DEV Community: Walter White

Linkkit: a self-hosted URL shortener with click counts

Walter White — Tue, 11 Aug 2026 14:06:07 +0000

Linkkit: a self-hosted URL shortener with click counts

I needed short links I control — no SaaS account, no tracking I don't understand — so I built Linkkit.

Features

Shorten any http(s) URL
Optional custom slug
Click counts
Docker or local npm
React dashboard to copy / delete links

Quick start

git clone https://github.com/mamyan2001-gif/linkkit.git
cd linkkit
docker compose up --build
# → http://localhost:5090

I'm Artyom — full-stack in Yerevan, open to remote. Also: Formbox, Seal, Hookbox.

GitHub: mamyan2001-gif/linkkit

Sentinel: a Manifest V3 extension for real-time phishing detection

Walter White — Sat, 08 Aug 2026 14:00:03 +0000

Sentinel: a Manifest V3 extension for real-time phishing detection

Phishing pages get better every year. Sentinel is a Manifest V3 browser extension I built to layer multiple signals:

URL heuristics / typosquat-style checks
Optional Google Safe Browsing lookups
Brand / page content signals
Popup dashboard + in-page banner + block interstitial

Stack

Chrome extension MV3 · vanilla JS · configurable sensitivity

It's a portfolio-grade security UX project — readable architecture docs included in the repo.

I'm Artyom Mamyan — full-stack developer in Yerevan, open to remote. Related: WebMask, Seal.

GitHub: mamyan2001-gif/sentinel

WebMask: 43+ OWASP-aligned website checks with a React UI

Walter White — Sun, 02 Aug 2026 14:09:14 +0000

WebMask: 43+ OWASP-aligned website checks with a React UI

I wanted a vulnerability scanner I could run myself — not a black-box SaaS — so I built WebMask.

What you get

43+ checks aligned with common OWASP-style findings
React admin UI for running scans and reading severity-rated results
SSRF-safe design considerations in the architecture
Node / Express / Vite stack

Who it's for

Developers who want a readable, hackable scanner for portfolio and practical AppSec learning — not a replacement for a full commercial DAST suite.

git clone https://github.com/mamyan2001-gif/webmask.git
cd webmask
# see README for setup

I'm a full-stack + AppSec-minded developer in Yerevan, looking for remote roles. Also shipping Seal, Hookbox, and Sentinel.

GitHub: mamyan2001-gif/webmask

Dropkit: WeTransfer-style file drops on your own server

Walter White — Mon, 27 Jul 2026 14:16:43 +0000

Dropkit: WeTransfer-style file drops on your own server

Need to send a file with a link, expiry, and optional password — without another SaaS account?

Dropkit is a self-hosted file drop: upload → share link → done.

Features

Upload and get a share URL
Optional password + expiry + download limits
Express + React + Docker
Simple enough to read in one sitting

Run it

git clone https://github.com/mamyan2001-gif/dropkit.git
cd dropkit
docker compose up --build

I'm Artyom — full-stack in Yerevan (UTC+4), open to remote work. Related tools: Seal, Hookbox, Pulseboard.

GitHub: mamyan2001-gif/dropkit

Pulseboard: self-hosted HTTP uptime monitoring without the SaaS bill

Walter White — Thu, 23 Jul 2026 14:00:02 +0000

Pulseboard: self-hosted HTTP uptime monitoring without the SaaS bill

I wanted something like Uptime Kuma — lightweight, self-hosted, easy to run — so I built Pulseboard.

What it does

HTTP(S) checks on a schedule
History + statistics dashboard
Optional alert webhooks
Docker Compose or local npm setup
No heavy database for the MVP (JSON on disk)

Quick start

git clone https://github.com/mamyan2001-gif/pulseboard.git
cd pulseboard
npm run setup
npm run dev
# UI → http://127.0.0.1:5175  API → :5060

Or Docker:

docker compose up --build
# → http://localhost:5060

Why small tools matter

I'm a full-stack developer (React / Node / TypeScript) in Yerevan, shipping self-hosted utilities and security-minded apps. Open to remote roles.

Also see: Seal · Hookbox · Dropkit

GitHub: mamyan2001-gif/pulseboard

Hookbox: a self-hosted webhook inbox with HMAC verification and replay

Walter White — Sun, 19 Jul 2026 16:43:11 +0000

Hookbox: a self-hosted webhook inbox with HMAC verification and replay

Debugging webhooks without a proper inbox is painful: ngrok tabs everywhere, lost payloads, no way to prove a signature was valid.

Hookbox is a small self-hosted webhook inbox I built for that workflow.

Features

Create an inbox with a unique capture URL (/h/{id})
Capture any HTTP method — headers, query, body
Optional HMAC verification (X-Hub-Signature-256 / X-Signature)
Keep the last 100 events (body capped)
Replay a captured event to a target URL
Cookie / Authorization headers redacted in storage
SSRF guards on replay targets
Docker Compose one-command deploy

Quick start

git clone https://github.com/mamyan2001-gif/hookbox.git
cd hookbox
docker compose up --build
# → http://localhost:5070

Design notes

I wanted something closer to RequestBin / webhook.site, but:

easy to run on your own machine or VPS
explicit about signature verification
careful about replay (don't become an open SSRF proxy)

If you integrate Stripe, GitHub, or custom webhooks often, an inspect + replay loop saves a lot of time.

I built a self-hosted one-time secrets service in Node — here's the threat model

Walter White — Sun, 19 Jul 2026 16:43:09 +0000

I built a self-hosted one-time secrets service in Node — here's the threat model

Sharing an API key in Slack feels wrong. Password managers work great inside a team — less great when you need a one-off secret for a contractor.

I built Seal: paste a secret, get a link, burn after read.

What it does

AES-256-GCM ciphertext on disk
Optional passphrase (bcrypt gate)
Expiry + max views
Shared rate limits across processes
CSP + secret scrubbing in the UI
Docker Compose one-command deploy

What it is not

It is not zero-knowledge. If you run the server, you hold SEAL_MASTER_KEY and can decrypt. That honesty belongs in the README — and it does.

Trust	Reality
Transport	Use HTTPS in production
At rest	AES-256-GCM with a server master key
Passphrase	Gates reveal — does not encrypt the payload by itself
Server operator	Can decrypt seals with the master key

Run it

git clone https://github.com/mamyan2001-gif/seal.git
cd seal
export SEAL_MASTER_KEY="$(openssl rand -hex 32)"
docker compose up --build
# → http://localhost:5080

Why I care about this shape of project

I'm a full-stack developer in Yerevan (UTC+4), open to remote roles. I like tools that are small enough to understand, honest about security tradeoffs, and runnable in under a minute.

Related open-source tools I shipped:

Hookbox — webhook inbox + HMAC verify + replay
Pulseboard — self-hosted HTTP uptime monitoring
WebMask — OWASP-style website checks

Feedback on the threat model and rate-limit design is welcome — especially if you self-host PrivateBin or similar.

GitHub: mamyan2001-gif/seal

DEV Community: Walter White

Linkkit: a self-hosted URL shortener with click counts

Linkkit: a self-hosted URL shortener with click counts

Features

Quick start

Sentinel: a Manifest V3 extension for real-time phishing detection

Sentinel: a Manifest V3 extension for real-time phishing detection

Stack

WebMask: 43+ OWASP-aligned website checks with a React UI

WebMask: 43+ OWASP-aligned website checks with a React UI

What you get

Who it's for

Dropkit: WeTransfer-style file drops on your own server

Dropkit: WeTransfer-style file drops on your own server

Features

Run it

Pulseboard: self-hosted HTTP uptime monitoring without the SaaS bill

Pulseboard: self-hosted HTTP uptime monitoring without the SaaS bill

What it does

Quick start

Why small tools matter

Hookbox: a self-hosted webhook inbox with HMAC verification and replay

Hookbox: a self-hosted webhook inbox with HMAC verification and replay

Features

Quick start

Design notes

More from the same toolbox

I built a self-hosted one-time secrets service in Node — here's the threat model

I built a self-hosted one-time secrets service in Node — here's the threat model

What it does

What it is not

Run it

Why I care about this shape of project