[ Code & Tools ]

Four small SourceMod plugins that turn a default Left 4 Dead 2 dedicated
server into a 24/7 community server. Drop in one or all four; all share
the same MIT license and none require a config file.

  l4d2-welcome-message       staggered chat greetings on player join
  l4d2-common-kill-counter   per-player kill leaderboard + MVP callout
  l4d2-campaign-shortcuts    admin chat shortcuts to jump to any campaign
  l4d2-finale-next-campaign  auto-rotate to next campaign after every finale

Each section of the pack page covers behavior, commands, install, and the
few config knobs worth knowing for your own deploy. Originally written
for the Tropical Roots Maui L4D2 server — that server has since been
retired, but the plugins remain portable to any L4D2 SourceMod
deployment.

Read the pack →

Self-hosted grow-tracker web app for cannabis & plant cultivation. Tracks
plants from seed through harvest with environmental logging, feeding
schedules, breeding projects, and pest/deficiency diagnostics.

Features:
  - Grow cycle management with photo documentation & journal entries
  - VPD & KNF calculators for nutrient/environmental tuning
  - Pest and deficiency identification with AI support
  - Harvest forecasting, breeding tracking, task scheduling
  - Detailed reporting + database-backed history

Open source under GPL-3.0. Live instance hosted at the link above.

Drive a Storz & Bickel Volcano Hybrid from the browser over Web Bluetooth
— no app, no backend, nothing leaves your machine. Temperature, heat,
fan, bag fill, editable presets, the Vapesuvius temperature ladder,
build-and-run heat / fan / wait workflows, and a terminal console with
its own little scripting language. Installable PWA, works offline;
Chromium desktop / Android Chrome.

Static HTML / CSS / vanilla-JS, open source (GPL-3.0) at
magikh0e/volcano-hybrid-control; the BLE protocol was reverse-engineered
from the vendor app — see the BLE reversing guide.

Open the controller →

A local-first manager for the STL / 3MF / gcode folder that turns into a
landfill. It indexes the files where they already are — no
import step, no moving anything — reads the slicer settings back out of
sliced gcode (layer height, nozzle and bed temps, filament type), looks
inside archives you never extracted, and flags duplicate downloads.

Nothing is uploaded: it runs in the browser or on the desktop against
your own filesystem. Open source (GPL-3.0) at
magikh0e/PrintVault. Pairs with the
filament calibration guide — calibrate once, then
keep the profile that worked attached to the file that used it.

Open PrintVault →

A self-hosted, end-to-end-encrypted chat service you run yourself —
FastAPI on the back end, React for the web client, Tauri for the desktop
build. The point is the trust boundary: the server relays ciphertext it
can't read, so hosting it doesn't mean reading it.

Open source (GPL-3.0) at magikh0e/open-relay.

openrelay.pl →

Arduino Pwn Tool is a tool similar to a Teensy Kit, for the purpose of
emulating a HID device / Keyboard, with features useful to an offensive
penetration tester.

Using a 5 pin DIP switch, APT has the ability to launch attacks against
different platforms, Selecting and launching attacks on the fly...

ReverseShell(); - Linux This function uses netcat or standard utilities
for creating a reverse shell connection from a Linux target.

addUser(); - Windows This function will add a new user to the local
windows administrator group.

DownloadExec(); - OSX This function will download shellcode from a
defined url and then execute it on the target OSX system.

BruteForcePIN(); - Android This function will allow you to connect APT to
an Android Phone/Tablet via OTG cable and brute force 4 digit PINs &
Passwords.

Bruteforce 4 digit Android PINs using a Teensy Kit
Video: Teeny Kit 2.0 Cracking Galaxy S3 Brute Force Tool

The WiFiLocator infusion package adds GPS support to the already existing
kismet package. As well as the ability to use an Android device as the GPS.

Giving the ability to use the WiFiPineapple and a gps device to track wire-
less SSIDS and map them out with Google Earth

Simple tool turning a pre-rooted android device with dnsmasq and iptables
into a rdnis device, ie badUSB to create a MiTM Proxy.

Phone Requirements: USB Debugging enabled, Pre-Rooted, Busybox Installed:
armeabi/busybox

  NOTE:
    USB debugging must be enabled on Android.
    Once installed on a phone or other android device, simply plug the
    phone into the USB port on the target machine. Works against Windows
    /Linux/Mac.

Source archive lost — project listed for historical reference only.

wh0re is a tool to create a reverse shell.

A simple linux password cracker for testing your own passwords against
dictionary attacks.

This tool will hash a dictionary file then compare the results to the
actual password file. Thus speeding up the process of cracking with a
memory vs time trade off...

Source archive lost — project listed for historical reference only.

Simple and fast forking port scanner written in perl. Can only scan one host
at a time, the forking is done on the specified port range. Default range
of 1-65535.

The dns_db_findrdataset function in db.c in named in ISC BIND 9.4 before
9.4.3-P3, .5 before 9.5.1-P3, and 9.6 before 9.6.1-P1, when configured as
a master server, allows remote attackers to cause a denial of service
(assertion failure and daemon exit) via an ANY record in the prerequisite
section of a crafted dynamic update message.

ssl-injector.c - Ettercap anyone??

old GLIBC exploit - worked against su to get r00t. Multiple Vendor Locale
Subsystem Format String Vulnerability.

A security vulnerability in McAfee VirusScan Enterprise allows local attac-
kers to escalate their privileges.

The shellcode executes syscall 39 without any args and verifies if an error
is returned.

NOTE: On Linux this syscall is mkdir so it will expect an argument and
returns with an error. On FreeBSD this syscall is getppid which doesn't
require an argument and will return with the process ID.

Shell code executing for ipchains -F

Shell code executing for iptables -F

ctheme config that drops contrast to defeat shoulder-surfing — just
because you're paranoid doesn't mean they aren't watching.

Timewarp is a utility that will allow you to edit a file using any editor
without changing the access & modified times.

Perl & C Version.

This is a utility to parse a BitDefender, ClamAV or F-Prot Anti Virus
log file, sorting the results into an archive by detections

Tool for processing log files produced by clamscanLogParse.pl,
fprotLog-Parse.pl and bdLogParser.pl storing the results into a SQL
database.

hAudit is a forensic utility to aid in the time consuming process of
collecting information to be analyzed from a compromised, or suspected
to-be compromised system for further forensic auditing.

ksh utility to gather the information & data needed to perform a forensic
audit on a Solaris host.

SysChk will monitor a list of files for changes to ensure the integrity of
files and directories on the system running SysChk.

SysChk watches for changes of the following:
  - User Ownership      - Group Ownership
  - File Permissions    - Modified Time
  - Md5 Hash

Source archive lost — project listed for historical reference only.

Gauntlet Firewall is a tool to implement a secure & statefull firewall using
IPTables. Gauntlet is meant to run on the host serving to be the gateway
machine for the rest of the network.

IPTables Firewall Functionality & Protection Features:

  * Dynamic or Static addressing     * Full NAT Support
  * Fixups for MTU/MSS Issues        * DoS/DDoS protection
  * SYN Flood Protection             * Packet Spoofing Protection
  * Invalid packet blocking           * Fragmented packet blocking
  * Hide from traceroutes             * Portscan Blocking

Alexa will monitor your log files for a user defined amount of failed
SSH login attempts, then take action.

Features:
  - User definable login threshold limits
  - Ability to ignore specific hosts
  - Plus more...

Source archive lost — project listed for historical reference only.