Security tools, experiments, and things I have shipped.
A Chrome extension that grades indicators of compromise on the page you are reading: IPs, domains, hashes, defanged input. Pivots through infrastructure, exports findings as STIX 2.1 or a MISP event, and runs entirely client-side against keyless threat feeds.
A multi-process, dictionary-based hash cracking tool supporting several algorithms and salt configurations.
Evaluates password entropy and cross-references credentials against the Have I Been Pwned API to detect known breaches.
Hides and extracts messages inside image files using least significant bit manipulation.
An educational script built with pynput to study how keystroke capture works and how endpoint monitoring detects it.
A command-line tool that encrypts and decrypts text with the Caesar cipher, preserving case and non-alphabetic characters.