Python CLI and agent plugin that audits whether an AI agent does the job it is supposed to do, using adversarial and operational tests.
A coding-agent skill that runs multi-phase security audits with isolated agents and independently verified, machine-readable findings.
Open-source VPN app for circumventing censorship and improving privacy and speed across desktop and mobile platforms.
Zero-trust runtime that sandboxes and snapshots large numbers of untrusted agent workloads on standard Kubernetes.
A collection of security testing wordlists covering usernames, passwords, URLs, fuzzing payloads, web shells, and sensitive data patterns.
Claude Code skill that decompiles Android APK/XAPK/JAR/AAR files and extracts the HTTP APIs an app uses.
Extensible HTTP/1-2-3 web server written in Go that obtains and renews TLS certificates automatically by default.
Kernel-based root solution for Android devices, forked from KernelSU with additional features and fixes.
Android app that exploits CVE-2026-43499 to gain temporary root on supported kernels and load KernelSU.
MCP server that exposes Ghidra's reverse engineering capabilities as 200+ tools for AI assistants, via a GUI plugin and headless server.
Kernel-based root solution for Android devices, with a Kernel Patch Module (KPM) system for loadable kernel extensions.
Containerized full-stack mail server bundling Postfix, Dovecot, Rspamd, and ClamAV for SMTP, IMAP, and POP3 with config-file-based setup.
Modified kstuff-lite PS4 kernel-exploit toolkit (1.11-opt) that optimizes UELF/KELF transitions, FPU/CR0 handling, and adds opt-in diagnostics.
Reverse proxy that adds OAuth2 and OIDC authentication in front of web applications, supporting many identity providers.