Projects

Projects

Open-source tools, research utilities, and security projects built for the practitioner community.

Featured Project

ZapLab

lichti/zaplab

Featured Security Research WhatsApp Open Source

ZapLab is a security research laboratory dedicated to understanding WhatsApp's attack surface, trust model, and vulnerability landscape. The project documents findings from independent security research into one of the world's most widely used messaging platforms.

The research covers message manipulation techniques, identity-based attack vectors, trust exploitation patterns, and behavioral vulnerabilities: the gaps between how users believe the platform works and how it actually behaves under adversarial conditions.

ZapLab serves both as a research repository and an educational resource for security practitioners, developers, and organizations that rely on WhatsApp for business communication.

Focus

Messaging Security

Platform

WhatsApp

Type

Research Lab

Tools & research

An open-source CNAPP built to democratize cloud workload protection.

PythonCNAPPCloud
GitHub

Automates provisioning of LDAP users and groups into AWS SSO via SCIM, eliminating manual access creation.

AWSSCIMAutomation
GitHub

Syncs Google Directory users and groups into AWS IAM Identity Center via SCIM, keeping cloud identities aligned with the corporate directory.

AWSSCIMGoogle Workspace
GitHub

Research using Shodan to locate misconfigured, vulnerable Portainer instances. (CVE-2018-19367)

PythonShodanResearch
GitHub

Open Source Contributions

Beyond the projects above, I contribute to various open-source security tools and utilities. Visit my GitHub profile to explore all projects, scripts, and contributions.

github.com/lichti