidi Platform API version 3+