High performance self-hosted and fully customizable authentication service. In the early stages. Depends on Redis and MongoDB. Docker-first webshit but it can probably be broken out.
Under heavy development.
Vulnerability Lookup facilitates quick correlation of vulnerabilities from various sources, independent of vulnerability IDs, and streamlines the management of Coordinated Vulnerability Disclosure (CVD).
Vulnerability Lookup is also a collaborative platform where users can comment on security advisories and create bundles.
Consolidates vulnerabilities from multiple sources.
Github: https://github.com/cve-search/vulnerability-lookup
API: https://vulnerability.circl.lu/doc
At present, 13 different sources and four output formats. You can also download dumps from any of those sources as raw data.
Each source has its own RSS feed that can be monitored. Not every entry has an immediately obvious title, and not every entry has a description, so you'll want to pull the URL in the link field and analyze from there.
A utility for exporting pages from a Bookstack wiki using the API. Can keep the wiki's existing tree structure intact by making folders from Shelves, Books, Chapters and attachments (including attachments from external links). Can export multiple formats at once. Experimentally, it can update markdown files before saving them to point to the downloaded image files instead of remote urls. The authorization token is loaded from a text file. Can set a custom HTTP User-Agent header to bypass filtering based on that header.
OSS Index is a free catalogue of open source components and scanning tools to help developers identify vulnerabilities, understand risk, and keep their software safe.
They have a public REST API (https://ossindex.sonatype.org/doc/rest) that scanning tools can patch into.
Security vulnerability database inclusive of CVEs and GitHub originated security advisories from the world of open source software.
Says there's a GraphQL API. Ew.
Github repo for the advisories: https://github.com/github/advisory-database
Welcome to Monolith Tracker, a collaborative effort on tracking the Monoliths that are appearing around the world. We need your help report new monoliths that we are missing.
On November 18th 2020, a group of Utah DWR Biologists were flying in Southwest Utah on an assignment to count Bighorn Sheep in the area. What they saw next kickstarted possibly the most ‘2020’ news story the world has ever seen. A large metal monolith, approximately 9.8 feet tall, was standing in the middle of the desert, miles from the nearest town of Moab, Utah.
They kept appearing. There have been 19 total monoliths, plus an additional 5 confirmed fakes, and they are seemingly growing exponentially. Are they all connected? Which ones are real, which are simply knockoffs? This mystery is far from over. With the way that 2020 has been going, it is likely just beginning.
Read-only JSON API: https://monolithtracker.com/json-export
Query next passes for a given satellite above you. Uses Skyfield to predict passes, and Celestrak GP API to get updated TLE data.
DO exposes performance metrics for hosted databases from their API. This talks about how to access them programmatically.
A Shaarli browser extension using the API for both Firefox and Chrome based browsers. It features add/edit and search of bookmarks for your Shaarli instance.
Firefox: https://addons.mozilla.org/firefox/addon/shaanti/
Chrome: https://chromewebstore.google.com/detail/shaanti/bfecpppjnokkpdegijfgbldholankami
This is a community-sourced collection of scripts that extend Paperless-ngx in various ways.
A Python wrapper for BookStack's API. It pretty much requires you to build the JSON yourself, but doing it as a hash table makes it a bit easier. I was able to hack together a directory full of Markdown files-to-Bookstack converter in about half an hour. If nothing else, it abstracts away a lot of the boilerplate you'd otherwise have to do yourself.
Documentation for Ubuntu's vulnerability API.
Uses machine learning to identify files in misconfigured buckets across a large number of providers, including AWS, Azure, Digital Ocean, GCP, and Alibaba. Requires an account to get results but the free tier is pretty useful in itself.
API documentation: https://openbuckets.io/api-docs
You have to have a Bounty Hunter subscription or higher to use it, though.
Over 100 forks of deliberately vulnerable web applications and APIs to practice on.
Python wrapper for Brave's adblocking library, which is written in Rust. Uses filter lists written in AdBlock Plus' native format.
Public api for aircraft, airlines, and flight routes. No API key, everything is rate limited over a 60 second period.
I don't know how useful or reliable it is yet.
A modern, RESTful, scalable solution to the common problem of telling people to fuck off.
This extension provides a skin that is not designed to be used from a web browser, rather for consumption from another type of client... smartphone app, dynamic javascript page, automated bot. This is most of the same data that can be found in the default "Seasons" report's rss.xml output, but formatted in the JSON format for easier consumption by clients.
Creates a file /weewx.json in the WeeWX webroot. You won't see a reference to it if you look at the HTML of the generated reports.