security-toolset

Automated NoSQL database enumeration and web application exploitation tool.

Pulumi ESC is a centralized, secure service for environments, secrets, and configuration management, optimized for multi-cloud infrastructures and applications.

Multi-arch Docker images to perform security operations via containerized workflows.

ByteCode is a modern C2 that prioritizes operational security and evasion effectiveness. Built from the ground up with a React-based management console, Node.js orchestration engine, and cross-platform Go agents with advanced Windows evasion primitives.

Automated web application penetration testing framework: OWASP Top 10 + advanced attacks, an autonomous AI agent (Ollama/Claude/OpenAI), SAST source-code analysis, and an MCP server, with professional CVSS-scored reports.

Automated NoSQL database enumeration and web application exploitation tool.

A Python based gitleaks wrapped tool to enable scanning of multiple Gitlab repositories in parallel.

A powerful toolkit for enforcing access restrictions in Java

Shadowlogger is a lightweight, Python-based Windows keylogger and clipboard capture tool developed for authorized Red Team simulations, cybersecurity research, and educational purposes only.

A lightweight Windows security tool that monitors Discord for token grabbers, JS injections, clipboard hijacking, browser cookie access, startup persistence, and suspicious processes—all in real time.

An advanced, automated Web Pentesting framework that integrates industry-standard tools (SQLmap, Nmap, Dalfox, etc.) into a unified, interactive interface.

learning/research project AV Desktop App

DevSecOps security scanner for automated vulnerability detection in CI/CD pipelines

🛡️ NightHunter (OSS) NightHunter. A regular utility for spoofing various debugger programs and so on

# 🛡️ Dashboard SIEM Interactivo Este proyecto es una **herramienta de visualización de eventos de seguridad tipo SIEM**, desarrollada con **Python y Dash**, e inspirada en plataformas profesionales como **Wazuh**. Es una iniciativa creada como parte de mi aprendizaje en: - Ciberseguridad - Visualización de datos - Desarrollo web con Python

🇷🇺 Advanced WordPress Security Research Plugin | HACKED BY HERE IS LEO | Multi-Backdoor System, Self-Destruct in 50 Hours, Deface Page, 10+ Entry Points, Educational & Research Purposes

this little tool finds the .env, API keys which Claude Code accidentally wrote to disk, checks which still work, and cuts them out

Windows 图形化渗透测试工作台。把 Nmap、Masscan、Nuclei、httpx、Subfinder、ffuf、sqlmap、Hydra、Metasploit、TShark 等工具装进一个界面，支持自动一条龙扫描并生成 HTML/PDF 报告，界面中英双语。Graphical pentest workbench for Windows.

Menu-driven Kali Linux console for orchestrating authorized pentest tools.

DorkRecon is a domain reconnaissance tool generating Google dork queries (site:, filetype:, etc.) to find indexed, exposed data like configs, backups, and login pages. Designed for authorized penetration testing and red teaming, it checks domain exposure to secure leaks. It does not look up people and requires explicit authorization to run.