# tools

Small, sharp tools — not another suite.

Each tool is built to answer one question quickly. They compose with shell pipelines and CI, and they prefer machine-readable output so other things can act on what they find.

tools/ — bin
$ ls tools/bin/
ad-audit      bitlocker-state
ctf-pwn-helper  harden-baseline
log-triage    printer-recon
scan-diff     tls-check
# inventory

Tool inventory

Triage

ad-audit

Lightweight Active Directory snapshotter that flags risky delegations, stale accounts, and exposed admin paths.

$ ./ad-audit --domain corp.local --out report.json
Hardening

tls-check

Targeted TLS posture probe — cipher suite enumeration, certificate chain checks, and policy diff.

$ tls-check --host recovery.example.com --policy strict-2025
Recon

printer-recon

Discovers networked printers, fingerprints firmware, and reports default credentials and exposed services.

$ printer-recon --range 10.20.30.0/24
Hardening

bitlocker-state

Reads BitLocker key protector and recovery state across an estate and surfaces drift from policy.

$ bitlocker-state --csv estate.csv
Exploitation

ctf-pwn-helper

pwntools-based scaffolding for binary exploitation challenges, with ROP and shellcode helpers.

$ ctf-pwn-helper init ./chal
Forensics

log-triage

Normalizes Windows event logs and Sysmon output, then highlights deviations from a known-good baseline.

$ log-triage --baseline gold.json --input case-042/
Triage

scan-diff

Diff successive vulnerability scans so triage focuses on what is actually new, not what is repeated.

$ scan-diff prev.json curr.json --severity high
Hardening

harden-baseline

Composable hardening profiles for Windows and Linux that can be dry-run before applying.

$ harden-baseline apply --profile windows-server-2022