Python CLI and agent plugin that audits whether an AI agent does the job it is supposed to do, using adversarial and operational tests.
A kernel-based root solution for Android devices, providing su and root access management via a kernel module and manager app.
Open-source, community-governed fork of HashiCorp Vault for storing, encrypting, and distributing secrets, certificates, and keys.
Scans repositories, filesystems, and chats for leaked credentials, then verifies whether each one is still live.
MCP server that exposes Ghidra's reverse engineering capabilities as 200+ tools for AI assistants, via a GUI plugin and headless server.
iOS app that permanently installs IPA files by exploiting a CoreTrust signature verification bug.
Web platform for monitoring, patching and compliance-scanning Linux server fleets via outbound-only agents.
General-purpose toolkit implementing TLS, DTLS, and QUIC protocols on top of a standalone cryptographic library and CLI.
GUI, API and system management backend for the OPNsense open source firewall and routing platform based on FreeBSD.
A C library implementing X.509 certificate handling and the TLS and DTLS protocols, with a small footprint for embedded systems.
Reusable, community-audited Solidity smart contract library with ERC20/ERC721 implementations and role-based access control.
Swift implementation of a large part of Apple's CryptoKit API for Linux and ARM64 Windows, backed by vendored BoringSSL and XKCP.