Passive vuln scanner built as an mitmproxy addon — flags missing security headers, CORS misconfig, cookie flags, secrets in response bodies, and open redirects as traffic passes through. Started as a Chrome extension first; that fell apart under real load, so I rebuilt it as a proxy addon instead.

Modular scanner for the OAuth/OIDC flows that keep showing up broken in the wild — open redirect via redirect_uri, token leakage, PKCE bypass, implicit flow misuse, state parameter / CSRF.

In progress — extends the auth-tooling line above into JWT and session security specifically: alg confusion, weak signing secrets, missing claim validation, session fixation.