Skip to content

28 results for β€œps”

What you seeeverything
x.comtoolπŸ›‘οΈ Security

Md Ismail Ε ojal πŸ•·οΈ (@0x0SojalSec) on X

An x64dbg MCP server (GitHub repo by duty1g, shared via an X post) that lets Claude drive the x64dbg Windows debugger: set breakpoints, dump memory, step code and run other reverse engineering tasks programmatically. The post targets malware analysts. A reply notes that debugging a sample executes it, so the agent should run in a snapshotted VM with no shared folders or host route, with every command logged.

x64dbgModel Context ProtocolClaude+1

Malware & RE, AI SecurityΒ· Added 3 Nov 2026, published 1 Nov 2026

x.comtool🧠 AI

Ritik Shukla (@Retik_S) on X

kanzo is a local kanban board that coding agents can update. It ships as one 4 MB binary that starts in 2 ms and runs on localhost. It also works as an MCP server, so Claude Code and Codex see the same tasks as the user. The board is stored as a folder that can sync through a private git repo. The post is brief and gives no further detail.

Model Context ProtocolClaude CodeCodex+2
kanzo

mcp, coding-agentsΒ· Published and added 30 Oct 2026

spm.threat-modeling.comtoolπŸ›‘οΈ Security

CISO Security Program Management 2026

Security Posture Management is a web tool that maps 30 CISO-accountable security topics across the five NIST Cybersecurity Framework functions. It tracks current maturity, KPIs, risks and audit findings per topic. It also records target maturity, target dates, accountable owners and review dates, flagging topics unreviewed for 6 months as due and 12 months as overdue. Initiatives link to topics and risks with owner, budget, dates and expected maturity uplift.

NIST Cybersecurity Framework

GRCΒ· Added 29 Oct 2026

x.comtoolπŸ›‘οΈ Security

Dan Kornas (@DanKornas) on X

jshook is an open-source (AGPL-3.0) search-first reverse-engineering workspace for AI agents, exposed over MCP. It drives Chromium or Camoufox through CDP, captures WebSocket traffic, offers HTTP, GraphQL and Burp Suite helpers, deobfuscates JavaScript, rebuilds source maps and disassembles WebAssembly. Tool profiles start small and expand to workflow or full sets; hot-reload plugins and declarative workflows extend it.

Model Context ProtocolBurp SuiteChrome+3
CamoufoxCDP

Malware & RE, AI Security, Offensive SecurityΒ· Added 28 Oct 2026, published 25 Oct 2026

thomasunise.comtoolπŸ›‘οΈ Security

Argus – a free, open-source agentic security operations platform – MIT

Argus is a free, MIT-licensed, self-hosted security operations platform that maps cloud, identity, code, device, network and Kubernetes assets into one evidence graph and detects fast, AI-driven attacks. Read-only AI agents investigate and only propose actions. Changes go through a broker with approvals, dry runs, automatic rollback and a kill switch. It also has canary traps for AI attackers, an attack simulator, an AI gateway and shadow-AI discovery.

ArgusCrowdStrikeSentinelOne+3
CISA KEVprompt injectionSOC 2+1

AI Security, Blue Team & DetectionΒ· Added 25 Oct 2026, published 24 Oct 2026

corgi.computertool🧠 AI

Show HN: Corgi, a helpful {agent, terminal} multiplexer

Corgi is a terminal multiplexer for humans and AI coding agents, installed with a curl script. It shows each agent's state (working, needs you, finished, idle), keeps agents running in the background like tmux, and tracks token usage, per-workspace resource use and every file an agent changed. It also supports git worktrees, SSH image paste (needs Ghostty Nightly) and a corgi --skill command that teaches agents to drive it.

CorgiGhosttytmux+1

coding-agents, agentsΒ· Added 24 Oct 2026, published 23 Oct 2026

jevcards.comtool🧠 AI

Show HN: Jev Cards, Can you beat a vision model at a picture quiz?

Jev Cards is a browser picture quiz where a player competes against Jev 1.14, a vision decision model. The 490 cards cover fruit, flags, maps, chess and illusions. Jev reads the image and question and returns a probability for every option, or a box for "tap the place" cards, in one call of about 0.25 seconds. It never writes text. The page reports 5,256 wins in 6,820 games.

Jev

multimodal, evalsΒ· Added 21 Oct 2026, published 20 Oct 2026

labs.securitykid.comtoolπŸ›‘οΈ Security

SecurityKid β€” learn secure code review on real vulnerabilities

SecurityKid Labs is a practice platform for vulnerability code review built on real GitHub security advisories, de-identified and scrubbed. Users get a scope and a diff, pin the vulnerable line, name the root cause, and defend claims against an AI mentor. They then see the advisory patch and can earn verified badges and public writeups. The page gives no case list or pricing.

GitHub
SecurityKid

Learning, AppSecΒ· Added 20 Oct 2026

x.comtool🧠 AI

G (@gg_guy03) on X

WhatThePort for Linux is a Rust utility that lists the dev servers still running in the background, the project that started each one, and its RAM use. It links each server to the Claude Code or Codex session that launched it, and stops the whole process tree without touching databases. The CLI offers `wtp`, `wtp stop <port>` and `wtp --json`. A reviewer notes the Codex resolver keeps the newest transcript per working directory, so session matches can be wrong.

RustLinuxClaude Code+1
WhatThePort

coding-agentsΒ· Added 20 Oct 2026, published 19 Oct 2026

x.comtool🧠 AI

0xRafy (@0xRafy) on X

A tweet promoting Coucou, an open-source app (about 5,000 GitHub stars, per the post) that monitors Claude Code sessions from the iPhone Dynamic Island. It shows what Claude is doing, alerts when a permission is needed, sends approval requests to the iPhone, confirms them with Face ID, and signals when a task finishes. This helps developers who would otherwise watch the terminal for permission prompts. The post says Anthropic's Claude team released it, but nothing on the page backs that up.

Claude Code
Coucou0xRafy

coding-agentsΒ· Added 18 Oct 2026, published 17 Oct 2026

llmspeed.devtool🧠 AI

Show HN: Llmspeed – feel how fast a local LLM runs before you buy the hardware

Llmspeed is an open-source web tool that lets you get a feel for how fast a local LLM runs on a given device before buying hardware. It shows estimates for a short prompt on a single device, using measured numbers from community benchmarks (r/LocalLLaMA, localscore.ai) and filling gaps with figures derived from similar setups or projected from specs. It helps with local-LLM hardware purchasing decisions.

LLM
LocalScorer/LocalLLaMAGitHub

inference, evalsΒ· Added 18 Oct 2026, published 17 Oct 2026

thingstodoapi.comtool🧠 AI

Show HN: Things to Do API

Things to Do API is a hosted knowledge base of local events (shows, talks, pop-ups, markets, festivals) that you query in natural language, for example `/v1/search?q=comedy+in+san+francisco+this+weekend`. It returns structured JSON with title, category, local start time, venue and ticket and source links. It also exposes an HTTP MCP endpoint, added with `claude mcp add --transport http thingstodo https://api.thingstodoapi.com/mcp`, so agents can use it as a tool. Coverage is live for the San Francisco Bay Area, with New York City and Los Angeles coming. Pricing is pay-as-you-go from $5 per 1,000 calls, the first 1,000 a month are free, and there is a 300 calls/min limit.

Model Context ProtocolClaude CodeREST
Things to Do APITicketmaster

mcp, llm-appsΒ· Added 18 Oct 2026, published 16 Oct 2026

x.comtool🧠 AI

EveryDev.ai (@EveryDevAi) on X

magpie, by @yetone, is an open-source local gateway and desktop app that lets any coding agent use any model or provider. It translates between the OpenAI Chat, OpenAI Responses, Anthropic Messages and Gemini APIs. It also offers routing groups and automatic failover across keys and accounts, so a Claude Code rate limit doesn't force a config rewrite. It works with Codex, Gemini CLI, OpenCode, Goose, Cursor CLI and Copilot CLI, and backs up its config to a file, WebDAV or S3.

Claude CodeCodexGemini CLI+6
magpieyetoneOpenAI+1

ai-infra, coding-agentsΒ· Added 16 Oct 2026, published 15 Oct 2026

parsimony.lasu.devtool🧠 AI

Show HN: Parsimony – an open-source benchmark for how much code AI models add

Parsimony is an open-source benchmark that ranks AI coding models by how much code their patches add. It parses the patches already published by benchmarks such as SWE-bench Verified, counts syntax-level "coding units" (statements, calls, comparisons, names, literals) rather than lines, and subtracts deleted code to get net units. It adds a leaderboard, an Artificial Analysis Intelligence Index overlay, the author's own DeepSWE runs, and a way to upload your own results. It matters because existing benchmarks score solve rate and cost but not code bloat, which makes codebases harder to maintain. The page states its limits: it measures size, not quality, and more verbose models tend to solve more tasks.

mini-SWE-agentClaude CodePi+1
ParsimonySWE-bench VerifiedDeepSWE+2

evals, coding-agentsΒ· Published and added 13 Oct 2026

pdftomp3.comtool🧠 AI

Show HN: Use your OpenAI subscription to create audiobooks

PDF TO MP3 is a hosted MCP server (Streamable HTTP, account authentication) that turns PDFs into audiobooks. The user's existing AI subscription, such as Codex, handles document processing through the MCP connection. Speech generation is billed separately through the user's own OpenAI or Google text-to-speech API key. The setup is three steps: add the MCP server, add a speech key, then attach a PDF and ask the assistant to use the MCP. It shows a "bring your own subscription" pattern that keeps the vendor's compute costs low.

Model Context ProtocolCodexOpenAI API+1
PDF TO MP3OpenAIGoogle

mcp, multimodalΒ· Published and added 13 Oct 2026

x.comtoolπŸ›‘οΈ Security

Trail of Bits (@trailofbits) on X

Trail of Bits announces SequenceHash, a library for hashing several inputs without concatenation ambiguity. Plain concatenation lets different input sequences produce the same SHA-256 digest. SequenceHash appends each input's length as a fixed 128-bit integer so every sequence has a single encoding. It ships for Rust, Go and Python, and removes a recurring bug class in crypto and appsec code.

RustGoPython
Trail of BitsSequenceHash

AppSecΒ· Added 11 Oct 2026, published 9 Oct 2026

x.comtoolπŸ›‘οΈ Security

The OSINT Newsletter (@osintnewsletter) on X

The OSINT Tools Map, built by @cyb_detective, is an interactive world map letting investigators click a country to find relevant local OSINT resources such as phonebooks, business registers, cadastral maps, and court records. The same tweet announces the companion "OSINT Tools Library" at tools.osintnewsletter.com, a curated, investigator-first directory of tools used in real cases that is actively soliciting community additions.

OSINTΒ· Added 5 Oct 2026, published 4 Oct 2026

x.comtool🧠 AI

AINotes (@ainotesus) on X

OpenRig is an orchestration tool that runs multiple coding agents as one persistent, coordinated team rather than isolated sessions. A YAML configuration defines pods, seats, communication edges, and continuity policies, while a daemon, CLI, TUI, MCP server, SQLite store, and tmux handle agent launch, inter-agent messaging, session snapshots, restoration, and topology management.

Model Context ProtocolSQLite
OpenRigAINotes

coding-agents, agentsΒ· Published and added 3 Oct 2026

dwarfstar.shtool🧠 AI

From the creator of Redis; run LLM locally with ds4

DwarfStar (ds4) is a narrow C inference engine for running large mixture-of-experts models locally on high-memory Mac (Metal), CUDA and ROCm machines. It targets specific model families end-to-end β€” DeepSeek V4/V4.1 Flash, GLM 5.x and Qwen3.8 Flash Next β€” using asymmetric 2-bit quantization that compresses routed experts while keeping shared/critical paths precise, plus SSD-backed prefix caching keyed by prompt hash to avoid full re-prefill on restart. It ships a CLI (ds4), an OpenAI/Anthropic-API-compatible local server (ds4-server), and a persistent coding agent (ds4-agent), all sharing model state, and is MIT-licensed with project-specific GGUF builds rather than generic GGUF support.

GGUFCUDAMetal+2
DeepSeek V4DeepSeek-V4.1-FlashGLM-5.3+1

inference, modelsΒ· Added 3 Oct 2026, published 2 Oct 2026

github.comtoolπŸ›‘οΈ Security

https://github.com/praetorian-inc/gato

Gato (GitHub Attack Toolkit) from Praetorian is a Python CLI for enumerating and attacking GitHub organizations' CI/CD pipelines: it identifies poisoned pipeline execution risks, abuses self-hosted runners via workflow and run-log analysis, exfiltrates Actions secrets, and automates fork-PR/workflow-based command execution. Version 1.7 added an Actions Artifacts Secrets Scanner that downloads and recursively scans workflow artifacts with NoseyParker, which Praetorian used to find critical secrets leaks in prominent open-source projects. The project is now archived/superseded by Praetorian's multi-platform tool Trajan, which merges Gato (GitHub) and Glato (GitLab) attack capabilities.

GitHub ActionsGitHubPython+2
poisoned pipeline execution

DevSecOps, Offensive SecurityΒ· Published and added 2 Oct 2026

x.comtoolπŸ›‘οΈ Security

Python Hub (@PythonHub) on X

TATS is an open-source Python tool that analyzes OAuth 2.0, OpenID Connect, and Microsoft Entra ID tokens. It helps security researchers trace authentication flows, identify risky permissions granted to tokens, and visualize token lifecycles for identity security review and investigation work.

PythonOAuthOIDC+1
TATS

Identity & AccessΒ· Published and added 2 Oct 2026

deepseek.comtool🧠 AI

DeepSeek Harness Desktop for macOS and Windows

DeepSeek Harness is an open-source general-purpose agent harness from DeepSeek, built on the "Cordis" everything-is-a-plugin architecture, shipped as a desktop app for macOS/Windows and runnable as a web UI from code. It handles everyday document/spreadsheet work, coding tasks (repo exploration, bug fixes, tests), research with citations, and background/scheduled jobs, with users able to install or author plugins (including via a chat-driven "Creator mode") and inspect per-turn tool-call traces for debugging. It runs on DeepSeek's DeepSeek-V4.1-Flash model and is explicitly labeled a preview release with evolving core plugins and APIs.

DeepSeek-V4.1-Flash
DeepSeekCordis

agentsΒ· Published and added 2 Oct 2026

x.comtoolπŸ›‘οΈ Security

Amada EcheverrΓ­a (@amadaecheverria) on X

jes is an open-source real-time guardrails project for AI agents, built by LangChain Ambassador Eden Marco, that inspects every step of an agent's trajectory β€” prompts, tool calls, tool results, skills, and responses. It runs on decision models like Jev from TypeSafeAI and ships with a LangChain middleware example for wiring the checks into an agent pipeline.

LangChainjesJev
Eden MarcoTypeSafeAI

AI SecurityΒ· Added 3 Oct 2026, published 1 Oct 2026

inteltechniques.comtoolπŸ›‘οΈ Security

IntelTechniques OSINT Tools Hub

IntelTechniques Search Tools is Michael Bazzell and Jason Edison's free companion toolset to their OSINT Techniques book, offering a collection of browser-based query generators and lookup tools for open-source intelligence investigations. Queries run client-side in the user's browser with no data collected or stored by the site, covering username/email/phone lookups, social media search, and other recon categories referenced in the book's 11th edition.

Michael BazzellJason Edison

OSINTΒ· Added 3 Sep 2026, published 31 Jul 2026

jfrog.comtool🧠 AI

JFrog: Boost Enters Public Preview

JFrog's Boost is a free CLI wrapper that intercepts coding-agent tool output such as test logs, grep results, and terminal output, stripping irrelevant content before it reaches the model while preserving full access via a retrieve command if needed. JFrog rolled it out to 1,000+ internal engineers using Cursor and Claude Code, reporting over 100 billion tokens saved and describing pitfalls: blanket permission-approval risk from wrapping every shell command, false-savings claims from tools that double-count filtering, and truncation-driven hallucination loops where aggressive context-cutting caused agents to repeatedly re-verify state.

Claude CodeCursorDocker
JFrogBoost

coding-agents, ai-infraΒ· Added 22 Sep 2026, published 15 Jul 2026

huggingface.cotoolπŸ›‘οΈ Security

knowledgator/opir-multitask-large-v1.0 Β· Hugging Face

Opir-multitask-large is an English encoder-based GLiClass zero-shot classifier for real-time LLM safety filtering, supporting binary safe/unsafe decisions, toxicity classification, jailbreak/prompt-injection detection, and categorization over a 996-label hierarchical safety taxonomy (16 top-level, 126 mid-level, 854 leaf labels). It was trained with taxonomy-derived unsafe-prompt generation, evolutionary hard-negative mining against existing safety models, LLM-as-judge annotation (DeepSeek-V3.1, MiniMax-M2.5, Llama-3.3-70B), and replay training on the gliclass-v3-logic-dataset, and is benchmarked against WildGuard, PolyGuard, Nemotron Safety Guard and Qwen3Guard across datasets like Aegis2, HarmBench, WildGuardMix, ToxicChat, and JBB-Behaviors, reporting ~25ms p50 latency at 1024 tokens for real-time deployment as an input/output moderation layer.

GLiClassHugging FacePython
OpirAegis2WildGuardMix+4

AI SecurityΒ· Added 29 May 2026

github.blogtoolπŸ›‘οΈ Security

GitHub Dependency Scanning MCP Server

GitHub's MCP Server now ships a "dependabot" toolset, in public preview, that lets MCP-compatible AI coding agents (Copilot Chat, Copilot CLI) scan dependency changes for known vulnerabilities before commit. The toolset queries the GitHub Advisory Database for affected packages, severity, and fixed versions, and can invoke the Dependabot CLI locally to diff dependency graphs pre/post-change for deeper post-commit checks. Requires Dependabot alerts enabled on the repo; setup involves enabling the toolset via Copilot CLI, VS Code MCP headers, or the advanced-security Copilot plugin.

Model Context ProtocolGitHubDependabot+3

Supply Chain, DevSecOpsΒ· Added 3 Sep 2026, published 11 May 2026

0xv1n.github.iotoolπŸ›‘οΈ Security

Introducing MacNoise!

MacNoise is a modular, open-source macOS telemetry noise generator built to help defenders validate EDR, SIEM, and firewall detection coverage by emitting real system events β€” network connections, process spawns, dylib injection, file writes, plist mutations, TCC permission probes, and launch agent persistence. It ships a REPL (macnoise run/list/info/scenario), a dry-run testing mode, and OCSF-compliant JSONL audit/telemetry logs tagged with MITRE ATT&CK mappings and correlation IDs, and supports YAML "scenarios" that chain modules to emulate specific adversary tradecraft (e.g., an EDR Validation Suite covering proc_inject, net_dns, tcc_fda). It's positioned as a macOS-focused complement to the EDR-Telemetry project and Windows-centric atomic-testing tools, aimed at surfacing logging gaps before an incident.

macOSMITRE ATT&CKEDR+1
EDR-Telemetry

Blue Team & DetectionΒ· Added 3 Sep 2026, published 26 Feb 2026