I built an ISP infrastructure emulator from scratch with a custom vBNG
Custom Python vBNG emulates ISP subscriber management without expensive hardware or proprietary software.

Real ISP tracking detection (supercookies, DNS hijacking) with anonymized leaderboard.
Privacy-conscious internet users, ISP transparency advocates
Cloudflare Browsing Experience Security Check · Privacy Badger
* Header injection — echoes your HTTP headers back through a server-side endpoint to detect UIDH supercookies (Verizon injects these at the network level, visible even in private browsing), AT&T tracking headers, Blue Coat proxy markers, and subscriber IDs
* DNS privacy — checks your resolver's ASN via ipinfo to see if it's your ISP's own DNS (which logs every domain you visit) or a private resolver like 1.1.1.1 / 9.9.9.9
* TLS interception — hits the Cloudflare debug endpoint to detect middlebox fingerprints that indicate your "encrypted" connection is being terminated before it reaches the destination
* Leaderboard — anonymized aggregate scores by ISP, so you can see how your provider compares to others
No sign-up, no install, no IP storage (IPs are hashed with a daily-rotating salt). Tech stack is Next.js + Supabase on Vercel.
Custom Python vBNG emulates ISP subscriber management without expensive hardware or proprietary software.
Concrete safety benchmark for code agents when baseline evaluation barely exists.
Maps cross-agent injection attacks to real Copilot CVEs with live measurements.
Header override mode beats DevTools for testing strict CSP policies before deployment.
Auto-patching LLM calls to inject faults and log telemetry is a neat technical trick that lets you fuzz real agent runs without changing your stack. The repo ships six intentionally vulnerable example agents and a CLI (discover/run/ci) with eval packs for security and resilience, so you can reproduce attacks and gate releases. It feels like an early, practical toolkit that fills a gap in agent security testing — adoption and more community-playbooks will determine how far it goes.
Tests PyPI packages across 6 Python environments with live pass-rate dashboard.