/tools

Open source tools. Each page has docs, a changelog, and a link to the source. Tools appear here when they reach a state worth publishing — not before.

• shellsift A local auth-log anomaly hunter — parses sshd and auth logs for brute-force patterns, off-hours logins, and impossible travel. Nothing leaves the box.
  Go live
• decoygrid A honeypot status tracker — polls deployed decoys, records connection attempts, and surfaces grid state over a local JSON API.
  Go in progress
• fuzzlite A fuzzing harness generator for C/C++ targets — wraps libFuzzer and AFL++ boilerplate so wiring up a new target takes minutes, not an afternoon.
  Python planned
• licensekeep A self-hosted license key server for small software products — generate, validate, and revoke keys without depending on a third-party SaaS.
  Go planned
• portspectre An async TCP/UDP port scanner and service fingerprinter. Fast, low-noise, tuned for ranges that contain honeypots and IDS-heavy segments.
  Go planned

Planned tools are listed here as roadmap entries — they have no code yet. In-progress tools have working code but no stable release. Everything starts as a dev log entry in /writeups.