Open-source alternatives to RPISEC MBE

virt-manager is a graphical management interface for configuring hypervisors, virtual machine instances, and containers via the libvirt API. It provides a desktop environment for managing KVM-based virtualization on Linux hosts, acting as a centralized controller for both local and remote hypervisors. The project distinguishes itself through integrated management of the surrounding virtualization infrastructure. It includes dedicated interfaces for virtual network administration to connect guests to physical hardware and virtual storage management for organizing disk volumes into logical pool

Homestead is a virtual machine provisioner that creates a standardized PHP development environment. It provides a disposable development workspace that isolates project dependencies and server tools from the host operating system, using Vagrant to orchestrate the machine lifecycle. The system functions as a local site orchestrator, allowing users to map custom domains to specific project folders through virtual host routing and network port forwarding. It includes a dedicated local mail testing tool that intercepts outgoing application emails in a dashboard for inspection without sending them

Pigsty is a comprehensive database infrastructure orchestration platform designed to automate the full lifecycle of high-availability PostgreSQL clusters. It functions as an infrastructure-as-code framework that manages cluster coordination, node provisioning, and service discovery through idempotent playbooks. By integrating distributed consensus mechanisms, the platform ensures automated failover and consistent state enforcement across diverse environments, including bare metal and virtualized infrastructure. The platform distinguishes itself through a robust suite of operational capabiliti

ipsw is a specialized toolkit for iOS firmware analysis, binary reverse engineering, and hardware interaction. It provides a suite of tools for downloading, extracting, and analyzing firmware images and kernel caches, alongside a MachO binary analysis tool for disassembling and patching executables. The project distinguishes itself through integrated language-model-powered code reconstruction to translate machine code into high-level source code. It also features an automation client for the App Store Connect API to manage certificates and application settings. The framework covers a broad r

Flare-VM is a Windows malware analysis environment consisting of installation scripts that automate the provisioning of a virtual machine. It provides a comprehensive suite of reverse engineering tools, including decompilers and debuggers, along with the necessary system configurations and environment variables for security research. The project functions as a virtual machine image orchestrator, allowing for the automated creation, management, and export of specialized analysis appliances. It features configuration-driven tool selection and the ability to extend installation logic through cus

This project is an interactive coding learning platform and open-source educational courseware designed for mastering web development. It provides a browser-based environment where users can engage with a structured curriculum covering front-end, back-end, and data visualization skills through hands-on exercises. The platform distinguishes itself by integrating a browser-based code sandbox and a nonprofit technical partnership portal. This framework allows learners to transition from guided lessons to building and maintaining real-world software applications for nonprofit organizations. The

Fuzzing101 is an educational resource providing a structured curriculum and containerized security labs for learning software fuzzing and vulnerability research. It functions as a training course that guides users through the process of identifying security flaws using systematic input manipulation and memory corruption analysis. The project distinguishes itself by providing isolated environments that ensure consistent build dependencies for practicing software instrumentation and crash triaging. It includes a practical tutorial on using evolutionary fuzzing engines and instrumentation tools

Angr is a binary analysis framework and static analysis tool used for reverse engineering compiled binaries. It serves as a binary decompiler and a lifting platform that translates machine code into a common intermediate representation to enable cross-architecture analysis. The framework integrates a symbolic execution engine and constraint solvers to determine the inputs required to reach specific program states. It also employs untrusted code sandboxing to isolate guest code from the host environment during analysis. Its capabilities cover control flow and data flow analysis, including the

This project is a collaborative knowledge base and technical learning resource that provides a detailed breakdown of the internal processes occurring within modern computing environments. It serves as a comprehensive educational reference, tracing the step-by-step operations triggered by common user interactions and network requests to explain how hardware and software components interact across the entire stack. The guide distinguishes itself by offering deep technical insights into the journey from physical input to visual output. It covers the low-level mechanics of hardware interrupt hand

Scala 3 is an open-source, statically typed programming language that compiles to JVM bytecode, combining object-oriented and functional programming paradigms. Its core identity is defined by a sophisticated type system that includes traits, generics, union types, and a dependent object type system where types can depend on runtime values through path-dependent and singleton types. The language distinguishes itself through several advanced type-level and metaprogramming capabilities. It features a contextual abstraction mechanism using given instances and using clauses for compile-time implic

This project provides secure, containerized infrastructure designed for autonomous agents, remote code execution, and cloud development. It functions as a sandboxed environment where AI agents and external processes can execute code, run shell commands, and manage files while remaining isolated from the host system. The system distinguishes itself by implementing the Model Context Protocol, allowing it to act as a standardized tool server that exposes browser and filesystem capabilities to compatible clients. It further integrates headless browser automation, enabling programmatic web navigat

Nanoclaw is an LLM agent orchestrator and multi-platform chat gateway designed to deploy and manage isolated AI agents. It provides a containerized runtime that executes agents within sandboxed Linux containers, ensuring filesystem and state isolation through dedicated workspaces and host bind-mounts. The project distinguishes itself through a unified routing pipeline that connects agents to diverse messaging platforms, including WhatsApp, Discord, Slack, Telegram, Signal, and iMessage. It integrates the Model Context Protocol to extend agent capabilities via managed external data and functio

Bocker is a minimal container management tool written in Bash that implements core container functionality using Linux namespaces and control groups. It serves as a Linux container manager capable of starting and managing isolated processes and images through low-level kernel features. The project includes an OCI image tool for pulling, saving, and building container images compatible with industry standards. It further integrates a cgroup resource controller to restrict CPU and memory consumption for isolated processes. The tool covers the full container lifecycle, including process isolati

This project is an educational course and machine learning curriculum designed to teach the implementation of neural network architectures and learning algorithms. It provides a structured guide for studying artificial intelligence through a collection of tutorials and practical coding exercises. The curriculum utilizes interactive notebooks that allow for the execution of code within a web browser. This environment enables the prototyping of artificial intelligence models and the analysis of data without requiring a local software installation. The content covers the design and training of

Gitpod is a cloud development environment platform and Docker-based workspace orchestrator. It provisions on-demand, containerized Linux workspaces that synchronize directly with remote version control repositories to eliminate manual local setup. The platform functions as an infrastructure-as-code environment manager, using declarative configuration files to define base images, tool versions, and environment variables. This ensures team-wide consistency and reproducible workspace configurations across different projects. It provides ephemeral coding workspaces for rapid prototyping, debuggi

Kata Containers is an OCI container runtime that launches containers inside lightweight virtual machines to combine hardware-level isolation with container operational speed. It functions as a hardware-isolated container engine and lightweight VM hypervisor, providing a virtual machine monitor interface that abstracts multiple hypervisors to optimize for performance or specific hardware emulation. The project distinguishes itself through a confidential computing runtime that leverages hardware-backed trusted execution environments, such as Intel TDX and AMD SEV-SNP, to protect data in use. It

KubeVirt is a Kubernetes virtualization platform and cloud-native hypervisor manager. It provides a runtime environment that allows virtual machines to be defined, launched, and managed as declarative resources within a Kubernetes cluster, enabling them to run alongside containers on the same nodes. The system enables the hybridization of cloud infrastructure by combining traditional virtual machines with containerized workloads on a single shared platform. It supports the live migration of running virtual machines between physical hosts to facilitate cluster maintenance and load balancing.

This project is a Python programming textbook and educational resource designed as a structured learning path for self-paced technical education. It functions as an interactive coding course that guides learners through the Python language using a sequence of conceptual introductions and practical problem-solving exercises. The resource is delivered as a digital ebook, with the content exported into portable PDF and EPUB formats for distribution and offline reading. The project is authored using markdown-based content and plain-text source versioning, utilizing a build system to convert thes

Ramalama is a containerized runtime and management tool for large language models. It functions as an OCI AI model manager and registry client, allowing users to package, distribute, and execute AI models as standardized container images. The project differentiates itself by using OCI-compliant distribution for models and retrieval augmented generation assets, enabling the packaging of vector databases into immutable container images. It features hardware-aware image selection that automatically detects GPU or CPU capabilities to pull the most optimized image for the host environment. The sy

This project is a multilingual educational framework that provides curated roadmaps and translated resources for mastering core computer science subjects. It serves as a Chinese translation of a structured guide designed to help students and engineers learn computer science fundamentals through a sequence of recommended books and courses. The framework focuses on technical content localization, converting English computer science roadmaps into Chinese to improve accessibility. It utilizes a manual translation workflow to ensure conceptual accuracy across its study guides and resource collecti

This is a practical, step-by-step guide to Linux system administration, command-line usage, and development environment setup, written from the perspective of a Java developer. The tutorial is structured as a sequence of terminal commands with explanations, teaching system administration through direct modification of plain-text configuration files. It provides separate workflows for CentOS, Ubuntu, and Kali Linux, covering both yum and apt package managers with equivalent commands for each operation. The guide emphasizes a security-first workflow, walking through firewall configuration, SSH

This project is a visual study guide and educational resource for linear algebra. It consists of a collection of graphic course notes and image-based presentations designed to simplify the study of vector and matrix operations. The content is structured as a series of graphic summaries and visual aids that follow the curriculum and teachings of Gilbert Strang. It translates abstract algebraic operations, matrix algorithms, and factorizations into intuitive geometric diagrams and spatial representations. The repository functions as a mathematics course supplement, providing modular slides and

This project is an algorithm courseware repository and academic resource portal. It serves as a digital archive for algorithm textbooks, providing access to complete manuscripts, individual chapters, and educational materials focused on computer science fundamentals and algorithm design. The repository includes a dedicated errata tracking system to record publication errors and corrections. This system allows for the monitoring of updates made to the academic texts since their official release to ensure the accuracy of the information. The platform distributes a variety of supplemental cours

Dify-sandbox is a secure runtime environment designed for the execution of untrusted code snippets. It functions as a containerized sandbox that isolates processes from the host operating system, ensuring that arbitrary scripts can be run without granting them unauthorized access to sensitive data or critical system resources. The project distinguishes itself through a multi-layered security approach that combines kernel-level isolation with strict resource management. By utilizing Linux namespaces and container-based process isolation, it partitions system resources to maintain visibility bo

This project is a container-native runtime designed for building, orchestrating, and executing autonomous AI agents. It provides a framework for managing multi-agent teams and complex workflows by packaging agent configurations as portable container images. By leveraging declarative configuration files, the system allows users to define agent personas, model routing, and tool access without requiring changes to application code. The platform distinguishes itself through its deep integration with container infrastructure, ensuring that agent tasks and external tools run within isolated environ

Flare-VM is a collection of scripts and an orchestrator designed to automate the installation and configuration of a reverse engineering toolset on Windows virtual machines. It functions as a provisioning system that deploys a consistent environment for malware analysis and security research on guest operating systems. The project utilizes a configuration manager and a graphical interface to allow for the selection of specific software packages and environment variables. It employs a curated manifest to manage the installation of compatible security tools and modifies system registries and ta

This project provides an advanced English curriculum and a set of instructional guides designed to help non-native speakers move from intermediate to advanced proficiency. It functions as a guide for AI-powered language training, utilizing structured workflows and prompt engineering with large language models to facilitate self-directed study. The system implements AI workflow orchestration, chaining different artificial intelligence models into feedback loops to automate linguistic exercises and corrections. This approach combines multiple AI specializations to coordinate training across lis