dapslegend 路 X
Application security 路 Smart contract review 路 Secure systems in Go, Rust, Python, Solidity
| Work | Deliverable |
|---|---|
| Web2 appsec | Authz, injection, session, access control. Evidence in the response body. |
| Web3 audit | Access control, accounting, upgrades, oracles. Fork-measured findings. |
| Secure build | Hardened services, Docker isolation, least privilege, regression checks. |
| PoC / report | Minimal reproducible case. Fix the class, not the sample. |
Authorized testing only. I do not ship stealers, phishing kits, or broadcast exploits.
| Repo | What it is |
|---|---|
| pentagi-public | Public PentAGI cut. Flow runner. Web3 audit track. Aggressive hunts off. |
| poc | Lab PoCs of real bug classes. |
| runity | Rust vanity address generator. Local only. |
| MicrosoftApp | OAuth session-theft class notes. Defensive. |
Go Rust Python Solidity TypeScript Docker PostgreSQL Burp Foundry Linux
GitHub: dapslegend
X: 0xd4ps
Open to full-time, contract, and audit retainers.