Welcome to the page where you will find each trick/technique/whatever I have learnt in CTFs, real life apps, and reading researches and news.

Meshery, the cloud native manager

Damn Vulnerable GraphQL Application is an intentionally vulnerable GraphQL service implementation designed for learning about and practising GraphQL Security.

AD Miner is an Active Directory audit tool that leverages cypher queries to crunch data from the #Bloodhound graph database to uncover security weaknesses

A Chrome Extension to track postMessage usage (url, domain and stack) both by logging using CORS and also visually as an extension-icon

GitHub Actions Goat: Deliberately Vulnerable GitHub Actions CI/CD Environment

Useful scripts for WinDbg using the debugger data model

Phone specifications API

A Gemini CLI extension that allows you to use the Gemini CLI to orchestrate the Jules asynchronous agent to perform coding tasks like bug fixing, refactoring, and dependency updates.

A React Based Kubernetes YAML Manifest Sanity Checker

it's a vulnerable app, for POC and CTF purposes ;-)