Sandboxing tool powered by Landlock

ip to location database by ASN, GeoFeed, Whois, iptoasn.com, db-ip lite, GeoLite2

Thunderbolt/USB4 debugging tools

OWASP Coraza middleware for Caddy. It provides Web Application Firewall capabilities

A tiny but valid `init` for containers

Context bomb strings

A Patch for GIMP 3+ for Photoshop Users

Language-agnostic SLSA provenance generation for Github Actions

Fast, developer-friendly JS/TS dependency vulnerability scanner with local lockfile scanning, OSV matching, direct vs transitive visibility, --fix, JSON output, and practical remediation guidance.

Publications from Calif

Low-level unprivileged sandboxing tool used by Flatpak and similar projects

A lightweight process isolation tool that utilizes Linux namespaces, cgroups, rlimits and seccomp-bpf syscall filters, leveraging the Kafel BPF language for enhanced security.

macOS CLI for OCR and searchable PDFs using Apple's Vision framework

AI-powered reverse engineering assistant that bridges IDA Pro with language models through MCP.

Coreutils for Windows: Installer & Packaging

The AI coding agent that runs on stolen Chipotle compute 🌯 Fork of OpenCode with Pepper AI as default model. Community project to add providers from Home Depot, Lowes, Target, Starbucks & more.

hwpjs

Open source DocuSign alternative. Create, fill, and sign digital documents ✍️

pyHanko: sign and stamp PDF files

Steal SSH host private keys and /etc/shadow via the ptrace_may_access mm-NULL bypass + pidfd_getfd. Pre-31e62c2ebbfd kernels.

poc it like it's hot

Encyclopedia that hallucinates articles on the fly

An archive of monoline vector fonts, and p5.js code to render them.

[deprecated] Yet another frida based iOS dumpdecrypted. Also decrypts app extensions

iOS IPA Decrypter for TrollStore

LLM inference in C/C++

macOS menu bar app that tells you, in plain English, what each USB-C cable plugged into your Mac can actually do

Copy Fail (CVE-2026-31431): 9-year-old Linux kernel LPE found by Theori's Xint Code