Skip to content
View tejgokani's full-sized avatar
🎯
Focusing
🎯
Focusing
14 followers · 9 following

Achievements

Achievement: Pull Sharkx2Achievement: QuickdrawAchievement: YOLOAchievement: Pair Extraordinaire

Achievements

Achievement: Pull Sharkx2Achievement: QuickdrawAchievement: YOLOAchievement: Pair Extraordinaire

Block or report tejgokani

Block user

Prevent this user from interacting with your repositories and sending you notifications. Learn more about blocking users.

You must be logged in to block users.

Content in all repositories owned by your account will be closed.
Maximum 250 characters. Please don’t include any personal information such as legal names or email addresses. Markdown is supported. This note will only be visible to you.
Report abuse

Contact GitHub support about this user’s behavior. Learn more about reporting abuse.

Report abuse
tejgokani/README.md
Tej Gokani: security tooling in Rust, Go and C, fixes merged into nuclei, falco, crowdsec and express

I build security tools and send fixes upstream. Most of what I write is small, sharp and local-first: scanners, detectors and terminal consoles that do one job and show their work. When I find a bug in something I use, I patch it rather than complain about it.

Merged upstream

Fixes I've landed in other people's projects. This table refreshes itself daily.

Project Fix Merged
falcosecurity/falco fix(userspace/engine): backtrack in matches_wildcard 2026-09-04
projectdiscovery/depx fix(output): neutralize CSV formula injection in audit export 2026-06-19
expressjs/express fix: replace deprecated trimRight() with trimEnd() 2026-06-16
projectdiscovery/nuclei fix(templates): reject unknown fields when loading JSON templates 2026-06-08
crowdsecurity/crowdsec fix(docker): bouncer name strips wrong field from Docker secrets path 2026-05-31
projectdiscovery/nuclei fix(telnetmini): prevent slice-bounds panic in ParseNTLMResponse on truncated NTLM challenge 2026-05-25
koajs/koa fix: request.length overflows on Content-Length > 2GB 2026-05-21

Building

remotectl: control your laptop from your phone, end-to-end encrypted redoubt: kernel-module rootkit detector for Linux and macOS
MYCROFT: terminal-native pentest engagement console ShipCheck: post-session audit for AI coding agents
TermiBase: terminal SQL playground that visualizes query execution winstonOSINT: open-source OSINT tracker on a live map

Activity

Generated from the GitHub API every day, with no third-party widgets.

Contribution radar: a year of GitHub activity drawn as rings, one per weekday, with streak and merge stats

Terminal log of my most recent commits and merged pull requests

Toolbox

Rust, Go, C, Python, TypeScript, Kotlin, React, Next.js, Node.js, PostgreSQL, Docker, Linux, Cloudflare

Challenge

If you read security profiles for fun, here's a two-stage one. Solve it and say hi.

~/.hidden  (2 stages, no tools needed) 
c3RhZ2UgMjogdGhlIGtleSBoaWRlcyBpbiB0aGUgcmF3IHJlYWRtZS4geG9yIGl0LCByZXBlYXRpbmcgdGhlIGtleS4KMTMwZDA1MDgwMjA1MGMxOTNhMTQwNzFhMDExNzA5MzYwNzE2MzgwOTMwMDAxZjA1MDUwMjE4NDc1MjU1NTMwZDAzMWM0ZTAzMDgxZDAxMTc1NDA1MWQ0MDQ1MTQwOTE2NTMxYzA1NTM0ZTExMDIwMjAyMTQxYjA3MDgwMDBjMjcwZjAyMTIxZDAwNDcwZDBhMGE=

Pinned Loading

  1. TermiBase TermiBase Public

    TermiBase — a terminal-native SQL playground that visualizes how queries are parsed, planned, and executed, built to teach DBMS internals through hands-on interaction

    Python 6

  2. ShipCheck ShipCheck Public

    Post-session audit tool for AI coding agents. Cost + heatmap + security scan. Zero API calls.

    Go 2 1

  3. sqlsmith sqlsmith Public

    The simplest way to turn JavaScript objects into production-ready SQL schemas and migration files.

    JavaScript 1

  4. thekairojs/kairo.js thekairojs/kairo.js Public

    Kairo is a next-generation TypeScript backend framework where security is the runtime itself - not middleware. Built on uWebSockets.js, it uses entropy scoring, taint tracking, intent-aware routing…

    TypeScript 3