🥶 WinArmor

• Automation tool consolidating Windows Defender scans, firewall status, local user audits, disk usage, and threat detection. _

• Reduced ~70% of manual effort required to run multiple PowerShell commands for endpoint security checks._

• Automated timestamped HTML report generation to improve consistency, visibility, and repeatability of security assessments in lab environments._

😈 1337-Active Directory

• Built a complete Active Directory lab with a domain controller, multiple user machines, and Kali Linux as the attack platform. _

• Executed 10+ real-world attacks including LLMNR/NBT-NS poisoning, SMB relay, IPv6 DNS takeover, pass-the-hash, pass-the-password, and Kerberoasting._

• Implemented Active Directory hardening policies and security controls, mitigating approximately 80% of tested attack vectors._

🕷️ Web Application Penetration Test – OWASP Juice Shop

• Conducted a full-scope web application penetration test following standard methodology: Enumeration → Discovery → Exploitation → Remediation. _

• Guided learners through top 4+ web attacks like SQL injection, authentication bypass, broken access control (IDOR/HPP), and business logic vulnerabilities with step-by-step demonstrations. _

• Delivered a professional penetration testing report with clear POCs, impact analysis, severity ratings, and security-focused remediation guidance, aligned with OWASP Top 10 risks. _

👾 SubVoid

• Developed a Bash-based automation tool integrating Subfinder, Assetfinder, and Httpx, reducing manual reconnaissance effort by ~95%. _

• Implemented domain validation, dependency checks, safe exits, structured timestamped workspaces, and multi-port scanning for large-scale discovery._

• Added CLI arguments, result sorting and deduplication, and optional Discord webhook alerts to improve usability and workflow efficiency. _

🧟‍♂️ Monster_logger

• Implemented keystroke logging with special key handling and clipboard monitoring (text and images) using state-based duplicate prevention (~90%). _

• Extracted Windows WLAN credential information with controlled execution and an emergency F12 kill switch._

• Performed structured data exfiltration via Discord webhooks, handling both JSON data and binary image uploads. _

Banger revealing soon