Awesome GitHub RepositoriesModular Plugin Frameworks

Jellyfin is a self-hosted media server that organizes digital media collections and streams content to various client devices over a local or remote network. It utilizes a client-server architecture that separates media processing and storage from user interfaces, communicating through a standardized web-based application programming interface. The platform is designed for cross-platform hosting, running consistently across Linux, Windows, and macOS through native binaries or containerized environments. It features a hardware-accelerated transcoding engine that offloads intensive video conver

Stats is a system performance monitor that tracks real-time hardware metrics and resource usage directly from the operating system menu bar. It functions as a hardware control interface, allowing users to adjust fan speeds and thermal settings to maintain optimal performance levels for computing hardware. The application distinguishes itself through kernel-level sensor polling, which retrieves telemetry by interfacing directly with low-level system drivers and power management APIs. It provides remote infrastructure oversight via a web-based telemetry dashboard, enabling users to view live pe

SpaceVim is a modular configuration framework for Vim and Neovim designed to manage settings, plugins, and keybindings across different editing environments. It functions as a plugin manager that uses a layered organization system to group related functions and plugins, reducing the manual effort required for configuration. The system is centered around a mnemonic keybinding strategy that utilizes the space bar as the primary modifier for editor commands. To maintain performance, the framework implements a startup optimizer that delays the loading of non-essential plugins until they are requi

Ktor is a framework for building asynchronous server applications and cross-platform network clients using the Kotlin programming language. It provides a lightweight, modular architecture that allows developers to construct services and communication layers by composing independent components and plugins. The framework is defined by its pipeline-based plugin system, which enables the injection of custom logic into request processing stages, and a type-safe domain-specific language for defining application routing. By utilizing an asynchronous execution model, it handles concurrent network ope

Flow.Launcher is an extensible desktop productivity tool for Windows that provides a centralized, command-line style interface for launching applications, files, and system settings. Built in C#, it functions as a keyboard-driven launcher that allows users to execute system tasks, perform web searches, and manage administrative operations directly from a unified search input. The project is defined by its modular plugin architecture, which enables the integration of third-party extensions to add custom search providers, specialized workflows, and system command capabilities. Users can further

Streamlink is a command line video stream extractor that retrieves direct stream URLs from online services for use in external media players. It functions as a local media stream pipe, redirecting raw video data from web services into local files or players via standard input or HTTP. The project includes a headless browser stream scraper to intercept network requests and extract media data from script-heavy websites, alongside a dedicated processor for HLS and DASH segmented media streams. The tool utilizes a modular video plugin framework, allowing support for new streaming platforms to be

Capstone is a multi-architecture disassembly framework and binary analysis engine. It translates raw machine code from various CPU architectures, such as x86, ARM, and RISC-V, into human-readable assembly instructions. The engine distinguishes itself by providing instruction semantic decomposition, which lists implicit registers read and written, and the ability to customize instruction mnemonics to meet specific technical analysis standards. It also features resilient stream disassembly, allowing the process to resynchronize and continue after encountering invalid instructions or embedded da

Capstone is a multi-architecture disassembly framework and binary translation system. It converts binary machine code into human-readable assembly instructions for a wide variety of hardware instruction set architectures and virtual machines. The framework supports a diverse range of targets, including x86, ARM, RISC-V, and MIPS, as well as virtual machine environments like WebAssembly and the Ethereum Virtual Machine. It functions as an instruction analysis tool capable of extracting granular decomposition data and semantic information from disassembled code. The engine is designed for low-

This project is an AI voice assistant backend and gateway server designed to connect ESP32 hardware to large language models. It enables real-time conversational AI by processing streaming speech-to-text and text-to-speech interactions, allowing hardware devices to engage in natural language dialogue. The system is distinguished by a modular plugin framework that loads custom feature extensions at runtime and a retrieval-augmented generation engine that queries external knowledge bases for factual accuracy. It further personalizes interactions by using voiceprint mapping to identify individua

OpenMediaVault is a Debian-based network attached storage (NAS) operating system that turns a computer into a dedicated storage appliance, managed entirely through a browser-based control panel. It provides a unified configuration interface for managing file sharing protocols, RAID arrays, user permissions, and network services, with extensibility through a modular plugin system that adds new capabilities without modifying the core installation. The platform supports setup and management of multiple RAID levels for data redundancy or performance, and exposes file storage over protocols includ

capa is a binary capability scanner that identifies high-level behaviors and actions an executable can perform, such as network communication or file manipulation. It functions as a malware behavior analysis tool and a MITRE ATT&CK mapping framework, scanning PE, ELF, .NET, and shellcode files through both static analysis and dynamic sandbox report processing. The tool distinguishes itself through a YAML-based detection rule engine that defines detection logic in human-readable files, with conditions expressed as feature combinations and logical operators. It integrates with IDA Pro, Ghidra,

Red-DiscordBot is a modular framework for building and self-hosting Discord bots. It functions as a server management tool and community moderation bot that can be tailored by enabling or disabling specific feature modules. The system is distinguished by its extensible plugin architecture, which allows for the integration of third-party modules and the development of custom functional packages. Users can manage bot behavior through a chat-based interface, enabling them to assemble custom bots and define unique responses and behaviors without writing new code. The framework covers a broad ran

This project is a collection of community-developed plugins and a modular framework designed to extend the functionality of the Jupyter notebook environment. It serves as a customization tool that modifies the browser-based workspace through a system of injected scripts, stylesheets, and interactive components. The framework manages the lifecycle and registration of independent interface components using metadata-driven configuration. This allows users to enable or disable specific tools via a configuration menu to tailor the workspace without modifying the core application source code. The

Kube-hunter ist ein Sicherheitsscanner und Schwachstellen-Jäger für Kubernetes-Cluster. Es arbeitet als Cloud-natives Penetrationstool, das entwickelt wurde, um Sicherheitsschwachstellen, Fehlkonfigurationen der Infrastruktur und ausnutzbare Lücken durch die Simulation von Angreifertechniken zu identifizieren. Das Tool zeichnet sich durch eine Dual-Mode-Scan-Engine aus, die sowohl externe Remote-Probes als auch interne Netzwerk-Scans ausführt. Es verfügt über identitätsbasierte Identitätswechsel, die es ermöglichen, Service-Account-Token und Pod-Identitäten zu verwenden, um Sicherheitszugriffe von spezifischen Cluster-Rollen zu simulieren und den potenziellen Explosionsradius einer Container-Kompromittierung zu bestimmen. Das Projekt deckt ein breites Spektrum an Sicherheitsbewertungsfunktionen ab, einschließlich Cluster-Schwachstellen-Scanning, Mapping der internen Netzwerktopologie und Compliance-Verifizierung. Es kann offengelegte Geheimnisse erkennen, Infrastruktur-Templates auf Fehlkonfigurationen analysieren und aktive Ausnutzungsversuche durchführen, um zu verifizieren, ob entdeckte Schwachstellen ausnutzbar sind. Die Anwendung wird als eigenständige ausführbare Datei verpackt, um Laufzeitabhängigkeiten während des Deployments zu entfernen.

Flare-floss is a security utility and static binary string extractor designed to uncover hidden text and configuration data within compiled binaries. It functions as an obfuscated string decoder and reverse engineering tool to translate encoded strings into readable text for security auditing. The project employs emulated execution to capture the decrypted state of strings in memory by running small chunks of binary code in a virtual CPU. It further utilizes static analysis disassembly, intermediate representation analysis, and heuristic-based pattern matching to identify and decode strings t

PINCE is a dynamic debugger, instruction tracer, and memory scanner designed for the analysis and manipulation of running processes. It functions as a process memory manipulator and editor, allowing for the identification, modification, and monitoring of values within a target application's active memory. The tool distinguishes itself through memory pointer analysis, tracing addresses and offsets to locate static pointers that lead to dynamic data across different sessions. It also enables the execution of internal functions within a running process by manipulating the instruction pointer and

FlaskBB is a forum software for building online communities and structured discussions, developed using the Flask web framework. It provides a system for organizing public conversations, rendering rich text via a Markdown processor, and managing a multilingual localization engine to support global audiences. The platform features an extensible plugin framework that allows for the addition of custom logic and new features to the core forum functionality. Access is managed through a role-based access control system that assigns permissions to user groups to restrict or grant access to specific

Attack Range is a cybersecurity breach simulation framework designed to orchestrate the lifecycle of security labs and execute controlled attack scenarios. It functions as a security simulation infrastructure orchestrator, enabling the deployment of instrumented cloud and local environments to validate defensive capabilities and generate security telemetry. The platform distinguishes itself through configuration-driven automation and infrastructure-as-code orchestration, which allow for the repeatable provisioning of vulnerable environments. It manages the entire simulation lifecycle, from th