QuickJS, the Next Generation: a mighty JavaScript engine

HTTP(s) request filter for processes

DOMFortify turns on Trusted Types for a page and quietly takes over the browser's default policy, so that old, vulnerable HTML sinks get auto-sanitized before bad markup ever hits the DOM.

Vite+ is the unified toolchain and entry point for web development. It manages your runtime, package manager, and frontend toolchain in one place.

GitHub Action to configure npm/yarn/pnpm etc. with Takumi Guard registry

The Just JavaScript UI Framework

My CTF Writeups 💡

CTF challenges I created 🚩

CTF challenges I created

HTTP Request & Response Service, written in Python + Flask.

EYES WIDE OPEN

Monorepo for challenges, infra, and theming for UIUCTF 2025 (https://2025.uiuc.tf/)

ECMAScript Proposal, specs, and reference implementation for Inspector

A collection of client-side libraries with HTML injection vulnerabilities and DOM clobbering gadgets.

Public repository for b01lersCTF 2025 challenges.

Observable API proposal

CTF Challenges I made

👻 Ghostty is a fast, feature-rich, and cross-platform terminal emulator that uses platform-native UI and GPU acceleration.

Scan and fix React performance issues

Fun CTF (capture the flag) security challenges that I've created

🍦 Never use print() to debug again.

in preparation for the pyjail club

Awesome MXSS ??

challenges 2024 woohoo