What I'm Building

Websites and tools I build and run alongside my security work.

cveplayground.com
Screenshot of CVE Playground

CVE Playground

Practice real CVEs. Think like an attacker.

A hands-on platform for understanding real-world vulnerabilities. Each CVE comes with guided analysis, patch review and a browser-based exploit lab in an isolated Docker environment, so you learn how the bug actually happened instead of just getting a shell.

  • CVE labs
  • Patch analysis
  • Docker
  • Education
Visit cveplayground.com
keydecryptor.com
Screenshot of KeyDecryptor

KeyDecryptor

Private, instant, no signup.

A free, browser-based toolkit with 190+ tools for developers, sysadmins and security teams: hash generation and extraction (zip2john, ssh2john), password recovery for VNC, Cisco Type 7, Juniper Type 9 and GPP files, AES/PGP encryption, encoders and more.

  • Hashes
  • Password recovery
  • Encryption
  • Encoding
Visit keydecryptor.com

Tools & Labs

Skitter

Tracks GitHub repository, commit and activity data across organisation members.

Subword

Aggregates subdomains from multiple sources and tools, and generates wordlists from target URLs.

Pivoting Practice Lab

Multi-container Docker environment for practising network pivoting techniques.

Vulnerable Machines

Released Kobold, Sau, Soccer, PC, Sustah, En-Pass and Samsara on HackTheBox, TryHackMe and VulnHub.