I enjoy making things. Here are a selection of projects that I have worked on over the years.
NeTracker is a kernel-level network traffic tracker built with eBPF. It monitors and analyzes network activity directly within the Linux kernel, leveraging the power of eBPF for efficient and precise traffic inspection.
The Zed Attack Proxy (ZAP) by Checkmarx is the world’s most widely used web app scanner. Free and open source. A community based GitHub Top 1000 project that anyone can contribute to. It can help you automatically find security vulnerabilities in your web applications while you are developing and testing your applications. It’s also a great tool for experienced pentesters to use for manual security testing.
The OWASP CRS is a set of generic attack detection rules for use with ModSecurity or compatible web application firewalls. The CRS aims to protect web applications from a wide range of attacks, including the OWASP Top Ten, with a minimum of false alerts.
NetPulse is a basic comprehensive network scanner. It combines multiple features such as host discovery, port scanning, service detection, vulnerability detection, OS detection, banner grabbing, and logging into a single, easy-to-use tool.
This script is designed to exploit a vulnerability in web applications using PHP version 8.1.0-dev. It should only be used on systems where you have explicit permission to test and exploit vulnerabilities.