4. Security & Compliance

Guides on bypassing HTML sanitization filters to execute JavaScript payloads, targeting XSS filter evasion for security testing and CTF challenges.

Guides creation of self-signed SSL/TLS certificates via OpenSSL, including key generation, certificate creation, and verification scripts.

Recovers passwords and sensitive data from disk images, deleted files, and binary data in digital forensic investigations.

Guides extraction of secrets from vulnerable executables via binary analysis and reverse engineering for CTFs and authorized security testing.

Guides security professionals in bypassing HTML sanitization filters to test for XSS vulnerabilities in web applications.

Guides removal of API keys, tokens, and credentials from Git repositories to prevent security breaches and ensure compliance.

Guides reverse engineering of compiled binaries to recreate source code with byte-for-byte accuracy, focusing on algorithm extraction and behavioral replication.

Detects and analyzes security vulnerabilities, dangerous APIs, and error-prone configurations across codebases.

Builds deep architectural context for security audits, codebase understanding, and vulnerability analysis through trust boundary mapping.

Manages test data generation and ensures privacy compliance with GDPR and CCPA, handling PII for realistic and legal testing scenarios.

Provides regulatory compliance testing for GDPR, CCPA, HIPAA, SOC2, and PCI-DSS to ensure legal adherence and audit readiness.

Validates WCAG 2.2 compliance, screen reader compatibility, and inclusive design to ensure legal adherence for accessible applications.

Tests security vulnerabilities using OWASP principles and security testing techniques for audits, authentication, and authorization.

Hardens input validation processes to prevent injection attacks and logic abuse through canonicalization and safe parsing techniques.

Provides lightweight, repeatable threat modeling for features/services with prioritized mitigation strategies.

Provides a standardized checklist to validate security fixes, ensuring effectiveness and absence of behavioral regressions.

Reviews AI/LLM outputs to prevent over-trust, injection attacks, and unsafe automation, ensuring secure deployment.

Automates vulnerability triage for software dependencies by assessing reachability, impact, and generating safe remediation plans.

Conducts systematic security code reviews to identify vulnerabilities and provide actionable remediation steps.

Prevents secret and PII leaks in logs through automated redaction and security hygiene defaults.

Reviews authentication and authorization flows (sessions, tokens, RBAC/ABAC) and provides actionable security fix guidance.

Reviews application security by implementing best practices including CSP, XSS prevention, input validation, and secrets management.

Audits websites for WCAG compliance, identifies accessibility issues, and provides fixes for inclusive design implementation.

Ensures Pine Scripts meet TradingView's House Rules and documentation standards for community library publication.