Open-source security and infrastructure tools built for real-world use — available on GitHub.
A Python-based reconnaissance tool to identify hidden or misconfigured GraphQL endpoints using multi-signal analysis — covering HTTP status codes, content type headers, response similarity scoring, and GraphQL-specific indicators. Implements baseline learning and browser-like redirect handling to reduce false positives and improve detection accuracy in security testing environments.
Forked from safebuffer's VulnAD project and significantly enhanced to address reliability and realism gaps in the original. Key contributions include: guaranteed minimum vulnerability counts via controlled random ranges; a user-tracking system preventing functions from overwriting each other's configurations; replacement of unroastable Managed Service Accounts with properly Kerberoastable regular user accounts; complete SMB signing remediation covering both client and server configurations with registry persistence; an IT Admins to Domain Admins privilege escalation path via AdminSDHolder for persistent ACL abuse; and automated sensitive share creation with planted data files for exfiltration simulation.