Projects

— Progetti principaliMain projects

ad-attack-toolkit

Assessment automatizzato su Active Directory: enumerazione LDAP, AS-REP Roasting, Kerberoasting, verifica Pass-the-Hash. Report PDF con findings e remediation, lab VirtualBox incluso.

Automated Active Directory assessment: LDAP enumeration, AS-REP Roasting, Kerberoasting, Pass-the-Hash verification. PDF report with findings and remediation, VirtualBox lab included.

GitHub →

bh-path-visualizer

Fa il parsing dell'output di SharpHound e calcola i percorsi di privilege escalation verso i Domain Admin senza Neo4j. Report dei choke point sul terminale e grafo D3 interattivo in un singolo file HTML.

Parses SharpHound output and computes privilege-escalation paths to Domain Admins without Neo4j. Choke-point report on the terminal and an interactive D3 graph in a single HTML file.

GitHub →

llmprobe-v2

Testing di sicurezza su endpoint LLM: leak del system prompt, prompt injection, jailbreak, bypass delle policy. Verdetto a tre segnali con livello di confidenza ed evidenze. Funziona con Ollama e con endpoint compatibili OpenAI.

Security testing for LLM endpoints: system prompt leak, prompt injection, jailbreak, policy bypass. Three-signal verdict with confidence level and evidence. Works against Ollama and OpenAI-compatible endpoints.

GitHub →

VulnScan

Scanner di vulnerabilità web in Python: SQL injection, XSS riflesso, path traversal, security header. Crawler, dashboard Flask, report PDF.

Web vulnerability scanner in Python: SQL injection, reflected XSS, path traversal, security headers. Crawler, Flask dashboard, PDF reporting.

GitHub →

— Script / tool minoriScripts / small tools

port_scanner

Scanner TCP multithreaded in Python con thread pool configurabile e timeout personalizzabili.

Fast multithreaded TCP port scanner in Python with configurable thread pools and timeout settings.

GitHub →

password_strength_checker

Analizzatore di robustezza delle password con stima dell'entropia e controlli su pattern comuni.

Password strength analyzer with entropy estimation and common vulnerability checks.

GitHub →

mini_ping_sweeper

Tool Python per scoperta host attivi su rete locale via ICMP con scansione parallela.

Python tool to discover active hosts on local networks via ICMP with parallel scanning.

GitHub →

← Torna alla home← Back to home