
aigate
AI Prompt Secret Scanner: local proxy and Claude Code hook that blocks secrets before they reach AI APIs

AI Prompt Secret Scanner: local proxy and Claude Code hook that blocks secrets before they reach AI APIs

A testing framework to identify and demonstrate deserialization vulnerabilities in LangChain Core (<0.3.81). Educational use only

A Rust CLI tool that recursively discovers Git repositories, captures state changes, generates diffs, extracts code elements with full snippets, and…

CVE For Pterodactyl (For Study and Education)

Running OWASP cve-lite-cli against the pi monorepo: scan journey and key finding (vitest CVE-2026-47429).

Detects and auto-fixes hardcoded secrets in Python repos — refuses when the fix could break your code

Zero-dependency CLI scanner for npm/PyPI supply chain compromises. Detects compromised packages in lockfiles and system-level IOCs from attacks like…

A comprehensive Python exploitation framework for testing and demonstrating CVE-2025-3248, a critical unauthenticated remote code execution…

Detect-only scanner for CVE-2026-42945 (NGINX Rift), a heap overflow in ngx_http_rewrite_module. Version detection + nginx.conf pattern analysis.…

Bash script to detect CVE-2025-55182 (React2Shell) and credential exposure in Next.js projects. Zero dependencies.

GitHub Action that scans ML model files for malicious code and security vulnerabilities

This technical research and review is for educational purposes on public code and constitutes Fair Dealing under the Copyright Act (Canada).

Technical deep dive into Apache Log4j2 JNDI injection vulnerability. Features static code analysis, patch comparison, attack vectors (LDAP/RMI/DNS),…

Piwigo 13.8.0 and below is vulnerable to SQL Injection in the parameters max_level and min_register. These parameters are used in ws_user_gerList…

Nosey Parker is a command-line tool that finds secrets and sensitive information in textual data and Git history.

My experiments in weaponizing Nim (https://nim-lang.org/)

Mind-Maps of Several Things

Plugin for JADX to integrate MCP server