These are the projects that I have created or am a core developer of said project.


A DNS enumeration script that is used for OSINT. Download DNSrecon core developer


Custom bash scripts used to automate various penetration testing tasks including recon, scanning, enumeration, and malicious payload creation using Metasploit. For use with Kali Linux. Download Discover core developer


Is used a beginning of a pentest to collect data from various sources to gather recon like subdomains, e-mails etc. It also has a restAPI. Download theHarvester core developer


A tool for exploiting Moxie Marlinspike’s SSL “stripping” attack. As the tool was no longer maintained, I forked it and ported it from Python2 to Python3. Download SSLstrip maintainer

Ansible DVWA/Mutillidae

These are both vulnerable web apps to practice exploiting web vulnerabilities. I have created Ansible playbooks for them both to make it easy to install and get up and running. Download Ansible DVWA Download Ansible Mutillidae


A program to check linux binaries security flags, to help you with your exploit development. Download Gochecksec