I run a personal fork of this project and upstream proven changes from it: the hardware tab now surfaces Intel and Metal device details.

Performance work on the SYCL (Intel GPU) backend: coalesced softmax memory loads, plus GLU, rms_norm and ssm_conv fusions for faster token generation.

The platform that runs null.co.in, India’s open security community. Helped with menu and landing-page work, a persistent event-listing sort bug, CI and dependency upgrades, and the null.community domain migration.

Security cleanup of the build chain: replaced a vulnerable favicon-generator npm plugin, added a CI build workflow, and dependency housekeeping.

Helped expand the check catalogue: LXC container detection, adm group listing, SELinux presence, loaded kernel modules, and cat|grep optimisations.

Helped during the community sprint: CLI modernised from optparse to argparse, master-script detection fixed, the website’s CNAME restored, and breaking changes stabilised.

Found while building my Vulnerable Docker VM: PHP Meterpreter payloads failed against Suhosin-hardened hosts. Helped fix it across the framework and payloads repos; the investigation is documented in Fun with PHP Meterpreter.

The payloads half of the same fix: replaced the deprecated create_function() call so the PHP webshell payload works on modern PHP, with or without Suhosin.

Added OkHttp’s CertificatePinner to the module’s SSL pinning bypass list, tested against OkHttp 2.5.

Dependency upgrades for Google’s bytecode viewer, taken to the highest versions that still compile cleanly.

Early contributions to the standard: preface fixes and a document-generation fix so tables span the page in the DOCX release.

Documentation-infrastructure fixes from validating my local setup: corrected build instructions, fixed CI link-check failures, aligned local checks with GitHub Actions, and added Visual Studio App Center to the tools reference.

Added a CLI entry point so the APK verification gem can be driven directly with an APK path.

Added a Gradle wrapper so the platform builds without a local Gradle install, and removed committed build output.

Certificate details wrapped in <pre> tags so the cert info in reports keeps its spacing.

Slimmed the pentest Docker image: shallow clones, no redundant files.

Documented the non-obvious build steps, then added URL encoding/decoding as a utility.

Docker build restructure: pinned Python 2.7.15 and kept the .git folder out of the shipped image.

Reworked the Linux build to ship a desktop icon and menu entry.

Added the missing configparser dependency and installs stopped breaking.

Switched the plugin’s JavaScript to HTTPS so the redirect widget stops throwing mixed-content warnings.

Cask updates across 2015 and 2016: security tooling (Tor, Charles Proxy, OWASP ZAP, Hopper Disassembler) and Chromium bumps. The Charles fix moved the dependency to native Java after Apple abandoned theirs.

Installer and setup fixes from my early-adopter years: correct tool paths on Kali, a path-independent setup script, wget retry limits, and installer reordering so OWTF installs on any distro, not just Kali.

Disabled rdoc/ri generation during gem install; same result, less time and disk.