Skip to content

Security: Masriyan/CrotDalam

SECURITY.md

Security Policy

πŸ›‘οΈ Responsible Use

CROT DALAM is designed for legitimate OSINT research, cybersecurity awareness, and protective monitoring.

Intended Use Cases

  • βœ… Security research and threat hunting
  • βœ… Scam/phishing detection and awareness
  • βœ… Brand protection and monitoring
  • βœ… Academic research
  • βœ… Law enforcement investigations (with proper authorization)

Prohibited Use

  • ❌ Harassment or stalking individuals
  • ❌ Unauthorized data collection
  • ❌ Violating TikTok Terms of Service maliciously
  • ❌ Commercial data harvesting for spam
  • ❌ Any illegal activities

πŸ”’ Security Considerations

Data Handling

  • Collected data is stored locally on your machine
  • No data is sent to external servers (except Archive.today if enabled)
  • Session cookies are stored locally in the sessions/ directory
  • Output files may contain PII β€” handle responsibly

Anti-Detection Disclaimer

The anti-detection features are designed to reduce automated detection, but:

  • They do not guarantee 100% evasion
  • TikTok may still detect and block automated access
  • Use at your own risk and responsibility

πŸ› Reporting Vulnerabilities

If you discover a security vulnerability:

  1. Do NOT open a public GitHub issue
  2. Email the maintainer directly (add your contact email here)
  3. Include:
    • Description of the vulnerability
    • Steps to reproduce
    • Potential impact
    • Suggested fix (if any)

We will acknowledge receipt within 48 hours and work on a fix.

πŸ“‹ Compliance

Users are responsible for ensuring their use complies with:

  • Local laws and regulations
  • TikTok's Terms of Service
  • Data protection regulations (GDPR, CCPA, etc.)
  • Organizational policies

⚠️ Disclaimer

This tool is provided "as is" without warranty. The maintainers are not responsible for:

  • Misuse of the tool
  • Violations of terms of service
  • Legal consequences of improper use
  • Data loss or corruption

Use responsibly. Respect privacy. Follow the law.

There aren't any published security advisories