All builds

Hatfind combines passive subdomain discovery, scope filtering, live-host metadata, optional controlled crawling, historical URL collection, endpoint normalization, and confidence-scored IDOR candidate triage. It is observation-only: it does not bypass authentication, mutate data, replay requests as another user, or claim that an identifier proves a vulnerability.

AegisForge models inert prompt-injection, tool-misuse, and exfiltration attempts. Blue Team scores and classifies them, Policy Enforcer creates scoped controls, and Audit records the outcome in an append-only log. The demo is provider-free and designed to run without API keys, network services, shell access, or host-file access.

WavePlay uses real-time hand tracking to control media without a keyboard or mouse. Swipe gestures change tracks, a closed fist toggles playback, thumbs adjust volume, and an OK gesture toggles the overlay. It runs from the system tray and includes confidence feedback and a lightweight floating HUD.

The project converts camera frames to grayscale, applies contrast, brightness, and gamma adjustments, then maps pixels to character gradients for a terminal-only visual stream. It is a small computer-vision experiment with no GUI requirement.

HOLD uses React Native and Expo to guide breathing, check-ins, and grounding flows. Its distinctive interaction is an Android volume-button trigger implemented through a custom Expo native module and AccessibilityService. The repository is intentionally not linked here; this entry captures the product idea and the kind of human-centered mobile work behind it.