02 / Open source

Tools should remove
the boring distance.

I build practical tooling around the seams of vulnerability research: code understanding, static-analysis triage, fuzzing, and repeatable reverse engineering.

github.com/vcth4nh
01

IdeSense

Active · 2026

An MCP server that gives coding agents access to JetBrains indexing, navigation, diagnostics, and refactoring instead of making them reason from raw files alone.

IdeSense connects AI coding agents to the semantic model already maintained by JetBrains IDEs. It supports the wider IntelliJ platform family, including IntelliJ IDEA, PyCharm, WebStorm, GoLand, PhpStorm, and RustRover.

KotlinJetBrains PlatformMCP
Creator · maintainer
02

decaf

Active · 2026

A sources-first Java decompiler CLI with five engines, automatic fallback, and support for nested archives.

decaf starts with published Maven sources when they exist, then falls back across multiple decompilation engines. It is designed as one predictable interface for the messy first step of Java analysis.

PythonJavaCLI
Creator · maintainer

Build principles

01

Use the semantic context already available.

02

Keep the human in the verification loop.

03

Prefer small interfaces over opaque automation.

Working on an adjacent problem?

Compare notes