📦 joasasantos/php2shell-exploit

PHP2Shell Exploit: Full Remote Access Without Login

A single file upload can grant full control over a web server without any login or password. This repository implements a working exploit for a critical flaw in PHP, allowing attackers to run code on vulnerable servers just by sending a fake file. It bypasses security protections that usually stop such attacks, turning a simple upload into a complete system takeover. The project works on several popular PHP versions, making it a serious threat for outdated servers. Developers should update their systems immediately to close this gap. If you run a PHP server, patching now is the only way to stay safe.

🆔 @hackernewsgithubprojects

📦 wunsch2048/codex-bailong-desktop-pet

Codex Bailong Desktop Pet: Your AI Task Dashboard

Your desktop now hosts an animated white dragon that acts as a live dashboard for your Coder X coding tasks. Instead of refreshing tabs, this small companion displays real time status updates, such as thinking or running commands, directly on your screen. The most useful part is the daily token report, which shows exactly how much of your usage limit you have spent. It is a neat way to keep track of your AI work without opening new windows. You can even set it to shrink when you are not looking. It is a simple, visual way to stay on top of your coding assistant activity.

🆔 @hackernewsgithubprojects

📦 kohakublueleaf/kohakunlock

KohakUnlock: The 85% GPU Boost

KohakUnlock just proved that a specific NVIDIA graphics card can run nearly twice as fast as factory settings allow. This research project documents how researchers manually enabled hidden mathematical processing on a modified RTX 2080 Ti and several RTX 3090s. By writing a special startup script, they bypassed the manufacturer's speed limits without changing any physical hardware. This unlocked a massive performance boost for specific data calculations, turning a standard card into a powerhouse for heavy math tasks. It is a fascinating look at exactly how much raw power is left sitting idle in your computer.

🆔 @hackernewsgithubprojects

📦 abdelmoumendeghbouche/wipeout_pc

Play WipEout Omega on your PC

Run the PlayStation Four version of WipEout Omega directly on your Windows computer, with no slow emulation in sight. This native port feeds the game's original processor code straight to your central processing unit while a dedicated runtime handles system tasks and translates graphics through Vulkan. It runs menus and races smoothly above sixty frames per second, and you can even swap the original soundtrack for your own music files. This is a clean way to play the game at high resolutions on modern hardware, provided you own a legal copy.

🆔 @hackernewsgithubprojects

📦 gojko/lights-on-software-factory

Lights-on Software Factory

Lights-on Software Factory lets you run coding agents that actually get things done without needing your constant attention. It uses a clever trick called an orchestrator to handle the boring parts of the workflow with simple scripts instead of asking the AI to figure it out every time. This saves about eighty percent of the expensive computing power, meaning you get results faster and cheaper. You just describe what you want to build, and the system plans the steps, assigns the work to different agents, and checks their output using hard rules. It feels like having a reliable assistant who never forgets the rules.

📰 https://news.ycombinator.com/item?id=50160198

🆔 @hackernewsgithubprojects

📦 vllm-project/humming

The tiny kernel that handles every quantization

Humming is a tiny, one-hundred-kilobyte library that compiles the exact math operations needed for your specific GPU, rather than forcing you to run generic code. It handles the heavy lifting for quantized model weights, supporting everything from four-bit integers to eight-bit floating point on almost any modern Nvidia card. This is interesting because it removes the headache of picking the right kernel for every weird data format, giving you high speed with zero extra bulk. It is the quiet workhorse for running efficient AI, proving that you do not need a massive, bloated package to get top-tier performance.

🆔 @hackernewsgithubprojects

📦 fayazara/coworkers

Coworkers: Your AI Team

Coworkers gives every AI teammate its own isolated computer and live browser, all running entirely on Cloudflare. Instead of just chatting, each bot gets a real workspace where it can open files, run commands, and even drive a web page while you watch. The coolest part is that if a bot hits a login screen, it literally hands you the browser so you can sign in yourself, then it jumps back in to finish the job. It is built to work for you even when you are away, asking permission before anything risky. Think of it as hiring a digital team that actually has hands to do the work.

🆔 @hackernewsgithubprojects

📦 boyuan-an/galatea

Galatea: AI Robots Learn by Watching Fake Videos

Galatea teaches a robot hand how to pick up objects by letting it watch AI-generated videos of a human hand doing the same thing. The project takes those synthetic clips, calculates the exact three-dimensional motion, and trains a controller to mimic it in a physics simulator before running it on real hardware. This solves the massive headache of needing thousands of hours of physical practice to teach a robot a single grasp. It works, and the results are surprisingly sturdy, making it a clever bridge between digital imagination and physical reality. If you are building dexterous robots, this is your blueprint for learning from imagination rather than just repetition.

🆔 @hackernewsgithubprojects

📦 aaryan-kapoor/english-rs

English, Rewritten in Rust

A compiler can now catch a dangling pronoun before you even hit send. The English R S project treats language like software, using Rust’s type system to enforce grammar so that a pronoun without a clear antecedent simply fails to compile. It includes a tool called English C that reads ordinary prose and reports mistakes using the exact diagnostic format developers know from Rust, complete with helpful suggestions for fixes. It even ran over the official Rust Programming Language book to prove its logic, finding only minor ambiguities rather than hard errors. This turns the silent chaos of everyday speech into precise, checked code.

🆔 @hackernewsgithubprojects

📦 loopj/tinysd

TinySD: Talk to SD Cards Without the Bloat

TinySD is a dependency-free C library that lets you talk directly to SD cards and SDIO devices on bare-metal systems, no operating system required. The surprising part? It handles the entire handshake, from powering up the card to switching it into high-speed mode, all without a single dynamic memory allocation. Every bit of state lives in structures you own, making it perfect for embedded projects where every byte counts. It even includes helpers for software bit-banging if you don't have a dedicated hardware controller, which is a lifesaver for custom boards.

🆔 @hackernewsgithubprojects

📦 agent-ecosystem/agent-docs-spec

Agent Docs Spec: Fixing Broken AI Documentation

A single line of website styling code can make an entire documentation page invisible to AI coding assistants. The agent docs spec exposes this hidden failure mode and fixes it with twenty eight specific technical checks. Most documentation sites were built for human eyes, not the automated systems that read them today. When an agent tries to fetch a page, it often hits an invisible wall, receiving only styles and no actual instructions. The result is that your code assistant works with incomplete data and makes mistakes. This project provides a clear roadmap for developers to ensure their sites speak the same language as these tools.

🆔 @hackernewsgithubprojects

📦 t3dotgg/tstack

tstack

Finish a software update from start to finish while you sleep. Tstack gives your coding assistant the ability to handle the entire workflow of submitting changes, checking their quality, and merging them into your project without you hovering over your keyboard. The most surprising part is the full send command. One phrase tells the agent to take ownership. It proves the code works, asks other models for a second opinion, watches for errors, and merges the result. It handles the busy work of modern code reviews so you only have to look at the final outcome. This turns your AI assistant into a capable teammate who handles the tedious parts.

🆔 @hackernewsgithubprojects

📦 dualface/quicktui

QuickTUI

QuickTUI lets your smartphone become a live window into your desktop computer’s terminal, even while you are standing in a coffee shop. You run a small program on your main computer, then open the QuickTUI app on your phone to instantly see and control exactly what is running on your screen. This is built specifically for people who use artificial intelligence coding tools, allowing you to check on your AI assistant or send new instructions without ever needing to sit down at your desk. It works on both iPhone and Android, turning your pocket device into a remote control for your work.

🆔 @hackernewsgithubprojects

📦 kennethnnabuife/auth-flow-kit

auth-flow-kit: Instant React Login

auth-flow-kit gives your React app a working login system with just one wrapper. It handles the tricky part where users stay logged in even after refreshing their browser, without you writing a single line of code to save or restore that data. You simply plug it in at the top level, get prebuilt screens for signing up and logging in, and use a simple hook to access user info anywhere. It is designed to be the shortest path from zero to a functioning account system, removing the need for complex state management setups or extra configuration files.

🆔 @hackernewsgithubprojects

📦 drwhax/unfairplay

Unfairplay: Decrypting Apps on Your Mac

Grab a decrypted copy of any iOS app you own, right from your Mac, without ever touching Apple’s servers again. Unfairplay is a standalone program written in Go that extracts the hidden decryption key from your Mac after you install an app on your phone. It solves the annoying problem of locked-down app files by letting you unlock them for analysis, provided you have the right setup. You simply run a few commands to pull the data from your system and then decrypt the file. It is a clever way to get full access to your own apps for research, keeping the process entirely local and private.

🆔 @hackernewsgithubprojects

📦 lemiur/game-decompilation-skill-for-claude

How Claude Rebuilds Classic Games

Game Decompilation Skill for Claude is the workflow that teaches artificial intelligence to reverse engineer old video games into clean, readable code. Instead of just emulating a finished file, this set of instructions guides the model to reconstruct the original human written source. The goal is to recreate the recipe so precisely that recompiling it produces a byte for byte identical copy of the game. This approach matters because it turns a locked black box into living software history. It lets developers fix bugs, add features, and preserve classic titles for future generations.

🆔 @hackernewsgithubprojects

📦 miaai-lab/glm-5.3-exl3-3x-dgx-sparks-tensorfold

GLM Five Point Three EXL3 on Three DGX Sparks with TensorFold

GLM Five Point Three EXL3 on Three DGX Sparks with TensorFold is the local AI recipe that makes a half million token context window feel instant. Running a massive language model across three connected devices is usually a nightmare of memory limits and slow loading times. This project solves that by saving your conversation history directly to the hard drive, meaning you can come back to a long chat in seconds instead of waiting minutes for the computer to re-read everything.

🆔 @hackernewsgithubprojects

📦 agentclientprotocol/codex-acp

Codex ACP: Your IDE's New Brain

Give your editor a direct line to the latest AI coding assistant without writing complex glue code. Codex ACP acts as a universal translator, taking the raw power of the command-line tool and packaging it into a standardized format that any modern code editor can understand instantly. Instead of wrestling with messy text streams, your IDE now receives clean, structured updates on exactly what the AI is thinking, planning, or changing in your files. This bridge eliminates the friction between terminal-based intelligence and visual coding environments, letting developers see the AI's reasoning flow right inside their workflow.

🆔 @hackernewsgithubprojects

📦 andyhuo520/digital-human-koubo

Digital Human Koubo: One Photo to AI Video

Turn a single photo and one sentence into a finished, lip-synced talking head video. This project automates the entire process, handling script generation, voice cleanup, and pro-level editing without you touching a timeline. The real magic is how it analyzes top creators to apply forty-eight specific packaging tricks, ensuring your AI presenter feels professional rather than robotic. It handles everything from lip sync to cinematic cuts, making it easy to produce high quality content. You just describe what you want, and the agent does the rest. It is a powerful way to create engaging videos from scratch.

🆔 @hackernewsgithubprojects

📦 ai-job-search-dev/ai-job-search

AI Job Search: The Local AI Framework

A geophysicist used a local AI framework to turn sixty-nine tailored applications into twenty interviews and one signed contract, proving the system works on real careers. AI Job Search is not a cloud service; it is a codebase you fork and run on your own machine using Claude Code. It scrapes job boards, scores your fit, and drafts your CV and cover letter in LaTeX. The most impressive part is the quality control. A second agent reviews every draft, then the system compiles the PDFs to visually check for layout errors. It ensures your resume looks professional before you ever send it.

🆔 @hackernewsgithubprojects