Skip to content
View chawdamrunal's full-sized avatar
🏠
Working from home
🏠
Working from home
19 followers · 2 following

Achievements

Achievement: StarstruckAchievement: YOLOAchievement: QuickdrawAchievement: Pull Shark

Achievements

Achievement: StarstruckAchievement: YOLOAchievement: QuickdrawAchievement: Pull Shark

Block or report chawdamrunal

Block user

Prevent this user from interacting with your repositories and sending you notifications. Learn more about blocking users.

You must be logged in to block users.

Maximum 250 characters. Please don’t include any personal information such as legal names or email addresses. Markdown is supported. This note will only be visible to you.
Report abuse

Contact GitHub support about this user’s behavior. Learn more about reporting abuse.

Report abuse
chawdamrunal/README.md

Typing SVG


$ whois mrunal
  Security researcher. Breaking things responsibly since day one.

$ nslookup mrunal.targets
  Web Apps . Android . iOS . macOS . Web3/EVM

$ cat philosophy.txt
  Every secure system is one overlooked edge case away from not being.

Arsenal

Languages & Platforms



Infrastructure & Tools



Security Toolkit

Burp Suite Frida Ghidra Wireshark


Featured Project

Assay — MCP & Claude Code security scanner

Open-source scanner for the AI dev stack. It threat-models Claude Code plugins, MCP servers, hooks, skills & connectors with an LLM — not regex — to catch prompt injection, MCP tool poisoning, and credential exfiltration before you trust them.

chawdamrunal/assay   MCP security docs


Stats



github-snake

LinkedIn X


"Every lock was designed by someone who thought it was unbreakable."




Pinned Loading

  1. JWTLens JWTLens Public

    JWTLens - Burp Suite extension for automated JWT security testing. 62 checks: passive scanning, algorithm confusion, signature bypass, KID injection, weak secret brute force, and a built-in JWT For…

    Java 55 9