GV

GeezerVison

The World Wide Web, restored to 800 pixels of glory.

Home|About|Gaming cabinet|Archives|How it works|Starter sites

On this site

  • Sign in
  • ActionsCI/CD and automation
  • CodespacesCloud development environments
  • All Features
  • Documentation
  • Training
  • Certifications
  • Build with Copilot
  • Customize Copilot
  • Integrations
  • Trending repos
  • GitHub Sponsors
  • Developer articles
  • Enterprises

This view

  • Original page
  • New address

GeezerVison is showing github.com โ€” lirantal - Overview

@lirantal lirantal Follow
More
  • Overview
  • Repositories
  • Projects
  • Packages
  • Stars
@lirantal
lirantal
Follow
View lirantal's full-sized avatar
๐Ÿ’Ÿ
AI Security, Hacking Agents, MCPs and Socially Engineering LLMs

Liran Tal lirantal

๐Ÿ’Ÿ
AI Security, Hacking Agents, MCPs and Socially Engineering LLMs
Follow
๐Ÿง  Socially Engineering LLMs ๐Ÿค– Hacking AI Agents ๐Ÿฆ„ Node.js Secure Coding ๐ŸŒŸ @github Star ๐Ÿ… @Openjs Pathfinder award 4 Security ๐Ÿฅ‘ DevRel @snyksec
2.6k followers ยท 1.2k following
  • @snyk
  • Tel Aviv, Israel
  • 13:04 (UTC +02:00)
  • https://www.nodejs-security.com/
  • @liran_tal
  • in/talliran
  • https://lirantal.com/

Achievements

Achievement: Pair Extraordinairex4Achievement: Starstruckx4Achievement: YOLOAchievement: Pull Sharkx4Achievement: QuickdrawAchievement: Arctic Code Vault Contributor

Achievements

Achievement: Pair Extraordinairex4Achievement: Starstruckx4Achievement: YOLOAchievement: Pull Sharkx4Achievement: QuickdrawAchievement: Arctic Code Vault Contributor

Highlights

  • Developer Program Member
  • 43 security advisory credits

Organizations

@meanjs @nodejs @snyk @jsheroes @verdaccio @TheSecureDeveloper @snyk-labs @create-node @community-snyk
More
  • Overview
  • Repositories
  • Projects
  • Packages
  • Stars
lirantal/README.md

Hi, I'm Liran ๐Ÿ‘‹

I created a series of comprehensive vulnerable code deep-dive training books on Secure Coding in Node.js to help developers master Node.js security with hands-on vulnerability review and remediation walkthroughs

Node.js Secure Coding: Defending Against Command Injection Vulnerabilities
Node.js Secure Coding: Defending Against Command Injection Vulnerabilities
Node.js Secure Coding: Prevention and Exploitation of Path Traversal Vulnerabilities
Node.js Secure Coding: Prevention and Exploitation of Path Traversal Vulnerabilities
Mitigate and Weaponize Code Injection Vulnerabilities
Node.js Secure Coding: Mitigate and Weaponize Code Injection Vulnerabilities

Software Engineer ยท Web Security Activist ยท Author

lirantal on GitRanks: stars rank #1,197 ยท top 0.1% lirantal on GitRanks: stars rank #6 in Israel ยท top 0.5%

A GitHub Star, world-wide recognized for championing open source software and actively working within communities to inspire and lift other humans. Liran also received the OpenJS Foundation's Pathfinder for Security for his work on Node.js security. A JavaScript & Node.js software developer, building web applications and command-line tools. A web security activist , engaging in security research, software supply chain security, and regular contributor and project lead to OWASP Foundation projects. An avid member of the Node.js Foundation ecosystem security working group, dedicated to advancing Node.js security awareness and skill-set in the open source community. Developer Advocate at Snyk.

X (formerly Twitter) Follow


Awarded:

  • โญ๏ธ 2023 GitHub Star
  • ๐Ÿ† 2022 OpenJS Foundation's Pathfinder Award for Security
  • โญ๏ธ 2022 GitHub Star
  • โญ๏ธ 2021 GitHub Star

Web Security Activism

  • Author of Node.js Secure Coding: Defending Against Command Injection Vulnerabilities
  • Author of Node.js Secure Coding: Prevention and Exploitation of Path Traversal Vulnerabilities
  • Author of Node.js Secure Coding: Mitigate and Weaponize Code Injection Vulnerabilities
  • Author of npm Security Cheat Sheet
  • Author of Node.js Docker Security Cheat Sheet
  • Member of Node.js Foundation's Ecosystem Security working group
  • OWASP Project Member of NodeGoat
  • OWASP Project Lead for CWE Tool and CWE SDK

Blog & other resources

  • Liran Tal blog

  • Node.js Security Blog

  • Liran's articles on the Snyk blog

    lirantal on GitRanks: profile

Pinned Loading

  1. npq npq Public

    safely install npm packages by auditing them pre-install stage

    JavaScript 1.8k 43

  2. awesome-mcp-best-practices awesome-mcp-best-practices Public

    Build Awesome MCPs with Awesome Best Practices for MCP Servers and MCP Clients

    87 8

  3. ls-mcp ls-mcp Public

    List MCP Server configurations in your system used by AI applications like Cursor, Claude Desktop, VS Code and others

    TypeScript 84 9

  4. mcp-server-nodejs-api-docs mcp-server-nodejs-api-docs Public

    MCP Server for Node.js API documentation

    TypeScript 11 6

  5. agent-rules agent-rules Public

    Rules and instructions for agentic coding tools like Cursor, Claude CLI, Gemini CLI, Qodo, Cline and more

    TypeScript 65 5

  6. npm-security-best-practices npm-security-best-practices Public

    Collection of npm package manager Security Best Practices

    1.3k 42

Something went wrong, please refresh the page to try again.
If the problem persists, check the GitHub status page or contact support.

Uh oh!

There was an error while loading. Please reload this page.

You are visitor 01402503 โ€” GeezerVison does not store the pages you look up.
Best viewed with Netscape Navigator 4.7 or Internet Explorer 6 at 800ร—600. No cookies required.