Personal Projects & Toolkits

Validate email security configurations and analyze Sender Policy Framework records.

Analyze weak hashes, expiry, wildcards and issuers from nmap --script ssl-cert output.

Analyze weak SSL ciphers and protocols from Nmap scan results.

Analyze SSH configurations or Nmap scans for cryptographic risks.

Recover the original source tree from a .map file, then scan it for leaked secrets and endpoints.

Decode, audit, forge and bruteforce JSON Web Tokens — six tools in one.

Test a leaked API key against Gemini and Google services to determine its scope and enabled permissions.

Fetch archived records with status 200 for a domain, straight from the Wayback Machine.

Extract IP, port and service version from scan output to surface version disclosure.

Sort and search Nmap scan results to pull out the hosts and ports you care about.

Show that a window opened without Cross-Origin-Opener-Policy can be navigated away by whoever opened it.

Check grammar, spelling, punctuation and style with two independent engines.

Browser extension that auto-scans every page for exposed .map files and verifies which are retrievable.

Browser extension that imports a drafted finding straight into the Asgard New Finding form — every field and Evidence record, in one click.

Python script that generates test mobile numbers across Globe, Smart and DITO prefixes.

One command that chains selected Nmap NSE scripts, sslscan, ssh-audit, dig, ldapsearch, rpcclient, PRET and more across a host or a list of them.

Automates network segmentation testing: scans the ranges that are meant to be unreachable and reports whatever answers back.