~/hackyfeed $

Servant is a type-level web domain-specific language (DSL) designed for building web services in Haskell. It allows developers to describe APIs at a high level of abstraction, ensuring type safety and enabling automatic documentation generation. Notable features include integration with various backends, support for benchmarks against other frameworks, and tooling for smoke testing and release management.

The `semgrep-rules` repository contains a collection of community-contributed Semgrep rules aimed at code analysis and security scanning. It facilitates rule creation and application through the Semgrep CLI and supports continuous integration in software development pipelines. Notable features include a structured syntax for writing rules, the ability to customize and contribute rules, and access to additional Pro rules for enhanced functionality.

OWASP Security Shepherd is a web and mobile application security training platform designed to enhance security awareness and penetration testing skills for users of varying expertise. Its primary use case is to provide a safe environment for practicing application security techniques through hands-on, realistic vulnerabilities that cover a broad spectrum of application security topics. Notable features include a gentle learning curve with progressively challenging levels, real-world security risk examples, high customizability for user experience, and scalability for individual or classroom use.

security.txt is a tool designed for organizations to define and communicate their security vulnerability disclosure policies clearly and efficiently. By creating a standard file to be placed in accessible website locations, it aids security researchers in identifying the appropriate channels for reporting vulnerabilities, thereby enhancing collaboration between researchers and organizations. Notable features include adherence to RFC 9116 standards, support for extensible fields, and guidance on optimal file placement and configuration.

Security Crawl Maze is a testbed designed specifically for evaluating web security crawlers, focusing on maximizing code coverage rather than content coverage. It provides a wide array of test cases for various HTML linking scenarios, facilitating the assessment of crawling efficiency in dynamic environments, with support for deployment via Docker and various cloud platforms. Notable features include an extensive catalog of test cases, easy local and cloud deployment instructions, and an API for fetching expected results.

secure-electron-template is a comprehensive Electron application template tailored for enhancing security in desktop applications. It incorporates best practices from the Electron documentation, including context isolation, strict content security policies, and secure asset loading, making it suitable for developers aiming to build robust and secure Electron apps. The template also provides clear instructions for setup and production deployment, ensuring ease of use for developers.

sdrtrunk is a cross-platform Java application designed for decoding, monitoring, recording, and streaming trunked mobile and related radio protocols using Software Defined Radios (SDR). Its notable features include support for multiple operating systems, a user manual and wiki for guidance, and options for downloading stable, alpha, and nightly builds to access the latest features and fixes. The tool is especially useful for radio enthusiasts and professionals looking to manage complex communications systems effectively.

ScanScore is an open-source optical music recognition (OMR) tool designed to convert scanned sheet music into editable formats like MusicXML and MIDI. It incorporates enhanced OCR capabilities with RapidOCR for multilingual support and utilizes a local LLM for instrument identification, offering features such as an interactive editor for error correction, multi-page score handling, and cross-platform compatibility.

ScalarDB is a universal hybrid transactional and analytical processing (HTAP) engine that enables ACID transactions and real-time analytics across various databases, thereby simplifying database management complexities. Its notable features include support for user authentication and authorization, attribute-based access control, and vector search capabilities, particularly catering to enterprise requirements. ScalarDB is designed to facilitate rapid application development using Java while providing a comprehensive framework for database operations.

Sampler is a visualization tool that executes and visualizes shell commands, offering real-time monitoring and alerting capabilities configured through a straightforward YAML file. It enables users to sample dynamic processes such as database changes and message queue statuses directly from the terminal, with features like customizable UI components and remote telemetry gathering. Unlike traditional monitoring systems, Sampler is designed for rapid setup without the complexity of server configurations, making it an ideal choice for developers seeking lightweight monitoring solutions.

RxAndroidBle is an Android library that simplifies the management of Bluetooth Low Energy (BLE) connections by leveraging reactive programming with RxJava. Its primary use case is to provide a straightforward API for performing asynchronous BLE operations, such as reading and writing data, managing threading, and handling errors effectively. Notable features include support for complex asynchronous workflows and ease of integration into Android projects via Gradle or Maven dependencies.

Rundeck is an open-source runbook automation service designed for executing workflows across existing automation systems and streamlining manual operations. It features a web console, command-line tools, and a WebAPI, allowing users to standardize and enhance operational tasks across a network of nodes. Notable capabilities include integration with various automation tools, support for multi-node deployments, and comprehensive community resources for documentation and support.

RosettaDrone is a software framework designed for developing and testing applications on DJI drones, featuring a MAVLink wrapper for integrated control with MAVLink-compatible ground control stations. It includes advanced functionalities such as a MissionManager for waypoint missions, support for AI scripting with DroneKit, and enhanced telemetry reporting, making it a versatile tool for drone developers. The framework allows for both live video streaming and simulated testing, ensuring safe operational practices.

RobustAPI is a research tool designed to evaluate the robustness and reliability of large language models (LLMs) in generating code responses to programming questions sourced from StackOverflow, specifically focusing on 24 Java APIs. It includes a dataset of 1208 coding questions and provides evaluative scripts to identify API misuse in generated answers, enabling researchers to assess LLM performance against real-world coding scenarios. Notable features include integration with multiple popular LLMs and a Java-based API checker for enhanced evaluation accuracy.

Rehepapp is an advanced corpus distillation toolset designed to identify vulnerabilities in Microsoft and Adobe products, showcasing its effectiveness in security assessments. Its primary use case is to enhance the vulnerability discovery process during penetration testing and security research. Notably, the tool has aided in the discovery of numerous vulnerabilities, underscoring its utility in the cybersecurity domain.

QuestDB is an open-source time-series database designed for high-performance ingestion and low-latency SQL queries. It features a multi-tier storage engine and employs techniques like column-oriented storage and SIMD-accelerated execution to efficiently handle financial market data, telemetry data, and real-time analytics. Notable capabilities include time-series extensions for SQL, a Postgres protocol compatibility, and a web console for data management, all optimized for rapid data processing and analysis without vendor lock-in.

PwnWiki.io is a wiki-style resource designed to serve as a comprehensive reference for penetration testers and red teamers detailing tools, tactics, and procedures (TTPs) applicable post-access to compromised systems. Notable features include the ability to clone the repository for offline access, enabling users to utilize the wiki in environments without internet connectivity, and an emphasis on community contributions to expand its content.

PScout

prompts.chat is an extensive open-source library that curates prompts designed for various AI chat models, including ChatGPT, Claude, and Llama, among others. Its primary use case is to enhance user interactions with AI by providing a comprehensive collection of prompts and an interactive guide on prompt engineering. Notable features include support for multiple AI frameworks, a user-friendly interface for browsing prompts, and educational resources to facilitate advanced prompting techniques.

Prettier Java is a plugin for the Prettier code formatter that extends its functionality to support the Java programming language. It automates code formatting by parsing Java code and applying a consistent style based on predefined rules, ensuring improved readability and maintainability of Java codebases. Notable features include integration with popular editors, a playground for testing formatting, and support for execution via npm or Yarn commands.

PPPwn-Luckfox is a low-cost exploit tool designed for various PS4 firmware versions (up to 11.00) using compatible Luckfox Pico models. It features a web server interface for changing settings, executing exploits, and injecting payloads, while providing configuration options through a JSON file. Users are cautioned about known shutdown issues and can contribute to the project through pull requests for enhancements and bug fixes.

PostgREST is a tool that serves a fully RESTful API directly from existing PostgreSQL databases, offering a standardized and efficient alternative to manually writing APIs. It is notable for its high performance, providing subsecond response times while efficiently delegating operations such as JSON serialization, data validation, and authorization directly to the database. Written in Haskell, it exploits lightweight threading and connection pooling to ensure scalability and optimal resource utilization.

Ponytail is a productivity tool designed to optimize code writing by AI agents, enabling them to condense complex code requirements into succinct one-liners while maintaining functionality and efficiency. Its primary use case is to reduce code length, resource usage, and development time by leveraging a minimalist coding approach. Notable features include significant reductions in lines of code (up to 94%), reduced costs (20% savings), and enhanced speed (27% faster execution) compared to traditional methods, all while ensuring safety and functionality integrity.

Polychron is a generative polyrhythmic composition engine designed to create intricate MIDI compositions by managing two independent rhythmic layers that interact through advanced musical systems. Its notable features include hypermeta controllers for tuning performance dynamics, a flexible architecture allowing easy project customization, and a comprehensive set of tools for composition and documentation management. This tool is primarily used for experimental music creation and allows users to control various musical parameters dynamically, fostering emergent musical structures.

PiracyChecker is an Android library designed to enhance application security against piracy and cracking by implementing Google Play Licensing, APK signature protection, and other anti-tampering measures. Its notable features include a straightforward integration process through Gradle, the ability to verify licensing in real-time, and customizable responses to unauthorized usage that help discourage opportunistic attacks. While it raises the bar for security, it is important to note that no solution guarantees complete protection against all forms of app piracy.