📦 gichirimaku/wp2shell-poc

How WordPress Just Got Hacked

wp2shell is the proof of concept that turns two weird WordPress bugs into a total takeover. It combines a routing mistake and a database flaw to let attackers slip past security checks without even logging in. The coolest part is how it forges fake data to trick the site into handing back a real admin key, letting them upload a malicious plugin right from the outside. This repo is strictly for testing your own sites, so patch those versions now before someone else finds you first.

🆔 @hackernewsgithubprojects

📦 obsidianmd/pele

Pele renders Mermaid diagrams instantly

Pele renders Mermaid diagrams to SVG faster than you can run from a volcano. It solves the problem of slow, heavy chart libraries that make your app feel sluggish. Instead of waiting for complex background processes to finish, Pele draws your flowcharts and sequence diagrams synchronously right on your screen. It does this with zero runtime dependencies, meaning you install one tiny file and you are ready to go. You also get full control over colors and fonts using standard CSS variables, so your diagrams match your website theme perfectly. If you need diagrams that load instantly without breaking your bundle size, Pele is the simple, fast tool you need.

🆔 @hackernewsgithubprojects

📦 steventsvik/tellurion

Tellurion: Live Mission Control for AI Coding Agents

Tellurion is a macOS terminal that lets you watch multiple AI coding agents work live, displaying exactly which files they edit and where they are in your project. It acts like a mission control, showing real-time status for tools like Claude Code and Codex so you can see their progress without constantly switching tabs. The editor even follows their edits as they happen, and you can undo any change with one click. If an agent needs permission, you can approve it right from your phone. This is useful for developers running several projects at once who need a clear view of what their AI is doing.

🆔 @hackernewsgithubprojects

📦 dacooderr/optilock

OptiLock: Boost Deadlock FPS on Low-End PCs

OptiLock is the Deadlock FPS optimizer that finally keeps your frame rate high without ruining the competitive look of the game. It solves the problem of stuttering on low-end systems by lowering graphics settings to their absolute minimum while preserving essential visual clarity for ranked play. The most surprising part is that it can deliver up to forty percent more frames, turning a struggling machine into a smooth, competitive rig. You simply swap in a provided file and paste a specific code into your game settings. If you are fighting lag, this is the clear path to a steady, high frame rate.

🆔 @hackernewsgithubprojects

📦 oxc-project/tsrs

tsrs: The Rust TypeScript Checker

The TypeScript compiler, the engine that checks your code for errors, is now running on Rust. It is called tsrs, and it is a drop-in replacement for the current compiler. This means you can swap it in without changing your workflow. The goal is to match TypeScript exactly while using far less memory and checking your files much faster. It is not a rewrite of the language, but a new engine for the same job. It is already usable today, and the creators are tracking one hundred percent conformance. If you work with large JavaScript projects, this is the kind of speed boost you have been waiting for.

🆔 @hackernewsgithubprojects

📦 msuiche/weightless

Weightless: The Tiny File That Changes How AI Models Behave

A tiny file, containing no model weights at all, can fundamentally alter how a massive artificial intelligence system behaves. This project, called Weightless, solves a massive logistical headache: it lets developers tweak a model's personality or safety boundaries without downloading, copying, or modifying the enormous, multi-terabyte brain that powers it. Instead of juggling giant files, you just inject a small, directional nudge into the model's live memory stream while it runs. Think of it like turning a steering wheel on a moving car, rather than rebuilding the entire engine. It works even on compressed, low-precision models, which means you can test new behaviors on cheap hardware without breaking a sweat.

🆔 @hackernewsgithubprojects

📦 mikroverk/esp32sim

esp32sim: Run Real Firmware in Your Browser

Your browser can now boot actual firmware onto four different microchips without needing a single piece of physical hardware. The project called esp32sim runs real, unmodified software images directly in your web page or on your computer. It handles the complex startup process exactly like the real chips do, from the initial boot code all the way to running full operating systems. You can even connect it to your home Wi-Fi to test network features. This removes the need for expensive dev boards when you are just checking if your code works. It is a free, open-source tool that lets you build and test embedded projects entirely from your desktop.

📰 https://news.ycombinator.com/item?id=50131189

🆔 @hackernewsgithubprojects

📦 depalmar/ai-dfir-toolkit

AI DFIR Toolkit: Spot AI Threats

The AI DFIR Toolkit is the open source detection pack that finally gives security teams the ability to catch attacks on large language models and agent systems without being locked into expensive proprietary software. It solves a massive blind spot in modern cybersecurity, where traditional antivirus tools are completely blind to the new ways hackers exploit artificial intelligence. Instead of relying on vendor specific queries, this project provides one hundred and sixty one universal detection rules that work across any logging system you might have. It covers everything from prompt injection and model supply chain poisoning to malicious behavior in coding assistants.

🆔 @hackernewsgithubprojects

📦 gathin23/tv-vibehack

TV Vibehack: Your TV, Minus the Ads

TV Vibehack turns a cluttered Android TV into a clean, ad-free experience by removing unnecessary software and installing a custom launcher that looks exactly like Apple TV. This project solves the problem of slow, bloated smart TVs by letting you use an AI assistant to identify and disable manufacturer ads, telemetry, and unwanted preloaded apps directly from your computer. The result is a pitch-black interface with a simple dock for your favorite apps, making the TV faster and much easier to use. The best part is that every change is completely reversible, meaning you can restore the factory settings anytime without losing your setup.

🆔 @hackernewsgithubprojects

📦 cygnux-labs/tracekit

Tracekit: The Flight Recorder for AI Agents

An AI agent can edit its own logs, but it cannot hide that edit. Tracekit solves this by acting like a flight recorder for your AI agents. It checks every action before it happens, signs each decision into a tamper-evident chain, and produces a single file anyone can verify offline. This matters because if an agent deletes data or changes its records, the verification fails instantly at the exact point of tampering. You get proof of what the agent actually did and why it was allowed, without trusting the agent itself. It is a clear, verifiable audit trail for AI behavior.

🆔 @hackernewsgithubprojects