Android apps. They run on the phone and stay there: no accounts, no telemetry, no ads. Each one has its own section in the privacy policy.
A wifi scanner that shows what is actually in the air: every network in reach with band, channel, signal and security; a spectrum picture of each band with a channel-load rating that tells you which channel is free; signal-over-time graphs for the strongest networks; and a list of every access-point MAC heard, any of which you can follow with a big live dBm readout, history graph and optional haptics while you walk around.
| permissions | location, nearby devices — Android hands out wifi scan results only with those. No internet permission at all. |
|---|---|
| data | nothing collected, nothing sent; the session lives in memory, settings stay on the phone |
| look | night / day, one accent, monospace; no animations |
Browser-side infosec tools. Unless a card says otherwise, everything runs in your browser and nothing is uploaded.
Browser-side implementation of olevba. Drop an Office document in and extract VBA macros, strings, and indicators of compromise without sending the file anywhere.
Browser-driven nmap. Streams port scans, banner grabs, and SSL cert details from a backend running on the host. Pick a target, choose a scan profile and NSE scripts, watch results land live. Password-protected.
Three-way base64 generator. Emits all three alignment variants of a string so you can hunt for encoded substrings inside a larger base64 blob. Optional XQL-friendly regex output.
IP geolocation against RIPE NCC data. Shows WHOIS holder, RIPE IPmap infrastructure geolocation (with prefix-neighbor fallback), BGP-origin AS country, MaxMind GeoLite estimate, and the live AS path from RIS looking-glass collectors.
Browser-side binary scanning.
Drop a pcap of DDoS traffic; get a PCRE escape-string regex for Arbor TMS, Suricata, or any payload-matching engine. Five coverage thresholds via slider, per-vector mode for multi-protocol attacks, with highlighted example packet and parsed protocol tree showing exactly what's matched.
Search the first 20 billion digits of π for any number — or any text, encoded to digits. Streams every match with its position and the surrounding digits, live as it scans.
Occasional notes on detection engineering, malware analysis, and whatever rabbit hole I'm down this week.
Lorem ipsum dolor sit amet, consectetur adipiscing elit. Sed do eiusmod tempor incididunt ut labore et dolore magna aliqua. Ut enim ad minim veniam, quis nostrud exercitation ullamco laboris nisi ut aliquip ex ea commodo consequat.
read moreExcepteur sint occaecat cupidatat non proident, sunt in culpa qui officia deserunt mollit anim id est laborum. Sed ut perspiciatis unde omnis iste natus error sit voluptatem accusantium doloremque laudantium.
read more