PassGuardJS — Open Source
An open-source JavaScript and TypeScript password strength and password policy validation library.
Built with TypeScript, JavaScript, npm
Tools
Toolkit
The software I use day to day, plus the security tools I've built and released.
Tools I have built
Nmap Visualizer — Security Tools
Parse and visualize Nmap XML scan results in a clean, interactive interface.
Built with JavaScript, HTML, CSS
OWASP Risk Assessment Calculator — Security Tools
Calculate web vulnerability risk severity using the OWASP Risk Assessment methodology.
Built with JavaScript, HTML, CSS
CVSS Calculator — Security Tools
Calculate CVSS scores for vulnerability severity rating across multiple versions.
Built with JavaScript, HTML, CSS
Subnet Calculator — Security Tools
Enterprise-grade network subnet calculator with VLSM and route summarization.
Built with JavaScript, HTML, CSS
Tools I use
Filter
| Tool | Use | Category |
|---|---|---|
| Burp Suite Professional | Web & API testing | Offensive Security |
| Metasploit | Exploitation framework | Offensive Security |
| Nmap | Network discovery | Offensive Security |
| Nessus | Vulnerability scanning | Offensive Security |
| OWASP ZAP | Web app scanning | Offensive Security |
| Nuclei | Template-based scanning | Offensive Security |
| BloodHound | AD attack paths | Offensive Security |
| Frida | Dynamic instrumentation | Offensive Security |
| Objection | Mobile runtime testing | Offensive Security |
| Radare2 | Reverse engineering | Offensive Security |
| Kali Linux | Testing platform | Offensive Security |
| Kali NetHunter | Mobile testing platform | Offensive Security |
| IBM QRadar | SIEM | Defensive Security |
| LogRhythm | SIEM | Defensive Security |
| Wazuh | Host-based detection | Defensive Security |
| ELK Stack | Log search and analysis | Defensive Security |
| Grafana | Metrics and dashboards | Defensive Security |
| Nagios | Infrastructure monitoring | Defensive Security |
| MISP | Threat intelligence | Defensive Security |
| Wireshark | Traffic analysis | Defensive Security |
| Autopsy | Digital forensics | Defensive Security |
| CrowdStrike | Endpoint detection and response | Security Solutions |
| Trend Micro | Endpoint protection | Security Solutions |
| Sophos | Endpoint and network security | Security Solutions |
| Cisco ASA | Firewall | Security Solutions |
| Cisco ESA | Email security | Security Solutions |
| Cisco WSA | Web security | Security Solutions |
| F5 | Load balancing and WAF | Security Solutions |
| Python | Automation & tooling | Languages |
| C++ | Systems programming | Languages |
| JavaScript | Web applications | Languages |
| PHP | Server-side web development | Languages |
| SQL | Databases and query testing | Languages |
| Bash | Glue scripts | Languages |
| PowerShell | Windows scripting and administration | Languages |
| Assembly x86 | Reverse engineering and binary analysis | Languages |
| Flask | Python web services | Frameworks |
| Django | Python web applications | Frameworks |
| React | Front-end applications | Frameworks |
| Symfony | PHP web applications | Frameworks |
| Flutter | Cross-platform mobile apps | Frameworks |
| Visual Studio Code | Editor | Development & DevOps |
| Notepad++ | Quick edits on Windows | Development & DevOps |
| JupyterLab | Notebooks for analysis | Development & DevOps |
| Git | Version control | Development & DevOps |
| GitHub | Code & CI | Development & DevOps |
| Docker | Containers | Development & DevOps |
| Kubernetes | Container orchestration | Development & DevOps |
| Jenkins | CI/CD pipelines | Development & DevOps |
| Semgrep | Static analysis | Development & DevOps |
| JMeter | Load testing | Development & DevOps |
| Selenium | Browser automation | Development & DevOps |
| AWS | Cloud infrastructure | Cloud |
| Azure | Cloud infrastructure | Cloud |
| DigitalOcean | Cloud infrastructure | Cloud |
| Linux | Servers and lab environments | Platforms & Infrastructure |
| Red Hat | Enterprise Linux | Platforms & Infrastructure |
| Ubuntu | Servers and workstations | Platforms & Infrastructure |
| Windows Server 2016 / 2019 | Enterprise server environments | Platforms & Infrastructure |
| Active Directory | Domain services | Platforms & Infrastructure |
| CherryTree | Engagement notes | Productivity |
| Microsoft OneNote | Day-to-day notes | Productivity |
| Notion | Longer-form notes and planning | Productivity |
| Microsoft To Do | Task list | Productivity |
| Microsoft Excel | Tracking and data work | Productivity |
65 tools.