#offensive-security
Everything across writeups and projects that touches this topic.
Projects
builds & tooling
- Python · Active Directory
AD Recon Lite — Lightweight Active Directory enumeration and dangerous-config detector
A focused Python tool that connects to a domain controller over LDAP and flags the AD misconfigurations attackers actually target during enumeration
- Python · Post-Exploitation
Loot CLI — Filesystem Recon for CTFs and Post-Exploitation
A Python CLI that walks a directory tree once and dispatches every path through eight specialized scanners to surface credentials, keys, SUID binaries, and CTF flags
- Python · OSINT
SubScope — Subdomain Reconnaissance
A subdomain enumeration tool that chains certificate transparency, DNS brute force, HTTP probing, and takeover detection into one clean pipeline
- Python · Web Security
WebAudit — Web Application Security Scanner
A Python scanner that audits web apps for misconfigs and common vulns, then generates a self-contained HTML report with severity ratings and remediation steps