Tools
Most of these exist because I needed the answer on an engagement and nothing gave it to me.
Agents and credentials
Checks leaked credentials for validity and reachable resources, then ranks them by blast radius. Supports over 100 credential types, with read-only checks.
Built with the Puck Security folks.
Scans local coding-agent history files for secrets and redacts them in place. Supports Claude Code, Codex, Cursor, Copilot, and others.
Investigates endpoints through read-only MCP agents using natural-language questions. Every command is checked against policy and logged.
Built with Puck Security.
Finds secrets in screenshots, saves them to a secret manager, and permanently redacts them from the image. Runs offline and verifies the redaction with a second OCR pass.
Built at Adversis.
Demonstrates indirect prompt injection against a ChatGPT-style assistant with a seeded inbox. Poisoned documents redirect the assistant, with exfiltrated data visible in an attacker console.
Built at Adversis.
Records per-host activity and ranks changes, especially around sensitive files, to help investigate incidents. macOS-first, using SQLite without a kernel driver.
A single executable containing a small LLM and C compiler. Generates, compiles, and runs programs to answer plain-English questions. Runs on Linux, macOS, and Windows.
Networks and applications
Audits Tailscale configurations for 57 misconfigurations, including overly permissive ACLs. Includes an interactive fix mode.
Built at Adversis.
Scans repositories, packages, and install scripts for indicators of malicious code before execution.
Built at Adversis.
Burp Suite extension for analyzing Next.js Server Actions, the server-side functions identified by hash IDs and
Next-Actionheaders.Built at Adversis.
Burp Suite extension that parses React Server Component responses and extracts embedded data.
Built at Adversis.
Discovers gRPC services and methods on a server that doesn’t support reflection and for which you have no proto files. Then lets you call them.
Built at Adversis.
Dynamically extracts GraphQL queries and mutations from loaded JavaScript.
Built at Adversis.
Finds Electron apps, checks their ASAR integrity settings, and lists native
.nodemodules.Built at Adversis.
Data
A dataset updated daily with publicly reported data breaches with vector, ATT&CK technique, technology, actor, and impact extracted. Source on GitHub.
Decrypts Jenkins credential stores offline. The companion write-up is in the archive.
Queries Shodan and Censys for an organization’s exposed hosts in one pass.
Audits a Box.com tenant for files and folders that were shared with the world by accident.
Built at Adversis.
Small Go utilities from engagements, mostly Windows API wrappers.
Brute-forces 389 Directory Server PBKDF2 hashes. Led to a Hashcat module.
Contributions and disclosures
Merged pull requests to Sliver, Metasploit (the Jenkins credential gather module), and Hashcat (the Red Hat 389-DS LDAP PBKDF2 module).
A few CVEs, including a command injection in Adobe Acrobat Reader (CVE-2021-28634) and an Informacast JMX misconfiguration that gave remote code execution.