Tools & Utilities
Current Projects
Nikto - An Open Source (GPL) web server scanner which performs comprehensive tests against web servers for multiple items, including vulnerabilities and misconfigurations.
lw_build_req - A PERL script to build valid LibWhisker PERL code from raw HTTP headers.
CMS-Explorer - Discover plugins and themes installed on popular content management systems.
DAVTest - Test and exploit WebDAV enabled servers.
Nessus Plugins - Plugins for the Nessus security scanner.
MP3 Duplicate Finder - Find MP3 file duplicates based on the audio content's hash.
pjl-file - A script to act like an FTP front end to PCL/PJL compatible printers.
CMS Explorer - Figure out the installed components on Content Management System sites.
Closed Projects
SETI-Web - SETI@Home Web Statistics.
htmap - An nmap styled scanner that looks for HTTP ports.
YaHa - An experiment in brute-force HTTP authentication. Fully working code, and perhaps a jumpstart for someone's larger application.
Moving Target - Rename form submission CGI on the fly to keep people from building auto-submission programs.