Personal Projects & Toolkits

Validate email security configurations and analyze Sender Policy Framework records.

Analyze weak hashes, expiry, wildcards and issuers from nmap --script ssl-cert output.

Analyze SSH configurations or Nmap scans for cryptographic risks.

Analyze weak SSL ciphers and protocols from Nmap scan results.

Extract IP, port and service version from scan output to surface version disclosure.

Sort and search Nmap scan results to pull out the hosts and ports you care about.

Fetch archived records with status 200 for a domain, straight from the Wayback Machine.

Decode, audit, forge and bruteforce JSON Web Tokens — six tools in one.

Test a leaked API key against Gemini and Google services to determine its scope and enabled permissions.

Recover the original source tree from a .map file, then scan it for leaked secrets and endpoints.

Browser extension that auto-scans every page for exposed .map files and verifies which are retrievable.

Check grammar, spelling, punctuation and style with two independent engines.

Show that a window opened without Cross-Origin-Opener-Policy can be navigated away by whoever opened it.

Python script that generates test mobile numbers across Globe, Smart and DITO prefixes.