🛡️ Static security scanner (SAST) for Ansible playbooks, roles, and collections. 1,000+ rules across 30+ categories detecting malicious code, RCE, hardcoded credentials, and supply-chain risk. Outputs SARIF, CycloneDX SBOM, and GitLab SAST. SLSA Build Level 3, Sigstore-signed.
Agile Threat Modeling as Code
- cdk
- modeling
- threagile
- threat
Tor control port filter - whitelists which Tor control commands a client can use
Honeypot that mimics Tomcat manager endpoints. Logs requests and saves attacker's WAR file for later study
GoSDDL converter
Converts / formats Rubeus kerberoasting output into Hashcat usable format
Kippo configured to be a backdoored netscreen
Crystal shard wrapping the rbsec/sslscan utility
Wrapper for Next.js applications using PocketBase, with support for both client and server components
Keep your secrets out of your AI coding agents. A local HTTPS proxy that swaps real credentials with placeholders and injects them at the network boundary.
Encrypted .env files with TOTP unsealing for production deploys. Cross-stack (Node + Java). Zero deps. Defends against npm supply-chain attacks.
An Ada 2012 / SPARK 2014 project that implements the NORX authenticated encryption algorithm
Very simple but effective honeypot to detect port scanning on your network
All algorithm implementations like signature verification and protocol entries like address used in Waves protocol.
Generate wordlists of Danish phone numbers by area and/or usage (Mobile, landline etc.) Useful for password cracking or fuzzing Danish targets.
Native Shamir Secret Sharing. Securely split & restore secrets on iOS, Android, and Web with a single Capacitor plugin.
HTTP honeypot on autopilot
- canarytokens
- deception
- deception-technology
- honeypot
Extract hashes from the MongoDB database server to a hash format that hashcat accepts: -m 24100 (SCRAM-SHA-1) or -m 24200 (SCRAM-SHA-256)
Twisted based HoneyPot for WhiteFace
A complete GraphQL client shard for the Crystal language inspired by Apollo client including error handling and planned support for caching, authentication and subscriptions.
- graphql
- crystal-language
- crystal-gql
- crystal-shard
An Ada 2012 / SPARK 2014 project that implements the SipHash keyed hash function.
Utility programs for the encryption algorithms included in the PragmAda Reusable Components
- ada
- threefish
- xor
- encryption-decryption
Helper to authenticate website's users by sending them unique code by email.
Sigma Queries turned into KQL for Defender using pysigma - Automated
- detection-engineering
- kql
- microsoftsentinel
- mitre-attack