Open Source

Language: Python

802.11 security audit toolkit: parses PCAP captures for WPA 4-way handshakes, PMKID extraction and probe requests. Exports to hashcat 22000 and hccapx formats.

Live capture requires a monitor-mode wireless adapter — analysis/export logic is tested against synthetic PCAP fixtures, not live-captured traffic.

Language: Go

DKIM record validator with support for RSA and Ed25519 keys. CLI and library interface. Validates exact key strength via real X.509 parsing, selector format and record structure.

Language: Python

NVD CVE monitoring daemon. Watches your technology stack and sends alerts (Slack/Teams/email) when new CVEs match your defined products. Supports CVSS threshold filtering.

Language: Go

Network discovery and asset enumeration tool. TCP connect-scan, banner grabbing and service fingerprinting with JSON output for SIEM integration.

ARP table reads and TCP scanning work unprivileged; active ICMP probing needs root/CAP_NET_RAW/Administrator.

Language: Python

Sigma detection rule development and testing framework. Converts rules to Splunk SPL, KQL and Lucene via the official pySigma library. Includes ATT&CK coverage gap analysis and rule quality scoring.

Language: TypeScript

Threat intelligence parsing and relationship mapping tool. Ingests STIX 2.1 bundles and MISP exports, builds actor/indicator relationship graphs, and renders ATT&CK Navigator-compatible layer files.