Projects

Things I've built

Tools born out of need: something was repetitive, or the existing programs didn't cover newer techniques. All public, to read and to use.

Code

Tooling on GitHub

The full list of repositories is on my profile. Below are the ones I reach for most often at work.

Live

RacoonScanner

Automates the repetitive first stage of a pentest - recon, enumeration and initial vulnerability detection - and turns it into an interactive report. Instead of running tools one by one you launch a workflow: nmap finds services, whatweb fingerprints them, sqlmap and INCLUDED test the targets. Findings land in a shared model and map onto NIS2, UKSC, ISO 27001 and DORA.

PythonDockerComplianceAutomation

View the code

Live

INCLUDED

A modular File Inclusion (LFI/RFI) scanner. Built because older tools don't handle newer techniques: filter chains, two-phase log and session poisoning, filter bypass variants. One install script, then it runs as included.

PythonWeb securityLFI/RFI

View the code

Live

OhMyHackingTools

A set of small utilities from day-to-day hardware and firmware work: binary pattern extraction, entropy analysis, partition table parsing, matching certificates to keys.

PythonFirmwareForensics

View the code

Live