Skip to content

Instantly share code, notes, and snippets.

View VoidChecksum's full-sized avatar
🔬
Reverse Engineering / Exploit Research / Security Audits

VoidChecksum VoidChecksum

🔬
Reverse Engineering / Exploit Research / Security Audits
28 followers · 115 following
View GitHub Profile
@VoidChecksum
VoidChecksum / claude-code-employee-features.md
Created April 7, 2026 12:43
Claude Code v2.1.92 — Hidden Employee & Internal Features (CLAUBBIT, XAA/SEP-990, CCR BYOC, SWE-bench, VCR, staging OAuth, and 40+ undocumented env vars)

Claude Code v2.1.92 — Hidden Employee & Internal Features

All findings extracted via static analysis of cli.js (13.2MB esbuild bundle).

1. Employee Identity Flags

CLAUBBIT=1

  • Skips TrustDialog on startup — employees bypass the trust prompt
@VoidChecksum
VoidChecksum / claude-code-re-FINAL.md
Created April 7, 2026 12:36
Claude Code v2.1.92 — Deep Reverse Engineering Report (telemetry, endpoints, hidden features, native binaries)

Claude Code v2.1.92 — Complete Reverse Engineering Report

Static + Multi-Agent Analysis | 2026-04-07

EXECUTIVE SUMMARY

cli.js is a 13.2MB single-file esbuild bundle running as Node.js ESM. It bundles:

  • Full Anthropic SDK, AWS SDK v3 (22 packages), Azure MSAL v15, Google Auth Library
  • gRPC stack (for OTEL), React 18 + Ink (terminal UI), Zod, Axios 1.13.6
@VoidChecksum
VoidChecksum / 00-overview.md
Last active April 4, 2026 19:18
VOID Patcher — DIY guide: AI CLI tool RE & safety mechanism removal (R2 offsets, signatures, patches)

VOID Patcher — AI CLI Tool Safety Removal Suite

Python Radare2 Version Tools Mechanisms Status CI License

@VoidChecksum
VoidChecksum / void-all-tools-flags.md
Created April 2, 2026 00:17
OpenCode, Codex CLI, GSD-2, OMC, OMX, OMCO — Complete feature/config/flag maps (binary + source extraction)

AI CLI Tools — Complete Feature/Config/Flag Maps

Covers: OpenCode · Codex CLI · GSD-2 · oh-my-copilot (OMC) · oh-my-codex (OMX) · oh-my-claudecode (OMCO)
Extracted: 2025-07-20
Method: Binary analysis, source grep, README/package.json parsing

OpenCode (binary at ~/.local/share/mise/installs/node/25.8.0/lib/node_modules/opencode-ai/)

@VoidChecksum
VoidChecksum / void-claude-code-flags.md
Last active April 12, 2026 04:51
Claude Code v2.1.87 — Complete ENV vars, feature flags, system prompt map, internal constants (binary extraction)

Claude Code v2.1.87 — Complete Environment Variables & Feature Flags

Binary: Bun-compiled ELF at ~/.local/share/claude/versions/2.1.87
Extracted: 2026-04-02
Method: Binary string extraction + regex analysis
Stats: 175 CLAUDE_CODE_* vars · 32 ANTHROPIC_* vars · 787 tengu_* feature flags

CLAUDE_CODE_* Environment Variables (175 total)

@VoidChecksum
VoidChecksum / Claude Runtime Safety
Created March 25, 2026 12:15
Claude Code Runtime Safety Map Analysis
# Claude Code v2.1.83 — Complete Runtime Safety Map
# Extracted from Bun-compiled ELF binary
# 13 distinct safety layers identified
---
## LAYER 1: HARDCODED SAFETY HEADER (API-level)
```
IMPORTANT: Assist with authorized security testing, defensive security, CTF challenges,
@VoidChecksum
VoidChecksum / Claude Code CLI Runtime.txt
Last active April 1, 2026 22:11
Claude Code CLI Runtime Analysis
# Claude Code v2.1.83 — Extracted System Prompt
# Binary: Bun-compiled ELF at /root/.local/share/claude/versions/2.1.83
# Build: 2026-03-25T05:15:24Z
# Extraction method: strings + offset analysis of embedded JS bundle
---
## Identity Strings (3 variants, selected based on context)
```