Tools
Open-source security tools and utilities developed to assist with penetration testing, vulnerability research, and security assessments.
pentest-tools
ToolA collection of custom scripts and tools built out of pain and tears to help with day-to-day activities in my current job ranging from extractors to beautifying tool output.
- ›FortiCarve — FortiGate switch config extractor
- ›Yss-Generator — generate ysoserial payloads
- ›DNSBeauty — beautifies dig output
- ›ShellUp — reverse shell syntax helper
GhostSheet
ToolAn in-house markdown-to-PDF tool for producing clean PDF cheatsheets and technical notes — mainly used for easy, clean notes design for use during exam scenarios.
- ›Dynamic cheat sheet generation via markdown
- ›Customizable PDF template
- ›Supports YAML metadata for title page
- ›Designed to convert Obsidian MD files into PDFs
Folio
ToolAn old in-house pentest report templating tool designed to help gain experience in writing professional grade reports. This was made in my off-time to practice writing reports.
- ›Runs as a web app or from the CLI
- ›Easily add templated findings, saving time
- ›Easily customisable Jinja2 templates
- ›Docker compose support for easy deployment
Floodgate
Toolin devA Docker-based ICS/OT vulnerable lab simulating a real municipal water treatment facility. Built for hands-on offensive and defensive security training across six industrial protocols.
- ›Ships in VULNERABLE and HARDENED modes with a built-in challenge system
- ›Real protocol stacks: Modbus/TCP, DNP3, MQTT, OPC-UA, BACnet/IP, S7comm
- ›Live process simulation with real physics - attacks have visible consequences on the SCADA HMI
- ›Companion lab for the InCTRL blog series at rootsec.me