Awesome List Updates on Jul 25, 2026

15 awesome lists updated today.

🏠 Home · 🔍 Search · 🔥 Feed · 📮 Subscribe · ❤️ Sponsor

1. Awesome Mac

System Tools / System Utilities

• kasper9n/time-machine-inspector (⭐196) — Time Machine backup size inspector app ☆196

2. Awesome Pentest

Android Utilities

• NullKia (⭐30) - Mobile Security Framework supporting 500+ devices across 18 manufacturers with bootloader unlock, firmware extraction, baseband exploitation, and eSIM tools.

Intentionally Vulnerable Systems / Zealandia

• OopsSec Store (⭐31) - Run npx create-oss-store, open your browser, and start hunting flags.

Network Tools / Network Reconnaissance Tools

• Have I Been Squatted - A fast domain typosquatting detection tool

• Subfinder (⭐14k) - Fast passive subdomain enumeration tool.

• Naabu (⭐6.1k) - Fast port scanner written in Go with focus on reliability.

• Katana (⭐17k) - Next-generation crawling and spidering framework.

Network Tools / Protocol Analyzers and Sniffers

• Sniffnet (⭐40k) - App to comfortably monitor your Internet traffic.

Network Tools / Wireless Network Tools

• WiFi-Pumpkin3 (⭐2.5k) - Framework for rogue Wi-Fi access point attack.

Network Vulnerability Scanners / Web Vulnerability Scanners

• WAFtester (⭐7) - WAF security testing CLI that fingerprints 197+ WAF vendors, benchmarks rule coverage with quantitative scoring, and automates bypass discovery with 70+ evasion techniques.

• Lonkero (⭐967) - Enterprise-grade web vulnerability scanner with 60+ attack modules, built in Rust for penetration testing and security assessments.

• jiraffe (⭐204) - Security reconnaissance and vulnerability scanner for Atlassian Jira, focused on misconfigurations, unauthenticated access and CVE validation.

• Dalfox (⭐5.2k) - Fast parameter analysis and XSS scanner.

• Ghauri (⭐4k) - Advanced SQL injection detection and exploitation tool.

Open Sources Intelligence (OSINT) / Penetration Testing Report Templates

• wayparam (⭐7) - Tools designed to discover hidden or undocumented parameters and endpoints by generating or normalizing request inputs, often used to identify input handling issues and unexpected application behavior.

Open Sources Intelligence (OSINT) / Data Broker and Search Engine Services

• Leaker (⭐555) - Passive leak enumeration CLI tool that searches across 10 breach databases simultaneously.

Open Sources Intelligence (OSINT) / OSINT Online Resources

• certgrep - A fast Certificate Transparency Log regex domain lookup tool

Operating System Distributions / Web application and resource analysis tools

• NullSec Linux (⭐67) - Debian-based security distribution with 135+ tools including specialized editions for cloud, AI/ML, hardware, automotive, and mobile security testing.

Physical Access Tools / Web application and resource analysis tools

• Hak5 - Commercial pentest hardware shop for USB attack platforms and network implants, including the USB Rubber Ducky, Bash Bunny, Key Croc, Packet Squirrel, and LAN Turtle.

Privilege Escalation Tools / Web application and resource analysis tools

• pspy (⭐6.1k) - Unprivileged Linux process sniffer that monitors commands and cron jobs as they execute via procfs scans and inotify.

Reverse Engineering / Reverse Engineering Tools

• Cutter - Free and open source reverse engineering platform powered by Rizin.

• rizin - Free and open-source Reverse Engineering framework, fork of radare2.

• ImHex (⭐54k) - Feature-rich hex editor for reverse engineers and programmers.

Web Exploitation / Web shells and C2 frameworks

• Reverse Shell as a Service (⭐2k) - Easy to remember reverse shell that should work on most Unix-like systems.

Windows Utilities / Web Exploitation Books

• Empire (⭐5.2k) - Post-exploitation and adversary emulation framework with PowerShell, Python, and C# agents.

3. Awesome Go

Maps

• genericsyncmap (⭐1) - Type-safe generic wrapper for sync.Map with full method parity and zero dependencies.

Game Development

• sceneCamera (⭐3) - Camera movement and view/projection matrices for museum, FPS, RTS, and stereo rendering modes.

4. Free for Dev

PaaS

• Cohesivity - Headless backend and services, purpose built for AI agents. Includes hosting, databases, storage, LLMs, and third-party APIs. Agentic signup. Free tier includes 10 projects, 100K edge requests, 10 GB object storage, 100 emails, and 5 USD/month in credits for AI and search.

5. Awesome Blazor

Videos / Others

• ASP.NET Community Standup: What's new in .NET 11 Preview 6? - July 21, 2026 - Join the ASP.NET Core team for a tour of what's new for ASP.NET Core and Blazor in .NET 11 Preview 6: Async minimal API validation, automatic CSRF protection, unions, OpenAPI 3.2, Blazor and SignalR improvements, and more.

6. Awesome Datascience

Frameworks

• Lumen (⭐300) - Agent framework for chatting with data, turning natural language into SQL, transformation pipelines and visualizations. Outputs are declarative specs that can be inspected, edited, reopened in a notebook or composed into a dashboard.

7. Awesome Opentofu

Tools / Platforms

• Terramantle - Free hosted module, state backend and private registry that maps module and provider dependencies and surfaces security, drift, and usage insights across your workspaces.

8. Collective Ai Tools

Developer Tools

• Agent Island (⭐69) - Open-source status companion for Claude Code and Codex sessions on macOS and Windows, with live state and your-turn alerts. #free #opensource

9. Awesome V

Command-line

• waterjail (⭐1) - A lightweight, surgical Seccomp-BPF dynamic sandboxing and analysis tool written in V.

10. Awesome Rust

Applications / Security tools

• getprovenant/provenant (⭐37) [provenant-cli] - Fast license, copyright, package, and SBOM scanner that emits CycloneDX and SPDX with a complete, closed dependency inventory; static and offline.

Libraries / Authentication

• GunduLabs/gaze (⭐242) - Facial authentication for Linux with on-device face recognition, PAM integration, and tools for login, lock screen, sudo, and desktop management.

11. Public Apis

Art & Design

• API: Thisispaper

  Description: Curated architecture, design, photography and art projects with visual-similarity and taste metadata

  Auth: apiKey

  HTTPS: Yes

  CORS: Yes

• API: Text-till-Kladdesign

  Description: AI fashion design generator — transform Swedish text into clothing concepts

  Auth: apiKey

  HTTPS: Yes

  CORS: Yes

Cryptocurrency

• API: BlazePhoenix

  Description: On-chain DEX aggregator quotes and route execution data

  Auth: No

  HTTPS: Yes

  CORS: Yes

• API: Zennet

  Description: x402 pay-per-use APIs: Polymarket signals, CEX/DEX spreads, contract risk scores, gas oracle

  Auth: No

  HTTPS: Yes

  CORS: Yes

Development

• API: MyIPRightNow

  Description: Public IP address with network, location, and connection details

  Auth: No

  HTTPS: Yes

  CORS: Yes

Finance

• API: Dino.markets

  Description: Matched Kalshi and Polymarket prediction-market data, cross-venue spreads

  Auth: apiKey

  HTTPS: Yes

  CORS: No

  :

• API: Top 5 Stocks

  Description: Daily AI-ranked stock and crypto watchlists

  Auth: No

  HTTPS: Yes

  CORS: Unknown

  :

Government

• API: Disclosed Capitol

  Description: US congressional & executive-branch stock trade disclosures (STOCK Act + OGE)

  Auth: apiKey

  HTTPS: Yes

  CORS: No

Jobs

• API: Artificial Intelligence Jobs

  Description: Live AI/ML job listings from 260+ companies' own career pages, with salary, location, remote and seniority filters

  Auth: No

  HTTPS: Yes

  CORS: Yes

• API: freehire

  Description: Open-source search engine aggregating tech jobs from company ATS boards

  Auth: No

  HTTPS: Yes

  CORS: No

Open Data

• API: Tilth

  Description: Free daily UK fertiliser price index across nine grades, CC BY 4.0 licensed

  Auth: No

  HTTPS: Yes

  CORS: Yes

Science & Math

• API: OrbitalWiki

  Description: Catalog of 16,000+ satellites merging CelesTrak, GCAT, Wikidata; free tier included

  Auth: apiKey

  HTTPS: Yes

  CORS: Yes

Sports & Fitness

• API: Lumify

  Description: Real-time sports intelligence: scores, odds, betting splits & AI bet analysis across 8 sports

  Auth: apiKey

  HTTPS: Yes

  CORS: No

• API: Odds-API

  Description: Real-time sports betting odds from 265+ bookmakers across 34 sports via REST and WebSocket

  Auth: apiKey

  HTTPS: Yes

  CORS: Yes

Test Data

• API: AddressMock

  Description: Random US, Hong Kong and Cape Verde addresses with matched city, state and ZIP

  Auth: No

  HTTPS: Yes

  CORS: Yes

Transportation

• API: CruiseFeed

  Description: Normalized cruise line inventory: ships, sailings, itineraries, ports and lead-in fares

  Auth: apiKey

  HTTPS: Yes

  CORS: Unknown

12. Awesome Transit

Hardware / Rust

• CharlieBoard (⭐40) - Open-source MBTA display using WS2812B LEDs on a Raspberry Pi Zero 2W, with real-time vehicle positions, geographically accurate PCB map, and a web control interface.

Related lists / General GIS Applications for making transit visualizations

• awesome-europe (⭐119) - Curated list of open source projects for the EU / EEA, with a transport and mobility section that overlaps this list (HAFAS, NeTEx, ETCS, SIRI, Transitous, OpenTripPlanner EU deployments).

13. Awesome Ironsworn

Tools / Starforged

• Elven Ironsworn - ElvenVTT module with Ironsworn moves, oracles, assets and progress tracks

14. Awesome Cli Apps

Files and Directories / Disk Usage

• darya (⭐147) - A disk usage explorer TUI with live treemap.

15. Awesome Gemini Cli

Commands & Extensions

• wiki (⭐67) - Indexed Markdown knowledge bases with a CLI and installable Agent Skill. wiki install writes the skill to ~/.agents/skills, which Gemini CLI discovers.

• Next: Jul 24, 2026