Small, sharp tools — not another suite.
Each tool is built to answer one question quickly. They compose with shell pipelines and CI, and they prefer machine-readable output so other things can act on what they find.
$ ls tools/bin/ ad-audit bitlocker-state ctf-pwn-helper harden-baseline log-triage printer-recon scan-diff tls-check
Tool inventory
ad-audit
Lightweight Active Directory snapshotter that flags risky delegations, stale accounts, and exposed admin paths.
tls-check
Targeted TLS posture probe — cipher suite enumeration, certificate chain checks, and policy diff.
printer-recon
Discovers networked printers, fingerprints firmware, and reports default credentials and exposed services.
bitlocker-state
Reads BitLocker key protector and recovery state across an estate and surfaces drift from policy.
ctf-pwn-helper
pwntools-based scaffolding for binary exploitation challenges, with ROP and shellcode helpers.
log-triage
Normalizes Windows event logs and Sysmon output, then highlights deviations from a known-good baseline.
scan-diff
Diff successive vulnerability scans so triage focuses on what is actually new, not what is repeated.
harden-baseline
Composable hardening profiles for Windows and Linux that can be dry-run before applying.