Awesome List Updates on Sep 21 - Sep 27, 2026

28 awesome lists updated this week.

🏠 Home · 🔍 Search · 🔥 Feed · 📮 Subscribe · ❤️ Sponsor

1. Awesome Zig

Fundamentals / Utility

• ktarasov/check_links (⭐5) - A command-line utility (CLI) written in Zig for checking links on a web page. AI-assisted.

Language Essentials / File Format Processing

• pedronaugusto/strand (⭐0) - Typed JSON Lines for Zig: one JSON value per line, read and written for append-only logs, line protocols and event streams. AI-assisted.

Systems Programming / Operating Systems

• pedronaugusto/conduit (⭐0) - Starts child processes and gives them pseudo-terminals, on a pty in their own session with a window size, or on pipes killed and reaped with a deadline. AI-assisted.

• pedronaugusto/lookout (⭐0) - A file-system watcher for Zig: one Watcher type over each platform's own notification interface, and a polling backend that needs nothing from the kernel. AI-assisted.

Data & Science / Database

• pedronaugusto/chronicle (⭐0) - An append-only event log for Zig, where a journal is a directory of segment files holding one JSON object per line. AI-assisted.

Multimedia & Graphics / Graphics Library

• pedronaugusto/morse (⭐0) - Writes terminal control sequences and parses the bytes a terminal sends back: keys, mouse reports, and the replies to questions a program asks. AI-assisted.

2. Public Apis

Cryptocurrency

• API: HostDeFi

  Description: Free A+–F token-safety grades across Solana and EVM chains

  Auth: No

  HTTPS: Yes

  CORS: Yes

• API: The Coin Analysis

  Description: Live and historical cryptocurrency prices, market caps, volatility and drawdown

  Auth: apiKey

  HTTPS: Yes

  CORS: Yes

Development

• API: Aether Bridge

  Description: Autonomous agent team management and API workflow orchestration

  Auth: apiKey

  HTTPS: Yes

  CORS: Unknown

• API: Renderwolf

  Description: Screenshots, PDFs, dynamic images, QR codes and video from URLs or HTML

  Auth: apiKey

  HTTPS: Yes

  CORS: No

Documents & Productivity

• API: FaturaPDF

  Description: Generate Brazilian invoice/receipt PDFs with checksum-validated CPF/CNPJ and PIX QR

  Auth: apiKey

  HTTPS: Yes

  CORS: Unknown

Email

• API: Email Validator by LifeStep

  Description: Validate email syntax and MX, detect disposable/role addresses, suggest typo fixes

  Auth: No

  HTTPS: Yes

  CORS: Yes

• API: RankFabrik Verify

  Description: Validate email addresses for deliverability, syntax and disposable detection

  Auth: apiKey

  HTTPS: Yes

  CORS: Unknown

Environment

• API: GridHub

  Description: Live wholesale electricity prices and demand across 25 grid zones

  Auth: apiKey

  HTTPS: Yes

  CORS: Yes

Finance

• API: Banking Access Index

  Description: Which US business banking providers accept founders by country of residence, with sources

  Auth: No

  HTTPS: Yes

  CORS: Yes

• API: Drillr

  Description: Fundamentals, filings, earnings, ownership and events for US, China and Japan equities

  Auth: apiKey

  HTTPS: Yes

  CORS: No

Geocoding

• API: IP99

  Description: IP geolocation with proxy, VPN and datacenter risk and the age of the evidence

  Auth: No

  HTTPS: Yes

  CORS: Yes

Jobs

• API: JobsPipe

  Description: Live job postings from 30+ ATS feeds and job boards in one normalized JSON schema

  Auth: apiKey

  HTTPS: Yes

  CORS: Yes

Open Data

• API: Microburbs

  Description: Australian property and suburb data: valuations, sales, rents, schools, demographics, risk, zoning

  Auth: apiKey

  HTTPS: Yes

  CORS: No

Photography

• API: Kavel

  Description: Generate and edit images with AI, no key or account required

  Auth: No

  HTTPS: Yes

  CORS: No

Shopping

• API: CartScout

  Description: Price, stock, variants and GTIN from Shopify, WooCommerce, Walmart and eBay product pages

  Auth: apiKey

  HTTPS: Yes

  CORS: Unknown

• API: Pangolinfo Amazon Data

  Description: Amazon product, review, search and Best Sellers data across 20+ marketplaces

  Auth: apiKey

  HTTPS: Yes

  CORS: Unknown

URL Shorteners

• API: Lix.li

  Description: URL shortener with analytics, QR codes, UTM tags and custom domains

  Auth: apiKey

  HTTPS: Yes

  CORS: Yes

3. Awesome Graphql

Communities

• Stack Overflow - Questions and answers using the tag graphql.

JavaScript/TypeScript

• Grafast - A cutting edge planning and execution engine for GraphQL.

Clients

• zodql (⭐2) - Type-safe GraphQL client that uses Zod schemas as the single source of truth to build queries, infer response types, and validate responses at runtime.

JavaScript Examples / React

• Apollo React example for GitHub GraphQL API (⭐113) - Example using Apollo React with the GitHub GraphQL API and Create React App.

TypeScript Examples / React

• Next.js Advanced GraphQL CRUD MongoDB Starter (⭐31) - Generic CRUD starter with an advanced Apollo GraphQL server, Next.js, MongoDB, and TypeScript.

PHP / React

• Drupal GraphQL - Craft and expose a GraphQL schema for Drupal 9 and 10.

Kotlin / React

• graphql-kotlin (⭐1.8k) - GraphQL Kotlin implementation.

• KGraphQL (⭐307) - Pure Kotlin implementation for setting up a GraphQL server.

• Kobby (⭐89) - Codegen plugin of Kotlin DSL Client by GraphQL schema. The generated DSL supports execution of complex GraphQL queries, mutation and subscriptions in Kotlin with syntax similar to native GraphQL syntax.

• Graphkt (⭐10) - DSL-based GraphQL server library for Kotlin, backed by graphql-java.

Go / React

• GraphQL (⭐10k) - Implementation of GraphQL for Go that follows graphql-js.

Elixir / React

• GraphQL (⭐87) - Elixir GraphQL parser.

Android / React

• apollo-android (⭐4k) - 📟 A strongly-typed, caching GraphQL client for Android, written in Java.

R (Rstat) / React

• GraphQL (⭐39) - Bindings to the 'libgraphqlparser' C++ library. Parses GraphQL syntax and exports the AST in JSON format.

Crystal / React

• GraphQL (⭐139) - Server library for Crystal.

Ballerina / React

• GraphQL (⭐139) - Standard Ballerina library providing GraphQL client and server implementations with built-in subscription support.

• GraphQL CLI (⭐108) - A CLI tool to generate Ballerina code from GraphQL schema and GraphQL schema from Ballerina code. It also provides functionality to generate usage-specific GraphQL clients using GraphQL schemas and documents.

Tools - Editors & IDEs & Explorers / React

• GalleonQL - A desktop API client built specifically for GraphQL (macOS, Windows, Linux), pairing an introspected schema browser with an incremental query builder and switchable endpoint profiles.

Tools - Security / React

• WAF for GraphQL - Web application firewall for GraphQL APIs.

Databases / React

• Cube (⭐21k) - Headless BI platform for building data applications with GraphQL, SQL, and REST APIs with sub-second latency.

Services / React

• Codex - GraphQL API for real-time and historical on-chain data, including token prices, charts, and holders across 90+ networks.

Posts / React

• GitHub GraphQL API React Example

• Make Your GraphQL API Easier to Adopt Through Components

Tutorials / React

• OWASP GraphQL Security Cheat Sheet - Comprehensive guide for securing GraphQL endpoints and preventing vulnerabilities.

4. Learn to Program

Intermediate

The Concise TypeScript Book (⭐10k)

Free open-source book covering TypeScript fundamentals through advanced concepts
(TypeScript, JavaScript)

5. Awesome Ironsworn

Hacks and homebrew / Starforged

• Ironsworn: Aura & Iron - Powerful abilities and combat mechanics for Ironsworn

6. Awesome Cli Apps in a Csv

Git and accessories

• relnote - Offline stdlib Python CLI and GitHub Action for conventional-commit release notes with no API and no config.

7. Awesome Mac

Design & Graphics / Screen Capture

• apoorvdarshan/TetherShot (⭐16) — Native macOS menu bar utility for capturing the actual iPhone display over USB or Wi-Fi and saving pixel-perfect PNGs locally. ☆16

Developer Tools / API Tools

• RockxyApp/Rockxy (⭐1.4k) — Native macOS HTTP debugging proxy ☆1,368

Developer Tools / Developer Utilities

• yylo-dev/yylo (⭐57) — Cross-platform command-line orchestrator for coding agents with typed task, validation, merge, and release-readiness boundaries. ☆59

Networking / Network Analysis

• RockxyApp/Tracexy (⭐132) — Native, local-first network intelligence for macOS ☆132

8. Awesome Polars

Polars plugins / Mathematical & Statistical Functions

• polars-stats (⭐35) - Polars expression plugin that exposes scipy.stats-style probability distributions by @FBruzzesi.

9. Awesome Web Security

Miscellaneous / Server-Side Request Forgery

• From DNS Evidence to a Finding: DNS and Mail Security Methodology - How DNSSEC, DANE, SPF/DKIM/DMARC and SMTP transport evidence becomes a finding, with the decision logic for each, the dig invocations to reproduce it independently, and the false positives to expect.

10. Awesome Mac

AI Tools / Other Tools

• DeepDeck - Desktop AI workspace built on DeepSeek Harness for creating and reusing WebMCP tools for website tasks.

Input Methods / Audio Record and Process

• Qingjian 青简 - Rust-based cross-platform Pinyin input method that displays translations in the language you are learning alongside candidate words.

Utilities / Cleanup and Uninstall

• MangoDisk - Free, open-source disk cleaner and space analyzer that scans locally and shows paths and sizes before deletion.

11. Awesome Lowcode

Online database creator apps

• Busabase - Open-source database and workspace for AI agents that turns agent output into data, docs, skills, and apps with human-reviewed changes.

12. Awesome Scientific Writing

Bibliography

• citecheck (⭐3) - Command-line tool that matches BibTeX, RIS, and CSL-JSON references against Crossref and OpenAlex and flags retractions reported by Crossref.

13. Awesome Electronics

CAD Specific / KiCad

• Awesome KiCad Projects (⭐107) - Curated list of open source hardware projects whose PCBs are designed in KiCad.

14. Magictools

Graphics / Texture Tools

• 🆓 Nebula Forge - Browser-based procedural nebula background generator with adjustable controls and PNG export. Runs locally without signup.

Books / Voxel Editors

• 🆓 AI Workflow for Game Designers

15. Awesome Design Systems

More resources

• Button Hover Specimens - Catalogue of 131 button hover mechanisms and 117 press states on one identical button, each with its own markup and code to copy. Same label, same box, same rule, so the interaction is the only variable. No dependencies.

16. Awesome Blazor

AI

• Caveman (⭐4) - 🦴 A self-contained C# prompt compressor for LLMs (GPT-4, Gemma, Llama, …): strips grammatical "noise" and lemmatizes text for up to 70% token reduction, across 50+ embedded languages, with zero NLP-model runtime dependency. Content-aware routing auto-detects JSON/diffs/logs/code/tables and applies the best compression strategy for each; ships Light/Semantic/Aggressive levels and ready-made compression profiles. NuGet.

• Caveman.SemanticKernel (⭐1) - Optional add-on package exposing Caveman's prompt compression, conversation-fitting/summarization, and project-analysis tools as Microsoft Semantic Kernel plugins (kernel functions ready to register with Kernel.CreateBuilder()).

• Caveman.mcp (⭐1) - An MCP (Model Context Protocol) server exposing Caveman's token compression, language detection, content-aware routing and extractive summarization as tools for AI agents and MCP-compatible editors — integrates directly with Claude Code, Cursor, Windsurf and similar.

• Caveman.PrivacyGuard (⭐1) - 🛡️ Enterprise-grade PII/privacy analyzer for AI/LLM pipelines: detects, risk-scores and auto-masks sensitive data across 27 EU countries (heuristic regex + Luhn/IBAN/checksum validators + Shannon-entropy analysis), with GDPR/PCI-DSS/NIST-800-53 compliance mapping and runtime-configurable YAML rules. NuGet.

• Signs of AI Writing (⭐24) - Free, privacy-first toolkit for writing integrity. An explainable AI-writing linter that suggests a fix for every flagged tell, plus an originality checker that surfaces shared passages as evidence a human judges. Runs almost entirely in the browser, English and Spanish. Blazor WebAssembly. Demo.

Editors

• Stilo (⭐1) - A professional suite of pure-C# Blazor libraries, zero native dependencies, working in both Blazor Server and WebAssembly: Stilo.Editor, a full Microsoft Word–style WYSIWYG HTML editor (Office-style ribbon, Pages mode with millimeter rulers, offline multilingual spell checking, DOCX/PDF/Markdown import & export, dozens of insertable content types from tables to barcodes/QR); and Stilo.Reports, a self-contained RDL/RDLC-compatible report designer & viewer (drag-and-drop designer, Tablix with true Matrix pivot, 10 chart types rendered as SVG, barcode/QR items, PDF export). Individual developers get a free annual license. Stilo.Editor NuGet · Stilo.Reports NuGet.

Component bundles

• BlazorWinOld (⭐14) - A Blazor UI component library bringing back the retro look of Windows 98, XP, 7 and 10 desktop styles, compatible with Blazor Server and WebAssembly. Documentation.

2D/3D Rendering engines / Diagrams

• FlowState (⭐27) - A high-performance node editor for Blazor. Build visual programming tools, node-based workflows, and interactive graph editors with complete styling control.

Routing & Navigation / Others

• BlazorMemoire (⭐29) - A highly-performant Blazor <Memo> component, similar to React.memo, that freezes its child subtree until explicit dependency keys change, preventing unnecessary re-renders and making lifecycle methods fire only when there's been a true change.

• IOSwipeView (⭐1) - Fluid swipe actions and interactive list primitives for Blazor with authentic spring physics, rubber banding, and customizable deletion animations. Demo.

Tools & Utilities / Others

• Pkl.Net (⭐1) - A type-safe configuration management library for .NET bringing Apple's Pkl configuration language to C#, zero external dependencies. Catches config errors (type mismatches, out-of-range values) at evaluation time instead of at runtime, with a clean typed-deserialization API, an IConfiguration extension for ASP.NET Core/Blazor apps, and a public MessagePack encoder/decoder.

Tooling / Others

• Blazor Developer Tools (⭐119) - The first visual DevTools for Blazor. Browser extension that adds a "Blazor" tab to Chrome/Edge DevTools with component tree visualization, timeline profiler, flamegraph, and "why did this render?" diagnostics. No code changes required for basic tracking. blazordevelopertools.com.

17. Awesome Neovim

Utility / Cursorline

• javanoo6/persist-toggle.nvim (⭐1) - Persistent registry for runtime toggle states and preferences.

Animation / CSV Files

• josstei/whisk.nvim (⭐58) - Smooth, high‑performance motion and scrolling animations — 60fps fluid cursor moves, word jumps, and viewport scrolling, all in one.

18. Awesome Bitcoin

Utilities

• BackPoW - Solo block odds, cost of production and break-even electricity per rig, from live difficulty.

Additional Resources

• LearnBitcoin.com - Bitcoin-only education: a guided six-chapter journey, 17 long-form rabbit holes, and a ~470-entry glossary, CC-BY-SA with no ads or affiliates.

19. Awesome Mysql

Deployment

• dbdeployer (⭐47) - A tool that installs one or more MySQL servers within seconds, easily, securely, and with full control.

HA

• Orchestrator (⭐55) - MySQL replication topology management and High Availability solution.

20. Free Programming Books (English, By Subjects)

Graphics Programming

• Computer Graphics from Scratch - Gabriel Gambetta (HTML)

21. Awesome Gemini Cli

Commands & Extensions

• ru-text (⭐231) - Russian text quality — ~1,040 rules for typography, info-style, editorial, UX writing, business correspondence.

• AIHawk (⭐32k) - Gives Gemini CLI a real Firefox to drive from plain-English instructions: opens pages, clicks, types, reads and screenshots through the real pointer and keyboard. Open source, MIT. Install via gemini extensions install https://github.com/feder-cr/AIHawk.

• kgai (⭐0) - Shared decision memory for AI dev teams: your agent records why the code changed (and the dead ends it ruled out), recalls it before the next edit, and syncs it across the team without merge conflicts. Local-first, immutable, engine installs itself on first run.

Development Tools & Utilities

• tldr (⭐6) - Leads every response with a three-line TL;DR and folds the full detail underneath, so the answer is not buried. Never folds destructive commands, security findings, verbatim errors or diffs. Returns a parseable block for agent-to-agent reports. Ships a Gemini CLI extension.

MCP Servers

• squirrelscan (⭐268) - Website audit MCP server for coding agents: run audits, read reports, and fix findings from Gemini CLI or any MCP client. 260+ rules across SEO, performance, security, accessibility, and agent experience, with fixes mapped to source. MIT CLI with a local stdio server (squirrel mcp) or hosted Remote MCP with OAuth: gemini mcp add --transport http squirrelscan https://mcp.squirrelscan.com/mcp.

• Glasser (⭐1) - One key to 1,000+ paid third-party data APIs, pay per call: person and company enrichment, SEO and SERP, web scraping, places, news, scholar and social data. The agent searches the catalog, inspects the exact price, runs the endpoint and reports the charge; failed calls and empty results cost $0.00. Remote Streamable HTTP with OAuth sign-in. Works with Gemini CLI: gemini mcp add --transport http glasser https://api.glasser.ai/mcp.

22. Awesome Claude Code

Writing & Prose Quality / Obsidian

• Claude Style Patch (⭐138) by Andrew Roxby - A CLAUDE.md section that constrains Claude's prose style. It bans specific habits, including announcing a point before making it, colon-hinged sentences where the left side labels the right, verbless fragment openers, and stacked compression. Each rule names the habit, shows an example, and gives the rewrite.\       

23. Awesome Testing

Software / AI & LLM Testing

• OrcaReplay (⭐171) - Records a coding-agent session below the harness, keeping the verbatim request and response bytes, then replays the same run offline with the network off or forks it from a checkpoint onto other models with a verify command deciding the verdict.

• flight-recorder (⭐1) - Record every nondeterministic input your code reads (LLM answers, HTTP, database, clock, randomness) as one JSONL tape per request, then replay the tape against the real code offline, bit for bit, with the first divergence named. Open format with Python, Node, .NET, Go, Java and PHP implementations.

Software / UI & End-to-End Testing

• Drengr - Mobile tests written as plain-English tasks instead of selectors, driven by an agent on real Android devices and iOS simulators. Works where there is no accessibility tree — canvas, games, Flutter without semantics labels — by falling back to vision and coordinates. Runs locally or in CI; bring your own model key.

• Drengr Runner (⭐1) - Drive an iOS simulator over HTTP from any language. A 479-line Swift XCTest target replacing WebDriverAgent on simulators. Apache-2.0.

Software / Test Data Management

• ARADURU File Format Test Corpus - Open CC0 corpus of deterministic healthy and intentionally broken XLSX, DOCX, PPTX, ZIP, and PDF fixtures with SHA-256 manifests for file validation, parser, upload, and QA testing.

24. Awesome Fuzzing

Papers / The Network and Distributed System Security Symposium (NDSS)

• ADGFUZZ: Assignment Dependency-Guided Fuzzing for Robotic Vehicles, 2026

• An LLM-Driven Fuzzing Framework for Detecting Logic Instruction Bugs in PLCs, 2026

• BSFuzzer: Context-Aware Semantic Fuzzing for BLE Logic Flaw Detection, 2026

• DOM-XSS Detection via Webpage Interaction Fuzzing and URL Component Synthesis, 2026

• FirmAgent: Leveraging Fuzzing to Assist LLM Agents with IoT Firmware Vulnerability Discovery, 2026

• Fuzzilicon: A Post-Silicon Microcode-Guided x86 CPU Fuzzer, 2026

• GoldenFuzz: Generative Golden Reference Hardware Fuzzing, 2026

• HyperMirage: Direct State Manipulation in Hybrid Virtual CPU Fuzzing, 2026

• MUTATO: Enhancing Fuzz Drivers with Adaptive API Option Mutation, 2026

• PhyFuzz: Detecting Sensor Vulnerabilities with Physical Signal Fuzzing, 2026

• PortRush: Detect Write Port Contention Side-Channel Vulnerabilities via Hardware Fuzzing, 2026

• ReFuzz: Reusing Tests for Processor Fuzzing with Contextual Bandits, 2026

• RTCON: Context-Adaptive Function-Level Fuzzing for RTOS Kernels, 2026

Papers / IEEE Symposium on Security and Privacy (IEEE S&P)

• Batch Me If You Can: Coverage-guided RPKI Fuzzing at Scale, 2026

• Camveil: Unveiling Security Camera Vulnerabilities through Multi-Protocol Coordinated Fuzzing, 2026

• deepSURF: Detecting Memory Safety Vulnerabilities in Rust Through Fuzzing LLM-Augmented Harnesses, 2026

• Fizzle: A Framework for Deterministic and Reproducible Network Fuzzing, 2026

• Fuzzing the Physical Space: Physics-Aware Testing of Black-Box Industrial Control Systems, 2026

• Jazzer: Coverage-Guided Fuzzing for Semantic Vulnerabilities in the Java Ecosystem, 2026

• PILOT: Command-line Interface Fuzzing via Path-Guided, Iterative Large Language Model Prompting, 2026

• SmuFuzz: Enable Deep System Management Mode Fuzzing in Fully Featured UEFI Runtime Environment, 2026

• Specializing Language Models for Textual Fuzzing via Reinforcement Learning, 2026

• StepStone: LLM-Based GPU Kernel Driver Fuzzing via User-Space Libraries, 2026

• Stop Starving or Stuffing Me: Boosting Firmware Fuzzing Efficiency with On-demand Input Delivery, 2026

• TrigFuzz: Triggering Conditions Guided Directed Fuzzing, 2026

• Web Application Vulnerability Repair via Context-Aware Fault Localization and Directed Differential Fuzzing, 2026

• zkFuzz: Foundation and Framework for Effective Fuzzing of Zero-Knowledge Circuits, 2026

Papers / USENIX Security

• Bond: Constraint-Directed Fuzzing for Automated Validation of Taint Analysis Results in Linux-based IoT Firmware, 2026

• CombiSan: Unifying Software Sanitizers for Comprehensive Fuzzing, 2026

• FirmReBugger: A Benchmark Framework for Monolithic Firmware Fuzzers, 2026

• PANGOLIN: Fuzzing Multilingual IoT Firmware with LLM-Driven Code Analysis, 2026

Tools / File

• G2FUZZ (⭐30) (2025) - An AFL++-based fuzzer that uses LLMs to synthesize and mutate input generators for grammar-aware fuzzing of non-textual formats.

• LibAFL (⭐2.6k) (2022) - A Rust framework for building custom fuzzers from reusable components, with support for multiple platforms and scaling across cores and machines.

• WINNIE (⭐576) (2021) - A Windows application fuzzer that combines harness synthesis with fast process cloning to test code beyond graphical interfaces.

• MOpt-AFL (⭐214) (2019) - An AFL-based fuzzer that uses particle swarm optimization to adapt mutation operator selection probabilities for more effective fuzzing.

• REDQUEEN (⭐401) (2019) - A binary fuzzer that uses input-to-state correspondence to overcome magic bytes and checksums without symbolic execution.

• InsTrim (⭐84) (2018) - A lightweight instrumentation approach for AFL that uses control-flow analysis to reduce the number of instrumented basic blocks while preserving execution path distinguishability.

• QSYM (⭐654) (2018) - A concolic execution engine designed for hybrid fuzzing that works with AFL to generate inputs for new execution paths.

• AFLGo (⭐559) (2017) - An AFL-based directed greybox fuzzer that generates inputs to reach specified target locations in a program.

• VUzzer (⭐183) (2017) - An application-aware binary fuzzer that uses static analysis and dynamic taint analysis to guide input mutations, with a 64-bit implementation.

• AFLFast (⭐424) (2016) - An AFL-based greybox fuzzer that uses power schedules to focus fuzzing effort on low-frequency execution paths.

• Driller (⭐981) (2016) - A hybrid fuzzer that augments AFL with selective symbolic execution using angr to generate inputs for paths that fuzzing cannot reach.

• AFL (2014) - A coverage-guided fuzzer that uses instrumentation and genetic mutations to discover bugs. Its GitHub repository is archived; AFL++ is recommended for new projects.

• Valgrind (2000) - A dynamic analysis framework with tools for detecting memory management and threading errors and profiling program execution.

Tools / Kernel

• Moneta (⭐27) (2025) - A GPU driver fuzzer that recalls execution states captured on real hardware for ex-vivo fuzzing.

• SyzSpec (⭐17) (2025) - A specification generator for Linux kernel fuzzing that uses under-constrained symbolic execution to infer syscall interfaces.

• CountDown (⭐29) (2024) - A kernel fuzzer that uses shared reference counts to guide syscall sequences toward use-after-free bugs.

• MOCK (⭐24) (2024) - A Linux kernel fuzzer that learns contextual dependencies between syscalls to generate context-aware test cases.

• SyzTrust (⭐19) (2024) - An on-device fuzzer for IoT trusted operating systems that uses state and branch coverage to guide input generation.

• VirtFuzz (⭐135) (2024) - A LibAFL-based Linux kernel fuzzer that injects inputs through VirtIO devices to test wireless stacks.

• FuzzNG (⭐36) (2023) - A Linux kernel syscall fuzzer designed to minimize reliance on manually written system call descriptions.

• KextFuzz (⭐97) (2023) - A fuzzing prototype for macOS kernel extensions on Apple Silicon that instruments extensions and patches entitlement checks.

• SegFuzz (⭐32) (2023) - A kernel concurrency fuzzer that uses interleaving segment coverage and mutation-based thread scheduling to discover bugs.

• SyzDirect (⭐41) (2023) - A directed greybox fuzzer for reaching target locations in the Linux kernel.

• DR.FUZZ (⭐29) (2022) - A semantic-informed driver fuzzer that tests Linux device drivers without their hardware devices or device emulators.

• Drifuzz (⭐5) (2022) - A hardware-free device driver fuzzer that combines concolic execution with high-quality initial seed generation.

• FuzzUSB (⭐37) (2022) - A hybrid stateful fuzzing framework for USB gadget stacks in the Linux kernel.

• StateFuzz (⭐101) (2022) - A Linux driver fuzzer that identifies state variables through static analysis and uses their values as fuzzing feedback.

• SyzGen (⭐48) (2021) - A syscall specification generator that analyzes closed-source macOS drivers to enable interface-aware fuzzing.

• PeriScope (⭐71) (2019) - A probing and fuzzing framework that tests device drivers at the hardware-OS boundary through MMIO and DMA inputs.

Tools / Libraries & APIs

• Hopper (⭐266) (2023) - A library fuzzer that interprets generated API calls and learns argument constraints without requiring manually written fuzz drivers.

Tools / Network & Protocols

• ChatAFL (⭐395) (2024) - An AFLNet-based protocol fuzzer that uses LLMs to infer message grammars, enrich seeds, and generate messages that explore new protocol states.

• ResolverFuzz (⭐20) (2024) - A DNS fuzzer that combines query-response generation with differential analysis to detect non-crash vulnerabilities in resolvers.

• SGFuzz (⭐99) (2022) - A libFuzzer-based fuzzer that adds state-transition feedback to explore stateful software, including network protocol implementations.

Tools / Browsers

• FuzzOrigin (⭐18) (2022) - A browser fuzzer that tests origin handling to discover universal cross-site scripting vulnerabilities.

• FreeDom (⭐159) (2020) - A DOM fuzzer that generates HTML documents and DOM interactions to discover browser vulnerabilities.

Tools / Compilers & Language Runtimes

• RGFuzz (⭐25) (2025) - A WebAssembly runtime fuzzer that uses compiler rules to guide test generation and compares execution results across runtimes and architectures.

• FuzzJIT (⭐82) (2023) - A Fuzzilli-based JavaScript engine fuzzer that uses an oracle to detect incorrect behavior introduced by JIT compilation.

• CodeAlchemist (⭐243) (2019) - A JavaScript engine fuzzer that assembles code fragments while respecting semantic constraints to generate valid test programs.

Tools / Firmware & Embedded Systems

• Hoedur (⭐73) (2023) - An embedded firmware fuzzer that uses multiple input streams to represent interactions with different hardware interfaces.

• Fuzzware (⭐385) (2022) - A firmware fuzzer that models memory-mapped I/O accesses to test microcontroller firmware without full peripheral emulation.

• FIRM-AFL (⭐463) (2019) - An IoT firmware fuzzer that combines user-mode and system-mode emulation to improve fuzzing throughput for POSIX-compatible firmware.

Tools / Hypervisors & Virtual Devices

• HyperPill (⭐65) (2024) - A hypervisor fuzzer that uses the hardware virtualization interface to exercise hypervisor behavior without hypervisor-specific input grammars.

• ViDeZZo (⭐40) (2023) - A virtual device fuzzing framework that models dependencies within and between messages to test devices in QEMU and VirtualBox.

• V-SHUTTLE (⭐100) (2021) - An AFL-based fuzzer for virtual devices in hosted hypervisors, with semantics-aware input generation.

Tools / Android & Mobile Systems

• AHA-Fuzz (⭐18) (2025) - An intent-aware greybox fuzzer that uses eBPF-based analysis to test hardened Android applications.

• MALintent (⭐37) (2025) - A coverage-guided Android fuzzer that generates and mutates intents to test application intent receivers.

Tools / Blockchain & Smart Contracts

• ILF (⭐155) (2019) - An Ethereum smart contract fuzzer that learns a transaction-generation policy from symbolic execution through imitation learning.

Tools / DBMS

• BuzzBee (⭐9) (2024) - A DBMS fuzzer that uses semantic abstraction, context-sensitive constraints, and dependency-guided mutations to generate database queries.

• SQLRight (⭐66) (2022) - A DBMS fuzzer that combines coverage feedback, validity-oriented query mutations, and result-checking oracles to detect logical bugs.

25. Awesome Cyber Security University

Free Beginner Blue Team Path / Level 1 - Tools

• Introduction to diGital forensics - Intro to DiGital Forensics.

Bonus CTF practice and Latest CVEs / Level 5 - Malware and Reverse Engineering

• The Great Escape (Docker) - Escaping Docker container.

26. Awesome Go

Goroutines

• go-future (⭐103) - A Future/Promise library with generic combinators and a DAG execution engine.

Logging

• gslog (⭐2) - Google Cloud Logging handler for log/slog, with OpenTelemetry trace and baggage, and Kubernetes podinfo labels.

Third-party APIs

• featureflip-go (⭐0) - Go SDK for Featureflip feature flags, with local evaluation and streaming updates.

Workflow Frameworks / Libraries for creating HTTP middlewares

• GopherFlow (⭐14) - Durable workflow engine with a built-in web console, backed by Postgres, MySQL or SQLite.

27. Awesome Rust

Applications / Productivity

• jchultarsky/mirador (⭐305) [mirador] - A calm personal dashboard for the terminal: clocks, calendar and agenda, weather, tasks, notes, markets and live system metrics in a configurable grid

Applications / Video

• tonhowtf/omniget (⭐12k) - A desktop app to download videos, courses, music and books from 1,800+ sites, with a built-in player, reader and study library.

Libraries / Caching

• kunobi-ninja/kache (⭐794) [kache] - Content-addressed compiler cache for Rust and C/C++ (website)

28. Awesome Deno

Modules / Image

• kavel (⭐0) - Generate and edit images with AI without an API key or account.

• Next: Sep 14 - Sep 20, 2026