Open-source work

Multi-threaded SQL injection scanner with built-in Bing dorking and bulk URL ingestion. Throws hundreds of payloads per second and writes a clean, dedup'd report.

Fast subdomain enumeration tool. DNS, HTTP, and ICMP probes in parallel — designed to be louder than passive scanners but faster than amass.

Curated, scripted toolkit for vulnerability analysis & red-team ops — wraps common pentest workflows behind a single CLI so you stop fighting your own tooling.

Detects malicious JavaScript embedded in PDFs using a transformer-based classifier. Ships as a Windows app + a Vercel-hosted demo.

Robust internal-network scanner aimed at corporate environments — discovery, banner grab, vuln signaling, and a clean JSON output for SOAR pipelines.

Operator's guide: 20 advanced Nmap recipes I actually use on engagements — NSE chains, evasion, timing tricks, IPv6 quirks. PRs welcome.

Battle-tested install path for Cuckoo Sandbox on modern Ubuntu — fixes the 47 things the official docs quietly leave broken.

Full writeups for challenges I solved at AUPCTF — pwn, web, crypto, forensics. The point isn't the flag; it's the path.

Image obfuscation pipeline using denoising + enhancement + neural style transfer. Built originally to defeat lazy CV-based filters.