Security & Supply Chain

A Claude Code wrapper with agents, commands, memory, and proxy visibility, built to move from recon to report without skipping the evidence.

A community tracker turns distro statements into a source-linked map of who will comply with OS-level age verification laws, and who will not.

A tiny Python tool that fingerprints what an embedded assistant can see, what it can do, and whether its context layer leaks data across permission boundaries.

A zero-dependency race-condition tester for bug bounty work, built around one idea that matters: synchronize every request, then let the server blink first.

A bare-metal Solidity project that looks simple, then reveals why on-chain randomness, access control, secret handling, and deployment are harder than they seem.

Self-Olympics uses passport-backed zero-knowledge proofs, a Farcaster Frame, and a PostgreSQL nullifier ledger to make one-human, one-vote ranking feel practical.

A tiny local lab shows how an allowlisted image URL, a trusted redirect, and BMP passthrough combine into a much nastier SSRF than a blocked request.

Seven phases, graceful degradation, and a practical way to map attack surface without a heavyweight platform.

Two requirement styles, one update policy, and raw bot logs reveal how Dependabot decides what deserves a pull request.

A Solidity implementation of ERC-5564 and ERC-6538 that makes stealth addresses usable by shrinking wallet scanning to a tiny filter, then doing the heavy cryptography only when a match looks real.

zen-internals-node turns eval() and new Function() into a policy check, so Node.js code can be stopped at the instant it tries to become executable.

It turns model calls, Stripe revenue, and cached responses into one question: which customers and features actually pay for themselves?

How a solo developer built a Plaid-integrated financial widget without storing a single byte of user data on their own servers.

How a minimalist Python script abandons external libraries to automate the discovery of complex logic flaws in modern GraphQL APIs.

Why deterministic middleware, not better system prompts, is the only way to safely give autonomous agents access to your production database.

How a repository with zero lines of code acts as the controlled variable for testing automated GitHub security scanners.

Why a specialized authentication tool abandoned the npm ecosystem to build a zero-dependency fortress in pure Node.js.

How a NestJS backend and a client-side browser extension bypass platform gatekeepers to mathematically prove video authenticity.

How an open-source vishing simulator uses real-time voice cloning and Neo4j to autonomously map human vulnerabilities.

How a Kubernetes-native orchestration platform uses strict agent hierarchies and ephemeral sandboxes to safely unleash AI on offensive security tasks.

How a zero-dependency C# library uses stream concatenation and JSON comments to bypass the complexity of JWS.

How claude-bug-bounty bridges the gap between raw network packets and human-level vulnerability reasoning.

How invisible Unicode "Sneaky Bits" turn benign documents into high-privilege AI exploits.

By abandoning the automated scraper in favor of a generated "Query Factory," this zero-dependency tool turns Google's bot detection into a non-issue.

How oauth-security-tester audits complex authentication chains using nothing but the Python Standard Library.

Moving beyond status codes to detect cross-tenant data leakage through automated session comparison.

How a security-first architecture and signature-based prompting are turning untrusted LLMs into reliable, always-on digital employees.

How a Trust Zone proxy and a 34k-line audit-first codebase solved the security crisis that nearly killed the autonomous assistant.

Moving beyond "be careful" prompts to a zero-trust architecture for your terminal.

By offloading stealth metadata to the Vara Network, 0xTrace solves the "Announcement Problem" that has plagued Ethereum’s native privacy standards.

How hwong103/partial uses granular trigger deactivation to survive the complexity of enterprise-scale automation.

Beyond the basic JWT tutorial. How to implement token rotation, granular rate limiting, and database-side session defense in Node.js.

How a tiny C# utility exposes the massive trust gap in the Windows Action Center by “borrowing” the credibility of your most trusted apps.

Moving past generic security checklists to autonomous, repo-native vulnerability research.

How a hybrid of Sepolia events and IPFS CIDs creates a verifiable, time-bound audit trail for sensitive documents without the gas-heavy overhead of on-chain storage.