Open-source alternatives to Sudo

Impacket is a collection of Python classes designed for the construction, manipulation, and analysis of low-level network packets and services. It functions as a framework for building custom network tools, providing a programmatic interface to interact with communication protocols and service architectures. The library provides primitives for managing authentication, session state, and remote procedure calls within network environments. By offering a modular class hierarchy, it allows for the assembly of network packets and the implementation of specialized communication stacks. The project

pyinfra is an agentless infrastructure automation framework that turns declarative Python code into idempotent shell commands to manage servers, containers, and local machines over SSH without requiring any pre-installed software on target hosts. It operates by comparing the desired state of a system against its current state, using a dry-run simulation mode to preview changes and a fact-based conditional execution engine to gather host attributes at runtime and control which operations run. The tool compiles Python operations into optimized shell commands and executes them in parallel across

sudo-rs is a low-level system utility and privileged command executor written in Rust. It provides a memory-safe implementation of sudo and su for running programs with superuser or alternate user permissions and switching session privileges to other local user identities. The project integrates with kernel security modules to function as a sandboxed process launcher, restricting system resources and process capabilities during execution. The utility includes support for multi-language system localization, utilizing compiled message catalogues to provide translated user interface text based

Mimikatz is a security research suite designed for auditing Windows authentication and managing system security configurations. It provides a comprehensive framework for extracting sensitive credentials, manipulating process privileges, and managing digital identity assets directly from system memory or offline memory dumps. The project distinguishes itself through advanced system-level exploitation techniques, including runtime process injection, API hooking, and the ability to bypass cryptographic export restrictions. It features a specialized toolkit for Kerberos protocol operations, allow

PowerSploit is a collection of PowerShell modules designed for security assessment, penetration testing, and red team operations. It provides a framework for auditing Windows system configurations and evaluating the effectiveness of security defenses within an enterprise environment. The framework focuses on techniques that leverage native system administration tools and scripting environments to perform operations. It includes capabilities for executing arbitrary commands, escalating user privileges, and maintaining system persistence through event subscriptions. By utilizing in-memory execu

mac-cleanup-sh is a command-line utility designed for macOS that automates the removal of temporary files, system logs, and application caches. It functions as a system maintenance tool to reclaim storage capacity by identifying and purging redundant data across the operating system and development environments. The tool distinguishes itself by providing a dry-run simulation mode that calculates potential disk space recovery before any files are deleted. It utilizes pattern matching to target specific directories and handles cleanup operations idempotently, ensuring that the process continues

pyinfra is a Python-based infrastructure automation framework that turns Python code into shell commands for managing servers, Docker containers, and local machines. It operates as a declarative, idempotent deployment tool, applying desired system states by comparing target configurations against current states and making only the necessary changes. The framework provides a connector-based transport abstraction that unifies SSH, Docker, and local execution behind a common interface, with a parallel execution engine that manages concurrent operations across hosts. The tool distinguishes itself

termux-api is an Android hardware bridge and command line interface that provides shell access to device hardware and system sensors. It serves as a set of command-line tools and an API that exposes Android system functions to terminal-based scripts for automation. The project enables headless Android control and device automation, allowing users to manage mobile hardware and system settings via a remote terminal without using the graphical user interface. This includes integrating mobile hardware features such as the camera, GPS, and battery through a terminal interface. The system function

This project is an administrative utility suite designed to optimize Windows 11 environments through automated script execution. It functions by modifying core system configurations, removing pre-installed software packages, and terminating non-essential background processes to reclaim system resources and storage space. The tool distinguishes itself by providing a structured approach to privacy management and system maintenance. It programmatically updates registry keys and system settings to disable telemetry and background data collection, while offering state-reversion capabilities that a

Budgie Desktop is a graphical workspace environment for Linux systems that integrates window management, application launching, and system control tools. Built upon the GTK toolkit, it provides a unified shell for organizing open windows and interacting with daily computing tasks. The environment distinguishes itself through a modular, plugin-based panel architecture that allows for the dynamic loading of applets into a shared container. It utilizes a centralized object-oriented framework to manage component lifecycles and relies on a dedicated service for secure, authenticated handling of ad

This project is a comprehensive technical reference and educational resource designed to improve proficiency with command-line interfaces. It functions as a productivity toolkit, providing a structured knowledge base of essential terminal operations, system administration tasks, and high-impact command sequences for daily development workflows. The guide distinguishes itself through its cross-platform approach, offering standardized documentation that maps utility usage across Linux, macOS, and Windows environments. It provides specific guidance for managing native tools and compatibility lay

Gow is a collection of tools designed to install Unix-based system utilities on Windows and extend the Windows shell with custom context menu options. It provides a suite of open source binary applications that bring common Unix system administration and file manipulation tools to the Windows operating system. The project integrates these utilities into the Windows environment by managing system environment paths and distributing static, portable binaries. It further extends the Windows File Explorer by adding context menu options that allow users to launch command and terminal prompts direct

This project is a Chromium-based web browser and multi-process browser shell. It utilizes a sandboxed architecture to isolate the rendering engine from the browser shell and manages web page rendering through GPU acceleration. The system includes a browser extension host and framework designed to execute third-party add-ons by managing their bindings, events, and feature sets. It also incorporates a web platform performance suite that uses synthetic microbenchmarks to measure the latency and throughput of low-level system primitives. The browser maintains security boundaries via filtered int

go-plugin is a framework for implementing plugin architectures where extensions run as separate processes and communicate via a Go RPC plugin system. It functions as an inter-process communication library and lifecycle manager that allows host applications to discover, launch, and monitor external binary plugins. The framework enables cross-language plugin systems, allowing plugins written in different languages to integrate with a host through standardized RPC protocols. It features a bidirectional RPC bridge that allows both the host and the plugin to exchange interface implementations for

Yabridge is a compatibility bridge that allows Windows audio plugins to run within Linux digital audio workstations. It utilizes a Wine-based wrapper to translate audio processing and plugin calls from Windows plugins to Linux hosts, supporting both VST2 and VST3 standards. The system manages the execution of both 32-bit and 64-bit Windows plugins on Linux. It includes specialized mechanisms to handle window scaling, input focus, and the transfer of data through cross-environment drag-and-drop between native Linux applications and Windows plugins. The project provides tools for environment i

tarpc is a remote procedure call framework for Rust that generates server traits and client stubs for network communication. It provides an asynchronous service interface that allows remote functions to be called as if they were local asynchronous tasks. The framework utilizes a serialized transport layer to move request and response data via TCP sockets, Unix domain sockets, or in-process channels. It includes a request lifecycle interceptor for injecting custom logic to handle authorization, throttling, and load balancing, as well as a distributed request telemetry system that attaches dead

Messenger is an asynchronous messaging system and event-driven communication layer designed to exchange events between decoupled components. It functions as an inter-process communication tool that removes direct dependencies between services by routing messages through a middleware layer. The system implements a pub-sub messaging model where components subscribe to specific event types and receive notifications when those events are triggered. It utilizes a central dispatcher to route asynchronous events from producers to registered subscribers. The project provides capabilities for distrib

Execa is a promise-based process execution library that serves as a wrapper for the Node.js child process module. It functions as a shell command runner and subprocess management tool, simplifying the execution of external commands and binaries. The library distinguishes itself through automatic argument escaping to prevent shell injection and the use of abort signals for graceful process termination. It also provides an inter-process communication wrapper for exchanging structured JSON data and messages between parent and child processes. Its capabilities cover a broad range of process I/O

Cerebro is a cross-platform productivity tool and keyboard-driven command palette. It serves as a central search interface and desktop application launcher for finding and initiating the execution of local files, installed software, and web services. The application is an extensible search tool that supports a plugin system, allowing third-party modules to register custom search providers and new functional capabilities. The software covers several capability areas, including local file system navigation and preview, integrated web search, and productivity utilities for natural language mat

LearningNotes is a technical knowledge base and engineering study guide focused on Android framework internals, system architecture, and mobile performance optimization. It serves as a reference for analyzing the Android boot sequence, process bootstrapping, and system service initialization. The project provides detailed guides on mobile performance, including strategies for reducing memory footprints, identifying memory leaks, and optimizing image decoding. It further covers Android inter-process communication using AIDL and the Binder kernel driver, as well as software architecture manuals

This project is a QML desktop shell designed for desktop environment orchestration and interface customization. It functions as a system status dashboard and a declarative user interface for managing system hardware, window metadata, and user sessions. The shell features a dynamic theme generator that extracts dominant colors from wallpapers to automatically synchronize the global visual color palette. It utilizes an inter-process communication system to orchestrate shell functions and a hierarchical JSON configuration framework to manage global and per-monitor interface layouts. The system

Electrino is a cross-platform desktop application framework used to build lightweight software with web technologies. It functions as a native browser desktop runtime that leverages the host operating system's pre-installed web engine to render interfaces instead of bundling a separate browser binary. The framework provides a native window manager to spawn and control application windows and system tray icons from a background process. It includes an inter-process communication bridge to synchronize application state by exchanging messages between the background process and the renderer. The

LiveEventBus is an AndroidX communication library that provides a message bus for decoupled data transfer between application components. It utilizes LiveData to implement a lifecycle-aware message bus, ensuring that event subscriptions are automatically managed based on the state of Android components to prevent memory leaks. The library includes an inter-process communication bridge that allows the transfer of serialized data and events between different processes or separate applications. It also features a sticky event dispatcher that retains and immediately delivers the most recent messa

This project is a minimal project structure and boilerplate for starting new desktop applications using the Electron framework. It serves as a starter template and reference implementation that provides the essential file layout required for a cross-platform desktop application. The repository is designed to bootstrap a minimal application, allowing for quick desktop application prototyping and the establishment of a basic development environment. This stripped-down structure is also used for software bug isolation to reproduce specific behaviors without the complexity of a full project. The

This project is a comprehensive technical interview preparation guide and computer science knowledge base. It serves as a structured study resource designed to help software engineers review core engineering concepts and prepare for professional coding assessments. The repository focuses on a wide array of theoretical and practical domains, including detailed references for mobile application architecture and operating system fundamentals. It provides curated materials on software architecture patterns and network protocol analysis to support professional development. The content covers foun

This project is a collection of reference implementations and sample applications for desktop software development using Electron. It provides cross-platform boilerplates and practical code examples that demonstrate how to integrate web technologies with native operating system APIs. The repository serves as a feature showcase for implementing native system integrations, such as local file system access, process management, and custom window framing. It includes demonstrations for specialized capabilities like network request interception via service workers, screen and window capture, and th

This repository provides a collection of interactive sample applications and reference implementations for the Electron framework. It serves as a library of API reference demos designed to help developers learn how to implement core desktop features. The project features visual demonstrations of cross-platform GUI management and practical examples of native operating system integration. It includes dedicated samples for handling native modules, crash reports, and the configuration of security implementations such as content security policies and process sandboxing. The codebase covers a broa