Stars
A collection of my Semgrep rules to facilitate vulnerability research.
Visa Vulnerability Agentic Harness
Pure-impacket parallel local-admin discovery via RBCD.
Stock vulnerable wordpress RCE poc for wp2shell.
Multi-model LLM penetration testing harness — Fable 5, Opus 4.8, GPT-5.5. Inspired by Cloudflare Cyber Frontier research.
Labeled reverse-engineering dataset over 4,598 crackmes: flags, verifier scripts, and normalized obfuscation tags.
Pixel-perfect Rust port of the mermaid.js diagram renderers — byte-identical SVG, ~30x faster than mmdc, no browser needed
A fully automated terminal-native AI shell built for security professionals.
🧰 ESXi Testing Tookit is a command-line utility designed to help security teams test ESXi detections.
Security scanner for AI agent skills. Detect vulnerabilities, malicious patterns, security risks, prompt injection, data exfiltration, and supply-chain risks in Claude Code, Codex, and MCP skills b…
An modular asset discovery framework written in python to automate the repeating manual work
Pure-Rust Android decompiler and security-audit suite. DEX → Java, Hermes → JavaScript. Cross-layer taint across the React Native bridge. CycloneDX SBOM + OpenVEX. CLI and MCP. Bytecode is not a se…
High-assurance and performant Rust-based parsing and serialization of binary data formats verified in Verus
SkillOpt with local AI is a text-space optimizer that trains reusable natural-language skills for frozen LLM agents through trajectory-driven edits, validation-gated updates, and deployable best_sk…
Library of Exploiting Last Frame Synchronization (also know as Single Packet Attack) on HTTP/3 - Manipulated version of quic-go lib
CyberGym is a large-scale, high-quality cybersecurity evaluation framework designed to rigorously assess the capabilities of AI agents on real-world vulnerability analysis tasks.
Python Command-Line Ghidra Binary Diffing Engine
A local tool for ingesting Windows Patch Tuesday CVEs, diffing patched binaries with Ghidriff and surfacing LLM-generated security analysis through a browser UI
Autonomous Windows POC developer from patchwatch diff reports
Self-hosted log hub for CLI LLM tools (Claude Code, Codex, Aider). Ingest sessions over HTTP or Redis Streams, full-text search via Meilisearch, rule-based alerts via webhook or email, and a standa…
Parseltongue is a DSL for systems which refuse to speak falsehood
DNS Proxy that is simple and fast with not so simple features. Focused on routed DNS forwarding, filtering and parental control.
Interactive PowerShell framework for testing WMI, COM, LOLBAS, and persistence techniques
Sift through code for embedded authorization logic. Extract it into Policy as Code.