function: cli
8032 products, primary matches first, then adoption-weighted; health v2 shown.
| Product | Health v2 | Stars | Maturity |
|---|---|---|---|
| Spooks4576/Ghost_ESP Ghost ESP is open-source ESP32 firmware (written in C on ESP-IDF) that turns 45+ ESP32 boards into a wireless security testing platform cov… | 10 | 1180 | maintenance |
| YaoFANGUK/video-subtitle-generator A Python application with both GUI and CLI interfaces that generates subtitle files (SRT) from video or audio using local Whisper-based spe… | 32 | 1179 | maintenance |
| LucyBot-Inc/api-spec-converter A JavaScript library and CLI tool that converts REST API description documents between formats such as Swagger/OpenAPI 2.0, OpenAPI 3.0, RA… | 32 | 1178 | maintenance |
| ywdblog/certbot-letencrypt-wildcardcertificates-alydns-au A certbot manual hook tool that automates DNS-01 challenge TXT record creation and cleanup for Let's Encrypt wildcard certificates. It supp… | 32 | 1177 | maintenance |
| mttaggart/OffensiveNotion OffensiveNotion is a command-and-control (C2) platform that abuses the Notion notetaking app as its communication channel. It ships a cross… | 10 | 1177 | maintenance |
| dionach/CMSmap CMSmap is a Python open-source CLI scanner that automates detection of security flaws in popular CMSs, integrating common vulnerabilities f… | 32 | 1176 | maintenance |
| awaescher/RepoZ RepoZ is a zero-configuration git repository hub for Windows and macOS that automatically discovers local git repositories and shows their … | 23 | 1176 | maintenance |
| Lucifer1993/SatanSword SatanSword is a Python-based red team penetration testing framework that integrates web fingerprinting, PoC-based vulnerability detection, … | 32 | 1172 | maintenance |
| FDX100/Auto_Tor_IP_changer A Python CLI tool that automatically rotates your IP address at configurable intervals by leveraging the Tor network's SOCKS proxy (127.0.0… | 32 | 1172 | maintenance |
| JetBrains/kotless Kotless is a Kotlin serverless framework that generates Terraform deployment code directly from application code, supporting its own DSL as… | 23 | 1168 | maintenance |
| chenjj/CORScanner CORScanner is a fast Python tool for detecting CORS misconfiguration vulnerabilities in websites, using gevent for high-concurrency network… | 23 | 1161 | maintenance |
| Lucifer1993/TPscan TPscan is a one-click vulnerability detection tool for ThinkPHP applications, written in Python 3. It scans ThinkPHP-based web services for… | 32 | 1158 | maintenance |
| MiSecurity/x-patrol A GitHub leak scanning system written in Go that monitors GitHub for leaked secrets and sensitive code. It provides a web management consol… | 23 | 1152 | maintenance |
| uber-common/metta Metta is an information security preparedness tool that runs adversarial simulations to test host-based and network detection instrumentati… | 32 | 1146 | maintenance |
| google/intermock Intermock is a Google open-source mocking library that generates mock objects and JSON with fake data from TypeScript interfaces using Fake… | 10 | 1144 | maintenance |
| KnockOutEZ/wigolo wigolo is a local-first MCP server that gives AI coding agents web intelligence tools: search across 18 engines, fetch with anti-bot escala… | 80 | 5171 | experimental |
| puniverse/capsule Capsule is a packaging and deployment tool for JVM applications that builds a single executable JAR containing the app's artifacts, depende… | 23 | 1143 | maintenance |
| peterw/Chat-with-Github-Repo A Python application that lets you chat with any GitHub repository. It clones a repo, embeds its documents into Activeloop Deep Lake, and s… | 30 | 1142 | maintenance |
| shikijs/twoslash Shiki Twoslash combines the Shiki syntax highlighter with the TypeScript compiler to generate statically rendered, type-aware code samples … | 10 | 1141 | maintenance |
| Open Interpreter 01 An open-source voice interface platform that lets users control computers conversationally, powered by Open Interpreter. It pairs a Python … | 17 | 5153 | experimental |
| slok/grafterm Grafterm is a single-binary Go CLI that renders metrics dashboards directly in the terminal, inspired by a simplified Grafana. It supports … | 23 | 1139 | maintenance |
| Sentinel-One/CobaltStrikeParser A Python parser that extracts Cobalt Strike Beacon configuration from stageless PE files, memory dumps, or C2 URLs. It heuristically finds … | 10 | 1138 | maintenance |
| anthropic-experimental/sandbox-runtime A lightweight CLI tool and library that enforces filesystem and network restrictions on arbitrary processes at the OS level without contain… | 84 | 5132 | experimental |
| njpatel/grpcc grpcc is a command-line client for testing gRPC servers, written in Node.js but able to talk to gRPC services in any language. It starts a … | 32 | 1133 | maintenance |
| fff-rs/juice Juice is a Rust machine learning framework ('The Hacker's Machine Learning Engine') built on the Coaster hardware abstraction layer, suppor… | 32 | 1131 | maintenance |
| shr3ddersec/Shr3dKit Shr3dKit is a shell script that installs a large curated collection of red team and offensive security tools onto a Kali Linux system (hard… | 32 | 1131 | maintenance |
| kevthehermit/RATDecoders A Python library and CLI tool (malconf) that statically analyzes malware samples from common Remote Access Trojan (RAT) families and extrac… | 32 | 1120 | maintenance |
| rasguanabana/ytfs YTFS is a FUSE-based virtual filesystem that lets you search YouTube and play videos as regular files with any media player. You mount it, … | 32 | 1117 | maintenance |
| firebase/superstatic Superstatic is an enhanced static file server for Node.js, usable both as a CLI tool and as an API/middleware library. It supports HTML5 pu… | 86 | 1113 | maintenance |
| Qri Qri is a dataset version control system built on the distributed web (IPFS), letting users version, publish, discover, and collaborate on d… | 23 | 1111 | maintenance |
| leostera/caramel Caramel is a functional programming language that compiles OCaml-style source code to run on the Erlang VM (BEAM), combining OCaml's type s… | 10 | 1105 | maintenance |
| dark-lbp/isf ISF (Industrial Exploitation Framework) is a Python-based exploitation framework modeled after Metasploit, focused on industrial control sy… | 10 | 1105 | maintenance |
| nicrusso7/rex-gym Rex-gym provides OpenAI Gym environments for the open-source SpotMicro quadruped robot, built on PyBullet simulation, along with a PPO lear… | 32 | 1102 | maintenance |
| jborg/attic Attic is a deduplicating backup program written in Python that stores only changed data chunks, with optional AES-256 encryption and SSH-ba… | 32 | 1099 | maintenance |
| DonTizi/rlama RLAMA is a Go CLI tool for building and querying local Retrieval-Augmented Generation (RAG) systems over your documents using Ollama models… | 38 | 1094 | maintenance |
| traildb/traildb TrailDB is a C library and tdb command-line tool for storing and querying series of discrete events (trails) in highly compressed, immutabl… | 32 | 1090 | maintenance |
| gregs1104/pgtune Pgtune is a Python CLI script that generates a tuned PostgreSQL postgresql.conf based on server memory, workload type, and expected connect… | 32 | 1090 | maintenance |
| exorde-labs/exorde-client The Exorde client is a Python CLI worker node for the Exorde Network, a decentralized protocol where participants scrape social media and w… | 60 | 1084 | maintenance |
| mmozeiko/aes-finder A small C++ command-line utility that scans the memory of running processes to locate AES encryption and decryption keys (128, 192, and 256… | 32 | 1083 | maintenance |
| connertennery/Notion-to-Obsidian-Converter A Node.js CLI script that converts exported Notion workspace content into Obsidian-compatible Markdown notes. It strips UUIDs from paths, c… | 32 | 1083 | maintenance |
| sysdream/chashell Chashell is a Go-based reverse shell that tunnels communication over DNS, paired with a multi-client control server called chaserv. All tra… | 32 | 1082 | maintenance |
| rhiever/datacleaner A Python package and command-line tool that automatically cleans pandas DataFrames, handling missing values and encoding categorical variab… | 23 | 1079 | maintenance |
| NickstaDB/SerializationDumper A Java-based command-line tool that dumps Java serialization streams and RMI packet contents into a human-readable form without deserializi… | 23 | 1079 | maintenance |
| architect/dynalite Dynalite is a JavaScript implementation of Amazon's DynamoDB API built on LevelDB, runnable as a CLI or embedded Node.js HTTP server with f… | 41 | 1076 | maintenance |
| metachris/pdfx PDFx is a Python command-line tool and library that extracts metadata, text, and references (PDFs, URLs, DOIs, arXiv IDs) from PDF document… | 10 | 1076 | maintenance |
| aurora-opensource/xviz XVIZ is a protocol and JavaScript tooling suite for real-time transfer and visualization of autonomy data, with modules for building, parsi… | 23 | 1075 | maintenance |
| biggora/caminte CaminteJS is a cross-database ORM for Node.js that provides a common interface for defining models and accessing many popular SQL and NoSQL… | 23 | 1074 | maintenance |
| antonioCoco/SharPyShell SharPyShell is a Python tool that generates a tiny, obfuscated ASP.NET webshell for C# web applications on .NET Framework and provides an i… | 23 | 1072 | maintenance |
| cjb/GitTorrent GitTorrent is a peer-to-peer network that shares Git repositories over BitTorrent, acting as a decentralized alternative to GitHub. It inte… | 32 | 4756 | experimental |
| simonfuhrmann/mve MVE (The Multi-View Environment) is a C++ library and toolset implementing a complete end-to-end pipeline for image-based 3D geometry recon… | 70 | 1060 | maintenance |
| BurguerJohn/Dain-App Dain-App is a video frame interpolation application built on the DAIN (Depth-Aware Video Frame Interpolation) deep learning model. It provi… | 23 | 1059 | maintenance |
| AHXR/ghost Ghost is a lightweight Remote Access Trojan (RAT) written in C++ that gives an attacker silent remote command-line access to Windows machin… | 23 | 1057 | maintenance |
| Mob2003/rakshasa Rakshasa is a cross-platform multi-level proxy and intranet tunneling tool written in Go. It forms a network of nodes that forward TCP traf… | 21 | 1057 | maintenance |
| twitchyliquid64/subnet Subnet is a simple, auditable VPN server and client written in Go, using TLS mutual authentication and TUN interfaces to route traffic. It … | 10 | 1057 | maintenance |
| doyensec/electronegativity Electronegativity is a CLI-based SAST tool that scans Electron applications for misconfigurations and security anti-patterns using AST and … | 39 | 1053 | maintenance |
| a1phaboy/FastjsonScan FastjsonScan is a Go-based command-line scanner that detects Fastjson deserialization vulnerabilities in Java web services. It identifies t… | 23 | 1053 | maintenance |
| trumail/trumail Trumail is a free, open-source email verification system written in Go that checks address deliverability via SMTP handshakes with mail ser… | 10 | 1052 | maintenance |
| 0xPolygon/polygon-edge Polygon Edge is a modular, extensible framework written in Go for building Ethereum-compatible (EVM) blockchain networks with custom consen… | 10 | 1051 | maintenance |
| shimmeris/SCFProxy SCFProxy is a CLI tool that deploys HTTP, SOCKS, and reverse proxies on cloud functions and API gateways across Alibaba Cloud, Tencent Clou… | 23 | 1047 | maintenance |
| eveem-org/panoramix Panoramix is a Python-based decompiler that converts Ethereum smart contract bytecode into readable pseudocode, powering the Eveem.org serv… | 32 | 1045 | maintenance |
| OffensivePython/Saddam Saddam is a Python command-line tool that performs DDoS amplification attacks using DNS, NTP, SNMP, and SSDP reflection vectors. It can als… | 32 | 1043 | maintenance |
| dupontgu/retro-ipod-spotify-client Software powering the sPot, a 4th-generation iPod Classic retrofitted with a full Spotify client running on a Raspberry Pi Zero W. It combi… | 32 | 1041 | maintenance |
| flyinclouds/KBLAutoSwitch A Windows utility built on AutoHotkey that automatically switches between Chinese and English input methods based on the active window or u… | 23 | 1039 | maintenance |
| matz/streem Streem is a prototype of a stream-based concurrent scripting language created by Yukihiro Matsumoto, influenced by the shell pipeline model… | 32 | 4597 | experimental |
| yassineaboukir/sublert Sublert is a Python CLI security and reconnaissance tool that uses certificate transparency logs to monitor new subdomains issued TLS/SSL c… | 32 | 1034 | maintenance |
| goberoi/faceit A Python script that simplifies swapping faces in videos using the deepfakes/faceswap library, with training data sourced from YouTube vide… | 32 | 1032 | maintenance |
| Graphene Graphene is a C++ toolkit for building high-performance blockchain networks using delegated proof-of-stake consensus, originally developed … | 23 | 1030 | maintenance |
| luantak/ToRat ToRat is a cross-platform remote administration tool written in Go that uses the Tor network as its transport mechanism and RPC for communi… | 10 | 1030 | maintenance |
| 8051Enthusiast/regex2fat A Rust CLI tool that compiles a regular expression into a DFA and serializes it as a FAT32 filesystem image, where directory traversal enco… | 32 | 1029 | maintenance |
| admintony/svnExploit SvnExploit is a Python CLI tool that exploits SVN source code disclosure vulnerabilities, supporting both SVN <1.7 and >1.7 repository form… | 32 | 1029 | maintenance |
| kungfu-systems/kungfu Kungfu is an open-source continuity layer for AI agent work, consisting of a local C++ runtime (libkungfu) and an open protocol (KFD) that … | 100 | 4506 | experimental |
| ReversecLabs/awspx awspx is a graph-based security tool that visualizes effective access and resource relationships in AWS environments. It resolves IAM polic… | 23 | 1018 | maintenance |
| sumory/lor Lor is a fast, minimalist web framework for Lua built on OpenResty, with Sinatra-style routing and an Express-like API. It includes middlew… | 23 | 1018 | maintenance |
| WithSecureLabs/python-exe-unpacker A Python CLI script that unpacks and decompiles Windows EXEs compiled from Python code, supporting executables built with py2exe and PyInst… | 32 | 1014 | maintenance |
| thirtythreeforty/neolink Neolink is a Rust application that acts as an RTSP bridge for Reolink IP cameras that only speak the proprietary Baichuan protocol on port … | 23 | 1011 | maintenance |
| TideSec/FuzzScanner FuzzScanner is a Ruby/Python-based reconnaissance toolset that batch-collects information about target websites, including subdomains, open… | 32 | 1008 | maintenance |
| Ekultek/Zeus-Scanner Zeus-Scanner is a Python-based advanced reconnaissance utility for web application security testing. It automates dork-based URL discovery … | 23 | 999 | maintenance |
| gauntlt Gauntlt is a ruggedization framework for running security attacks against applications using Gherkin-style attack files, usable by develope… | 23 | 997 | maintenance |
| browser-use/workflow-use Workflow Use is a Python tool by the Browser Use team for recording and running deterministic browser workflows with variables, falling bac… | 71 | 4164 | experimental |
| dagger/container-use Container Use is an open-source MCP server and CLI tool that gives coding agents sandboxed containerized development environments, powered … | 65 | 4029 | experimental |
| TinyAGI/tinyagi TinyAGI is a self-hosted multi-agent orchestrator that runs teams of AI agents collaborating across isolated workspaces, reachable via Disc… | 63 | 3611 | experimental |
| jank jank is a Clojure dialect compiled to native code via LLVM, with seamless C++ interop including templates, virtual functions, exceptions, a… | 68 | 3323 | experimental |
| Emanuele-web04/remodex Remodex is a local-first open-source bridge plus iOS app that lets you control the OpenAI Codex coding agent running on your Mac from an iP… | 59 | 3301 | experimental |
| HailToDodongo/pyrite64 Pyrite64 is a visual editor and runtime game engine for creating 3D games that run on real Nintendo 64 consoles or accurate emulators, buil… | 81 | 3245 | experimental |
| enhuiz/vall-e An unofficial PyTorch implementation of the VALL-E text-to-speech audio language model, built on the EnCodec tokenizer. It provides trainin… | 31 | 2976 | experimental |
| kaleidawave/ezno Ezno is an experimental TypeScript/JavaScript type checker and compiler written in Rust, usable as a CLI or library. It features a sound im… | 61 | 2734 | experimental |
| cryfs/cryfs CryFS is a cryptographic filesystem that encrypts files locally so they can be safely stored in cloud services like Dropbox, iCloud, or One… | 85 | 2304 | experimental |
| windowjs/windowjs Window.js is an open-source JavaScript runtime for desktop 2D graphics programming, built on the V8 engine, GLFW, and Skia. It exposes fami… | 23 | 2259 | experimental |
| nature-lang/nature Nature is a general-purpose system programming language with its own compiler written in pure C, compiling directly to machine code without… | 88 | 2254 | experimental |
| Darklang Darklang is an integrated functional programming language, editor, and cloud infrastructure for building backends, APIs, and CLIs without s… | 86 | 2170 | experimental |
| vgough/encfs EncFS is a userspace encrypted virtual filesystem built on FUSE, originally released in 2003 and recently rewritten in Rust. It transparent… | 83 | 2161 | experimental |
| mun-lang/mun Mun is an experimental, statically typed programming language with first-class hot reloading, compiled ahead of time to native machine code… | 66 | 2130 | experimental |
| earendil-works/gondolin Gondolin is a TypeScript library and CLI that runs untrusted AI-agent code inside fast local Linux micro-VMs (QEMU by default, optional lib… | 73 | 2097 | experimental |
| kenn-io/msgvault msgvault is a Go application that archives a lifetime of email, chat, calendar, and meeting data into a local SQLite/DuckDB store, supporti… | 82 | 2057 | experimental |
| zhaofengli/attic Attic is a self-hostable, multi-tenant Nix binary cache server backed by S3-compatible storage, written in Rust. It provides global dedupli… | 76 | 2048 | experimental |
| Hyperspace Hyperspace AGI is an experimental peer-to-peer network where autonomous AI agents collaboratively train language models and share research … | 82 | 2036 | experimental |
| lapce/lapdev Lapdev is a platform that creates production-accurate development environments for Kubernetes apps by reading existing cluster manifests an… | 45 | 1966 | experimental |
| jina-ai/dev-gpt Dev-GPT is a Python CLI tool that simulates a virtual development team (Product Manager, Developer, DevOps) powered by OpenAI models. Users… | 30 | 1870 | experimental |
| ontola/atomic-server AtomicServer is a lightweight open-source headless CMS and graph database for creating, sharing, and modeling Atomic Data, shipped as a sin… | 86 | 1595 | experimental |
| darkrenaissance/darkfi DarkFi is an anonymous Layer 1 blockchain built in Rust that uses zero-knowledge cryptography (zk-SNARKs, halo2, a zkVM) to enable fully pr… | 76 | 1368 | experimental |