High performance self-hosted photo and video management solution.

darktable is an open source photography workflow application and raw developer

How GitHub Actions workflows can be hacked

Cloud-native high-performance edge/middle/service proxy

EPG/m3u creator for timeshifted content on tv7

Reverse proxies cheatsheet

JavaScript syntax tree transformer, nondestructive pretty-printer, and automatic source map generator

💥 Generate code at build-time

Secure-by-default HTTP servers in Go.

The library for web and native user interfaces.

Raspberry Pi Kiosk Screen

Raspberry Pi Zero W based barcode scanner

Understand and mitigate software-observable side-channels

"Can I take over XYZ?" — a list of services and how to claim (sub)domains with dangling DNS records.

Draft proposal for SES (Secure EcmaScript)

GTFOBins is a curated list of Unix-like executables that can be used to bypass local security restrictions in misconfigured systems.

"The mother of all demo apps" — Exemplary fullstack Medium.com clone powered by React, Angular, Node, Django, and many more

A book series (2 published editions) on the JS language.

Security design pattern support for Node.js

Simple web component that uses the DOMPurify library to sanitize it's content.

A sandboxed JavaScript interpreter in JavaScript.

BoardGameGeek application for Android (unofficial)

A collection of JavaScript engine CVEs with PoCs

A repository for learning various heap exploitation techniques.

A collection of PHP backdoors. For educational or testing purposes only.

GEF (GDB Enhanced Features) - a modern experience for GDB with advanced debugging capabilities for exploit devs & reverse engineers on Linux