Application & program bug hunter, focused on offensive security, web application security and vulnerability research. I like small, sharp tools that do one security job well.
| Tool | What it does |
|---|---|
| kev-watcher | Monitor the CISA Known Exploited Vulnerabilities catalog for the vendors and products in your stack |
| secheaders | Audit a website's HTTP security headers, cookie flags and CORS policy, with a score and grade |
| jsrecon | Extract endpoints and likely leaked secrets from JavaScript files (offline, parses files only) |
| osv-audit | Check your dependencies against the OSV.dev vulnerability database and see which versions fix them |
Each is a single file, Python standard library only, tested, and MIT licensed.
Offensive security · bug bounty · web app security · reverse engineering · security automation · AI in cybersecurity
I build with AI-assisted development and review and test every line. I'm interested in how AI changes security research without replacing the fundamentals.
Feedback, issues and pull requests on any of the tools are always welcome.