binpatch is a framework for creating binary patches for OpenBSD on all platforms in a semi-automatic way. It can automatically download the source patches published on http://www.openbsd.org/errata.html, apply them, build them, and package the result into binary patches. Unlike the traditional method of patching the source tree, applying binary patches requires neither extra disk space to hold the whole source tree, compilers, nor a powerful enough CPU to build the programs patched in a reasonable amount of time.
Linvpn is a secure socket layer for pppd. It allows creation of virtual private networks by using an IP routing system between PPP network interfaces. Cryptography is done by libgcrypt's 3DES or blowfish, and Initialization Vector (IV) is changed in each packet transmission. As linvpn works as client and server, and communication is a single TCP connection, it allows creation of secure tunnels even in complex network layouts, when one or both endpoints are behind a firewall or NAT, with or without dynamic IP addresses.
Tabfmt is a command line utility to format tabular data. The program reads lines from one or more files or from standard input, breaks the lines into fields given a set of input field delimiters, and prints a table with constant-width columns to standard output or a specified file. Many options exist to customise the output.
Tableutil is a utility for converting, aggregating, and performing operations (currently unions, differences, complements, and intersections) on lists of IP addresses. Its primary use is to convert files into a format pfctl(8) can read. It can read plain-text files with ranges (220.127.116.11-18.104.22.168), CIDR-style networks (192.168.0.0/24), single addresses (242.242.242.242), or host names (one.two.com). It can also read p2b files, the preferred file-format of PeerGuardian.
Spoink is an output plugin for snort that works by blocking access to attackers using OpenBSD's pf API. Spoink uses a pf table and a blocking rule to stop "attackers" from accessing your system. To protect from false negatives you must have a whitelist full of IP addresses. It only blocks attacks defined in snort rules.
Twibright Twig is a static HTML photo gallery software that supports organization of JPEG and PNG images into a directory structure and EXIF and JPEG comments. It is meant for more experienced users rather than newbies. Three levels of downscaled image and three levels of thumbnails are generated. Each image is assigned a unique identifier to faciliate easy random linking from a master Web site. It handles reasonable large galleries (and is currently used for a 3GB one). Automatic regeneration of added, changed, and deleted images can be done with one script.