🔐 Security & Privacy

Zig Signal Protocol library with C API for cross‑language use

Zero‑runtime, portable Signal crypto without Rust

CA-BPN: Cache-Aware Batch-Size Policy

Improves constant-time normalization

LeakGuard: FastAPI & Telegram bot for domain data‑leak checks

Combines multiple leak sources with a simple UI

XERA OSINT Framework automates passive web and dark‑web investigations

Integrates LLM, Tor, and search APIs for end‑to‑end OSINT

Deliberately vulnerable PHP app for OWASP security training

Hands‑on labs with graded difficulty and diff view

Airlock: deterministic egress gate for locked‑down LLM agents

Enforces single‑domain, fail‑closed browsing for AI agents

Vouchq – self‑hosted trust registry that pins AI tool definitions and detects drift

Ensures AI tools stay unchanged, flags tampering

Cloudflare Worker that validates OAuth redirect URIs

Ensures safe OAuth callbacks, prevents open redirects

Local-first Web3 repo scanner detecting malicious scripts and Solidity risks

Runs locally, no data upload, anchors proofs on-chain

Aegis IR: offline incident response tool for air‑gapped SOCs

Works without network, signs audit logs

OrchSec: runtime firewall that blocks unsafe AI agent actions

Enforces policies before any real-world effect

Interactive web lab visualizing AI watermark robustness

Client‑side simulation, no backend, shows watermark fragility

Kali Linux terminal emulator for Android, runs full Kali environment via proot

Real terminal app with C/C++ PTY engine, apt support, and sudo

Smart honeypot capturing attacker HTTP behavior with MITRE mapping

Full request logs, deterministic classification, live dashboard

Passive eBPF-powered LAN device fingerprinting and anomaly detection

Real-time device ID and anomaly alerts

Pure‑Go library for silent Azure AD token acquisition via Windows WAM

No CGO, direct WinRT calls

iOS VM toolchain for parsing, mutating, and patching Apple Device Trees

CLI utilities for device‑tree hacking in QEMU

AWS EC2 security scanner with multi‑threaded checks and compliance reports

Comprehensive, ready‑to‑run tool for EC2 hardening

Federated access control framework

Solves real-world access control challenges in federated environments, clearly defined use case, and tangible value.

A browser‑based hacking simulation game teaching Unix commands

Interactive terminal game for learning security basics

Lightweight SIEM for real-time log correlation and alerting

Ready‑to‑run SIEM with dashboard and built‑in rules

WireGuard routing helper scripts for policy‑based traffic splits

Automates nft set updates for selective VPN routing

GitHub Security Monitor – auto‑track CVEs and repo activity via Actions

Runs on GitHub Actions, no server needed

Security questionnaire copilot that seals answers to approved evidence

Streamlines enterprise deal processes by linking answers to verified sources

Enterprise WebSocket gateway with Rust threat detection

Combines Go routing with Rust scanning for secure websockets

C2Detector: DFIR tool that extracts C2 traffic from PCAP files

Detects Havoc/Nimplant C2, auto-decrypts payloads

Rust-based Windows PE protector with encryption and virtualization

Provides layered obfuscation and anti‑analysis for Windows binaries

Cloud security architecture designs

Enterprise-grade security

Compliance audit tool

Simplifies compliance

dmarc-inspector parses DMARC XML reports into readable tables

CLI turns DMARC aggregates into clear tables

ShopOSINT extracts merchant info from payment links silently

Automates OSINT on Stripe, SumUp, Revolut, Lydia

Lakebed proxy tool for Mac: route traffic via Lakebed with auto-deployment and Wi-Fi setup

Auto-deploys Lakebed capsules rotates traffic configures Wi-Fi proxy