projects

Most advanced XSS detection suite.

Scanners usually just inject a list of payloads and see what sticks, missing context-aware vulnerabilities.

It parses the page's HTML to understand the context of the reflection and generates working payloads on the fly.

HTTP parameter discovery suite.

Web apps often have hidden parameters that are vulnerable to attacks, but they aren't linked anywhere in the UI.

It makes smart requests with giant lists of parameter names to figure out what the server accepts, while bypassing rate limits.

Incredibly fast crawler designed for OSINT.

Extracting intelligence from a target manually is painful, and standard web crawlers aren't built for reconnaissance.

Uses multi-threading to rapidly crawl domains and extract URLs, emails, social accounts, and keys into a neat structure.

A drop-in nmap replacement powered by shodan.io.

Active port scanning is inherently noisy and gets your IP address blocked by firewalls.

It queries Shodan's API and perfectly mimics nmap's CLI arguments and output.

Mass vulnerability scanner.

Running nmap and masscan manually against huge networks gets messy and is hard to scale efficiently.

Acts as a frontend wrapper that parses target data, spawns parallel scanning processes, and caches vulnerability info.

Declutters URL lists for crawling and pentesting.

Wayback machine and crawlers give you huge lists of URLs, but most of them are basically duplicates with different parameter values.

It parses URL paths and parameters to mathematically filter out the redundant ones, leaving you with just the unique attack surface.

Extracts hardcoded strings from source code.

Developers accidentally leave API keys and sensitive info inside strings, and normal greping gets messy with comments.

Uses a modular tokenizer that actually understands comments and string syntax across over 20 different programming languages.

Blockchain transactions investigation tool.

Tracking cryptocurrency moving through tons of different wallets is a nightmare without visualizing the flow.

It crawls transaction history across multiple blocks and draws a comprehensive relationship graph between addresses.

Python library to print awesomely in terminals.

Adding colored text in CLI tools shouldn't require memorizing ugly ANSI escape codes and writing boilerplate.

Gives you a clean API with simple semantic functions to add colors, backgrounds, and markers to your script's output.

Roadmap for a self-taught hacker.

Information security is overwhelming for beginners without a clear, structured learning path.

Lays out a curated, step-by-step syllabus using free resources to learn networking, Linux, and web application hacking.