GitHub C# Weekly Trending Repositories

itsfatduck/optimizerDuck

Free, open-source Windows optimization tool for performance, privacy, and simplicity.

https://optimizerduck.vercel.app/

optimizerDuck

optimizerDuck is a free, open-source Windows optimization tool focused on performance, privacy, and simplicity.

Getting Started | How It Works | FAQ

⭐ Star History

If optimizerDuck helped improve your PC, consider giving the repo a ⭐ and sharing it with others. Every star helps motivate future improvements.

Quick Start

Download from GitHub Releases
Run the .exe directly, no installation required
Choose the optimizations you want, apply them, and restart your PC when you're ready

Tip

Always create a system restore point before making changes.

Note

	Language	Native Name	Translator
🇺🇸	English (United States)	English	Primary & recommended
🇻🇳	Vietnamese	Tiếng Việt	itsfatduck
🇹🇼	Traditional Chinese	正體中文	abc0922001
🇨🇳	Simplified Chinese	简体中文	wcxu21
🇷🇺	Russian	Русский	Foodhead
🇫🇷	French	Français	Robocnop
🇩🇪	German	Deutsch	pixeldepartment
🇮🇱	Hebrew	עברית	yosef-chai
🇰🇷	Korean	한국어	klfnn
🇪🇸	Spanish	Español	thexxtt
🇯🇵	Japanese	日本語	zerofrip
🇵🇱	Polish	Polski	dudus2000
🇧🇷	Portuguese (Brazil)	Português (Brasil)	mhanelia
🇹🇷	Turkish	Türkçe	amhunter1
🇸🇦	Arabic	العربية	s5xx5s
🇮🇩	Indonesian	Bahasa Indonesia	nekowawolf
🇮🇹	Italian	Italiano	bandrea83
🇮🇷	Persian	فارسی	NimaHp

Want to add your language? See CONTRIBUTING.md (Japanese, Turkish).

What optimizerDuck Does & Why It Matters

Windows works great out of the box. However, a fresh installation also includes background services, telemetry, pre-installed apps, and scheduled tasks that continue running even if you never use them. These consume system resources such as CPU, RAM, disk, and network in the background.

At the same time, many settings that can improve performance, reduce latency, or provide a smoother experience are not enabled by default.

optimizerDuck brings everything together in one place. It helps you optimize Windows, remove unnecessary components, customize system settings, and manage common Windows features without digging through the Registry, Group Policy, or PowerShell.

It also includes built-in management tools, allowing you to see what is running, remove what you don't need, and restore changes whenever necessary.

Why optimize Windows?

System Optimizations

42 tweaks across 7 categories, each with a clear description and risk rating so you know exactly what each change does before applying it.

Category	What it covers
Performance	Service host tuning based on your RAM, process priority adjustments, keyboard latency reduction, and multimedia scheduler tweaks for smoother gaming
Privacy	Disable Windows telemetry, error reporting, advertising ID, location tracking, Cortana, Copilot, and content delivery suggestions
GPU	Vendor-specific registry tweaks for AMD, NVIDIA, and Intel GPUs, covering power states, clock gating, and display latency
Power	Disable hibernation and fast startup, turn off USB selective suspend, install a custom high-performance power plan, and disable power throttling
Bloatware & Services	Block OEM app reinstall behavior and fine-tune startup types for 200+ Windows services
User Experience	Remove menu show delays, disable visual effects like taskbar animations and transparency for a snappier feel
AI	Disable Windows Recall snapshots and the Click To Do AI overlay (Windows 11)

Note

The optimizations here are researched from well-known tools with large user bases, nothing is AI-generated or blindly added. Every tweak is chosen for real-world impact.

Customize

44 settings across 4 categories. No need to dig through the registry, just toggles, dropdowns, and number inputs presented in one place:

Desktop: Show or hide icons (This PC, Recycle Bin, Network, User Files, Control Panel, all desktop icons), remove shortcut arrow overlays
Preferences: Taskbar alignment, widgets, Task View, End Task and last active click buttons, search box display, clock seconds, dark mode, file extensions, hidden files, clipboard history, compact view, snap assist, item checkboxes, classic context menu, Bing search, toast and sync notifications, system suggestions, window shake, and launching File Explorer to This PC
Gaming: Game Mode, Game Bar, background recording, mouse acceleration, fullscreen optimizations, hardware-accelerated GPU scheduling
System: Num Lock on boot, Developer Mode, sideloading trusted apps, long paths, and battery percentage

Built-in Tools

Tool	What it does
System Dashboard	View your CPU, RAM, GPU, storage drives, and OS details in one panel
Startup Manager	See every app and task that launches at boot, toggle them on or off, and open their file location
Scheduled Tasks	Browse, run, stop, enable, disable, or delete Windows scheduled tasks
Disk Cleanup	Scan and clear temp files, system cache, Windows Update leftovers, prefetch, thumbnails, recycle bin, crash dumps, and old Windows installations
Bloatware Remover	Lists all removable AppX packages with risk badges (Safe, Caution, Unknown), so you can pick what to remove

Why optimize Windows instead of just upgrading your hardware?

The fastest way to improve performance is always upgrading your hardware. A better CPU, GPU, more RAM, or a faster SSD will usually provide much larger improvements than software tweaks alone.

But hardware is only one part of the picture.

Windows is designed for hundreds of millions of PCs with different hardware, workloads, and users. Because of that, Microsoft ships Windows with settings that prioritize compatibility, stability, battery life, and ease of use instead of maximum performance.

As a result, a default Windows installation includes many background services, scheduled tasks, telemetry, power-saving features, and pre-installed apps that many users may never need.

This is especially true after reinstalling Windows. Even after installing all drivers and updates, many useful performance-related settings remain untouched, while unnecessary background components continue running.

Optimizing Windows is simply about reducing unnecessary overhead so your PC can spend more of its resources on what actually matters, whether that's gaming, programming, content creation, or everyday work.

It won't magically double your FPS, but it can reduce background activity, lower system latency, improve responsiveness, and help your hardware perform more consistently.

This is also one reason why many people recommend Linux for better performance and lower system overhead. If you prefer staying on Windows for its software compatibility and familiar experience, optimizerDuck helps you get the best possible experience without switching operating systems.

When should I optimize Windows?

The best time is after setting up a fresh Windows installation.

We recommend this order:

Install Windows.
Install all hardware drivers (chipset, GPU, network, audio, etc.).
Run Windows Update until no more updates are available.
Install all Optional Updates.
Open the Microsoft Store and update all built-in applications.
Install the software and games you normally use.
Apply your preferred optimizerDuck optimizations.
Use optimizerDuck's built-in tools to remove unnecessary apps, clean up Windows, and manage startup programs.

Following this order helps avoid Windows or driver updates overwriting your optimizations later.

Tip

Many advanced users choose to temporarily disable automatic Windows Updates after finishing their setup. Large Windows updates may restore default settings, reinstall certain components, or undo some optimizations. If you do this, remember to periodically enable Windows Update again to install important security updates before disabling it again.

Note

Every optimization provided by optimizerDuck can also be performed manually. The goal of optimizerDuck is simply to make Windows optimization easier, safer, and more convenient.

Safety

Changing system settings carries risk. optimizerDuck is built around reversibility and user control.

See the Privacy Policy for details on our data practices.

Automatic backups: Every change writes a revert file to a local folder. You can restore individual tweaks or roll back everything
One-click revert: Undo any applied optimization from the UI with a single click
Risk ratings: Each tweak is labeled Safe, Moderate, or Risky based on its potential impact
No defaults applied: Nothing runs until you select it. The tool does not enable anything on its own
Restore point prompt: Before your first optimization, the app suggests creating a Windows restore point

FAQ

Tip

Visit our Website FAQ for more questions and answers.

Is optimizerDuck safe to use?

Yes. optimizerDuck is fully open-source (GPL v3), meaning anyone can inspect, audit, or build the source code themselves. Every release is built automatically by GitHub Actions from the public source; no hidden modifications, no unsigned binaries injected after build. If you prefer, you can clone the repo and build the .exe yourself with a single dotnet build.

The app does not collect any telemetry, usage data, or personal information. See the Privacy Policy.

Does optimizerDuck actually improve performance, reduce latency, or speed up my network?

It can help. Every optimization in optimizerDuck is researched from well-known tools, community guides, and hardware vendor recommendations, nothing is AI-generated, blindly added, or made up. Each tweak addresses a real setting that Windows configures conservatively by default (e.g., service host grouping, GPU power states, network throttling, process scheduling).

There are no fake registry hacks here, every change has a documented purpose and real-world impact backed by community testing and vendor documentation.

Why does Windows SmartScreen / Defender flag the download?

optimizerDuck is not code-signed because code signing certificates are expensive for open-source projects. When Windows encounters an unsigned executable downloaded from the internet, SmartScreen displays a warning by default. This is normal and does not mean the file is unsafe.

To bypass, click "More info" > "Run anyway". If you are still concerned:

Build the .exe yourself from source
Submit the binary to online sandboxes like ANY.RUN for independent verification

Can I revert changes if something goes wrong?

Yes. Every optimization creates a revert file before applying. You can undo individual tweaks or roll back everything from the UI with one click. The app also suggests creating a Windows System Restore point before your first optimization.

Does this work on Windows 10 and Windows 11?

Yes. optimizerDuck supports Windows 10/11 (x64 & ARM64).

Do I need administrator rights?

Yes. optimizerDuck modifies system settings and the Windows registry, so it requires administrator privileges to run.

Does optimizerDuck collect my data?

No. The app contains zero telemetry, analytics, or phone-home functionality. It runs entirely offline and does not send any data anywhere.

Why does Task Manager show 100% CPU after applying the power plan? (#29)

A known Task Manager display bug triggered by non-default power plans, it incorrectly reports 100% CPU on some systems while actual load is normal. Visual only, does not affect real performance or cause overheating. If unwanted, simply toggle off this optimization.

Troubleshooting

Tip

Visit our Troubleshooting page for more detailed guidance and known issue workarounds.

The app fails to start or crashes on launch

Make sure you are running as Administrator. optimizerDuck requires elevated privileges. If it still crashes, download the latest version from Releases; an outdated build may be incompatible with your Windows version.

Changes don't seem to take effect after applying

Some optimizations require a system restart to apply fully. If a tweak doesn't appear to work after restarting, try applying it again or check the revert section to verify the change was saved.

Revert file is missing or corrupted

Revert files are stored in %LocalAppData%\optimizerDuck\Revert\. If a file is accidentally deleted or corrupted, you can restore it from a backup or create a System Restore Point beforehand as a fallback.

Windows Update resets my settings

Windows feature updates occasionally reset certain registry values and service configurations to defaults. Simply re-apply your previous optimizations from the app after a major update.

I found a bug / want to request a feature

Open an issue on GitHub with as much detail as possible: your Windows version, what you applied, and what went wrong. Feature requests are also welcome.

Technical Details

Framework: WPF on .NET 10, using the WPF UI library for Fluent design
Revert system: Four revert step types (Registry, Service, Scheduled Task, Shell) with JSON-persisted state and thread-safe file I/O
Theming: Dark (default), Light, and High Contrast modes with Mica backdrop support
No installer: Runs as a single .exe, no installation required
Backup system: Local folder-based backup for every change, with one-click restore
Discovery: Optimization and Feature categories are discovered automatically via reflection + custom attributes, no manual registration needed
No telemetry: The app does not collect any user data

Documentation

Official Documentation

Guides, optimization details, and usage tips.

Contribute

Bug reports, new optimizations, docs improvements, and translations are all welcome. See CONTRIBUTING.md (Japanese, Turkish).

Community

Tip

Join our Discord server for support, tips, and discussions with other users and contributors.

If optimizerDuck helped your PC:

⭐ Star the repo
💬 Join Discord for support
🐞 Report bugs on GitHub
🎁 Support the project here

Disclaimer

optimizerDuck is provided "as is", without warranty of any kind.

By using this tool, you agree that the authors are not liable for system instability, data loss, or issues caused by third-party software or user modifications.

Always create a restore point before applying changes.

Note

optimizerDuck modifies system settings and the Windows registry. Use at your own risk. We recommend backing up important data and creating a restore point before making changes.

See Terms of Service, Privacy Policy, and Disclaimer for more information.

License

GPL v3 License
See LICENSE.

Thanks to all Contributors

icsharpcode/ILSpy

.NET Decompiler with support for PDB generation, ReadyToRun, Metadata (&more) - cross-platform!

ILSpy

ILSpy is the open-source, cross-platform .NET assembly browser and decompiler. The desktop UI runs on Windows, Linux, and macOS (built on Avalonia).

Download: latest release | latest CI build (master) | Microsoft Store (RTM versions only)

Decompiler Frontends

Aside from the cross-platform desktop UI ILSpy (downloadable via Releases, see also plugins), the following other frontends are available:

Visual Studio 2022/2026 ship with decompilation support for F12 enabled by default (using our engines v8.2 and v9.1 respectively).
Our Visual Studio 2022/2026 extension marketplace
Our Visual Studio Code Extension repository | marketplace | open-vsx
Our dotnet tool for Linux/Mac/Windows - check out ILSpyCmd in this repository | dotnet tool install
C# for Visual Studio Code ships with decompilation support as well. To enable, activate the setting "Enable Decompilation Support".
Our ICSharpCode.Decompiler and ILSpyX NuGet packages for your own projects
Our Linux/Mac/Windows PowerShell cmdlets in this repository

Features

Decompilation to C# (check out the language support status)
Whole-project decompilation
Open from NuGet feed, open from running process in addition to disk and GAC (Windows-only)
Search for types/methods/properties (learn about the options)
Hyperlink-based type/method/property navigation, bookmarks
Base/Derived types navigation, history
Assembly metadata explorer (feature walkthrough)
BAML to XAML decompiler, !AvaloniaResources support
ReadyToRun binary support for .NET Core (see the tutorial)
Extensible via plugins
Additional features in DEBUG builds (for the devs)

License

ILSpy is distributed under the MIT License. Please see the About doc for details, as well as third party notices for included open-source libraries.

How to build

Windows:

Make sure PowerShell 7+ is installed (Windows PowerShell at least version 5.0 works as well)
Clone the ILSpy repository using git.
Execute git submodule update --init --recursive to download the ILSpy-Tests submodule (used by some test cases).
Install Visual Studio (documented version: 18.0/2026). You need the following workload components:
- Workload ".NET Desktop Development". This workload includes the .NET Framework 4.8 SDK and the .NET Framework 4.7.2 targeting pack, as well as the .NET 10.0 SDK (ILSpy.csproj targets .NET 10.0, but we have net472 projects too). Our unit tests require .NET 11.0 SDK.
- Workload "Visual Studio extension development" (Note: ILSpy.VSExtensions.slnx is separate from ILSpy.sln and thus this workload is optional)
- Individual Component "MSVC v143 - VS 2022 C++ x64/x86 build tools" (or similar)
  - The VC++ toolset is optional; if present it is used for editbin.exe to modify the stack size used by ILSpy.exe from 1MB to 16MB, because the decompiler makes heavy use of recursion, where small stack sizes lead to problems in very complex methods.
Open ILSpy.sln in Visual Studio.
- NuGet package restore will automatically download further dependencies
- Run project "ILSpy" for the ILSpy UI
- Use the Visual Studio "Test Explorer" to see/run the tests
- If you are only interested in a specific subset of ILSpy, you can also use
  - ILSpy.Desktop.slnf: for the cross-platform Avalonia UI and its tests
  - ILSpy.XPlat.slnf: for the cross-platform CLI (ilspycmd) or PowerShell cmdlets
  - ILSpy.VSExtensions.slnx: for the Visual Studio extensions

Note: Visual Studio includes a version of the .NET SDK that is managed by the Visual Studio installer - once you update, it may get upgraded too. Please note that ILSpy is only compatible with the .NET 11.0 SDK and Visual Studio will refuse to load some projects in the solution (and unit tests will fail). If this problem occurs, please manually install the .NET 11.0 SDK from here.

Unix / Mac:

Make sure .NET 10.0 SDK (for run) and .NET 11.0 SDK (for tests) is installed. Better yet, use dotnetup with SDK channel preview.
Make sure PowerShell is installed (formerly known as PowerShell Core)
Clone the repository using git.
Execute git submodule update --init --recursive to download the ILSpy-Tests submodule (used by some test cases).
Use dotnet build ILSpy.Desktop.slnf to build the cross-platform Avalonia desktop UI; run it with dotnet run --project ILSpy.
Use dotnet build ILSpy.XPlat.slnf to build only the CLI tool (ilspycmd) and PowerShell cmdlets.

We recommend Visual Studio Code or derivatives together with DotRush, which is also available for derivatives of VS Code.

How to contribute

Report bugs
If you want to contribute a pull request, please add https://github.com/icsharpcode/ILSpy/blob/master/BuildTools/pre-commit to your .git/hooks to prevent checking in code with wrong formatting. We use tabs and not spaces. The build server runs the same script, so any pull requests using wrong formatting will fail.

Current and past contributors.

Privacy Policy for ILSpy

ILSpy does not collect any personally identifiable information, nor does it send user files to 3rd party services. ILSpy does not use any APM (Application Performance Management) service to collect telemetry or metrics.

SamboyCoding/Cpp2IL

Work-in-progress tool to reverse unity's IL2CPP toolchain.

Cpp2IL

Need Help? Join the discord!

WIP Tool to reverse Unity's IL2CPP build process back to the original managed DLLs.

The information below almost entirely applies to the CLI application available on github releases. For documentation on using the "core" module - which the CLI is just a wrapper around - in your own projects, see README_CORE.md

Uses LibCpp2IL for the initial parsing and loading of metadata structures. LibCpp2IL is obtainable from the build artifacts if you want to do something yourself with IL2CPP metadata, and is released under the MIT license. The link above will take you to the documentation for LibCpp2IL.

Decompiler

The decompiled CIL is pretty messy right now, the next thing is probably pattern matching to convert il2cpp specific stuff into C# (generic ISIL should be converted into more C# specific ISIL, new object, throw, etc. instructions should be added to ISIL), but most of the times it's at least possible to see what the method does. Use ILSpy because it works with broken CIL better than dnSpy.

The entry point to decompilation is MethodAnalysisContext.Analyze(), it translates platform specific assembly into ISIL with Cpp2IlInstructionSet, builds the control flow graph and dominator info, and the rest of the decompilation is done with IAction classes (MethodAnalysisContext.analysisActions), these include stack analysis, simplification, applying metadata, etc. and then Ilgenerator.GenerateIl() translates the ISIL into CIL that's saved into managed dlls.

Development Branch Notes

Cpp2IL has undergone a major rewrite. This branch represents work in progress, and is subject to change.

CI builds for developers can be obtained from My Nuget Feed.

The command-line interface has been simplified, going from a lot of command line options to a concept of output formats and processing layers. However, a lot of these formats and layers are not yet implemented, so functionality is limited compared to the previously released versions.

Obvious Changes:

Many options, such as --analysis-level, --skip-analysis, etc, have been removed. Analysis is now off by default and can be enabled with --output-as dll_il_recovery.

Equally, options like --supress-attributes, which previously suppressed the Cpp2ILInjected attributes, have been replaced with a process layer - this one is actually implemented, and is called attributeinjector. You can enable this layer using the --use-processor option, and you can list other options using --list-processors.

Metadata dumps and method dumps will be their own output format too, instead of both being default-on, and controlled via a dedicated option. Currently this means you'll need to run Cpp2IL multiple times if you want both dumps, though this may change in the future if we add support for outputting to multiple formats simultaneously. Like processing layers, output formats can be listed via the --list-output-formats option, and are selected via the --output-as option.

Less obvious changes:

Under the hood, the application has been almost completely rewritten. Primarily, this was necessary due to the degree Cpp2IL was dependent on the Mono.Cecil library, which had some limitations. When we looked into switching, we realised how reliant we were on the library. This is no longer the case - the application is written around LibCpp2IL types and the new Analysis Context objects, and the Mono.Cecil library is no longer used, having been replaced with AsmResolver.DotNet.

Analysis is now based on an intermediate representation called ISIL (Instruction-Set-Independent Language), which is converted into a Control Flow Graph for more intelligent analysis.

We're also working on a Plugin system which will allow third-party developers to write plugins to add support for custom instruction sets, binary formats, and eventually load obfuscated or encrypted metadata or binary files.

Command Line Options

Basic Usage

The simplest usage of this application is for a windows x86 or x64 unity game. In that case you can just run Cpp2IL-Win.exe --game-path=C:\Path\To\Your\Game and Cpp2IL will detect your unity version, locate the files it needs, and dump the output into a cpp2il_out folder wherever you ran the command from.

Assuming you have a single APK file (not an APKM), and are running at least cpp2il 2021.4.0, you can use the same argument as above but pass in the path to the APK, and cpp2il will extract the files it needs from the APK.

Supported Command Line Option Listing

Option	Argument Example	Description
--game-path	C:\Path\To\Game	Specify the path to the game folder. Required.
--exe-name	TestGame	Specify the name of the game's exe file in case auto detection fails (because there are other exe files in the game directory)
--verbose	<None>	Log more information about what we are doing
--list-processors	<None>	List available processing layers, then exit.
--use-processor	attributeinjector	Select a processing layer to use, which can change the raw data prior to outputting. This option can appear multiple times.
--processor-config	key=value	Provide configuration options to the selected processing layers. These will be documented by the plugin which adds the processing layer.
--list-output-formats	<None>	List available output formats, then exit.
--output-as	dll_il_recovery	Specify the output format you wish to use.
--output-to	cpp2il_out	Root directory to output to. This path will be passed to the selected output format, which may then create subdirectories etc. within this location.
--wasm-framework-file	C:\Path\To\webgl.framework.js	Only used in conjunction with WASM binaries. Some of these have obfuscated exports but they can be recovered via a framework.js file, which you can provide the path to using this argument.

Release Structure

Every single commit is built to a CI build using Github Actions - the action file can be found in the .github folder, if you want to reproduce the builds yourself. Be aware these may not be the most stable - while there are tests to ensure compatibility with a range of games, sometimes things do break! These are versioned by the commit they were built from.

The release files can be downloaded from the Actions tab if you are signed into GitHub, or you can use the following links, which always point to the latest successful CI build. Note that the .NET Framework build is provided for compatibility with wine/proton.

On top of this, I manually release "milestone" release builds whenever I think a major set of improvements have been made. These are NOT marked as pre-releases on github, and should (at least in theory) be stable and suitable for use on a range of games.

Terminal Colors and Debug Logging

From the first milestone build 2021.0, and onwards, Cpp2IL now outputs more rigidly-structured data to the console. This includes log levels (VERB, INFO, WARN, FAIL) and associated colours (Grey for VERB, Blue for INFO, Yellow for WARN, Red for FAIL).

As of milestone 2021.1, if Cpp2IL is able to detect that you're running in Wine/Proton, these ANSI colour codes are disabled, as they are not supported by wine and look awful.

VERB messages will only be logged if Cpp2IL is launched with the --verbose option, and it would be helpful if you could report issues with this flag enabled. For normal operation, they shouldn't be needed, unless you're curious.

If you do not wish for the output to be coloured, set the Environment Variable NO_COLOR=true.

Credits

This application is built primarily using .NET 9.0, but a .NET Framework 4.7.2 build is also published for legacy purposes.

It uses the following libraries, for which I am very thankful:

(All are MIT licensed aside from XUnit which is Apache 2.0+MIT)

iced disassembler for x86
Capstone.NET for ARMv8 and ARMv7 disassembly, though its usage is deprecated in favor of:
My own Disarm library for fully-managed ARMv8/ARM64 disassembly.
My own WasmDisassembler library for WebAssembly disassembly. This can be found in the WasmDisassembler subdirectory.
Pastel for the console colours.
CommandLineParser so I didn't need to write one myself.
AsmResolver for any output formats which produce managed .NET assemblies.
xUnit for the unit tests.
AssetRipper.CIL for filling stub method bodies with IL that decompiles cleanly.
AssetRipper.Primitives for unity version handling.

The net472 build uses the following additional libraries:

System.ValueTuple for value tuples in .NET Framework.
PolySharp (licensed under the MIT license) for polyfilling newer runtime features in .NET Framework.

Some plugins also use additional libraries:

The OrbisPkg plugin uses LibOrbisPkg, which is licensed under the LGPL, version 3.
The ControlFlowGraph plugin uses DotNetGraph, which is licensed under the MIT license, for creating dot files.
The Pdb plugin uses AssetRipper.Bindings.MsPdbCore, which is licensed under the MIT license.

Cpp2IL is (very loosely, at this point) based off of Il2CppDumper, which I forked in 2018 and removed a lot of code, rewrote a lot, and added a lot more. But at its core, it's still got some dumper left in it, mostly in LibCpp2IL.

It contains bits and pieces from Il2CppInspector, taken with permission from djKaty, and I'd like to express my gratitude to her here for her invaluable help.

I'd like to thank the Audica Modding community and Discord for the initial inspiration for this project, lots of support in the early days, and feature requests these days.

And finally, check out some other cool projects which link in with this one. Of course, I mentioned Il2CppInterop further up, but also check out MelonLoader, which uses Cpp2IL for Dummy DLL generation.

tgeorgiadis/quiver-launcher

A modern launcher for downloading, installing, and running apps from GitHub and GitLab releases. With a personal library, community catalog subscriptions, and flexible filtering.

https://quiverlauncher.com

Quiver Launcher

About - Quiver Launcher is a fork of GithubLauncher, extended with the features I wanted: tag filters, library management with the Quiver catalog, mod management support, UI improvements and more. It was rebranded from GithubLauncher to avoid using the GitHub trademark.

A modern launcher for downloading, installing, and running apps from GitHub and GitLab releases. With a personal library, the Quiver catalog, and flexible filtering.

Features

Tag filters - Organize and filter your library with custom tags
Library search - Filter the current list by name, tags, repository, or folder
Manually managed apps - Add apps with no GitHub/GitLab repository; drop files into the app folder and open it from the library
App Catalog - Search the quiverlauncher.com catalog by project type, platform, console and AI use, see how apps run for other players, and add them to your library
GitHub & GitLab releases - Install and update apps from GitHub or gitlab.com release assets
Mod Management Support - Browse, install and update mods from Thunderstore and GameBanana
Automated updates - Download and install the latest releases automatically
Version management - Automatic version checking and in-app update checks
UI improvements - Refined layout and top-bar controls

Getting Started

Installation

Note if you are upgrading from 2.4.x or older: the in-app update cannot migrate Quiver Launcher 2.4.x onto version 3.0 or higher. Download a fresh 3.x version of Quiver Launcher and copy your library over. See MIGRATING.md.

Windows

Download QuiverLauncher-win-Portable.zip from Releases
Extract it
Run QuiverLauncher.exe from the extracted folder

Your library stays in that same folder (apps.json, settings.json, Apps/, Cache/ next to current/), so you can move the whole directory wherever you want.

QuiverLauncher/
├── QuiverLauncher.exe          # launcher stub
├── current/            # app binaries (replaced on update)
├── apps.json
├── settings.json
├── Apps/
└── Cache/

To verify a signed QuiverLauncher.exe: right-click → Properties → Digital Signatures, or Get-AuthenticodeSignature .\QuiverLauncher.exe in PowerShell.

Linux

Download QuiverLauncher-linux-x64.AppImage or QuiverLauncher-linux-arm64.AppImage from Releases
Put the AppImage in its own folder (it creates library files beside itself), mark it executable, then run it:
```
mkdir -p ~/QuiverLauncher
mv QuiverLauncher*.AppImage ~/QuiverLauncher/
cd ~/QuiverLauncher
chmod +x QuiverLauncher*.AppImage
./QuiverLauncher*.AppImage
```
Or right-click → Properties → Permissions → Allow executing file as a program.
GitHub downloads do not keep the executable bit; you need to set it locally after download.

Library data (apps.json, settings.json, Apps/, Cache/) is stored beside the AppImage so you can move that folder together. If the AppImage’s directory is not writable (e.g. /usr/local/bin), Quiver Launcher falls back to ~/.local/share/QuiverLauncher/ (or $XDG_DATA_HOME/QuiverLauncher).

MyFolder/
├── QuiverLauncher-linux-x64.AppImage
├── apps.json
├── settings.json
├── Apps/
└── Cache/

macOS

Currently macOS support is a work in progress.

Download the macOS package from Releases
Keep QuiverLauncher.app in a writable folder (not only /Applications if you want portable data)

Library data lives beside QuiverLauncher.app in that folder. If the parent directory is not writable, Quiver Launcher falls back to ~/Library/Application Support/QuiverLauncher/.

MyFolder/
├── QuiverLauncher.app
├── apps.json
├── settings.json
├── Apps/
└── Cache/

Library data and recovery

Quiver keeps verified library snapshots in Backups/apps/ alongside apps.json on Windows, Linux, macOS, and Android. See library protection and recovery for how to restore a snapshot if the library becomes damaged.

Basic Usage

Launch the application
On first launch, open the App Catalog (internet required), open an app and choose Add to library. You can also add apps later with + Add New Entry, including manually managed apps that have no GitHub/GitLab repository. Your library is stored in local apps.json
Browse your app library in the Library view
Click the Download/Launch button on the app/game you want to use

The App Catalog reads the catalog from the quiverlauncher.com API the first time you open it, and again whenever you search, sort or filter. Reviews are written on the website: an app's Write a review on the website button opens its page.

Configuration

Kiosk mode

Settings → General → Kiosk mode keeps the next launch fullscreen and limited to browsing and launching. Settings, the app catalog, add, update, and exit controls are hidden. Press Ctrl+Alt+K to unlock this session, and press it again to lock it without restarting. An optional PIN can be set in that same section; Quiver stores only a hash of the PIN, and the PIN is required only to unlock.

--kiosk starts one locked session without changing settings.json, for a cabinet shortcut.

Kiosk mode does not block the Windows key, Alt+Tab, or Ctrl+Alt+Del. For a public machine, make Quiver the session: Windows Assigned Access or shell replacement, or a Linux Gamescope or cage session that only runs Quiver. Steam Deck Gaming Mode already keeps the desktop away.

GitHub / GitLab API Tokens

To avoid hitting API rate limits, you can provide personal access tokens in Settings → Advanced.

GitHub: Create a classic token with no special permissions at GitHub Settings → Developer settings → Personal access tokens. Paste it into GitHub API Token.
GitLab (optional): Create a personal access token with read_api at GitLab personal access tokens. Paste it into GitLab API Token. Public gitlab.com releases work without a token.

Do not share your tokens.

Mods (Thunderstore & GameBanana)

Apps can expose a Mods browser when mods.path and mods.sources are set in the catalog entry (or via + Add New Entry).

Optional mods.layout:

Value	Behavior
(omitted) / `flat`	Extract archive paths as-is into the mods folder (default; typical for Thunderstore `.nrm` packs).
`folderPerMod`	If the archive has payload files at its root, wrap everything in a folder named from the download filename (e.g. `Music-FRLG.zip` → `mods/Music-FRLG/`). Archives that already use a top-level folder are left unchanged.

Use folderPerMod for apps that expect each mod in its own subfolder. Enable it in the catalog JSON or with Install each mod into its own folder when editing an entry.

Source URL formats (one per line in Mod Sources):

Provider	Examples
Thunderstore	`https://thunderstore.io/c/banjo-recompiled/` or slug `banjo-recompiled`
GameBanana	`https://gamebanana.com/mods/games/24774`, `https://gamebanana.com/games/24774`, or bare id `24774`

GameBanana URLs are detected automatically (no gamebanana| prefix required). Other hosts can still use provider|url.

Browse & search

Both sources support infinite scroll / load-more (mouse or gamepad). Multi-source search merges pages from each provider.
Content-rated / NSFW mods are hidden by default. Use the Include NSFW chip to show them (persisted in settings).
GameBanana mods with multiple download files show a file picker on Install/Update. Zip, 7z, and RAR archives are supported.
Thunderstore mods that list requirements prompt before install if those mods are not already installed. Yes installs the missing requirements (and the selected mod); No installs only the selected mod; Cancel aborts without installing anything. Update All still pulls missing requirements without prompting.

Verified releases

Apps from the Quiver catalog follow what quiverlauncher.com checked:

Updates, including automatic ones, go to the release Quiver verified, not simply the newest one on GitHub or GitLab.
Every download of a catalog app is checked against the SHA-256 Quiver saw when the release came out, and is refused if it changed. Other apps are checked against the checksum GitHub publishes, when there is one.
Installing a release Quiver hasn't verified asks first and says why it isn't verified yet. Installing one Quiver blocked asks twice. Automatic updates never install either.
Change version marks each release Verified, Unverified or Blocked.

Your own app list

Quiver Launcher no longer subscribes to app lists. If you keep your own list, set it in Settings → Advanced → My app list: a local JSON file, or a URL such as a GitHub raw link. Its apps appear under My app list in the App Catalog, where you can add them to your library. A list you added in an earlier version is carried over automatically; if you had several, the first enabled one is kept.

The list uses the same format as apps.json: an apps array of app entries (an older list file's name, description and version are ignored).

App Entry Properties

Each app entry requires the following properties:

name - Canonical app/title (for ports, usually the game name). Library display can compose this with project via Settings → Library name style
project (optional) - Project, team, or author attribution shown when library name style includes project
customDisplayName (optional) - Per-app library label override; always wins over name/project composition
repository (required unless manually managed) - The repository path in the format username/repository (GitHub) or namespace/project (GitLab). The same repository may be used by more than one app when each has a distinct folderName (for example two games shipped in one GitHub release). Omit this field for manually managed apps: Quiver creates {Apps}/{folderName} and you place the files yourself. There is no download or update management until a repository is added. On Edit App Entry, filling in a repository promotes the app to a managed install (existing files are kept; Auto Update stays off until you update). Clearing the repository demotes it back to manual.
repositorySource (optional) - github (default when omitted) or gitlab. Ignored for manually managed apps. Older Quiver Launcher versions ignore this field and treat entries as GitHub-only.
folderName - The folder name under Apps where the app is installed (prefer Title-Project, without type suffixes like -Recomp). Must be unique. For manually managed apps this folder is created immediately as the drop target.
releaseAssetFilter (optional) - Case-insensitive substring matched against release filenames. Use this when one repository ships more than one game so each app downloads only its files (e.g. EXIT1 / EXIT2). Ignored for manually managed apps.
tags (optional) - Freeform tags (classification such as recomp / decomp lives here, not in the title)
appIconUrl - URL of the app's icon image. If null, a default icon will be used.

Example Configuration

{
    "apps": [
        {
            "name": "Majora's Mask",
            "project": "2 Ship 2 Harkinian",
            "repository": "HarbourMasters/2ship2harkinian",
            "folderName": "MajorasMask-2Ship2Harkinian",
            "tags": ["n64", "decomp", "harbour-masters"],
            "appIconUrl": null
        },
        {
            "name": "Example App",
            "repository": "username/example-app-repo",
            "folderName": "ExampleApp",
            "appIconUrl": null
        },
        {
            "name": "GitLab Example App",
            "repository": "namespace/example-project",
            "repositorySource": "gitlab",
            "folderName": "GitLabExampleApp",
            "appIconUrl": null
        },
        {
            "name": "Manually Managed Example",
            "project": "Itch drop",
            "folderName": "ManualExample",
            "tags": ["manual"],
            "appIconUrl": null
        }
    ]
}

Support

If you encounter any issues or have questions:

Open an issue
Check existing issues for solutions
Join the Discord server

License

Quiver Launcher is licensed under the MIT License. It's based on GithubLauncher by SirDiabo, also MIT licensed, and keeps its copyright notice.

The license covers the code, not the Quiver name, logo or app icons. See TRADEMARKS.md for how forks and other projects may use them.

For Developers: Local Development

When building and running from source, Quiver Launcher is not a packaged release install, so self-update checks no-op (and Debug builds always skip automatic checks). Set QuiverLauncher_SKIP_UPDATES=1 (or true) to skip automatic checks in Release local runs as well.

# Debug: no env var needed
dotnet run --project QuiverLauncher.Desktop/QuiverLauncher.Desktop.csproj -c Debug

# Release local testing
$env:QuiverLauncher_SKIP_UPDATES = "1"
dotnet run --project QuiverLauncher.Desktop/QuiverLauncher.Desktop.csproj -c Release

Requires the .NET 10 SDK.

Android

Android uses a separate head project (QuiverLauncher.Android) that installs and launches APK release assets. Desktop binaries (.exe, AppImage, Wine/Proton) are not supported on device.

Install the .NET 10 SDK and the Android workload:
```
dotnet workload install android
```
Install the Android SDK and JDK 11+ (Avalonia Android setup).
Allow Install unknown apps for Quiver on the emulator or device.

Build and deploy:

dotnet build QuiverLauncher.Android/QuiverLauncher.Android.csproj -c Debug

User data for unpackaged Windows debug builds still lives beside the build output. Unpackaged macOS/Linux runs (no AppImage / .app package) use the OS app-support fallbacks (~/Library/Application Support/QuiverLauncher/ or ~/.local/share/QuiverLauncher/).

Automated tests

Fast local run (excludes the slow publish integration test):

dotnet test QuiverLauncher.sln -c Release --filter "Category!=Slow" --logger "console;verbosity=normal"

Full suite including publish integration test (matches CI; the publish test can take several minutes):

dotnet test QuiverLauncher.sln -c Release

Run only the slow publish packaging test:

dotnet test QuiverLauncher.sln -c Release --filter "Category=Slow"

Test categories include library file safety, adding catalog apps, settings store round-trip, launcher version helpers, Windows runner command building, download asset selection, game status checks, ViewModel sorting/catalog helpers, GameManager hide/filter behavior, and Avalonia headless smoke tests.

Collect coverage locally with:

dotnet test QuiverLauncher.sln -c Release --filter "Category!=Slow" --collect:"XPlat Code Coverage"

SirDiabo/GithubLauncher

A Launcher that Downloads and Updates Applications from Github Releases

Github Launcher

Important

Migration from N64RecompLauncher to GithubLauncher

This software was previously knows as the "N64Recomp Launcher", but this had to be changed due to continued requests by the N64Recomp Tool Developers. If you are interested in a version of the launcher that is primarily for N64 Recompiled Games, then check out this version. You can then go into the update_check.json and change the year in LastCheckTime to something like 9999 to disable self-updates.

If you have an old version, and wish to update to the newer ones, you will have to update manually by dragging the new files into your launcher folder. You can then delete all files with "N64Recomp" in their names. Your settings will remain compatible.

A modern, user-friendly launcher application for managing and running GitHub-hosted applications. This tool streamlines the process of downloading, installing, and launching your favorite projects.

Features

Automated Updates: Seamlessly download and install the latest releases from GitHub
Version Management: Stay up-to-date with automatic version checking and updates
App Management: Easy-to-use interface for launching GitHub-hosted apps
Smart Integration: Direct integration with GitHub releases for smooth updates

Getting Started

Prerequisites

.NET 9 Runtime (get it here)
Internet connection for updates and downloads

Installation

Download the latest release from the Releases page
Extract the downloaded archive to your preferred location
Run the executable.

Usage

Launch the application
The launcher will automatically check for updates on startup
Browse your app library through the interface
Select an app and click "Download/Launch" to use it

Configuration

GitHub API Token

To avoid hitting GitHub's API rate limits, you can provide a personal access token. Create a token with no special permissions needed and set it in the launcher settings. You can create a token at GitHub Settings -> Developer settings > Personal access tokens > Tokens (classic) > Generate new token You don't need to give it any special permissions. Then paste that Token into your Settings field. Do not share your Token!

apps.json Structure

The launcher uses an apps.json file to manage the available apps. Every entry is user-managed and editable; there are no built-in stable, experimental, or custom categories.

App Entry Properties

Each app entry requires the following properties:

name - The display name of the app as it appears in the launcher
repository - The GitHub repository in the format username/repository
folderName - The folder name where the app will be downloaded and installed
appIconUrl - URL of the app's icon image. If null, a default icon will be used.

Example Configuration

{
    "apps": [
        {
            "name": "Example App",
            "repository": "username/example-app-repo",
            "folderName": "ExampleApp",
            "appIconUrl": null
        },
        {
            "name": "Another App",
            "repository": "anotheruser/another-app-repo",
            "folderName": "AnotherApp",
            "appIconUrl": "link/to/an/image.png"
        }
    ]
}

Support

If you encounter any issues or have questions:

Open an issue
Check existing issues for solutions

BeyondDimension/SteamTools

🛠「Watt Toolkit」是一个开源跨平台的多功能 Steam 工具箱。

https://steampp.net

Watt Toolkit 🧰 (原名 Steam++)

English | 简体中文

「Watt Toolkit」是一个开源跨平台的多功能游戏工具箱，此工具的大部分功能都是需要您下载安装 Steam 才能使用。

🚀 下载渠道

软件官网
GitHub 发行版
码云发行版
Arch 用户仓库（当前 Release 构建）
Arch 用户仓库 dev（拉取最新源码构建，也许会构建失败）

⬇️ 下载指南

详见 ./doc/download-guide.md

✨ 功能

全新的 3.0 版本，支持自定义插件功能，以下功能为下载时自带的默认插件，可以自行删除或禁用。

网络加速
- 使用 YARP.ReverseProxy 开源项目进行本地反代来支持更快的访问游戏网站。
- 通过加速服务拦截网络请求将一些 JS 脚本注入在网页中，提供类似网页插件的功能。
账号切换
- 快速切换已在当前 PC 上登录过的 Steam、Epic、Uplay 等等多平台账号，与管理 Steam 家庭共享库排序及禁用等功能。
库存游戏
- 直接管理你的 Steam 游戏库存，可以编辑游戏名称和自定义封面。
- 监控 Steam 游戏下载进度实现 Steam 游戏下载完成定时关机功能。
- 模拟运行 Steam 游戏，让您不用安装和下载对应的游戏也能挂游玩时间和掉落 Steam 卡片
- 自助管理 Steam 游戏云存档，随时删除和上传自定义的存档文件至 Steam 云。
- 解锁以及反解锁 Steam 游戏成就。
本地令牌
- 让您的手机令牌统一保存在电脑中、支持通用HOTP、TOTP、Steam、Google 等令牌导入。
- 支持 Steam 登录账号自定绑定生成令牌、支持 Steam 批量确认交易功能。
~~自动挂卡(新版本开发中)~~
- ~~集成 ArchiSteamFarm 在应用内提供挂机掉落 Steam 集换式卡牌等功能。~~
游戏工具
- 强制游戏窗口使用无边框窗口化、更多功能待开发。

🖥 支持的操作系统

Windows 11
Windows 10 版本 1809（OS 内部版本 17763）或更高版本
macOS 10.15 或更高版本
Ubuntu 20.04 或更高版本
Debian 11 或更高版本
Fedora 37 或更高版本
Deepin(UOS) 20 或更高版本
~~iOS 11 或更高版本~~（开发中…）
Android 5.0(API 21) 或更高版本

🧩 截图

从移动端 Steam App 导入令牌指南

🌏 路线图

查看这个 milestones 来了解我们下一步的开发计划，并随时提出问题。

⌨️ 开发环境

Visual Studio 2026
JetBrains Rider
Visual Studio Code
OpenJDK 17
Android Studio Electric Eel 或更高版本
 Xcode 26 或更高版本

🏗️ 项目结构

详见 ./src/README.md

🧑‍💼 加入我们

📄 开源代码库

详见 ./doc/open-source-library.md

dotnet/aspnetcore

ASP.NET Core is a cross-platform .NET framework for building modern cloud-based web applications on Windows, Mac, or Linux.

https://asp.net

ASP.NET Core

ASP.NET Core is an open-source and cross-platform framework for building modern cloud-based internet-connected applications, such as web apps, IoT apps, and mobile backends. ASP.NET Core apps run on .NET, a free, cross-platform, and open-source application runtime. It was architected to provide an optimized development framework for apps that are deployed to the cloud or run on-premises. It consists of modular components with minimal overhead, so you retain flexibility while constructing your solutions. You can develop and run your ASP.NET Core apps cross-platform on Windows, Mac, and Linux. Learn more about ASP.NET Core.

Get started

Follow the Getting Started instructions.

Also check out the .NET Homepage for released versions of .NET, getting started guides, and learning resources.

See the Triage Process document for more information on how we handle incoming issues.

How to engage, contribute, and give feedback

Some of the best ways to contribute are to try things out, file issues, join in design conversations, and make pull-requests.

Download our latest daily builds
Follow along with the development of ASP.NET Core:
- Community Standup: The community standup is held every week and streamed live on YouTube. You can view past standups in the linked playlist.
- Roadmap: The schedule and milestone themes for ASP.NET Core.
Build ASP.NET Core source code
Check out the contributing page to see the best places to log issues and start discussions.

Reporting security issues and bugs

Security issues and bugs should be reported privately to the Microsoft Security Response Center (MSRC) via the MSRC Researcher Portal. You should receive a response within 24 hours. Further information can be found in the MSRC Report an Issue FAQ. You can also find these instructions in this repo's Security doc.

Also see info about related Microsoft .NET Bounty Program.

Related projects

These are some other repos for related projects:

Documentation - documentation sources for https://learn.microsoft.com/aspnet/core/
Entity Framework Core - data access technology
Runtime - cross-platform runtime for cloud, mobile, desktop, and IoT apps
Razor - the Razor compiler and tooling for working with Razor syntax (.cshtml, .razor)

Code of conduct

See CODE-OF-CONDUCT

Nightly builds

This table includes links to download the latest builds of the ASP.NET Core Shared Framework. Also included are links to download the Windows Hosting Bundle, which includes the ASP.NET Core Shared Framework, the .NET Runtime Shared Framework, and the IIS plugin (ASP.NET Core Module). You can download the latest .NET Runtime builds here, and the latest .NET SDK builds here. If you're unsure what you need, then install the SDK; it has everything except the IIS plugin.

Platform	Shared Framework (Installer)	Shared Framework (Binaries)	Hosting Bundle (Installer)
Windows x64	Installer	Binaries	Installer
Windows x86	Installer	Binaries	Installer
Windows arm64	Installer	Binaries	Installer
macOS x64	N/A	Binaries	N/A
macOS arm64	N/A	Binaries	N/A
Linux x64	Deb Installer - RPM Installer	Binaries	N/A
Linux arm	N/A	Binaries	N/A
Linux arm64	RPM Installer	Binaries	N/A
Linux-musl-x64	N/A	Binaries	N/A
Linux-musl-arm	N/A	Binaries	N/A
Linux-musl-arm64	N/A	Binaries	N/A

luolangaga/tubatools

这是图吧工具箱基于 WinUI 3 全新重构的版本，一款由社区驱动、深度契合 Windows 11 设计美学的现代化工具箱。它不仅确保你始终使用最新版本的工具，还集成了更加丰富的实用功能，更可满足高度自定义的个性化需求。

https://tubawinui3.cn/

English | 中文

一台新电脑从验机、跑分、装驱动到日常清理维护，只用这一个工具箱。

89 款经典硬件工具随包收录，47 款 Fluent 原生工具开箱即用，还住着一个能直接操作你电脑的 AI 助手。

官网文档 | 下载 | 反馈 | 讨论

Warning

近期有许多非官方下载渠道，请注意甄别风险！请仅通过本文档「安装」列出的官方渠道下载。

不懂电脑，也想让 AI 帮你搞定？ 打开内置的「AI 助手」，用中文说一句需求就行—— 它能读硬件信息、分析磁盘占用、清理垃圾、读写文件、执行命令、联网搜索，危险操作会先弹窗问你。

它能做什么

_{左边：按使用频率推荐的常用页，收藏可拖拽排序｜右边：Mica 材质、亮暗主题、界面语言、数据备份都在设置里}

左侧导航按分类浏览全部工具，顶部一个搜索框能搜到任何一款工具，觉得好用就点星标收进常用页。 收录的 89 款经典工具 + 内置的 47 款原生工具，共用同一套卡片、收藏、排序与桌面快捷方式——用起来没有「两套东西」的感觉。

功能亮点

AI 助手 —— 内置智能系统代理：读硬件、分析磁盘、清理垃圾、读写文件、执行命令、联网搜索，28 个 Agent 工具 + 危险操作确认
硬件信息与实时监控 —— CPU / GPU / 内存 / 硬盘的温度、频率、功耗实时曲线，支持 CPU-Z 数据覆盖校验
性能测试与跑分 —— CPU / GPU / 内存 / 硬盘 / 浏览器全项测试，导出 PDF 报告，社区云端排行榜对比
格式转换 —— 图片 / 音视频 / Word / Excel / PPT / PDF 互转，OCR 识别、PDF 合并拆分、批量队列
游戏工具箱 —— 可自定义布局的 FPS / 温度 / 负载悬浮层，虚拟局域网一键联机，运行库一键修复
系统优化与安全 —— 垃圾清理 / 启动项管理 / 右键菜单管理 / 恶意软件拦截 / 沙盒分析 / 时间同步
网络工具 —— 网速测试 / 流量监控 / 端口占用 / Hosts 编辑 / 局域网文件分享
原生 Fluent 体验 —— Mica 材质、圆角窗口、亮暗主题、中英双语界面、全局搜索、收藏拖拽排序
关窗不误退 —— 点 × 默认最小化到系统托盘继续运行，已加载的硬件信息不用重新检测一遍；双击托盘图标恢复窗口，右键「退出」才是真退出（设置里可关掉）
工具清单可扩展 —— 把自己的工具丢进 Tools/ 目录就能被识别，元数据在 Metadata/tools.json 里改
干净 —— 便携版解压即用，安装版每用户安装；没有常驻后台服务，托盘右键「退出」即真正结束进程

AI 助手

内置的智能系统代理把「让 AI 直接操作电脑」做进工具箱：它不只回答问题，还能调用系统工具——读取硬件信息、分析磁盘占用、清理垃圾、读写文件、执行命令、联网搜索。

_{思考过程流式展示、内联工具调用与危险操作确认；可配置任意 OpenAI 兼容服务商与模型}

系统级工具调用 —— 内置 28 个 Agent 工具（硬件信息、磁盘分析、进程管理、文件读写、命令执行、联网搜索等），危险操作先弹窗确认
完全访问模式 —— 可开关的「完全访问」权限，放开后无需逐条确认，专家用法一气呵成
思考过程可视化 —— 推理链（reasoning）流式展示，长回复自动折叠
记忆与技能 —— 跨会话记忆（memory.md）、技能按会话启用，用得越久越懂你的机器
模型自由 —— 内置小图吧自带模型开箱即用，也可接入任意 OpenAI 兼容端点（DeepSeek / OpenAI / 本地模型……）
防死循环护栏 —— 重复的工具调用会被拦截，思维链与工具结果有长度上限，连续无进展的循环会被主动终止

硬件检测与性能

性能测试与跑分排行

CPU / GPU / 内存 / 硬盘 / 浏览器五大项全测，按比例折算「游戏性能 / 办公性能」评分并导出专业 PDF 报告。

_{一键三烤｜毒蘑菇测试｜社区跑分排行｜快速验机向导}

一键三烤 —— CPU / GPU / 网卡自由勾选烤机，实时监控温度、频率、功耗与网卡吞吐
毒蘑菇测试 —— GPU 分形压力测试：轻松 / 中等 / 变态三档压力，超分辨率渲染 + 实时帧率
跑分排行 —— 上传测试报告到社区，查看全球排行榜，与同硬件用户对比性能
快速验机 —— 新电脑验机向导：外观 / 硬件 / 硬盘通电 / 屏幕坏点 / 外设 / 摄像头 / 音频一站式

游戏工具箱

游戏监控（覆盖层设计器）

拖拽式设计监控覆盖层：内置多种布局预设，可自由添加 FPS、CPU / GPU 温度与负载、内存占用等组件；游戏中实时显示，也可勾选指标记录数据（最长 2 小时），结束后一次性导出 JSON / Markdown / CSV 报告。

_{拖拽设计覆盖层布局、自动识别游戏窗口｜邀请码一键入网，不用公网 IP、不用改路由器}

游戏联机助手 —— 基于 Tailscale 的三层虚拟局域网，我的世界 / 泰拉瑞亚 / 幻兽帕鲁等 TCP / UDP 游戏都能直连；朋友粘贴邀请码自动装客户端入网，内置防火墙一键放行与网络检测
记录查看 —— 解析导出的记录并图表化回放：每个指标一张独立图表、各自纵轴刻度，支持分组切换、区间裁剪与 P1 / P99 统计
运行库修复 —— 一键补齐 Visual C++ 2008-2026、.NET Framework、DirectX 旧版游戏组件（微软官方源 + 签名校验）
游戏防晕3D —— 屏幕中央准星 + 四边标记辅助，缓解 3D 眩晕

系统优化与安全

_{垃圾清理（Winapp2 规则库 4000+ 条）｜启动项管理｜流氓软件的克星（含恢复中心）}

恶意软件拦截器 —— 把软件厂商证书加入系统不信任列表，从源头阻止流氓软件安装运行
恶意软件沙盒 —— Sandboxie-Plus 沙盒环境，安全运行分析可疑程序，删掉沙盒即可还原
右键菜单管理 —— 启用 / 禁用 / 编辑 / 添加 / 删除右键菜单项，覆盖新建 / 发送到 / 打开方式与 WinX 菜单
时间同步 —— 一键切换系统 NTP 服务器（阿里云 / 腾讯云 / 国家授时中心…），服务器测速、偏差检测、立即校时与一键修复
还有更多 —— 配置修改器 / Windows 隐藏功能 / .NET 环境补全 / 后台节流省电神器 / OptimizerDuck 优化鸭 / Windows 镜像下载

网络工具

_{网速测试（浙大 / Ookla / Cloudflare 多节点）｜流量监控器｜端口占用}

Hosts 编辑 —— 可视化编辑系统 Hosts，支持启用 / 禁用规则和 DNS 刷新
WiFi 密码 —— 查看本机连接过的 WiFi 网络名称和密码
网络优化 —— TCP 参数优化、DNS 延迟测速与配置、公网 IP 查询、网络重置与 DHCP 修复
网络调度器 —— 汇聚多网络适配器，智能分配流量，Wi-Fi 有线自动加速
局域网文件分享 —— 局域网内 HTTP 文件分享服务，其他设备用浏览器直接访问，支持拖拽上传

格式转换

拖入文件、选目标格式、批量队列逐个转换：图片 / 音视频 / Word / Excel / PPT / PDF / 文本 / JSON 全部互转，单个文件失败不打断批次。

_{支持拖入与多选，批量队列处理，可打包 ZIP 交付；每个目标格式自带可调参数（码率 / 位深 / 采样率 / CRF / 分辨率 / 帧率……）}

文档转换 —— Word / Excel / PPT / PDF / Markdown / HTML / JSON 互转；OOXML 文档内置渲染引擎逐页截图导出 PDF / 长图，中文排版零重采样
图片 / 音视频 —— FFmpeg + ImageMagick 双引擎，视频可调编码器、码率控制、预设、分辨率与音轨
OCR 识别 —— 调用 Windows 原生 OCR，图片转文字一步到位
PDF 工具 —— 合并、拆分、文字层提取表格转 XLSX
旧格式兜底 —— .doc / .ppt / .wps 等老格式自动调用本机 Office / WPS 转换，缺失时给出明确提示

实用工具

_{时间同步（NTP 服务器测速与一键校时）｜ Windows 镜像下载（UUP Dump 官方 API）｜社区工具}

电脑使用教程 —— 新电脑开箱指南、基础操作、烤机检测、常识与辟谣
常用官网 / 服务网点查询 —— Steam、Epic、UU 加速器等官网一键直达；各大品牌官方服务网点地址
正版软件商店 / UniGetUI —— 基于 WinGet 及 winget / scoop / chocolatey / pip / npm 的软件安装与管理
电子文盲测试 —— 25 道电脑基础知识选择题，测测你的水平
社区工具 —— 社区贡献的工具插件，下载安装即用（仅免安装版提供）

内置工具（47 款）

采用 Fluent Design 构建的原生工具体系，不依赖第三方软件，覆盖系统优化、硬件检测、网络诊断、游戏增强等场景。

分类	数量	代表工具
系统工具	13	垃圾清理 / 流氓软件的克星 / 恶意软件拦截器 / 启动项管理 / 时间同步 / Windows 镜像
硬件工具	12	性能测试 / 一键三烤 / 毒蘑菇测试 / 快速验机 / 磁盘健康 / 键盘测试 / 电池分析
网络工具	8	网速测试 / 流量监控器 / 端口占用 / Hosts 编辑 / 局域网文件分享 / 网络优化
游戏工具	5	游戏监控 / 记录查看 / 游戏联机助手 / 运行库修复 / 游戏防晕3D
实用工具	9	AI 助手 / 格式转换 / 电脑使用教程 / 常用官网 / 正版软件商店 / UniGetUI

展开完整工具列表

系统工具

恶意软件拦截器 - 通过将软件厂商证书加入系统不信任列表，阻止流氓软件安装和运行
流氓软件的克星 - 扫描和清理流氓右键菜单、自启动、计划任务、服务、浏览器插件和文件关联残留，含恢复中心
恶意软件沙盒 - Sandboxie-Plus 沙盒环境，安全运行和分析可疑程序 / 恶意软件，删除沙盒即可还原系统
垃圾清理 - 基于 Winapp2 规则库扫描并清理应用缓存、临时文件与注册表残留（引擎来自 FluentCleaner）
启动项管理 - 扫描开机自启动项目（注册表 Run、启动文件夹、计划任务、服务等），隐藏微软条目，快速定位异常自启动
右键菜单管理 - 管理 Windows 右键菜单项，支持启用 / 禁用 / 编辑 / 添加 / 删除、新建 / 发送到 / 打开方式及 WinX / 现代 / IE 菜单
配置修改器 - 修改注册表中的 CPU、GPU、系统等硬件信息显示，支持一键恢复原始配置
后台节流省电神器 - 通过 Windows 11 效率模式（EcoQoS）节流后台进程以省电降温，前台应用保持流畅（基于 Energy Star X 内核）
.NET 环境补全 - 检测并补全 .NET Runtime / SDK / Framework，从官网获取最新版本，一键下载安装缺失组件
Windows 隐藏功能 - 查询、启用、禁用、重置 Windows 实验性功能开关（ViVe 引擎移植，毫秒级响应）
Windows 镜像 - 下载 Windows 原版系统镜像（ISO / ESD），支持 ESD 转 ISO
时间同步 - 一键切换系统 NTP 时间服务器，支持服务器测速、偏差检测、立即校时、时间服务修复与恢复系统默认
OptimizerDuck 优化鸭 - 开源的 Windows 系统优化工具，支持系统清理、性能优化、隐私保护等功能

硬件工具

性能测试 - 全面测试 CPU / GPU / 内存 / 硬盘 / 浏览器性能，按比例计算游戏与办公性能评分，导出专业 PDF 报告
跑分排行 - 上传测试报告到社区，查看全球排行榜，与同硬件用户对比性能
一键三烤 - CPU / GPU / 网卡压力测试工具，自由勾选烤机项目，网卡烤机支持自定义数据量与速率参考，实时监控温度、频率、功耗与网卡吞吐
毒蘑菇测试 - GPU 分形压力测试：轻松 / 中等 / 变态三档压力，超分辨率渲染突破屏幕，实时帧率监控
快速验机 - 新电脑验机向导：外观检查、硬件信息、硬盘通电、屏幕坏点、外设测试、摄像头、音频、三烤测试，一站式完成
磁盘健康 - SMART 健康度检测（CrystalDiskInfo 方案）：温度 / 通电 / 寿命 / 读写量，支持 SSD TRIM 与机械盘碎片整理
电池消耗分析 - 分析电池消耗趋势、应用耗电排行，比 Windows 设置更强大的电池分析工具
键盘测试 - 检测键盘按键是否正常，按键后高亮显示，支持大 / 小键盘布局切换，可区分左右 Shift / Ctrl / Alt，支持 Copilot 键
屏幕坏点检测 - 全屏播放纯色与检测图案，快速发现屏幕坏点、漏光、色阶问题
CPU 天梯图 / GPU 天梯图 - 查看桌面 / 笔记本性能天梯图，支持品牌筛选与排序（数据来自 NanoReview）
核间延迟查询 - 查看社区上传的核间延迟热力图，对比不同 CPU 的核心间通信延迟

网络工具

网速测试 - 原生测试网络延迟、下载与上传速度，支持浙大 / Ookla / Cloudflare 多测速节点切换
流量监控器 - 选择网卡实时查看各连接的流量、速度与延迟，整卡吞吐折线统计，支持快照录制与滑条回放
端口占用 - 查看系统所有 TCP / UDP 端口占用情况，定位占用进程
Hosts 编辑 - 可视化编辑系统 Hosts 文件，支持启用 / 禁用规则和 DNS 刷新
WiFi 密码 - 查看本机已连接过的 WiFi 网络名称和密码
网络优化 - TCP 参数优化（拥塞控制 / Chimney / Nagle / 网卡节能）、DNS 延迟测速与配置、公网 IP 查询、网络重置与 DHCP 修复
网络调度器 - 汇聚多网络适配器，智能分配流量，Wi-Fi 有线自动加速
局域网文件分享 - 在局域网内创建 HTTP 文件分享服务，其他设备可通过浏览器访问和下载文件，支持拖拽上传

游戏工具

游戏监控 - 拖拽组件设计监控覆盖层，内置多种布局预设，实时显示 FPS、温度、负载等硬件参数，可勾选指标记录数据并导出 JSON / Markdown / CSV 报告
记录查看 - 解析游戏监控导出的 JSON / CSV 记录，回放 FPS、温度、负载等历史数据：每个指标一张独立图表、各自纵轴刻度，支持分组切换、区间裁剪与 P1 / P99 统计
游戏联机助手 - 虚拟局域网联机：把两台电脑接进同一个虚拟网络，朋友粘贴邀请码就能进，不需要公网 IP 也不用改路由器
运行库修复 - 检测并修复缺失的 Visual C++ 2008-2026、.NET Framework 4.8.1、DirectX 旧版游戏组件，微软官方源下载 + 签名校验
游戏防晕3D - 屏幕中央准星 + 四边标记辅助，缓解 3D 眩晕

实用工具

AI 助手 - 智能系统代理，可诊断问题、优化配置、读写文件、执行命令、联网搜索并执行操作
格式转换 - 图片 / 音视频 / Word / Excel / PPT / PDF / 文本互转，OCR 识别、PDF 合并拆分、任意文件打包 ZIP，批量队列、拖入即用
电脑使用教程 - 新电脑开箱指南、基础操作、烤机检测、常识与辟谣，手把手教你用好电脑
常用官网 - 收录 Steam、Epic、UU 加速器等常用软件官方网站，一键直达
服务网点查询 - 查询各大品牌笔记本 / 台式机官方服务网点地址
正版软件商店 - 浏览并安装正版软件，基于 WinGet 软件源
UniGetUI 包管理器 - 开源的 Windows 包管理器 GUI，支持 winget / scoop / chocolatey / pip / npm 等多种包管理器
电子文盲测试 - 测试你的电脑基础知识水平：25 道选择题，满分 100 分
社区工具 - 来自社区贡献的工具插件，下载安装即可使用，支持提交和删除工具（仅免安装版提供）

收录工具（89 款）

随包收录 89 款经典第三方工具，覆盖硬件检测全场景，一键启动、无需安装；也可以把自己的工具放进 Tools/ 目录自动识别。

类别	数量	代表工具
处理器工具	9	CPU-Z / Core Temp / ThrottleStop / LinX / Prime95 / Superpi / wPrime / C2CLatency
显卡工具	9	GPU-Z / DDU / GpuTest / dxvachecker / nvidiaProfileInspector / AMD·NVIDIA 驱动下载
硬盘工具	22	CrystalDiskMark / CrystalDiskInfo / DiskGenius / HDTune / WizTree / finaldata / URWTEST
内存工具	7	MemTest / MemTest64 / TM5 / Thaiphoon Burner / ZenTimings / 魔方内存盘
综合检测	5	AIDA64 / HWiNFO / HWMonitor / Speccy / RWEverything
外设工具	7	Keyboard Test / Mouse Rate / MouseTester / KeyTweak / 在线外设测试中心
显示器工具	3	色域检测 / UFO 测试 / Windows HDR Calibration
烤鸡工具	1	FurMark 烤机版
其他工具	26	Everything / Dism++ / Rufus / Ventoy / Autoruns / ProcessMonitor / BlueScreenView / DirectX 修复

完整工具列表详见官网文档。

快速开始

系统要求

Windows 10 1809（build 17763）或更高版本，Windows 11 完全支持
x64 / x86 / ARM64 三种架构，安装包自包含：.NET 10 运行时与 Windows App SDK 都在包里，不用另外装
安装版为每用户安装，装完即用；程序运行时需要管理员权限的功能会统一请求提权（详见常见问题）

Windows 版本	支持状态
Windows 11	✅ 完全支持
Windows 10 21H2+	✅ 完全支持
Windows 10 1809+	✅ 最低支持

平台	支持状态
x64（Intel / AMD 64 位）	✅ 完全支持
x86（Intel / AMD 32 位）	✅ 完全支持
ARM64（高通骁龙等）	✅ 原生支持

安装

GitHub Releases（推荐）

到 Releases 下载最新版本，提供两种形式：

便携版（ZIP） —— 解压即用，无需安装，也可以放进 U 盘随身带
安装版（Inno Setup） —— 传统安装程序，可选安装位置与快捷方式

发布产物的签名策略见 Code signing policy。

GitCode Releases（国内镜像）

国内网络可从 GitCode 镜像下载，速度更快。

Winget

winget install luolangaga.tubatools

Scoop

# 1. 添加图吧工具箱CE bucket
scoop bucket add tubatools https://github.com/luolangaga/scoop-tubatools

# 2. 安装（自动根据系统架构选择 x64 / arm64 便携版）
scoop install tubatools/tubatool

更新到最新版：scoop update tubatool。Scoop 源仓库：luolangaga/scoop-tubatools。

Microsoft Store

从源码构建

git clone https://github.com/luolangaga/tubatools.git
cd tubatools
dotnet build        # 编译（RuntimeIdentifier 自动匹配当前架构）
dotnet run          # 以 Unpackaged 模式运行（会请求管理员权限）
dotnet test         # 跑 xUnit 测试

主程序是 TubaWinUi3.WinUI3/TubaWinUi3.csproj；想在真实包身份下自测打包形态，用 .\run-msix.ps1 注册一个开发包再启动。

环境要求

.NET 10 SDK
Visual Studio 2022 17.14+ 或 VS Code（配合 C# Dev Kit）
最低支持 Windows 10 1809，支持 x86 / x64 / ARM64

架构

TubaWinUi3.WinUI3/            主程序（WinUI 3 / .NET 10 / Windows App SDK）
  App.xaml.cs                 启动、提权、全局异常兜底
  MainWindow.xaml             自定义标题栏 + NavigationView + Frame，AI 吉祥物常驻顶栏
  Pages/                      各工具页（内置工具、设置、搜索、时间同步、镜像下载……）
  Services/
    BuiltinTools/             47 款内置工具实现（IBuiltinTool + BuiltinToolRegistry）
    Ai/                       AI 助手适配层（TubaChatProvider / AgentToolAdapter / 防死循环护栏）
    GameTunnel/               游戏联机（Tailscale 封装、邀请码、防火墙、端口探测）
    JunkCleaner/              垃圾清理引擎（FluentCleaner.Core 移植 + Winapp2 规则库）
    TimeSync/                 时间同步（w32tm 封装、SNTP 探测、预设服务器）
    ToolCatalog.cs            扫描 Tools/ + tools.json，合并架构变体，生成工具卡片
    HardwareInfoService.cs    WMI / CPU-Z 硬件信息（P/Invoke）
    LiteMonitorService.cs     LibreHardwareMonitor 实时监控（单例）
  Assets/
    BuiltinIcons/             内置工具的彩色矢量图标（按 Fluent System Icons 规范手绘）
    DocEngine/                WebView2 文档引擎（markdown-it / pdf.js / SheetJS / pdf-lib）
  Strings/<lang>/             界面语言资源（zh-CN / en-US）
  Metadata/tools.json         工具元数据的单一事实源（描述 / 排序 / 跨分类 / 内置工具挂载）
TubaWinUI3.BackEnd/           NativeAOT 辅助进程（主动拦截）
TubaWinUi3.Compatible/        .NET Framework 4.8 WinForms 兼容版（旧系统）
TubaWinUi3.Tests/             xUnit 测试（工具目录 / 时间同步 / 联机 / 垃圾清理 / 本地化……）
Tools/                        随包收录的第三方工具（按中文分类目录存放）
installer*.iss · Launcher/    Inno Setup 安装脚本与原生启动器
website-winui3/ · android-tuba-installer/ · file-transfer-web/ · cloudflare-worker/
                              官网 / 安卓安装助手 / 局域网传输 / 联机信令（各自独立工具链）

几个值得一提的实现细节：

工具清单是数据驱动的 —— Metadata/tools.json 是唯一事实源：描述、卡片顺序、跨分类副本、内置工具挂载全在里面；目录本身或其中任一可执行文件被 match 命中才会收录，未收录的目录不会展示。
只扫描一次，多架构合并成一张卡 —— x64 / x86 / ARM64 变体合并展示，并按当前系统自动选中合适的架构。
图标三选一图层 —— 内置工具优先用彩色矢量 SVG，缺图就回退到字体字形，卡片模板三层并存、按需显隐，所以漏配图标只会退回旧样式、不会开天窗。
CPU 温度 / 频率 / 功耗走 MSR —— 依赖 PawnIO 驱动：检测到「已安装但没加载」会自动补启动，仍不可用时给出官方安装引导；FPS 覆盖层则走 ETW 的 DxgKrnl Present 事件，不需要驱动。
AI 助手有会话级护栏 —— 同会话重复的工具调用第二次直接拦截，思维链与工具结果有长度上限，连续 6 轮纯工具调用且无进展会注入终止指令（AgentToolLoopGuard），两套引擎共用。
文档转换四引擎逐级回退 —— OfficeCLI 原生渲染逐页截图 → WebView2 文档引擎（pdf.js / SheetJS）→ 纯 C# 转换器 → 本机 Office / WPS COM。
垃圾清理是规则库驱动 —— 内置 Winapp2.ini / Winappx.ini 两个规则库，两阶段执行（只读分析 → 真删），离线开箱即用，也能一键更新规则库。
快捷方式不用 PowerShell 生成 —— 开始菜单搜索与「发送到桌面」共用进程内的 WScript.Shell COM，避免中文路径经子进程命令行变成乱码。
界面多语言即时生效 —— 资源在 Strings/，工具元数据用 Metadata/Tools_<语言>.json 覆盖层，切换语言不用重启。

常见问题

Q：为什么一打开就弹 UAC？ 烤机、FPS 覆盖层、垃圾清理、时间同步这些功能要读传感器或写系统设置，必须提权。非打包版启动时会统一请求管理员权限；微软商店版按包身份运行，不强制提权。

Q：里面收录的工具是官方的吗？ 89 款第三方工具版权归各自作者所有，随包分发仅供学习交流，请支持正版；内置的 47 款是本项目原生实现，源码就在这个仓库里。

Q：能放在 U 盘里随身带吗？ 可以。便携版解压即用，配置默认写在 %LocalAppData%\TubaWinUi3\；想在移动硬盘上带着数据走，就在程序目录放一个 .config_location 标记文件，配置会改写进程序目录的 Data\。

Q：杀毒软件报警怎么办？ 部分工具具备系统级操作能力（驱动、注册表、清理），可能被启发式引擎误报。官方发布产物由 SignPath 签名，请只从官方渠道下载。

Q：会不会拖慢电脑？ 没有常驻后台服务：硬件监控只在打开对应页面或游戏覆盖层时运行，监控覆盖层与联机助手退出即结束，不常驻、不偷跑。默认「关闭窗口 = 最小化到系统托盘」只是让程序留在托盘、免得重开时再检测一遍硬件；托盘右键「退出」就是彻底结束，不想要这个行为可以在「设置 → 常规」里关掉。

Q：工具打不开 / 提示缺 DLL？ 用「运行库修复」一键补齐 Visual C++ 2008-2026、.NET Framework、DirectX；老格式文档转换需要本机装有 Office / WPS，没装会给出明确提示。

Q：AI 助手要用哪家的模型？ 内置小图吧自带模型开箱即用，也可以填任意 OpenAI 兼容端点（DeepSeek / OpenAI / 本地模型……），API Key 只保存在本机。

Q：日志在哪里？ 默认在 %LocalAppData%\TubaWinUi3\（便携模式为程序目录的 Data\）：agent-debug.log 是 AI 助手日志；启动阶段崩溃会记录到 %TEMP%\app_crash.log。

交流群聊

欢迎加入 QQ 群交流讨论：485079194

贡献者

感谢所有为本项目做出贡献的开发者！

荣誉与认可

AtomGit G-Star 毕业项目 —— 通过 AtomGit 官方评审取得毕业认证（编号 No.0614，2026.07.24），欢迎关注 atomgit.com/luolangaga/tubatool
HelloGitHub 收录推荐 —— 在 HelloGitHub 项目库中获得推荐
Trendshift 收录 —— 在 Trendshift 上登过 C# 分类日榜与月榜

Code signing policy

Free code signing provided by SignPath.io, certificate by SignPath Foundation.

由 SignPath.io 提供免费代码签名，证书由 SignPath Foundation 颁发。签名在自动化构建流程中完成，因此签名代表该二进制是由本仓库源码自动构建产生的 —— 构建须通过可信构建系统（GitHub Actions）校验来源，并经 Approver 人工批准后才会签名。

Committers / Reviewers: @luolangaga
Approvers: @luolangaga
隐私政策 / Privacy policy: PrivacyPolicy.txt

许可证

本项目采用 GPL-3.0 开源协议。

源代码可自由使用、修改和分发
衍生作品必须以相同协议开源
详见 LICENSE；附带的 License.txt 为软件使用须知与网络/隐私声明，不构成对 GPL-3.0 的附加限制

捐赠支持

如果这个工具箱对你有帮助，欢迎请我喝杯奶茶 ☕ 感谢每一位支持者！

如果觉得有用，给个 Star 吧！

_{WinUI 3 · .NET 10 · Windows App SDK · GPL-3.0}

gibbed/SteamAchievementManager

A manager for game achievements in Steam.

Steam Achievement Manager

Steam Achievement Manager (SAM) is a lightweight, portable application used to manage achievements and statistics in the popular PC gaming platform Steam. This application requires the Steam client, a Steam account and network access. Steam must be running and the user must be logged in.

This is the code for SAM. The closed-source version originally released in 2008, last major release in 2011, and last updated in 2013 (a hotfix).

The code is being made available so that those interested can do as they like with it.

There are some changes to the code since the last closed-source release:

General code maintenance to bring it into a more modern state.
Icons have been replaced with ones from the Fugue Icons set.
Version has been bumped to 7.0.x.x to indicate the open-source release.

Download latest release.

Attribution

Most (if not all) icons are from the Fugue Icons set.

dotnet/roslyn

The Roslyn .NET compiler provides C# and Visual Basic languages with rich code analysis APIs.

https://docs.microsoft.com/dotnet/csharp/roslyn-sdk/

The .NET Compiler Platform

Roslyn is the open-source implementation of both the C# and Visual Basic compilers with an API surface for building code analysis tools.

C# and Visual Basic Language Feature Suggestions

If you want to suggest a new feature for the C# or Visual Basic languages go here:

dotnet/csharplang for C# specific issues
dotnet/vblang for VB-specific features
dotnet/csharplang for features that affect both languages

Contributing

All work on the C# and Visual Basic compiler happens directly on GitHub. Both core team members and external contributors send pull requests which go through the same review process.

If you are interested in fixing issues and contributing directly to the code base, a great way to get started is to ask some questions on GitHub Discussions! Then check out our contributing guide which covers the following:

Coding guidelines
The development workflow, including debugging and running tests
Submitting pull requests
Finding a bug to fix in the IDE or Compiler
Finding a feature to implement in the IDE or Compiler
Roslyn API suggestions should go through the API review process

Community

The Roslyn community can be found on GitHub Discussions, where you can ask questions, voice ideas, and share your projects.

To chat with other community members, you can join the Roslyn channel on the CSharp Community Discord.

Our Code of Conduct applies to all Roslyn community channels and has adopted the .NET Foundation Code of Conduct.

Documentation

Visit Roslyn Architecture Overview to get started with Roslyn’s API’s.

NuGet Feeds

The latest pre-release builds are available from the following public NuGet feeds:

Compiler: https://pkgs.dev.azure.com/dnceng/public/_packaging/dotnet-tools/nuget/v3/index.json
IDE Services: https://pkgs.dev.azure.com/azure-public/vside/_packaging/vssdk/nuget/v3/index.json
.NET SDK: https://pkgs.dev.azure.com/dnceng/public/_packaging/dotnet5/nuget/v3/index.json

Continuous Integration status

Builds

Branch	Windows Debug	Windows Release	Unix Debug
main

Desktop Unit Tests

Branch	Debug x86	Debug x64	Release x86	Release x64
main

CoreClr Unit Tests

Branch	Windows Debug	Windows Release	Linux
main

Integration Tests

Branch	Debug x86	Debug x64	Release x86	Release x64
main

Misc Tests

Branch	Determinism	Analyzers	Build Correctness	Source build	TODO/Prototype	Spanish	MacOS
main

.NET Foundation

This project is part of the .NET Foundation along with other projects like the .NET Runtime.

Jackett/Jackett

API Support for your favorite torrent trackers

Jackett

Introduction

Jackett works as a proxy server that translates queries from applications (Sonarr, Radarr, SickRage, CouchPotato, Mylar3, Lidarr, DuckieTV, qBittorrent, Nefarious, NZBHydra2, etc.) into tracker-site-specific HTTP queries, parses the HTML or JSON response, and sends results back to the requesting software.

What Jackett does:

Acts as a bridge between your apps and torrent trackers
Provides recent uploads (similar to RSS feeds)
Performs searches across multiple trackers
Returns results in a standardized format (Torznab/TorrentPotato)

Key Features:

Single repository of maintained indexer scraping and translation logic
Removes the burden of tracker integration from other applications
Supports public, semi-private and private trackers
Implements the Torznab and TorrentPotato APIs

Developer Information

This project is recruiting development help. If you can help out please contact us.

For detailed troubleshooting and contributing guidelines, please see CONTRIBUTING.md

A third-party Golang SDK for Jackett is available from webtor-io/go-jackett

Note: The Discord server is no longer maintained. If you have a problem, request, or question, please open a new issue on GitHub.

Supported Systems

The currently supported version of Jackett is 0.24.+, which is compatible with:

Windows: Windows 10 Version 1607 or greater (full list)
Linux: Various distributions (full list)
macOS: macOS 13.0+ (Ventura) or greater (full list)

Prior versions of Jackett are no longer supported.

Supported Trackers

Supported Public Trackers

ØMagnet
1337x
52BT
ACG.RIP
Anibt
AniLibria
Anime Tosho
AniRena
AniSource
ApacheTorrent
AudioBook Bay (ABB)
Bangumi Moe
BigFANGroup
BlueRoms
BT.etree
BTdirectory (BT目录)
Byrutor
Catorrent
CrackingPatching
DaMagNet
DivxTotal
dmhy
DonTorrent
E-Hentai
EBook Bay (EBB)
EpubLibre
ExtraTorrent.st
EZTV
FileMood
Free JAV Torrent
GamesTorrents
HDRTorrent
Internet Archive (archive.org)
kickasstorrents.to
kickasstorrents.ws
Knaben
LimeTorrents
LinuxTracker
Mac Torrents Download
Magnet Cat
MagnetDownload
Magnetz
MegaPeer
MejorTorrent
Mikan
MixTapeTorrent
MyPornClub
nekoBT
NewStudio
Nipponsei
NoNaMe Club (NNM-Club)
Nyaa.si
OneJAV
OpenSharing
PC-torrent
PandaCD
plugintorrent
PornoTorrent
PornRips
PornXLab
Postman
RedeTorrent
RinTorNeT
RuTor
RuTracker.RU
Sexy-Pics
Shana Project
ShowRSS
SkidrowRepack
sosulki
SubsPlease
sukebei.Nyaa.si
The Pirate Bay (TPB)
TheRARBG
Tokyo Tosho
Torrent Downloads
Torrent[CORE]
torrent.by
torrent-pirat
Torrent9
TorrentByte
TorrentDownload
TorrentGalaxyClone
TorrentKitty
TorrentProject2
Torrents.csv
Torrentsome (토렌트썸)
Torrenttip (토렌트팁)
U3C3
Uindex
UzTracker
VSTHouse
VST Torrentz
VSTorrent
World-torrent
XXXClub
xxxtor
YTS.ag
Zamunda LIFE

Supported Semi-Private Trackers

AniDUB
Anime by Belka (Аниме от Белки)
AnimeLayer
Best-Torrents [PAY2DL]
BitMagnet (Local DHT) [site]
BookTracker
BootyTape
comicat
Deildu
Devil-Torrents
Draupnirr (Yggrasil)
DreamingTree
DXP (Deaf Experts)
Electro-Torrent
Erai-Raws
Ex-torrenty
ExKinoRay
EZTV (login)
Fenyarnyek-Tracker
File-Tracker
Gay-Torrents.net
HDGalaKtik
HellTorrents [PAY2DL]
HunTorrent
Il CorSaRo Blu
ilDraGoNeRo
Kinorun
Kinozal
LostFilm.tv
Magnetico (Local DHT) [site]
Marine Tracker
Mazepa
Metal Tracker
MioBT
MuseBootlegs (MB)
MVGroup Forum
MVGroup Main
NetHD (VietTorrent)
New-Team
NewStudio (login)
NoNaMe Club (NNM-Club) (login)
Polskie-Torrenty
PornoLab
Postman (login)
ProPorno
PussyTorrents
Rainbow Tracker
RGFootball
RinTor
RiperAM
RUDUB (ex-BaibaKoTV)
Rustorka
RuTracker.org
seleZen
Sk-CzTorrent
SkTorrent-org
themixingbowl (TMB)
Toloka
TorrentMasters
TR4KER
TrahT
TribalMixes
Union Fansub
UniOtaku
Ztracker

Supported Private Trackers

0day.kiev
0DayFiles
13City
1ptbar
3D Torrents (3DT)
3D Vault
4thD (4th Dimension)
52PT
720pier
Abnormal (ABN)
ABtorrents (ABT + RNS)
AcrossTheTasman
Aftershock
AGSVPT (Arctic Global Seed Vault)
Aidoru!Online
Aither
AlaBala
alingPT
AlphaRatio (AR)
AmigosShareClub (ASC)
AnimeBytes (AB)
AnimeTorrents.ro (Anime Torrents Romania)
AnimeZ (AnimeTorrents)
AnimeWorld (AW)
Anthelion (ANT)
Araba Fenice (Phoenix)
ArabicSource
ArabP2P
ArabScene
ArabTorrents
AsianCinema
AsianDVDClub (ADC)
AstraTorrent
Audiences
AudioNews (AN)
Aussierul.es
AvistaZ (AsiaTorrents)
Azusa (梓喵)
Back-ups
BakaBT
baoziPT
Beload
Best-Core
BeyondHD (BHD)
Bibliotik
BigCore
Bit-Bázis
BIT-HDTV
BitAgent
Bitded
bitGAMER
BitHUmen
BitPorn
BitTorrentFiles
BiTTuRK
BJ-Share (BJ)
BlueBird
BlueTorrents
BlurayTracker
Blutopia (BLU)
Borgzelle
Boxing Torrents
Brasil Tracker
BroadcasTheNet (BTN)
BrokenStones
BTArg
BTNext (BTNT)
BTSCHOOL
BWTorrents
BYRBT
C411
cangbaoge (CBG)
CapybaraBR
Carpathians
CarPT
Cathode-Ray.Tube (CRT)
CeskeForum
CGPeers
CHDBits
Cinemageddon
CinemaMovieS_ZT
Cinematik
CinemaZ (EuTorrents)
ClearJAV
Coastal-Music-Crew (C-M-C)
Concertos
CrabPT (蟹黄堡)
CrazySpirits
CrnaBerza
cspt (财神)
cyanbug (大青虫)
CyclingArchiveClub
CZTeam
DanishBits
Darkpeers
Das Unerwartete (D-U)
DataScene (DS)
DaXiangJiao (大香蕉)
Depth Studio
DesiGaane (DG)
DesiTorrents
Diablo Torrent
DICMusic
DigitalCore (DC)
DimeADozen (EzTorrent)
DirtyBytes
DiscFan
DocsPedia
DreadVault
Drugari
DS-Reloaded
dubhe (天枢)
Empornium (EMP)
eMuwarez
eStone (BigTorrent)
Order66
Exitorrent.org
ExoticaZ (YourExotic)
Explosiv-World (E-W)
ExtremeBits
F1Carreras
FANO.IN
Fappaizuri
Femdomcult
FileIplay
FileList (FL)
FinElite (FE)
Flood (FLD)
Free Farm (自由农场)
FunFile (FF)
funZone
FutureTorrent [PAY2DL]
Fuzer (FZ)
G3MINI TR4CK3R
GAYtorrent.ru
GazelleGames (GGn)
Generation-Free
GGPT
GigaTorrents
GiroTorrent
GreatPosterWall (GPW)
HaiDan
Hǎitáng (海棠PT)
HappyFappy (HF)
Hawke-uno (HUNO)
HD Dolby
HD Zero
HD-Club
HD-Forever (HDF)
HD-Olimpo
HD-Only (HDO)
HD-Space (HDS)
HD-Torrents (HDT)
HD-UNiT3D
HDArea (HDA)
HDBao
HDBits
HDCiTY (HDC)
HDClone
HDFans
HDHome
HDKylin (麒麟)
HDRoute
HDSky
HDtime
HDTorrents.it [PAY2DL]
HDTurk
HDU
HDVideo
Hebits (HB)
HellasHut
HELLENIC-HD
HeroBit
HHanClub
HHD
House of Devil
HQMusic
HUDBT (蝴蝶)
HxPT (好学)
ImmortalSeed (iS)
Immortuos
Indietorrents
InfinityHD
Infire
Insane Tracker
IPTorrents (IPT)
ItaTorrents
JME-REUNIT3D
JPopsuki
JPTV4us
KamePT
Karagarga
Keep Friends (FRDS-PT)
Kelu
Korsar
KrazyZone
Kufei (库非)
Kufirc
lajidui
Last Digital Underground (LDU)
LastFiles (LF)
Lat-Team
Le Saloon
LearnFlakes
Leech24
LemonHD.net
LetSeed
Libble
LibraNet (LN)
LinkoManija
Locadora
LongPT
LosslessClub
LP-Bits 2.0
LST
LuckPT
Luminarr
M-Team - TP (MTTP)
MaDs Revolution
Majomparádé (TurkDepo)
Malayabits
Mansão dos Animes (MDAN)
March
Matrix
Memphis
MeseVilág (Fairytale World)
MetalGuru
MidnightScene
Milkie (ME)
Milnueve
MMA-Torrents
MNV (Max-New-Vision)
MOJBLiNK
MomentPT
MonikaDesign (MDU)
MouseBits
Musopia (音乐乌托邦)
Muxuege
MyAnonamouse (MAM)
MySpleen
NanyangPT (南洋)
NCore
Nebulance (NBL) (TransmiTheNet)
NewHeaven (TorrentHeavenResurrection)
NicePT
Nirvana
njtupt (浦园))
NOBS (NUCLEAR ORDER BIT SYNDICATE)
NorBits
NordicBytes
NordicQuality
Nostradamus
NovaHD
OKPT
Old Greek Tracker (OGT)
Old Toons World (OTW)
OpenCD
Orpheus
OnlyEncodes+
OshenPT
OurBits (HDPter)
P2PBG [PAY2DL]
Panda
ParabellumHD
Party-Tracker
PassThePopcorn (PTP)
Peeratiko
PeerGarden
Peers.FM
Periodical
Phoenix Project
PhoenixPT (凤凰PT)
PigNetwork (猪猪网)
PixelCove (Ultimate Gamer)
PiXELHD (PxHD)
PlayletPT
Podzemlje
Polish Torrent (PTT)
PolishTracker
Portugas
Pretome
PrivateHD (PHD)
ProAudioTorrents (PAT)
PT GTK
PT分享站 (itzmx)
PTCafe (咖啡)
PTCC (我的PT)
PTerClub (PT之友俱乐部)
PTFans
PTFiles (PTF)
PThome
PTLAO
PTLGS
PTSBAO (烧包)
PTSKIT
PTTey
PTtime
PTYING (樱花)
PTzone
Punk's Horror Tracker
PuntoTorrent
PuTao (葡萄)
PWTorrents (PWT)
Qingwa (青蛙)
R3V WTF!
Racing4Everyone (R4E)
RacingForMe (RFM)
RailgunPT
Rastastugan
Red Star Torrent (RST)
Redacted (PassTheHeadphones)
ReelFlix (HD4Free,LegacyHD)
RetroFlix
RetroMoviesClub (RMC)
RetroToon
RevoPeers [PAY2DL]
RocketHD
Romanian Metal Torrents (RMT)
Rousi.pro
SAMARITANO
SBPT
SceneHD
SceneRush
SceneTime
Secret Cinema
SeedCore (RoTorrent)
SeedFile (SF)
seedpool
SewerPT (下水道)
SexTorrent
Shadowbit
ShaKaw
Shareisland
Shazbat
SiamBIT [PAY2DL]
Simurg
Siqi
SkipTheCommercials
SnowPT (SSPT)
SoulVoice (聆音Club)
SpeedApp (SceneFZ, XtreMeZone / MYXZ, ICE Torrent)
SpeedCD
Speedmaster HD
Spirit of Revolution
SportsCora
SportsCult
Sportz247
SpringSunday (SSD)
Stellarwinds
Superbits (SBS)
Swarmazon
TangPT (躺平)
Tapochek
Tasmanit
Team CT Game (TCTG)
TeamFlix
TeamHD
TeamOS
The Brothers
The Crazy Ones
The Empire (TE)
The Falling Angels (TFA)
The Geeks
The Kitchen (TK)
The New Heaven
The New Retro
The Occult (TO)
The Old School (TOS)
The Place (TP)
The Show (TSBZ)
The Vault (TVBZ)
The Word Music
The-New-Fun
TheLeachZone (TLZ)
Thor HUB
TJUPT (北洋园PT)
TLFBits
TmGHuB (TH)
Toca Share
Tormac
Tornado
Torrent Heaven (Dutch)
Torrent Network (TN)
Torrent Trader
Torrent-Syndikat
TOrrent-tuRK (TORK)
Torrent.LT
TorrentBD
TorrentBytes (TBy)
TorrentCCF (TCCF)
TorrentClaw
TorrentDay (TD)
TorrentDD (TodayBit)
Torrenteros (TTR)
TorrentHaven
TorrentHR
Torrenting (TT)
TorrentLeech (TL)
ToTheGlory (TTG)
TrackerMK
TrackerZero [PAY2DL]
TranceTraffic
Trellas (Magico)
TreZzoR
TurkSeed (Aturk)
TurkTorrent (TT) [PAY2DL]
TVstore
U2 (U2分享園@動漫花園)
UBits
UltraHD
Ultrabits
Unbreakable
UnlimitZ
upload.cx (ULCX)
Upscale Vault
UTOPIA
V3X
Vault network
VC-Lib
VietMediaF
White Angel
WinterSakura
World-In-HD
World-of-Tomorrow
XDY (修道院)
Xingtan (杏坛)
Xingwan (星湾)
Xingyung (星陨阁)
xloli (ilolicon PT)
XSpeeds (XS)
xTorrenty
XtremeBytes (TorrentSurf)
XWT-Classics
XWTorrents (XWT)
YggReborn
YUSCENE
Zappateers
Zenith
ZmPT (织梦)
ZRPT (自然)

Note: Trackers marked with have no active maintainer and may be broken or missing features. If you have an invite, please send it to jacketttest [at] gmail [dot] com or garfieldsixtynine [at] gmail [dot] com to help improve these indexers.

Installation

Windows Installation

Method 1: Using the Installer (Recommended)

Prerequisites:

Windows 10 Version 1607 or newer
Administrator privileges
.NET prerequisites (check here)

Installation Steps:

Download the latest version of the Windows installer
Run the Jackett.Installer.Windows.exe program
When prompted for permission to make changes to your computer, click "Yes"
During installation:
- Check "Install as Windows Service" if you want Jackett to start automatically with Windows
- Check "Launch Jackett" to open Jackett after installation completes
Click "Install" and wait for the installation to finish
Double-click the Jackett tray icon, or navigate your web browser to http://127.0.0.1:9117
You are now ready to begin adding trackers

Service Management:

When installed as a service, the tray icon acts as a way to open, start, or stop Jackett
If not installed as a service, Jackett will run its web server from the tray tool

Method 2: Manual Installation

Download the zipped version
Extract to your preferred location (e.g., C:\ProgramData\Jackett)
Run JackettConsole.exe to start Jackett
Navigate your web browser to http://127.0.0.1:9117

Running from Command Line: You can run Jackett from the command line to see log messages. Use JackettConsole.exe (for Command Prompt), found in the Jackett data folder: e.g. %ProgramData%\Jackett. Ensure the server is not already running from the tray or service.

Linux Installation (AMD x64)

This section covers installation on most common Linux distributions including Ubuntu, Linux Mint, Debian, Fedora, and others.

Prerequisites:

Most operating systems include all required dependencies
If dependencies are missing, refer to .NET Required Packages

Method 1: One-Command Installation (Easiest)

Copy and paste this command into your terminal:

cd /opt && wget -O - -o /dev/stderr https://github.com/Jackett/Jackett/releases/latest/download/Jackett.Binaries.LinuxAMDx64.tar.gz | sudo tar -xz && cd Jackett* && sudo chown $(whoami):$(id -g) -R "/opt/Jackett" && sudo ./install_service_systemd.sh && systemctl status jackett.service && cd - && echo -e "\nVisit http://127.0.0.1:9117"

Method 2: Step-by-Step Installation

Download and extract the latest release:

cd /opt
wget -O - -o /dev/stderr https://github.com/Jackett/Jackett/releases/latest/download/Jackett.Binaries.LinuxAMDx64.tar.gz | sudo tar -xz

Set proper ownership:

sudo chown -R $(whoami):$(id -g) /opt/Jackett

Install as a service:

cd /opt/Jackett
sudo ./install_service_systemd.sh

Check service status:
```
systemctl status jackett.service
```
Navigate your web browser to http://127.0.0.1:9117

Running Without Installing as a Service

Download and extract the latest Jackett.Binaries.LinuxAMDx64.tar.gz release from the releases page
Open a Terminal and cd to the Jackett folder
Run Jackett with the command ./jackett

Service Management Commands

# Start Jackett
systemctl start jackett.service

# Stop Jackett
systemctl stop jackett.service

# Restart Jackett
systemctl restart jackett.service

# Check status
systemctl status jackett.service

Logs Location: ~/.config/Jackett/log.txt View Logs: journalctl -u jackett.service

Home Directory Configuration

If you want to run Jackett with a user without a /home directory, add this line to your systemd file:

Environment=XDG_CONFIG_HOME=/path/to/folder

This folder will be used to store configuration files.

Linux Installation (ARMv7 or above)

For modern ARM-based systems (Raspberry Pi, etc.)

Prerequisites:

Most operating systems include all required dependencies
If dependencies are missing, refer to .NET Required Packages

Installing as a Service

Download the appropriate release:
- For 32-bit ARM (most common): Jackett.Binaries.LinuxARM32.tar.gz
- For 64-bit ARM: Jackett.Binaries.LinuxARM64.tar.gz
```
cd /opt
wget -O - -o /dev/stderr https://github.com/Jackett/Jackett/releases/latest/download/Jackett.Binaries.LinuxARM32.tar.gz | sudo tar -xz
```

Install as a service:

cd /opt/Jackett
sudo ./install_service_systemd.sh

The service will start on each login. Manage it using:

# Start Jackett
systemctl start jackett.service

# Stop Jackett
systemctl stop jackett.service

# Restart Jackett
systemctl restart jackett.service

# Check status
systemctl status jackett.service

Download and extract the latest Jackett.Binaries.LinuxARM32.tar.gz or Jackett.Binaries.LinuxARM64.tar.gz release from the releases page
Open a Terminal and cd to the Jackett folder
Run Jackett with the command ./jackett

Linux Installation (ARMv6 or below)

For legacy ARM systems.

Prerequisites:

Install Mono 5.10 or newer (latest stable release recommended):
- Follow instructions on the Mono website
- Install mono-devel and ca-certificates-mono packages
- On Red Hat/CentOS/openSUSE/Fedora, also install mono-locale-extras
Install libcurl:
- Debian/Ubuntu: apt-get install libcurl4-openssl-dev
- Redhat/Fedora: yum install libcurl-devel
- For other distributions, see the Curl documentation
Download and extract the latest Jackett.Binaries.Mono.tar.gz from the releases page
Run Jackett using Mono:
```
mono --debug JackettConsole.exe
```
(Optional) To install as a service:
```
sudo ./install_service_systemd_mono.sh
```

Important Notes:

Mono must be compiled with the Roslyn compiler (default)
Using MCS will cause "An error has occurred" errors (see issue #2704)
For users without a /home directory, add Environment=XDG_CONFIG_HOME=/path/to/folder to your systemd file

macOS Installation

Prerequisites:

macOS 13.0+ (Ventura) or greater

Installing as a Service

Download the appropriate release:
- Intel (x86): Jackett.Binaries.macOS.tar.gz
- Apple silicon (ARM): Jackett.Binaries.macOSARM64.tar.gz
Get the latest release from the releases page
Extract the downloaded file
Open the extracted folder and double-click on install_service_macos
If installation is successful, close the Terminal window
Navigate your web browser to http://127.0.0.1:9117

Service Management:

The service will start on each login. You can control it using:

# Stop Jackett
launchctl unload ~/Library/LaunchAgents/org.user.Jackett.plist

# Start Jackett
launchctl load ~/Library/LaunchAgents/org.user.Jackett.plist

Logs Location:

~/.config/Jackett/log.txt
/Users/your-user-name/Library/Application Support/Jackett/log.txt

Running Without Installing as a Service

Download and extract the latest Jackett.Binaries.macOS.tar.gz or Jackett.Binaries.macOSARM64.tar.gz release from the releases page
Open Terminal and navigate to the Jackett folder
Run Jackett with the command ./jackett

Docker Installation

Docker installation is highly recommended, especially if you are experiencing Mono stability issues or having trouble running Mono on your system (e.g., QNAP, Synology).

Detailed instructions are available at LinuxServer.io Jackett Docker

Thanks to LinuxServer.io for maintaining the Docker image.

Other Installation Methods

Linux via Ansible

CentOS/RedHat 7: jewflix.jackett
Ubuntu 16: chrisjohnson00.jackett

Homebrew (macOS/Linux)

Install via Homebrew: Homebrew Formulae - Jackett

Synology

Jackett is available as a beta package from SynoCommunity

Alpine Linux

Detailed instructions available at Jackett's Wiki - Alpine Linux

OpenWrt

Detailed instructions available at Jackett's Wiki - OpenWrt

Uninstallation

Windows

Use "Add or Remove Programs" in Windows Settings
Or run the installer again and choose "Uninstall"

Linux

Run this command:

wget https://raw.githubusercontent.com/Jackett/Jackett/master/uninstall_service_systemd.sh --quiet -O - | sudo bash

macOS

Run this command:

curl -sSL https://raw.githubusercontent.com/Jackett/Jackett/master/uninstall_jackett_macos | bash

Configuration

Running Behind Reverse Proxy

When running Jackett behind a reverse proxy, ensure that the original hostname of the request is passed to Jackett. If HTTPS is used, also set the X-Forwarded-Proto header to "https".

Important: Adjust the "Base path override" in Jackett settings accordingly.

Apache Configuration Example

<Location /jackett>
    ProxyPreserveHost On
    RequestHeader set X-Forwarded-Proto expr=%{REQUEST_SCHEME}
    ProxyPass http://127.0.0.1:9117
    ProxyPassReverse http://127.0.0.1:9117
</Location>

Nginx Configuration Example

location /jackett {
    proxy_pass http://127.0.0.1:9117;
    proxy_set_header X-Real-IP $remote_addr;
    proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
    proxy_set_header X-Forwarded-Proto $scheme;
    proxy_set_header X-Forwarded-Host $http_host;
    proxy_redirect off;
}

Search Cache

Jackett has an internal cache to increase search speed and reduce the number of requests to torrent sites. The default values should be suitable for most users.

Configuration Options:

Cache TTL (seconds): Default is 2100 (35 minutes). This indicates how long results can remain in the cache.
Cache max results per indexer: Default is 1000. This limits how many results are kept in cache for each indexer to control RAM usage.

Note: If you make many requests and have sufficient memory, you can increase the maximum results. If you experience problems, you can reduce the TTL value or disable the cache. Be aware that making too many requests can result in being banned by tracker sites.

Torznab Cache

If you have enabled the Jackett internal cache but want to fetch fresh results for a specific query (ignoring the cache), add the &cache=false parameter to your Torznab query.

Example:

http://127.0.0.1:9117/api/v2.0/indexers/all/results/torznab/api?apikey=YOUR_API_KEY&t=search&q=query&cache=false

Configuring FlareSolverr

Some indexers are protected by Cloudflare or similar services, and Jackett cannot solve the challenges on its own. For these cases, FlareSolverr has been integrated into Jackett.

What is FlareSolverr: FlareSolverr is a proxy server that solves Cloudflare and other anti-bot challenges, then provides Jackett with the necessary cookies.

Setup Instructions:

Install FlareSolverr service following their installation instructions
Configure FlareSolverr in Jackett:
- Open Jackett settings
- Set FlareSolverr API URL (e.g., http://172.17.0.2:8191)
- It is recommended to keep the default value in FlareSolverr Max Timeout (ms)

Note: Setting up this service is optional. Most indexers do not require it.

Configuring OMDb

This feature is used as a fallback when using the aggregate indexer to get the movie or series title if only the IMDB ID is provided in the request.

Setup Instructions:

Request a free API key from OMDb
- Free tier allows 1,000 daily requests
Paste the API key in Jackett settings

API Usage

Jackett Torznab Query Syntax

Jackett accepts Torznab queries following the specifications described in the Torznab specification document.

Basic Query Structure:

http://127.0.0.1:9117/api/v2.0/indexers/<indexer-name>/results/torznab/api?apikey=<your-api-key>&t=<search-type>&<parameters>

Examples:

Get indexer capabilities:

http://127.0.0.1:9117/api/v2.0/indexers/1337x/results/torznab/api?apikey=YOUR_API_KEY&t=caps

Perform a free text search:

http://127.0.0.1:9117/api/v2.0/indexers/1337x/results/torznab/api?apikey=YOUR_API_KEY&t=search&q=ubuntu

Search Modes and Parameters

Jackett supports the following search modes:

t=search (General Search)

Parameters: q (query string)

Example:

.../api?apikey=YOUR_API_KEY&t=search&cat=100002,100003&q=Show+Title+S01E02

t=tvsearch (TV Search)

Parameters: q, season, ep, imdbid, tvdbid, rid, tmdbid, tvmazeid, traktid, doubanid, year, genre

Examples:

.../api?apikey=YOUR_API_KEY&t=tvsearch&cat=5000&q=Show+Title&season=1&ep=2

.../api?apikey=YOUR_API_KEY&t=tvsearch&cat=5040,5045&genre=comedy&season=2023&ep=02/13

t=movie (Movie Search)

Parameters: q, imdbid, tmdbid, traktid, doubanid, year, genre

Examples:

.../api?apikey=YOUR_API_KEY&t=movie&cat=100001&q=Movie+Title&year=2023

.../api?apikey=YOUR_API_KEY&t=movie&cat=2000&imdbid=tt1234567

t=music (Music Search)

Parameters: q, album, artist, label, track, year, genre

Example:

.../api?apikey=YOUR_API_KEY&t=music&cat=100004&album=Title&artist=Name

t=book (Book Search)

Parameters: q, title, author, publisher, year, genre

Example:

.../api?apikey=YOUR_API_KEY&t=book&cat=100005,100006&genre=horror&publisher=Stuff

Note: Most indexers will only support a subset of these search modes and parameters. Use t=caps to get a list of the actual modes and parameters supported by a specific indexer.

Filter Indexers

A special "filter" indexer is available at:

http://127.0.0.1:9117/api/v2.0/indexers/<filter>/results/torznab

It will query the configured indexers that match the filter expression criteria and return combined results as "all".

Supported Filters

Filter	Condition
`type:<type>`	Indexer type equals `<type>`
`tag:<tag>`	Indexer tags contain `<tag>`
`lang:<lang>`	Indexer language starts with `<lang>`
`test:passed`	Last indexer test passed
`test:failed`	Last indexer test failed
`status:healthy`	Indexer successfully operated in recent minutes
`status:failing`	Indexer generated errors in recent calls
`status:unknown`	Indexer unused for a while

Supported Operators

Operator	Condition
`!<expr>`	NOT `<expr>`
`<expr1>+<expr2>`	`<expr1>` AND `<expr2>`
`<expr1>,<expr2>`	`<expr1>` OR `<expr2>`

Filter Examples

Example 1: Query indexers tagged with "group1" OR all non-private indexers with English language:

.../api/v2.0/indexers/tag:group1,!type:private+lang:en/results/torznab

Example 2: Query indexers that are not failing OR that passed their last test:

.../api/v2.0/indexers/!status:failing,test:passed/results/torznab

Aggregate Indexers

A special "all" indexer is available at:

http://127.0.0.1:9117/api/v2.0/indexers/all/results/torznab

It will query all configured indexers and return combined results.

Important Considerations

When to use the "all" indexer:

Quick setup with fewer configuration steps
Testing multiple indexers at once

Limitations of the "all" indexer:

You lose control over indexer-specific settings (categories, search modes, etc.)
Mixing search modes (IMDB, query, etc.) might cause low-quality results
Indexer-specific categories (>= 100000) cannot be used
Slow indexers will slow down overall results
Total results are limited to 1000

Recommendation: If your client supports multiple feeds, add each indexer directly instead of using the "all" indexer for better control and performance.

Getting Indexer Information

To get all Jackett indexers including their capabilities:

.../api/v2.0/indexers/all/results/torznab/api?apikey=YOUR_API_KEY&t=indexers

To filter by configuration status:

.../api/v2.0/indexers/all/results/torznab/api?apikey=YOUR_API_KEY&t=indexers&configured=true
.../api/v2.0/indexers/all/results/torznab/api?apikey=YOUR_API_KEY&t=indexers&configured=false

Command Line Switches

You can pass various options when running Jackett via the command line:

Windows Service Management

-i, --Install - Install Jackett Windows service (requires administrator)
-s, --Start - Start the Jackett Windows service (requires administrator)
-k, --Stop - Stop the Jackett Windows service (requires administrator)
-u, --Uninstall - Uninstall Jackett Windows service (requires administrator)
-r, --ReserveUrls - Register Windows port reservations (required for listening on all interfaces)

Configuration Options

-l, --Logging - Log all requests/responses to Jackett
-t, --Tracing - Enable tracing
-c, --UseClient - Override web client selection: automatic (default), httpclient, httpclient2
-x, --ListenPublic - Listen publicly (accessible from other devices)
-z, --ListenPrivate - Only allow local access (default)
-p, --Port - Specify web server port (default: 9117)
-n, --IgnoreSslErrors - Ignore invalid SSL certificates: true or false
-d, --DataFolder - Specify the location of the data folder (requires administrator on Windows)
- Example: --DataFolder="D:\Your Data\Jackett\"
- Note: Do not use this on Unix (Mono) systems. Adjust the HOME directory or set XDG_CONFIG_HOME environment variable instead
--NoRestart - Don't restart after update
--PIDFile - Specify the location of the PID file
--NoUpdates - Disable automatic updates
--help - Display help screen
--version - Display version information

Example Usage

# Start Jackett on a custom port
./jackett --Port 9118

# Start with public access enabled
./jackett --ListenPublic

# Start with custom data folder (Windows)
JackettConsole.exe --DataFolder="D:\Jackett Data"

# Enable detailed logging
./jackett --Logging --Tracing

Building from Source

Windows

See the contributing guide for detailed instructions.

macOS

Prerequisites: Install .NET SDK manually from dotnet.microsoft.com

Build Steps:

# Clone the repository
git clone https://github.com/Jackett/Jackett.git
cd Jackett/src

# Build for .NET Core
dotnet publish Jackett.Server -f net9.0 --self-contained -r osx-x64 -c Debug

# Run Jackett
./Jackett.Server/bin/Debug/net9.0/osx-x64/jackett

Linux

Prerequisites:

# Install build tools (Debian/Ubuntu)
sudo apt install nuget msbuild dotnet-sdk-9.0

# For other distributions, install equivalent packages

Build Steps:

# Clone the repository
git clone https://github.com/Jackett/Jackett.git
cd Jackett/src

# Build for .NET Core
dotnet publish Jackett.Server -f net9.0 --self-contained -r linux-x64 -c Debug

# Run Jackett
./Jackett.Server/bin/Debug/net9.0/linux-x64/jackett

Troubleshooting

Common Issues

Cannot Connect to Jackett

Check if Jackett is running:

# Linux
systemctl status jackett.service

# Windows
- Check the system tray for Jackett icon
- Check Services (services.msc) for "Jackett" service

Try alternative URL:

Instead of http://127.0.0.1:9117, try http://localhost:9117

Check firewall:

Ensure port 9117 is not blocked by your firewall
On Linux: sudo ufw allow 9117
On Windows: Check Windows Defender Firewall settings

No Search Results

Test the indexer directly:

Go to Jackett dashboard
Click "Manual Search" on the indexer
Enter a test query
Check if results appear

Verify tracker status:

Check if the tracker website is accessible in your browser
Some trackers may be down or blocking your IP

Check indexer configuration:

For private trackers, ensure your credentials are correct
Try re-adding the indexer

Permission Denied Errors (Linux)

# Fix ownership of Jackett files
sudo chown -R $USER:$USER /opt/Jackett
sudo chown -R $USER:$USER ~/.config/Jackett

Service Won't Start (Linux)

# View recent error logs
journalctl -u jackett.service -n 50

# Reload systemd and restart
sudo systemctl daemon-reload
sudo systemctl restart jackett.service

# Check for errors
systemctl status jackett.service

Cloudflare Protection

If an indexer shows "Cloudflare protected" errors:

Install and configure FlareSolverr (see Configuring FlareSolverr)
Make sure FlareSolverr is running and accessible
Test the indexer again

Updates Failing

Manual update:

Download the latest release for your platform
Stop Jackett service
Extract new files over existing installation
Start Jackett service

Disable automatic updates:

./jackett --NoUpdates

Other Common Issues

See https://github.com/Jackett/Jackett/wiki/Troubleshooting

Getting Help

Check the GitHub Issues for similar problems
Read the Troubleshooting Guide
Open a new issue with:
- Your operating system and version
- Jackett version
- Error messages from logs
- Steps to reproduce the problem

Log Locations

Linux:

~/.config/Jackett/log.txt
journalctl -u jackett.service

Windows:

%ProgramData%\Jackett\log.txt

macOS:

~/.config/Jackett/log.txt
/Users/your-user-name/Library/Application Support/Jackett/log.txt

Contributing

This project is actively recruiting development help. If you can contribute code, please see:

Ways to Contribute:

Report bugs and issues
Suggest new features
Add or fix indexer definitions
Improve documentation
Submit code contributions

Screenshots

Quick Reference

Item	Value/Location
Default URL	`http://127.0.0.1:9117`
Default Port	9117
Config (Linux)	`~/.config/Jackett/`
Config (Windows)	`%ProgramData%\Jackett\`
Config (macOS)	`~/.config/Jackett/` or `~/Library/Application Support/Jackett/`
Logs (Linux)	`~/.config/Jackett/log.txt`
Logs (Windows)	`%ProgramData%\Jackett\log.txt`
Latest Release	GitHub Releases
Documentation	GitHub Wiki
Issues	GitHub Issues

License and Credits

Jackett is an open-source project maintained by the community.

Links:

Radarr/Radarr

Movie organizer/manager for usenet and torrent users.

https://radarr.video

Radarr

Radarr is a movie collection manager for Usenet and BitTorrent users. It can monitor multiple RSS feeds for new movies and will interface with clients and indexers to grab, sort, and rename them. It can also be configured to automatically upgrade the quality of existing files in the library when a better quality format becomes available. Note that only one type of a given movie is supported. If you want both a 4k version and 1080p version of a given movie you will need multiple instances.

Major Features Include

Adding new movies with lots of information, such as trailers, ratings, etc.
Support for major platforms: Windows, Linux, macOS, Raspberry Pi, etc.
Can watch for better quality of the movies you have and do an automatic upgrade. eg. from DVD to Blu-Ray
Automatic failed download handling will try another release if one fails
Manual search so you can pick any release or to see why a release was not downloaded automatically
Full integration with SABnzbd and NZBGet
Automatically searching for releases as well as RSS Sync
Automatically importing downloaded movies
Recognizing Special Editions, Director's Cut, etc.
Identifying releases with hardcoded subs
Identifying releases with AKA movie names
SABnzbd, NZBGet, QBittorrent, Deluge, rTorrent, Transmission, uTorrent, and other download clients are supported and integrated
Full integration with Kodi and Plex (notifications, library updates)
Importing Metadata such as trailers or subtitles
Adding metadata such as posters and information for Kodi and others to use
Advanced customization for profiles, such that Radarr will always download the copy you want
A beautiful UI

Support

Note: GitHub Issues are for Bugs and Feature Requests Only

Contributors & Developers

API Documentation

This project exists thanks to all the people who contribute.

Backers

Thank you to all our backers! 🙏 Become a backer

Mega Sponsors

JetBrains

Thank you to for providing us with free licenses to their great tools.

DigitalOcean

This project is also supported by DigitalOcean

License

GNU GPL v3

cyanfish/naps2

Scan documents to PDF and more, as simply as possible.

https://www.naps2.com

NAPS2 - Not Another PDF Scanner

NAPS2 on Windows, Mac, and Linux

NAPS2 is a document scanning application with a focus on simplicity and ease of use. Scan your documents from WIA, TWAIN, SANE, and ESCL scanners, organize the pages as you like, and save them as PDF, TIFF, JPEG, or PNG. Optical character recognition (OCR) is available using Tesseract.

System requirements:

Windows 7+ (x64, x86)
macOS 10.15+ (x64, arm64)
Linux (x64, arm64) (GTK 3.20+, glibc 2.27+, libsane)

Visit the NAPS2 home page at www.naps2.com.

NAPS2.Sdk (for developers)

NAPS2.Sdk is a fully-featured scanning library, supporting WIA, TWAIN, SANE, and ESCL scanners on Windows, Mac, and Linux. Read more.

Build Instructions

Looking to contribute to NAPS2 or NAPS2.Sdk? Have a look at the Github wiki for build instructions and more.

License

NAPS2 is licensed under the GNU GPL 2.0 (or later). Some projects have additional license options:

NAPS2.Escl.* - GNU LGPL 2.1 (or later)
NAPS2.Images.* - GNU LGPL 2.1 (or later)
NAPS2.Internals - GNU LGPL 2.1 (or later)
NAPS2.Sdk - GNU LGPL 2.1 (or later)
NAPS2.Sdk.Samples - MIT

SubtitleEdit/subtitleedit

the subtitle editor :)

http://www.nikse.dk/SubtitleEdit/Help

Subtitle Edit

The subtitle editor 😃

🌐 Documentation & FAQ

https://subtitleedit.github.io/subtitleedit/

🚀 Automated Builds

You can find the latest cross-platform builds here:
👉 Releases

💻 System Requirements

Windows

Minimum: Windows 10 version 22H2 (build 19045) or newer, fully updated. Older Windows 10 builds (2004/20H2/21H1/21H2) are end-of-life and may fail to start with a .NET runtime error (0x80131506).

macOS

Minimum macOS version: 12 (Monterey) or newer
Recommended: macOS 14 (Sonoma) or newer - the oldest macOS that .NET 10 is supported on. Subtitle Edit still starts on 12 and 13, but that combination is not one the .NET runtime is tested against.
The .dmg is self-contained: libmpv and ffmpeg are bundled inside Subtitle Edit.app, so no MacPorts or Homebrew install is required.

Installing Subtitle Edit on macOS

As of v5.2.0, the .dmg is signed with an Apple Developer ID and notarized by Apple, so it opens normally — no Terminal quarantine-removal step is needed:

Download and double-click the .dmg file to mount it.
In the window that appears, drag Subtitle Edit.app into your Applications folder.
Open Subtitle Edit from Applications (or Launchpad).

Linux

Flatpak (any distribution)

A Flatpak package is available from the Releases page. It bundles all required dependencies (mpv, ffmpeg) — no separate installation needed.

flatpak install SubtitleEdit-linux-x64.flatpak
flatpak run dk.nikse.subtitleedit

Native builds (`.tar.gz`)

Requires mpv and ffmpeg (ffmpeg is normally already installed) to enable video functionality.

Debian/Ubuntu

sudo apt update && sudo apt install -y mpv libmpv-dev ffmpeg

Arch

sudo pacman -S mpv ffmpeg

Fedora

sudo dnf install mpv-libs ffmpeg-free

(or ffmpeg from RPM Fusion)

openSUSE

sudo zypper install mpv ffmpeg

⚙️ Note: The provided builds are self-contained and do not require a separate .NET installation.

🔒 Privacy

Subtitle Edit is an offline, open-source application.
It does not collect, store, transmit, or analyze the content of your subtitle files, media files, or any associated metadata — not for analytics, not for model training, and not for any other secondary purpose, now or in the future.

All core features, including editing, converting, video playback, and local auto-backup, run entirely on your device.

If you choose to use optional third-party online services within Subtitle Edit (such as translation, speech-to-text, text-to-speech, OCR, or dictionary/lookups), only the minimal data required to perform that specific request is sent directly to the selected provider. Any such data transfer is governed by the provider’s own privacy policy, and Subtitle Edit does not retain or forward this data in any way.

Subtitle Edit aims to give you full control over your files — your data stays yours.

❤️ Support the Project

If you’d like to support the continued development of Subtitle Edit, please consider donating:

ShareX/ShareX

ShareX is a free and open-source application that enables users to capture or record any area of their screen with a single keystroke. It also supports uploading images, text, and various file types to a wide range of destinations.

https://getsharex.com

Screen capture, file sharing and productivity tool

For further information please check our website

ShareX - Free Screen Capture, Screenshot, File Sharing and Productivity Tool

ShareX is a free and open source screenshot tool, screen recorder, file sharing tool and productivity application for Windows. It is designed for users who need fast screen capture, powerful screenshot editing, automated sharing, custom upload destinations and practical utilities in one lightweight desktop app.

With ShareX, you can capture any area of your screen, record video or GIFs, annotate screenshots, upload files, copy shareable links, extract text with OCR, scan QR codes, pick colors and run custom workflows from hotkeys. ShareX is built for speed and control: capture a screenshot, edit it, save it, copy it, upload it or pass it through your own task chain with minimal manual work.

Why ShareX?

ShareX combines screen capture, screen recording, image editing, file uploading and automation features that are often split across multiple applications. It is completely free, open source, lightweight, privacy focused and has no advertisements. No account is required to use ShareX.

ShareX is especially useful for developers, designers, support teams, content creators, technical writers, QA testers and power users who frequently create screenshots, record short clips, share files or document workflows. It can be used as a simple screenshot app, but it also supports advanced workflows for users who want precise control over capture methods, after-capture tasks, upload destinations and hotkeys.

Screenshot and Screen Recording Features

ShareX supports many ways to capture your screen:

Fullscreen capture
Active window capture
Active monitor capture
Region capture
Scrolling screenshot capture
Last region capture
Custom region capture
Screen recording
GIF screen recording
Auto capture

After capturing a screenshot or recording, ShareX can automatically copy the result to the clipboard, save it to a file, open it in the image editor, upload it, print it, show it in Windows Explorer, run an action, scan a QR code or recognize text with OCR. These after-capture tasks make ShareX a flexible screenshot workflow tool instead of only a basic snipping utility.

Region Capture and Annotation

ShareX region capture includes tools for selecting exactly what you want to capture and marking it before saving, copying or uploading. You can draw rectangles, ellipses, freehand lines, arrows, text, speech balloons, step numbers, highlights, blur effects, pixelation, magnification and spotlight effects.

These annotation tools help create clear screenshots for bug reports, documentation, tutorials, support replies, pull requests and release notes. Sensitive information can be hidden with blur, pixelate or smart eraser tools before a screenshot is shared.

Built-in Image Editor

The ShareX image editor lets you crop, annotate, redact, highlight and prepare screenshots after capture. It includes common editing tools such as shapes, arrows, text, freehand drawing, image insertion, cursor insertion, blur, pixelate, magnify, spotlight, crop, cut out, background editing and image effects.

Because the editor is part of the capture workflow, you can take a screenshot, mark the important area, hide private details and then copy, save or upload the edited image without switching between separate apps.

File Sharing and Upload Automation

ShareX can upload images, text, files, folders, clipboard content and URLs to many different destinations. After uploading, it can automatically copy the URL to the clipboard, open the URL, shorten the URL, show a QR code or run other configured tasks.

Advanced users can create custom uploaders for services that are not built in. ShareX also provides guides for destinations such as Amazon S3, Google Cloud Storage and Cloudflare R2, making it suitable for both personal screenshot sharing and team workflows where files need to be uploaded to controlled storage.

Productivity Tools

ShareX includes many utilities that support everyday desktop work:

Screen & color

Images

Video

Data & text

System

These tools make ShareX useful beyond screenshots. It can help inspect images, prepare assets, extract information, verify files and speed up repetitive tasks.

Custom Workflows and Hotkeys

ShareX is built around configurable workflows. You can assign hotkeys to capture methods, choose what happens after capture, decide what happens after upload and create actions that run external tools or scripts. This makes it possible to build a workflow such as capture region, annotate image, save locally, upload to a destination, shorten the URL and copy the final link to the clipboard.

The workflow system is one of the main reasons ShareX is popular with power users. Simple tasks can stay simple, while advanced users can automate detailed screenshot, screen recording and file sharing processes.

Download ShareX

ShareX is available from the official website, GitHub releases, Microsoft Store and Steam. You can install the regular setup version, use a portable version or try development builds if you want the newest changes before a stable release.

For the safest download options, use the official links below.

Documents

Image effects: https://getsharex.com/image-effects
Actions: https://getsharex.com/actions
Dev builds: https://getsharex.com/docs/dev-builds
Keybinds: https://getsharex.com/docs/keybinds
Region capture: https://getsharex.com/docs/region-capture
Image editor: https://getsharex.com/docs/image-editor
Background remover: https://getsharex.com/docs/background-remover
Pin to screen: https://getsharex.com/docs/pin-to-screen
Scrolling screenshot: https://getsharex.com/docs/scrolling-screenshot
Command line arguments: https://getsharex.com/docs/command-line-arguments
Translation: https://getsharex.com/docs/translation
OCR: https://getsharex.com/docs/ocr
Custom uploader: https://getsharex.com/docs/custom-uploader
Amazon S3 guide: https://getsharex.com/docs/amazon-s3
Google Cloud Storage guide: https://getsharex.com/docs/google-cloud-storage
Cloudflare R2 guide: https://getsharex.com/docs/cloudflare-r2
Brand assets: https://getsharex.com/brand-assets

NickvisionApps/Parabolic

Download web video and audio

https://flathub.org/apps/details/org.nickvision.tubeconverter

🎬 Parabolic

A powerful yt-dlp frontend

Features • Installation • Screenshots • Building • Contributing

✨ Features

🌐 Versatile Downloads

Powerful frontend for yt-dlp with support for hundreds of sites

🎵 Multiple Formats

Download in mp4, webm, mp3, opus, flac, and wav

⚡ Concurrent Downloads

Run multiple downloads at the same time

📝 Complete Metadata

Support for downloading metadata and video subtitles

⚖️ Legal Copyright Disclaimer

Caution

Videos on YouTube and other sites may be subject to DMCA protection. The authors of Parabolic do not endorse, and are not responsible for, the use of this application in means that will violate these laws.

📥 Installation

Choose your platform

Linux

Windows

Download the latest version from Releases

macOS

Download the latest version from Releases

Browser Extensions

Chrome: See extension folder for manual installation instructions

🌍 Translation Status

Help us translate Parabolic! Click here to contribute

💬 Chat & Community

Join our community on Matrix!

🤝 Contributing

We'd love your contribution! See CONTRIBUTING.md for details on:

🐛 How to report bugs
💡 How to suggest new features
🔧 How to contribute code
📖 How to improve documentation

📸 Screenshots

🖥️ GNOME Interface

Home Page	Active Downloads

Dark Mode	Add Download

🪟 Windows Interface (WinUI)

Home Page	Active Downloads

Dark Mode	Add Download

🧩 Chrome Extension

Options Page	Right Click Menu

https://github.com/user-attachments/assets/9bd47723-8623-4e47-8e69-d21ac68bdef8

🦊 Firefox Extension

Options Page	Right Click Menu

https://github.com/user-attachments/assets/866cc587-e9c9-4cc0-bb81-e628e9fc2373

🔨 Building

Parabolic is a .NET 10 project and can easily be built on any platform. Besides .NET 10, the following are required system dependencies for building each project:

📦 Dependencies

Shared

gettext
- Can be installed on Windows using msys2

WinUI

WindowsAppSDK

GNOME

Gtk4
libadwaita
blueprint-compiler
- Can be installed on Windows using msys2

🏗️ Build Process

Once all dependencies are available on the system, simply run:

WinUI:

dotnet run --project Nickvision.Parabolic.WinUI

GNOME:

dotnet run --project Nickvision.Parabolic.GNOME

📜 Code of Conduct

This project follows the GNOME Code of Conduct.

We expect all participants to treat each other with respect and contribute to a welcoming and inclusive community.

HotCakeX/Harden-Windows-Security

Harden Windows Safely, Securely using Official Supported Microsoft methods and proper explanation | Always up-to-date and works with the latest build of Windows | Provides tools and Guides for Personal, Enterprise, Government and Military security levels | SLSA Level 3 Compliant for Secure Development and Build Process | Apps Available on MS Store✨

https://hotcakex.github.io

Harden Windows Security | A New Threat to Malware

Harden Windows Safely, Securely, Only With Official Microsoft Methods

Here are Quick Access Points to Important Sections of this Repository

Harden System Security App

AppControl Manager App

Application Control for Business Resources

This repository only uses the features that have already been implemented by Microsoft in Windows OS to fine-tune it towards the highest security and locked-down state, without relying on any 3rd party component or dependency, using well-documented, supported, recommended and official methods. Continue reading for comprehensive info.

How To Use

Install the Harden System Security From the Microsoft Store

Documentation

Install the AppControl Manager From Microsoft Store

💡 (back to top)

Rationale

𝐖𝐞𝐥𝐜𝐨𝐦𝐞 to the 𝙷𝚊𝚛𝚍𝚎𝚗 𝚆𝚒𝚗𝚍𝚘𝚠𝚜 𝚂𝚎𝚌𝚞𝚛𝚒𝚝𝚢 𝚁𝚎𝚙𝚘𝚜𝚒𝚝𝚘𝚛𝚢

This section provides the justification and objective of this GitHub repository and its contents. It outlines how it addresses various threats and how to adjust your expectations for different scenarios and environments. It also supplies lots of useful additional resources.

This repository currently has 2 main products.

Let's explore each of them in detail below

Harden System Security App

Use the Harden System Security app to secure your personal and enterprise devices against the majority of advanced threats. The app is suitable to be used by everyone.

If you are a personal user, you can use the Harden System Security to harden your Operating System, remove unnecessary features or apps and gain advanced visibility into the security structure of your system.

If you are an enterprise user or admin, you can use the provided Intune security policies and apply them to all of your workstations using the Harden System Security app. You can then use the app to verify the compliance of the workstations against the applied policies and receive a security score.

It uses the same security features built into your device and Windows operating system to fine-tune it towards the highest security and locked-down state. It does not install any outside components and does not increase your attack surface at all.

Let's take a look at the infographics below:

More Info About This Map

The reasoning behind the infographic above

💡 (back to top)

AppControl Manager

AppControl Manager is a secure open-source Windows application designed to help you easily configure Application Control in your system. It is suitable for both personal users as well as enterprises, businesses and highly secure workstations.

If you aren't familiar with what App Control is, please refer to this article where it's explained in great detail.

Proper usage of Application Control, when coupled with the Harden System Security app's policies, can provide 99% protection from various threats, either from the Internet or physical. It's true that there is no absolute security, but then again there is nothing absolute in the universe either. Everything, even the most fundamental physical laws, are and have been subject to change and conditions.

How Do You Make the Right Choice?

𝙵𝚒𝚛𝚜𝚝 𝚊𝚗𝚍 𝙵𝚘𝚛𝚎𝚖𝚘𝚜𝚝 use the Harden System Security app to apply the hardening measures it offers, your system will be secure against at least ~98% of the threats when you use Standard (non-Privileged) account for everyday work. These threats aren't the usual computer viruses, they are motivated nation state threat actors.

𝚃𝚑𝚎𝚗 use the AppControl Manager to deploy an App Control policy and have even more control over the operation of the Windows Application Control.

These methods will create multiple layers of security; also known as defense in depth. Additionally, you can create Kernel-level Zero-Trust strategy for your system.

If there will ever be a zero-day vulnerability in one or even some of the security layers at the same time, there will still be enough layers left to protect your device. It's practically impossible to penetrate all of them at once.

Also, zero-day vulnerabilities are patched quickly, so keeping your device and OS up to date, regardless of what OS you use, is one of the most basic security recommendations and best practices you must follow.

💡 (back to top)

Vulnerabilities Such as Zero-Days Are Disclosed in 3 Different Ways

The vulnerability is disclosed responsibly. It is first communicated privately with the software vendor/developer so they can have the time to fix and issue updates/patches for the vulnerability before it is disclosed publicly. In this way, people are always safe because all that's needed is to keep your OS and software up to date to receive the latest security patches.
The vulnerability is disclosed irresponsibly. It is disclosed publicly, through social media or by creating PoCs (Proof of Concept) so that it can be used and abused by everyone.
The vulnerability is abused by malicious actors. It is exploited by threat actors in cyber attacks and privately. These vulnerabilities are either discovered by the threat actors themselves or bought from security researchers who find them first, all of which is illegal and has consequences.

What About More Advanced Security at Scale?

To achieve the Highest level of Security at Scale for Businesses, Enterprises and Military scenarios, you can use the following services to create impenetrable devices and environments.

The following services must be used in addition to the measures already talked about in this repository, such as proper Application Control policies and the security measures that the Harden System Security app applies. They are not a replacement for them.

As an individual user you can still utilize these features and services, they add an additional layer of protection to your security stack.

Microsoft Defender for Endpoint - Discover and secure endpoint devices across your multiplatform enterprise.
Microsoft Security Copilot - Build a defense so automated that even your intern becomes a cybersecurity expert.
Confidential Computing on Azure - Protect your highly sensitive data while it's in use
Confidential AI - Train your data Privately and Securely on the most advanced AI Super computers
Microsoft Entra conditional access - Increase protection without compromising productivity
Microsoft Sentinel - Scalable, cloud-native solution that provides SIEM, SOAR and more!
Key Vault - Safeguard cryptographic keys and other secrets used by cloud apps and services. This Azure service uses the best products in the world for the job, such as Thales HSMs. More info available here.
Microsoft Defender for Cloud - Protect multicloud and hybrid environments with integrated security from code to cloud
Microsoft Defender for Cloud Apps - Modernize how you secure your apps, protect your data, and elevate your app posture with software as a service (SaaS) security.
Microsoft Defender for Identity - Protect your on-premises identities with cloud-powered intelligence.
Passwordless authentication options for Azure Active Directory - Multifactor and Passwordless Authentication, the most secure and convenient way of authentication.
PIM (PAM) - Privileged Access Management
PAW - Privileged Access Workstation
SAW - Secure Admin Workstations
List of all Azure security services for Enterprises, Businesses etc.

💡 (back to top)

Important Considerations

Avoid using other 3rd party security solutions when using the Harden System Security app or App Control for Business. Other solutions can be weak, are incompatible and unnecessary, they also increase your attack surface.

To understand why this is true, please take the time and read each app's wiki documentation linked above. For further proof, you are always free to code review, do comparison and ask me any follow up questions you might have.

Use Virtual machines for any questionable or unsafe software. Use Windows Sandbox or Hyper-V VM.

Which Device to Use ?

Use Microsoft Surface products for the best device and firmware security. They support secured-core PC specifications, the manufacturing process and platform is trusted and secure.

Make sure to use Surface products that support Device Firmware Configuration Interface (DFCI) for extra protection and security. Here is a list of Surface products that support it.

How to use Device Firmware Configuration Interface (DFCI) for Surface Devices with Intune
Among other features, devices set up with DFCI can be set that boot from USB device(s) is disabled and there is no way to bypass the chip level security directly, not even CMOS clear can bypass it, because it uses non-volatile memory aka flash storage. It sets BIOS cert authentication, and the private key is behind the cloud edge inside Intune and not even Microsoft support can get that key.
The list of Surface products supporting DFCI might not get updated quickly in that doc but fear not, this is an active project and all new surface devices have this built in, the docs team might be just a little laggy.
Microsoft Surface devices use Project Mu for the source code of their firmware.
Surface devices can use certificates instead of password for UEFI. They don't have a reset switch like other devices either. You create and install your own certificate using Surface Management Toolkit. You can build a config package that has the certificate in it and install it to the firmware, then the package can't be removed or changed without the signing cert authorizing the change, aka, cert auth, or you can just use DFCI as previously mentioned and not have to worry because the packages are signed with MS's private key and there is no PKI that you have to self host.
Business class Surface devices have dedicated TPM chips.
Check out the Device Guard category about Secured-Core specifications.
Pluton security chip is not a requirement for Secured-Core certification.
Pluton security chip is included in Qualcomm Snapdragon ARM CPUs, AMD and Intel CPUs.
Copilot+ PCs are among the most secure consumer grade devices. They are secured-core and incorporate the Pluton security chip.

It is important to be aware of potential hardware backdoors that may compromise the security of your system. Some common OEMs, such as Compaq, Dell, Fujitsu, Hewlett-Packard (HP), Sony, and Samsung, as well as OEMs that use unmodified Insyde H20, or Phoenix firmwares, utilize algorithms based on device serial numbers for password resets. These algorithms allow for master password removal from the firmware, potentially granting unauthorized access to the system.

When buying 3rd party devices, make sure they have the Pluton security chip, it addresses security needs like booting an operating system securely even against firmware threats and storing sensitive data safely even against physical attacks.

Protection against BYOVD (Bring Your Own Vulnerable Driver) attacks

Secured core PCs provide the hardware that is capable of protecting against BYOVD attacks. It is your responsibility to turn the features on, those include App Control for Business, ASR (Attack Surface Reduction) rules, Dynamic/static root of trust and firmware that is extensible for revoking drivers. They are especially useful for drivers not explicitly mentioned in the Microsoft Recommended Driver Block List, which are the more dynamic side of things.
Use Strict Kernel-mode App Control policy for complete BYOVD protection

💡 (back to top)

What to Do When There Is an Attack ?

You should have an existing Unified Contract with Microsoft (formerly known as Premier Support). Microsoft offers a wide range of services and teams to help you recover from a cyber attack such as:

GHOST: Global Hunting, Oversight and Strategic Triage
DART - The Microsoft Detection and Response Team
CRSP - Global Compromise Recovery Security Practice Team - including Ransomware

After you've got hacked, you should request them by contacting your Customer Success Account Manager and telling them you need the help of one of these teams.

When getting cyber security insurance for your company or organization, make sure to get one that covers the cost of hiring Microsoft's elite teams such as GHOST/DART, i.e. those Microsoft teams will be in-network for your insurance.

Color breakdown of security teams in organizations

🔴 Red - Pen Testers/White Hat Hackers
🔵 Blue - SOC/Data Science/Telemetry Analysis/SIEM Junkies
🟢 Green - Fixers, takes input from blue and red and builds the fixes that are needed for identified blind spots (blue) or vulnerability/risk (red)
🟡 Yellow - Tooling, SWE to build new stuff for all of the above to operate faster and more effectively

💡 (back to top)

For Penetration testing and benchmarking

How to properly perform a pentest and benchmark a system hardened by this repository and make it as close to a real-world scenario as possible:

Use a physical machine if possible, it should have Windows 11 certified hardware, Standard user account.
- If you can't use a physical machine, use Hyper-V hypervisor. Your host (aka physical machine) must have Windows 11 certified hardware and meet all the hardware and UEFI security requirements explained in the Readme. VMs however are prone to side channel attacks, so don't use that attack vector in pentests if you want more realistic results.
First apply the Harden System Security app (All categories of it) and then use the AppControl Manager to deploy a suitable Signed App Control policy.

Always pay attention to the Microsoft Security Servicing Criteria for Windows, especially the security boundaries. There is no security boundary between Administrator to Kernel.

Some penetration testers overlook this fact, assuming it is a vulnerability that they can perform administrative tasks such as disabling security features as Administrator. This is an expected behavior. Administrators have the power to control the security of a device and can disable security features at their discretion. This is why you need to use a Standard user account when performing a realistic penetration test.

Another aspect to consider is the ambiguity in the word "Admin". There are at least two distinct types of Admins: Local Admin and Cloud Admin. For instance, when you are penetration testing a system that leverages enterprise cloud security solution such as Microsoft Defender for Endpoint (MDE), Admin access should be regarded as Cloud Admin since those devices use Microsoft Entra ID and lack Local Admin. In this situation, Cloud Admin can effortlessly disable security features as expected, rendering a pentest using Local Admin access utterly pointless. Conversely, when pentesting a system that only relies on personal security features such as Microsoft Defender, then Admin should be treated as Local Admin. In this case, the Admin can also disable any security feature for the same reasons stated above.

Of course, Microsoft employs additional security measures such as Protected Process Light (PPL) for Defense in Depth strategies, but they do not alter the facts stated above. The goal is to always hope for the best, plan for the worst.

Any questions or suggestions?

Please open a new issue or discussion in the repository.

💡 (back to top)

Azure DevOps Repository (mirror)

Harden Windows Security website

Official global IANA IP block for each country

Windows Security Blog

WinSecureDNSMgr

Privacy, Anonymity and Compartmentalization

Trust

This repository uses effective methods that make it easy to verify:

Artifact attestations are used to establish provenance for builds. They guarantee that the packages are 100% created from the source code that exist in this repository.
SBOMs (Software Bill of Materials) are generated for the entire repository to comply with data protection standards and providing transparency. Together with attestation and isolation they provide SLSA L3 security level for the build process.
You can open the files in Visual Studio Code / Visual Studio Code Web / GitHub CodeSpace, and view them in a nice and easy to read environment, they are well formatted, commented and indented.
Commits and Tags are verified either with my GPG key or SSH key and Vigilant mode is turned on in my GitHub account.
You can fork this repository, verify it until that point in time, then verify any subsequent changes/updates I push to this repository, at your own pace (using Sync fork and Compare options on your fork), and if you are happy with the changes, allow it to be merged with your own copy/fork on your GitHub account.
All of the apps offered in this repository are signed and available in the Microsoft Store.

All files in this repository are zipped and automatically submitted to VirusTotal for scanning. Any available packages in the last release is also directly uploaded for scanning. It is done through a GitHub Action that is triggered every time a release is made or a PR is merged. Find the history of the uploaded files in my VirusTotal profile.

For your own security, exercise caution when considering any other 3rd-party tools, programs, or scripts claiming to harden or modify Windows OS in any way. Verify their legitimacy thoroughly before use and after each release. Avoid blind trust in 3rd party Internet sources. Additionally, if they don't adhere to the same high standards as this repository's offerings, they can cause system damage, unknown issues, and bugs.

💡 (back to top)

Support

If you have any questions, requests, suggestions etc. about this GitHub repository and its content, please open a new discussion or Issue.

Reporting a vulnerability on this GitHub repository.

I can also be reached privately at: spynetgirl@outlook.com

💡 (back to top)

Security Recommendations

Always download your operating system from official Microsoft websites. Right now, Windows 11 is the latest version of Windows, its ISO file can be downloaded from this official Microsoft server. One of the worst things you can do to your own security and privacy is downloading your OS, which is the root of all the active and passive security measures, from a 3rd party website claiming they have the official unmodified files. There are countless bad things that can happen as the result of it such as threat actors embedding malware or backdoors inside the customized OS, or pre-installing customized root CA certificates in your OS so that they can perform TLS termination and view all of your HTTPS and encrypted Internet data in plain clear text, even if you use VPN. Having a poisoned and compromised certificate store is the endgame for you, and that's just the tip of the iceberg.
- Refer to Wiki to see how to create Bootable USB flash drive with no 3rd party tools

Whenever you want to install a program or app, first use the Microsoft Store or Winget, if the program or app you are looking for isn't available in there, then download it from its official website. Consider using the WinGet Management Page in the Harden System Security app to manage or install your programs or apps. Using Winget or Microsoft store provides many benefits:
- Microsoft store UWP apps are secure in nature, digitally signed, in MSIX format. That means, installing and uninstalling them is guaranteed and there won't be any leftovers after uninstalling.
- Microsoft store has Win32 apps too, they are traditional .exe installers that we are all familiar with. The store has a library feature that makes it easy to find the apps you previously installed.
- Both Microsoft and Winget check the hash of the files by default, if a program or file is tampered, they will warn you and block the installation, whereas when you manually download a program from a website, you will have to manually verify the file hash with the hash shown on the website, if any.

Use Secure DNS; Windows 11 natively supports DNS over HTTPS and DNS over TLS.
- Use my WinSecureDNSMgr module to easily configure DNS over HTTPS in Windows

Only use Microsoft Edge for browser; It has the Highest-rated protection against phishing and malware, available by default on Windows OS, has tightly integrated valuable Security features such as Microsoft Defender Application Guard, Microsoft Defender SmartScreen, Hardware Enforced Stack Protection, Arbitrary Code Guard (ACG), Control Flow Guard (CFG), Tracking Prevention and Trusted built-in Secure Network feature from Cloudflare just to name a few.

Always enable Two-Factor/Multi-Factor Authentication on websites, apps and services that you use. Preferably, use Microsoft Authenticator app which has backup and restore feature, so you never lose access to your TOTPs (Time-Based One-Time Passwords) even if you lose your phone. Available for Android and IOS.

Make sure OneDrive backup for important folders (Desktop/Documents/Pictures) is enabled. It is fast, secure and works in any network condition and since it's x64 (64-bit), it can handle a Lot of small and large files simultaneously.

When considering the use of a VPN, it is crucial to exercise discernment and only resort to it when absolutely necessary. A VPN can be a vital tool if you reside in a totalitarian, communist, or dictatorial regime, or in a nation where democratic principles are not upheld. However, if you live in a country that does not fall into these categories, it may be wise to reconsider the necessity of using a VPN. Your local ISP (Internet Service Provider) is likely more trustworthy than the ISP associated with a remote VPN server. By using a VPN, you are merely transferring the trust you place in your local ISP to an unknown entity—the ISP utilized by the VPN provider. It is important not to be swayed by the deceptive marketing tactics employed by VPN companies. The true identities, political affiliations, backgrounds, and loyalties of those behind these services often remain shrouded in mystery. In the permissive and open societies of the Western world, it is conceivable that a VPN service could be established by entities with questionable intentions, including state sponsors of terrorism or other hostile actors. Such services could be utilized to gather intelligence, conduct data mining, and track users, posing significant risks to your privacy and security.
- There are situations where using VPN can provide security and privacy. For example, when using a public WiFi hotspot or basically any network that you don't have control over. In such cases, use Cloudflare WARP which uses WireGuard protocol, or as mentioned, use Secure Network in Edge browser that utilizes the same secure Cloudflare network. It's free, it's from an American company that has global radar and lots of insight about countries in the world in real-time, at least 19.7% of all websites use it (2022). Safe to say it's one of the backbones of the Internet.

Go passwordless with your Microsoft account and use Windows Hello authentication. In your Microsoft account which has Outlook service, you can create up to 10 Email aliases in addition to the 1 Email address you get when you made your Microsoft account, that means without creating a new account, you can have 11 Email addresses all of which will use the same inbox and account. You can specify which one of those Email aliases can be used to sign into your account, in the sign in preferences of your Microsoft account settings. So for example, when going passwordless, if you need you can give one of your Email aliases to others for communication or add it to a public profile of yours, then block sign in using that Email alias so nobody can send you authenticator notifications by entering that Email alias in the sign in page, and use the other 10 aliases that are private to sign into your Microsoft account with peace of mind. You can create a rule in your Outlook so that all of the Emails sent to your public Email alias will be stored in a different folder, apart from your other inbox emails. All of this can be done using free Microsoft account and Outlook webapp.

Set a strong password for the UEFI firmware of your device so that it will ask for password before allowing any changes to be made to firmware. You can also configure the password to be required on startup.

Use NTFS (which is the default Filesystem in Windows) or ReFS (Resilient File System, newer). In addition to all their benefits, they support Mark Of The Web (MOTW) or zone.identifier. When a file is downloaded to a device running Windows, Mark of the Web is added to the file, identifying its source as being from the internet. You can read all the information about it in here. If your USB flash drive is formatted as FAT32, change it to NTFS, because FAT32 does not keep the MOTW of the files. If the file you are downloading is compressed in .zip format, make sure you open/extract it using Windows built-in support for .zip files because it keeps the MOTW of the files. If the compressed file you downloaded is in other formats such as .7zip or .rar, make sure you use an archive program that supports keeping the mark of the Web of files after extraction. One of those programs is NanaZip which is a fork of 7zip, available in Microsoft Store and GitHub, compared to 7zip, it has better and modern GUI, and the application is digitally signed. After installation, open it, navigate to Tools at the top then select Options, set Propagate zone.id stream to Yes. You can use this PowerShell command to find all the info about the Zone Identifier of the files you downloaded from the Internet.

Get-Content <Path-To-File> -stream zone.identifier

When using Xbox, make sure you configure sign-in preference and set it to either Ask for my PIN or Lock it down. The latter is the most secure option because it requires authentication using the Microsoft Authenticator app. Ask for my PIN is recommended for most people because it only requires entering a PIN with a controller.

A few reminders about open source programs:
- Unless you are a skilled programmer who can understand and verify every line of code in the source, and spends time to personally build the software from the source, and repeats all the aforementioned tasks for each subsequent version, then seeing the source code won't have any effect on you because you aren't able to understand nor verify it.
- Do not assume that the entire Open Source community audits and verifies every line of code just because the source code is available, as we've seen in the XZ utility's backdoor by state sponsored actors, they can have backdoors implanted in them in broad daylight and nobody might notice it for a long time.
- The majority of open source programs are unsigned, meaning they don't have a digital signature, their developers haven't bought and used a code signing certificate to sign their program. Among other problems, this might pose a danger to the end-users by making it harder to create trust for those programs in security solutions such as Application Control or App Whitelisting, and makes it hard to authenticate them. Read Microsoft's Introduction to Code Signing. Use Azure Trusted Signing which is affordable.

Use Microsoft account (MSA) or Microsoft Entra ID to sign into Windows. Never use local administrators. Real security is achieved when there is no local administrator and identities are managed using Entra ID. You will be able to enforce Multi-factor unlock, for example use PIN + Fingerprint or PIN + Facial recognition, to unlock your device.

Enable Random Hardware Addresses In Windows Settings -> Network & Internet -> WIFI. Currently, there is no Group Policy or associated registry key to automatically turn it on, that is why it is mentioned here in the security recommendations section. It has various security and privacy benefits such as your device cannot be uniquely identified by its hardware MAC address and the routers you connect to cannot uniquely identify you. You can set it to change daily in your WIFI network adapter's settings in Windows settings for even more benefits.

Use Passkeys. Passkeys provide a more secure and convenient method to logging into websites and applications compared to passwords. Unlike passwords, which users must remember and type, passkeys are stored as secrets on a device and can use a device's unlock mechanism (such as biometrics or a PIN). Passkeys can be used without the need for other sign-in challenges, making the authentication process faster, secure, and more convenient.

More Security Recommendations coming soon...

💡 (back to top)

Resources

Microsoft.com
- Force firmware code to be measured and attested by Secure Launch
Microsoft Learn - Technical Documentation
- Secure Launch—the Dynamic Root of Trust for Measurement (DRTM)
- Quick guide to Windows as a service
Germany Intelligence Agency - BND - Federal Office for Information Security
- Analysis of Device Guard
- Device Guard Differential Analysis
Microsoft Tech Community - Official blogs and documentations
Microsoft Security baselines - Security baselines from Microsoft
Microsoft Security Response Center (MSRC) YouTube channel
- BlueHat Seattle 2019 || Guarding Against Physical Attacks: The Xbox One Story
- Security Update Guide: The Microsoft Security Response Center (MSRC) investigates all reports of security vulnerabilities affecting Microsoft products and services, and provides the information here as part of the ongoing effort to help you manage security risks and help keep your systems protected.
- Microsoft Security Response Center Blog
Microsoft Security Blog
Microsoft Podcasts
Bug Bounty Program - With bounties worth up to 250,000$
Microsoft Active Protections Program
Security Update Guide FAQs
Microsoft On the Issues - Assessments, Investigations and Reports of APTs (Advanced Persistent Threats¹) and nation-sponsored cyberattack operations globally
A high level overview paper by Microsoft (in PDF), framework for cybersecurity information sharing and risk reduction.
Microsoft Threat Modeling Tool - for software architects and developers
Important events to monitor
Windows Security portal
Security auditing
Microsoft SysInternals Sysmon for Windows Event Collection or SIEM
Privileged Access Workstations
Enhanced Security Administrative Environment (ESAE)
New Zealand 2016 Demystifying the Windows Firewall – Learn how to irritate attackers without crippli
Download Windows virtual machines ready for development
UK National Cyber Security Centre Advice & guidance
Global threat activity
Microsoft Zero Trust
Understanding malware & other threats, phrases
Malware naming
Microsoft Digital Defense Report
Microsoft Defender for Individuals
Submit a file for malware analysis
Submit a driver for analysis
Service health status
Microsoft Defender Threat Intelligence
- Free community edition vs Premium edition comparison
Microsoft Virus Initiative
Digital Detectives @Microsoft
Australia's Essential Eight
NIST 800-53
DoD's CMMC (Cybersecurity Maturity Model Certification)
ISO 27001
DoD Cyber Stigs (Security Technical Implementation Guides)
NIST SP 800-171 Rev. 2 - Protecting Controlled Unclassified Information in Nonfederal Systems and Organizations
Clean source principle
Windows Message Center
Deprecated features for Windows client
Microsoft Cybersecurity Reference Architectures
BlueHat IL 2023 - David Weston - Default Security
Windows Security best practices for integrating and managing security tools
Microsoft Exploitability Index
The Microsoft Incident Response Ninja Hub
Understanding the Microsoft Pluton security processor
Important Security Topics from Azure and Security MVPs
Security leadership in the age of constant disruption
Microsoft Edge security for your business

💡 (back to top)

Roadmap

💡 (back to top)

License

Using MIT License. Free information without any paywall or things of that nature. The only mission of this GitHub repository is to give all Windows users accurate, up to date and correct facts and information about how to stay secure and safe in dangerous environments, and to stay not one, but Many steps, ahead of threat actors.

Credits

Many of the icons are from Icons8.
- Disclaimer: Icons8 graphics used in this open-source project are only licensed to this repository. Extracting, copying, or reusing these graphic assets is strictly prohibited without a valid Icons8 license. If you would like to include the graphics in your own projects, you will need to obtain the appropriate license directly from Icons8 .
Windows, Azure etc. are trademarks of Microsoft Corporation

💡 (back to top)

Donations

If you would like to support my work financially, your generosity is greatly appreciated. You can donate using any of the following methods and then let me know via DM on X or Discord or Teams/Email via spynetgirl@outlook.com so I can thank you personally.

I am the only developer and maintainer of this repository and everything in it. Your financial support helps me continue to create and maintain this project. As it grows larger, I naturally need to spend more time on it. You can also use donations to request special or extraordinary features to implement for you.

You do not have to use Trust Wallet, it's only one of the thousands of crypto wallet providers out there. You can use any wallet you like or currently use. The important thing is to send your donations to the correct wallet address that is displayed below in the code blocks.

When using cryptocurrency transactions, there is no middle-man or 3rd party intermediaries involved, your donations are sent directly to me.

Bitcoin

Wallet Address for BTC

bc1qa948wr4mg2qkx2us5g8rv5ca75ppyy2ngl8k4e

Bitcoin Cash

Wallet Address for BCH

qrrj03927q90z4wg4nu2e3nf4y3qnun2ku7muv8rvm

Ethereum

Wallet Address for ETH

0xF784a3D4F9A7CC5c26d69de41D7dD6480112114D

BSC (Binance Smart Chain - Coin)

Wallet Address for BSC

0xF784a3D4F9A7CC5c26d69de41D7dD6480112114D

💡 (back to top)